last executing test programs:

1m4.978638168s ago: executing program 0 (id=77):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xec}}, 0x0)

1m4.856344746s ago: executing program 0 (id=79):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0)

1m3.911424164s ago: executing program 0 (id=85):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000780)={r1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x15, 0xbe, "5f83150e6f53faba5a2f1bebd7e7d42dfd"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6aa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xce, 0xbe, "6d81a06aab9fb98f90c4788a652a94b1b408bc14dd0322e36e6444afbdb08366ac4895b33181727e4455bfa68b19612330f3c831a6c3b2f8078daf9241a810f16e5f82f66f975bc12892348cacb814debd14388074101472eec43f18c1f7bbe6a529ab7bd4c97844bd0ae2c217ee9f84c30527e1c5527f61f343054c459f4bee803476a83ad3e32b543a9ebcceb4726b479410eddfdda8a5b74d9d01f6a197c4d84f77ef438321aab13138b32a8be4df0c0527fe4be205ae647c52df757e681b7039fb0d3186f9882b0e"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x20008090)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05065e806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x40000000)

1m3.649082264s ago: executing program 0 (id=86):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x44)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b901000040b800000000ba008000000f300f3566ba4200b000ee0f01cb66b832010f00d0c74424004e000000c744240200400000c7442406000000000f011424c4c2f1961067660f60c3c4c30546c1010f09", 0x52}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x8c2b01)
ioctl$EVIOCRMFF(r7, 0x40044581, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]})

1m3.06973496s ago: executing program 0 (id=95):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000000)="639df0e741f7ffff8afe2902bff7c14e90", 0x0, 0x2df86471, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x4}}, 0x9)

1m2.500797989s ago: executing program 0 (id=97):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0xa, 0x3b, 0x7})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1})

1m2.382679058s ago: executing program 32 (id=97):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0xa, 0x3b, 0x7})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1})

43.332197803s ago: executing program 4 (id=196):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001d40)='./binderfs/binder0\x00', 0x1000, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@local, 0x4e24, 0x96, 0x4e23, 0xb, 0xa, 0x20, 0x0, 0x2f, r3, 0xee01}, {0x81, 0x17de, 0x6, 0xfffffffffffffffb, 0x4, 0x40, 0x7, 0xc}, {0xfffffffffffffff2, 0xb5, 0x3, 0x7151}, 0x0, 0x6e6bb2, 0x1, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0x2b}, 0x0, @in6=@empty, 0x3504, 0x0, 0x3, 0x2, 0xfffffff7, 0x5, 0x4}}, 0xe8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x9, 0xff, 0x3d, 0x3, 0x58, 0x0, 0x5, 0xb, 0x7f}})
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x15e})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

43.09060706s ago: executing program 4 (id=198):
r0 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0xe, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c", 0x1}], 0x1}, 0x800)
r4 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @empty, 0xa}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2})
r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x8b}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
r8 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
io_uring_enter(r5, 0x425a, 0xaddd, 0x53, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
read$char_usb(r10, &(0x7f0000000040)=""/4109, 0x100d)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
read$char_usb(r10, &(0x7f0000001740)=""/177, 0xb1)
write$binfmt_misc(r11, &(0x7f0000000000), 0xd)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)

40.410574035s ago: executing program 4 (id=227):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0}) (async)
r3 = socket(0x10, 0x80002, 0x0)
connect$inet6(r3, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

39.826075505s ago: executing program 4 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_loose}]}})
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf})
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000040)='syscall\x00')
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c})
pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0xaf, 0x2, 0x2}, 0x802})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="f457", 0x2}], 0x1, 0xfff, 0x0, 0x2)

39.567498427s ago: executing program 4 (id=233):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x27)
r3 = dup(r1)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x2c93a000)
madvise(&(0x7f0000592000/0x1000)=nil, 0x1000, 0x9)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f0000000200)={0x5, 0x6})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xb)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x8)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x1)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112240000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

38.779569456s ago: executing program 4 (id=240):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x202)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a320000000014"], 0x78}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f000801}, 0x48801)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8)
mmap(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x67819000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x3)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
readv(r7, &(0x7f00000000c0), 0x0)
write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)

38.564548004s ago: executing program 33 (id=240):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x202)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a320000000014"], 0x78}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f000801}, 0x48801)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8)
mmap(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x67819000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x3)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
readv(r7, &(0x7f00000000c0), 0x0)
write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.580704121s ago: executing program 1 (id=590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040)='B@F', 0x0}, 0x20)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5b}]}, 0x40}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@hopopts={0x6c}]}}}}}, 0x0)
r4 = gettid()
ptrace(0x4207, r4)

1.505591224s ago: executing program 1 (id=591):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x812040, 0x0)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x4)

1.504102464s ago: executing program 1 (id=594):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f30f0ddf66b9170800000f322c00660f18d766b87c7300000f23c80f21f866350c0090000f23f82ee1d66526f30f2ce226360f01ca0f070fc7bc0400", 0x3c}], 0x1, 0x4c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.219478223s ago: executing program 2 (id=599):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r3, &(0x7f0000000600)=ANY=[], 0x32) (async)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) (async)
close_range(r6, r6, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x16, 0x0, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.218405972s ago: executing program 1 (id=600):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x7, 0xa, 0x81, 0xa6, 0x7ff, 0x1, 0x7f, <r1=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={<r2=>r1, 0x0, 0x9}, &(0x7f00000000c0)=0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000100)={0x7, 'ip6gre0\x00', {0x6}, 0x9})
r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@default, @rose, @netrom, @netrom, @bcast, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48)
getsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000200)=0xfffffffa, &(0x7f0000000240)=0x4)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
pidfd_send_signal(r6, 0x1c, &(0x7f00000002c0)={0x19, 0xecb, 0x8}, 0x0)
r7 = syz_io_uring_setup(0x5e, &(0x7f0000000340)={0x0, 0x334b, 0x0, 0x3, 0x395}, &(0x7f00000003c0), &(0x7f0000000400)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x1a, 0x0, @fd_index, 0x3, 0x4, 0xfffffff7, 0x1c})
setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000480)="47865a5d55a9fda371bd43b300", 0xd)
recvmmsg(r3, &(0x7f0000002b40)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/38, 0x26}], 0x1, &(0x7f00000005c0)=""/22, 0x16}, 0x2}, {{&(0x7f0000000600)=@ax25={{0x3, @null}, [@bcast, @null, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/242, 0xf2}, {&(0x7f0000000840)=""/63, 0x3f}], 0x4, &(0x7f00000008c0)=""/217, 0xd9}, 0x4}, {{&(0x7f00000009c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/111, 0x6f}], 0x1}, 0xd1a2}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/25, 0x19}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/14, 0xe}, {&(0x7f0000000bc0)=""/134, 0x86}, {&(0x7f0000000c80)=""/120, 0x78}, {&(0x7f0000000d00)=""/132, 0x84}, {&(0x7f0000000dc0)=""/32, 0x20}], 0x7, &(0x7f0000000e80)=""/69, 0x45}, 0x7}, {{&(0x7f0000000f00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/183, 0xb7}, {&(0x7f0000001040)=""/60, 0x3c}], 0x2, &(0x7f00000010c0)=""/91, 0x5b}, 0xa}, {{&(0x7f0000001140)=@nl=@unspec, 0x80, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/26, 0x1a}], 0x1, &(0x7f0000001240)=""/102, 0x66}}, {{&(0x7f00000012c0)=@hci, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001340)=""/191, 0xbf}, {&(0x7f0000001400)=""/71, 0x47}, {&(0x7f0000001480)=""/26, 0x1a}, {&(0x7f00000014c0)=""/210, 0xd2}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002640)=""/222, 0xde}}, {{&(0x7f0000002740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000027c0)=""/8, 0x8}, {&(0x7f0000002800)=""/106, 0x6a}, {&(0x7f0000002880)=""/13, 0xd}, {&(0x7f00000028c0)=""/77, 0x4d}, {&(0x7f0000002940)=""/89, 0x59}], 0x5, &(0x7f0000002a40)=""/220, 0xdc}, 0x2}], 0x8, 0x40002122, &(0x7f0000002d40)={0x0, 0x989680})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002d80)={r1, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}}}, &(0x7f0000002e40)=0x84)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000002e80))
ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000002ec0)={{r0}, "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"})
io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000003ec0)=0x4, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003f00)={0x8001, <r9=>0x0}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003f40)={r6, r6, 0x1e, 0x0, @val=@target_btf_id=r9}, 0x14)
sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000004140)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004100)={&(0x7f0000003fc0)={0x128, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xee29}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xda, 0x3, "40bfd648429350fe9200573ff719825cf9cd50dd6d3682ce132321b5fba2b20dd3c08cc65dd5dcca2f6324882c72dd0f7ccd82bdde7f0188dcd45996bc7ea1eb8eae5b9ca21a6ecf231665cf152f5e7ec118a8510f5a1088f07b1ccccd61abed14e32382f029c86814b1b4761b35ac94e9e3ee33e75d2cd2301c689cbe3dff04ebee7258ef9c55826dd8f50a7bd186cc9dc5913216d335299e3e67fbb9640f2a15317618d386b69dc70552b21c99fde546179aff3b3616909ad2f7657b9530d8baa856218bd05dac2f63828c11bb9175911885a93dc3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000004180)={r2, 0x50d}, &(0x7f00000041c0)=0x8)
ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000004200))
sendto$inet_nvme_pdu(r6, &(0x7f0000004240)=@rsp={{0x5, 0xd, 0x18, 0x1, 0x80}, {@u16=0x6, 0xc, 0xff, 0x3000, 0x5}}, 0x80, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000004300)={&(0x7f00000042c0)=[0x0], 0x1})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000004480)={r5, &(0x7f0000004340)="13af7dfa", &(0x7f0000004380)=""/224, 0x4}, 0x20)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000044c0)={<r10=>r2, 0xb37}, &(0x7f0000004500)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000004540)={0x800, 0x8001, 0x4, 0x5, r10}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000004580)={{0x1, 0x1, 0x18, r4, {0x40}}, './file0\x00'})

1.211595888s ago: executing program 5 (id=601):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x3, 0x7c}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="611834000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf37000000000000350607000fff0720dc06000020000000260300000ee60060bf050000000000000f630000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f3fa039a196ee920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f625480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000008e69cc5c1e7319d39fa6f96c23c8ffd591ef011294c50a0a705549134c4aa3544a99edc9535105d3aeba9ec9441f912bdc65695e731c872278b64167aa46a07c68a9eace7fa485108f9d8cb4304c4b65d61d88aacea85b53893ee96edc310c23b1fc83b4b0f3d28c3861480840b7fe39a2bc2f6a558a20ae4d30b41f32e275faf92af8456141fde716d8d10a6b30981563db05312c39e8074fd5bb8bf95c24ccdb04e40e595927181d1138510fc6162da1a5898534fc2460b957e7b77bc5e192cc36ad2949c85e15142da926fbf6f830e1aaaa5dd9538e259e7f107e49b194c537ed4a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x5, 0x5, 0x8, 0x55, 0x8000, 0xe7, 0x1, 0x8]}}) (async)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000001, 0x31, 0xffffffffffffffff, 0x3000) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x7) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
readv(r2, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x10800, 0x0)

1.060099626s ago: executing program 5 (id=602):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
syz_open_pts(r0, 0xc0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
r7 = socket(0x1e, 0x1, 0x0)
connect$tipc(r7, &(0x7f0000000040)=@id, 0x10)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000100)={0x0, 0x1a000, 0x8})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000280)={"2eccf09e4c4cfeaf0e5698b0822fd2b9", <r10=>0x0, 0x0, {0x2, 0x3}, {0x9, 0xb}, 0x1, [0xe, 0xb, 0xb248, 0x2, 0x2, 0x800, 0xe, 0xca0, 0x5e32, 0x19, 0x80000001, 0x100000000, 0x0, 0x4, 0x7d, 0x5]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000700)={"888665266f839e97a2fd0f23286083d1", r9, r10, {0x7, 0x8}, {0x800045, 0xb}, 0x80000001, [0xfac7, 0x3d, 0x1, 0x5, 0x7, 0xd724, 0x2, 0x200000000259, 0xc2c, 0xffffffff94b2df1a, 0x0, 0x8, 0x3, 0x3ff, 0x4, 0x1fc]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x9, 0x10, "2cf5c70b0b284c81f83143810b4a71ffcb375325c86829381495265ceecf444a28178ef925a84f7f9eb646cad27cfda8bbcaa2f1d2280c11b1505e4bbbc8fbda", "190b4de479e73750618816dabedbff4a0a2e75b44e2cc115632179aca631a6a9d774adda677624b790b5d6617f89540b338290e27d4be7cb387cb05ce62f5f77", "576ed97a36cc8629755aad6985c5b2634cccb18b6cbf74fd1d4d116be8220d47", [0x7, 0x5]})
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffff7, @mcast1, 0x7dff}}, 0x24)

1.05872512s ago: executing program 2 (id=604):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r0=>0x0}) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r1, 0x10001, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f00000000c0)=0x6) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0xffffffffffffffff, 0xfd3, 0xe) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="5b00330080200900080211000001080211ffffffffffffff0400001003012c0602ff0105030594052a01042d1a00041602000000000000007b0047001100000001000001000001760603002f00060000"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) (async)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000140)) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.054323059s ago: executing program 2 (id=605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r2, &(0x7f0000000040)=""/138, 0x8a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340009000000000002000000000000000000000a0200000000000000000000e004001e3f3d198945e131d5af90000000000000000000000100000500000000000000"], 0x0, 0x4e, 0x0, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000240)={0x80001a, 0x1, 0x1, "3a8e07ca5de21f00713c8fa98601acc620004b0000002100", 0x3231564e})
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2000, &(0x7f0000010000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

956.972918ms ago: executing program 5 (id=606):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1ffffffffffffdb6})
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x10c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@var={0x10, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @enum={0x5, 0x8, 0x0, 0x6, 0x4, [{0x7}, {0xf}, {0x8, 0x1}, {0xe, 0x5}, {0x7, 0x8001}, {0x5}, {0x9, 0x8001}, {0xd, 0x8}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @var={0xc, 0x0, 0x0, 0xe, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x5, [{0x7, 0x3, 0x38}, {0x3, 0x3, 0x2e}, {0x9, 0x2, 0x1}]}]}, {0x0, [0x69, 0x61]}}, &(0x7f0000000180)=""/71, 0xe8, 0x47, 0x1, 0x0, 0x10000, @value=r0}, 0x28)

954.112809ms ago: executing program 5 (id=607):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180))
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0xb52, 0x0, 0x7fffffffffffffff}, {0x915, 0x0, 0x5}, {0xad1, 0x0, 0x3}, {0x2ef, 0x0, 0xfffffffffffffff7}, {0x399, 0x0, 0x8}, {0x313, 0x0, 0xf158}, {0x86b}, {0x321, 0x0, 0x8}]})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

839.779817ms ago: executing program 5 (id=609):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0xc, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x94)
ioctl$sock_bt_hci(r0, 0x400448c9, 0x0)

769.930848ms ago: executing program 2 (id=611):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000680)={0xa22fc007, 0x0, "ee9a8000bc5e143f8437bb6bbe34fb7e7b692abe4bb49c3df484131ac9564da5", 0xffffff81, 0x9, 0xebc3, 0x5, 0x140})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af0050000080a01010000000000000000020000020900020073797a3100000000d00504800c000180080001006f73660018000180080001006e6174000c00028008000740000000020c000180080001006c6f6700640001800a000100717565756500000054000280060003400002000006000240000600000600034000020000060002400f3c0000060003400001000006000340000200000600034000030000060002400f03000006000240000e00000600024004000000100001800c000100636f756e74657200100001800b0001006578746864720000f40401800c0001006269747769736500e4040280ac0104803800028008000340000000030900020073797a320000000008000180fffffffb08000180fffffffc080001800000000508000340000000023000028008000180fffffffb0900020073797a3100000000080003400000000408000340000000020800034000000003480002800900020073797a31000000000800034000000002080003400000000208000180fffffffc080003400000000408000180fffffffb080003400000000108000180000000004c0002800900020073797a30000000000900020073797a32000000000900020073797a31000000000900020073797a3200000000080003400000000408000180fffffffc080003400000000490000100570e349e7a01851a7eaee475818a36b56709a8a1e4261225733e7d1d2fc68d28b062c21c2efac8770a2b091a088d00c39ce5b0b3d0494be5a925281b3b1ac803397a3432263e8f3223ce21dc5827e33867de2e0776019d148e823880436116ce372850d6881f6860058b97430f8de24d86951de257717be6f5be575876cd70ce01c66840e9e98851f3cc4b140c0002800800034000000003100002800900020073797a310000000034030580ca0001003b1dc6f964ae43a28cbfacb5b918465163ea56f1c224b6f3633b15fc101314ef1337496cd7dc7676afd5d56f91ffa037ad6d7957e8727a2ac9ec8c80730c9c0510d8f90163a36f0f9a0f874f73fb7d38df294153bc9d158ef6d741cc497210ebf0ae19fe6062cfaa1536793550487156509eaadd87423671cac483d996871186920802b744833cfe27befc53b56894607903a802f9d8c6da8587d07aba98141ddd4cf05aefa283e813438a464adeeb62e18eed01f297b31baf083d79d4d9e2fbe6f5ba93f76c00001c0002800800034000000001080003400000000208000340000000015c0002800900020073797a320000000008000180fffffffc08000340000000020800034000000004080003400000000108000340000000020900020073797a31000000000900020073797a32000000000900020073797a32000000003c0002800900020073797a300000000008000340000000030900020073797a32000000000900020073797a3000000000090002280073797a3000000000440002800900020073797a300000000008000180fffffffe08000180fffffffc0900020073797a3200000000080003400000000408000180fffffffb0800034000000004c90001001b555433cafa52ab50699f256c2c12ea6a5c74bd0196f7b90cd18093526b8a2fd12704bc275a2d266d3f6102925da811e88ec0e3190df87f9622b9d48053082a28a3c9dcb0540fe6d647349c76658fc6f78caa41da5374efddd8e336744c317632d581f1b850b989177eda19a2de299e3984863ea507d9f539c1560a7caa490fcd9a43b88ef2c83f073b3dcf689407151249cb55f2e7663763d1b7cf2da050a0438d93c95c3beb146e49c5fb9e345fa7db0e98cc53f28455ec2ecf5ebd31435bda81b3469a000000a0000100b806c08fa744c3ba936efba34b4c5d17f4f2eb5eab506d8429c80ad0295e099249a60681b27cde0c9a0f202ece278f9ccf6b88245d63af92ee79de83c4d4e0946a188dbec581b96ae32aa13c1ff4c2798a151a46114acc2b1ed238102d0a5442d6e3f11667b6135e7587ecde07bdf551e7949b6060556ccbbf0bd80a4c35ffb6194d84fb0a240169a46237258aa16f5c527ac255eab6991092541dde240001800b0001006e756d67656e000014000280080001400000000a080001400000001514000000110001000000000000000000070000"], 0x618}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000130a0103"], 0x20}}, 0x24004050)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000000c0)="ebe3a0e90000000000000080e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e03b2052579c5084df41f536aca338f025335caf900b1a5c68714bcc41f55c", 0x43}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0xffffff99, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101)

610.086441ms ago: executing program 2 (id=614):
r0 = getpgid(0xffffffffffffffff)
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x101) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x18) (async, rerun: 64)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000180)) (async)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2e65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0xc0844123, &(0x7f0000000080)=0x5) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000d70a0000400000009500"/32], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r7, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r6, @ANYRESDEC=0x0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r8}, 0x38) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20)
r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) (async)
r10 = socket$netlink(0x10, 0x3, 0x10)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r12 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
r13 = openat$sr(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20000, 0x0)
ioctl$BSG_EMULATED_HOST(r13, 0x2203, &(0x7f0000000c00))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x801, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r13}, 0x94) (async, rerun: 64)
setsockopt$inet_tcp_int(r12, 0x6, 0x6, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYRES32=r12, @ANYRESHEX=r13, @ANYBLOB="52e741e8ba5dbdb4b19fc17c53f3e4b5a5bca3f973f1682b1cab435a80bc40c1bce4d82a4724c001fadb853cf53a7f57ad198e5468443300839bb738", @ANYRESOCT=r9, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x40051}, 0x4000040)

359.722688ms ago: executing program 3 (id=619):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x4, {0xa, 0x4e1f, 0x6, @mcast1, 0x4}}}, 0x3a)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) (async)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@datasec={0x7, 0x0, 0x0, 0xe, 0x2, [], "ef69"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "9c05"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) (async, rerun: 32)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000140)={0x3, r4, 0x1f8, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) (async)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={r4, 0x5, &(0x7f0000000000)=[0x5, 0x4, 0x9, 0x50, 0x100], &(0x7f0000000080)=[0x4bbb], &(0x7f00000000c0)=[0xfff, 0x0]}) (async, rerun: 32)
getsockname(r0, 0x0, &(0x7f0000000200)) (rerun: 32)

358.646483ms ago: executing program 1 (id=620):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000bbb11f610196fda65fb2c1ae94130ee43f6642531e0800450000200000e000f1879002119078000000"], 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=<r6=>r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r6], 0x48) (async)
r8 = socket$kcm(0xa, 0x5, 0x0) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r9, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r9, 0x0) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r10, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x89b1, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
listen(r10, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000000)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

290.425736ms ago: executing program 3 (id=621):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x12c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x23}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd41}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x44409f1a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}]}]}, 0x12c}}, 0x4000041)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000002900)={0x1, @sliced={0x1, [0x5, 0x2, 0x1000, 0x0, 0x931, 0x6, 0x5, 0xb44, 0x0, 0x4, 0x0, 0x2a2d, 0x3, 0xc2, 0x7, 0x1, 0x24bb, 0x75e1, 0x9, 0x5a, 0x400, 0x0, 0x1, 0xdc, 0x5, 0x2, 0x2, 0x5, 0xb, 0x3, 0xe8, 0x7, 0x168d, 0x8, 0xfff, 0x8001, 0x0, 0x4, 0x1, 0x401, 0x7, 0x6, 0x2, 0x0, 0x5, 0x7ff, 0x4], 0x5}})
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

220.483107ms ago: executing program 3 (id=622):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x40, 0x2000}, 0x2}}, 0xd)

220.1383ms ago: executing program 1 (id=623):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @loopback, 0xffffbffd}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='$'], 0x28}, 0x0)
syz_emit_ethernet(0x29c, &(0x7f0000000600)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x262, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@dstopts={0x73, 0x20, '\x00', [@hao={0xc9, 0x10, @private0}, @generic={0x2, 0x62, "8063820c43fbdb64230d7a3cea9f98d65eabbb3251721565859b3cb5d9f7a363c8745b217cd2c1efee7befd7353a22ca082be0e251777ac21c4027c6a1e0b2c157b011adbfddb4073fc031f467e3d9d4de9fd15a2304dd117f3ca7dfddc1aafd2d2f"}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x2, [0x4, 0x4, 0x2, 0x7]}}, @pad1, @enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x40, {0x0, 0xe, 0x80, 0x0, [0x8000000000000001, 0xa2e5, 0x4874, 0xffff, 0xd57, 0x7, 0x0]}}]}, @srh={0x3b, 0x4, 0x4, 0x2, 0x4, 0x10, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x1, 0x8, 0x4, 0x4, 0x7, 0x10, 0x5, [@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @remote, @loopback]}, @hopopts={0x88, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x10, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xff, 0x0, [0x2, 0x9]}}]}, @hopopts={0x4, 0xe, '\x00', [@generic={0x6, 0x1f, "486965f7fae5791f4e79fcfad50f3286f9713eaf13d0760853fcf3c5d034e7"}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @enc_lim, @pad1, @generic={0x2, 0x2c, "88279efadc039fb78268eff277de17016506b49a04aefc9c1c7c502d7f91cb285be20816c7dfe9ba9b6f8daa"}]}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e3e627", 0x0, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], ';I'}}}}}}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x55a1e000)
setresuid(0x0, 0xee00, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, <r2=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, r2, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000100)=@nfc_llcp={0x27, r3, 0xffffffffffffffff, 0x3, 0x5, 0x3, "69f2056d431a12017f5f051005647ef7b13b0dbb325a914f5d0ad81c67440bdb68c43f6cbbc619ade13799a9f660dadf234ecc71fc059babbba72d7fb36553", 0x22}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="4db3e3e99d0219f10a595472eabdaf5971430425b6f283fd74335aef3a9717e806bd4a75e1e2a60b4c17a1774c956d773ec6a7967447e481a1e3cf42c047f938d78555ce67758e7d6a7895f35d93232666e46558f0d180ca2565ceff52aebfa677426b63c6bf69b73ff2e0943d3f61ea609816e586f5ef078ba1aabcd57d6ff7421fc0e9e3391038c3b8315baa8be6dd34648d3844acfbd169c025d143eccafe066df8a5906626f90c7f120dbce42488411971e5e85c76b15693faf7ac4f942a7c6fc386408facc79061042d968a84fcded04313ee1b228b5896f5586398e00d1b4ed67c8159b4fa926d8ab2653d5a851218", 0xf2}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}], 0x18}, 0x40)

60.757777ms ago: executing program 3 (id=624):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x1, 0x0, "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"})
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0xffffd000)

60.433452ms ago: executing program 3 (id=625):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000000)={[], 0xf000}, 0x1000)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@md5={0x1, "f09a1ff56976f748bc4df6c4970b3805"}, 0x11, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = epoll_create1(0x0)
r4 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={<r5=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000000)=[r5], 0x0, 0x1})
close_range(r3, 0xffffffffffffffff, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="5800000014878e2340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

59.694401ms ago: executing program 2 (id=626):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xfffffffb, 0x6, 0x1}, 0x10)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r6, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0407"], 0x22)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

247.452µs ago: executing program 3 (id=627):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0x400, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x20000091, &(0x7f0000000140)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=@updpolicy={0x16c, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@sec_ctx={0xb1, 0x8, {0xad, 0x8, 0x0, 0x7f, 0xa5, "861316bc2a63ec1278d60d2c56b9dc7019568c86fa38dfcaeb13010f093f1a285d41e3655bd68607c9550e229610be16a2a43c5e381ae5fd09a98b586e9af98ee8f4195af3d0cc1077b5b06775d3699ade99da3a1ef487be7276deb91bb8722b62d4f321755bcc8a037f7a4d50978d4a6b5085b4317504d0cde9c780b92f379b6d41dff23151132199b8d23abe8034fca8a82d49a94e5371fc7e3c1cc74aa29db08642333a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e21, 0x6, @mcast1, 0x5}}}, 0x32)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f00000000c0))
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000440)={<r7=>0xffffffffffffffff})
r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000000)='fd', 0x0, r7)
sendmsg$nl_generic(r7, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xd}}, 0xfffffffffffffea4}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}})
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

0s ago: executing program 5 (id=628):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
clock_adjtime(0x0, &(0x7f00000000c0)={0x742e4e88, 0x5, 0x9ef, 0x0, 0x4, 0x4, 0x1003, 0x3, 0x9, 0x7, 0x93a8, 0x4, 0x9, 0x10000, 0xfffffffffffff8cf, 0x110, 0x3, 0x4, 0x510d, 0x9, 0x7, 0x2, 0xd18, 0x4, 0x18000000, 0x1})
creat(&(0x7f0000000100)='./file0\x00', 0x1c)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1000, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1})
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x0, 0x44}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4000)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0x9}}, 0x20)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x4e1f, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x0, {0x2, 0x3, @multicast2}, 'lo\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r10 = dup(r2)
write$FUSE_BMAP(r10, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@posixacl}]}})
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  119.303568][   T41] audit: type=1400 audit(1757353665.090:83): avc:  denied  { open } for  pid=5988 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  119.333962][   T41] audit: type=1400 audit(1757353665.110:84): avc:  denied  { ioctl } for  pid=5988 comm="syz-executor" path="socket:[2881]" dev="sockfs" ino=2881 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  119.369301][ T5989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.404686][ T5992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.409380][ T5992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.415201][ T5992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.440569][ T5992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.445524][ T5992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.455333][ T5998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.472650][ T5998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.476378][ T5998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.486544][ T5998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.492185][ T5998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.492467][ T6002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.510355][   T41] audit: type=1400 audit(1757353665.330:85): avc:  denied  { read } for  pid=5999 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  119.515190][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.527632][   T41] audit: type=1400 audit(1757353665.330:86): avc:  denied  { open } for  pid=5999 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  119.527685][   T41] audit: type=1400 audit(1757353665.330:87): avc:  denied  { mounton } for  pid=5999 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  119.529356][ T5997] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.535421][ T5997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.565910][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.566553][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.592165][ T5994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.625111][ T5994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.635161][ T5994] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.807021][   T41] audit: type=1400 audit(1757353665.620:88): avc:  denied  { module_request } for  pid=5999 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  119.920929][ T5999] chnl_net:caif_netlink_parms(): no params data found
[  120.456832][ T5995] chnl_net:caif_netlink_parms(): no params data found
[  120.525565][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.540065][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.543276][ T5999] bridge_slave_0: entered allmulticast mode
[  120.546954][ T5999] bridge_slave_0: entered promiscuous mode
[  120.569477][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.587006][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.592693][ T5999] bridge_slave_1: entered allmulticast mode
[  120.605792][ T5999] bridge_slave_1: entered promiscuous mode
[  120.848185][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.855856][ T5988] chnl_net:caif_netlink_parms(): no params data found
[  120.907016][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.086176][ T5999] team0: Port device team_slave_0 added
[  121.091963][ T5991] chnl_net:caif_netlink_parms(): no params data found
[  121.283960][ T5999] team0: Port device team_slave_1 added
[  121.507982][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.510610][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.513918][ T5995] bridge_slave_0: entered allmulticast mode
[  121.518932][ T5995] bridge_slave_0: entered promiscuous mode
[  121.554757][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.558884][ T5989] Bluetooth: hci3: command tx timeout
[  121.560786][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.587782][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.616046][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.625044][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.631633][ T5995] bridge_slave_1: entered allmulticast mode
[  121.635929][ T5995] bridge_slave_1: entered promiscuous mode
[  121.649068][ T5989] Bluetooth: hci0: command tx timeout
[  121.668183][ T5989] Bluetooth: hci2: command tx timeout
[  121.740554][ T5989] Bluetooth: hci1: command tx timeout
[  121.761574][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.767232][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.803240][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.226545][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.231058][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.234926][ T5988] bridge_slave_0: entered allmulticast mode
[  122.259772][ T5988] bridge_slave_0: entered promiscuous mode
[  122.264570][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.297655][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.300870][ T5988] bridge_slave_1: entered allmulticast mode
[  122.305123][ T5988] bridge_slave_1: entered promiscuous mode
[  122.325215][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.333155][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.335770][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.339937][ T5991] bridge_slave_0: entered allmulticast mode
[  122.349025][ T5991] bridge_slave_0: entered promiscuous mode
[  122.483477][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.487007][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.491560][ T5991] bridge_slave_1: entered allmulticast mode
[  122.494892][ T5991] bridge_slave_1: entered promiscuous mode
[  122.631002][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.702815][ T5999] hsr_slave_0: entered promiscuous mode
[  122.731772][ T5999] hsr_slave_1: entered promiscuous mode
[  122.739277][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.746705][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.762004][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.848892][ T5995] team0: Port device team_slave_0 added
[  122.946236][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.064933][ T5995] team0: Port device team_slave_1 added
[  123.070639][ T5988] team0: Port device team_slave_0 added
[  123.115813][ T5988] team0: Port device team_slave_1 added
[  123.210599][ T5991] team0: Port device team_slave_0 added
[  123.216015][ T5991] team0: Port device team_slave_1 added
[  123.261618][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.264212][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.277436][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.558740][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.561510][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.572831][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.593865][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.596536][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.641942][ T5989] Bluetooth: hci3: command tx timeout
[  123.646097][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.719698][ T5989] Bluetooth: hci2: command tx timeout
[  123.729332][ T5989] Bluetooth: hci0: command tx timeout
[  123.738907][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.741896][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.760024][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.784739][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.791911][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.812047][ T5989] Bluetooth: hci1: command tx timeout
[  123.847871][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.958119][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.963860][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.979962][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.101175][ T5988] hsr_slave_0: entered promiscuous mode
[  124.106277][ T5988] hsr_slave_1: entered promiscuous mode
[  124.121124][ T5988] debugfs: 'hsr0' already exists in 'hsr'
[  124.124067][ T5988] Cannot create hsr debugfs directory
[  124.460474][ T5995] hsr_slave_0: entered promiscuous mode
[  124.464247][ T5995] hsr_slave_1: entered promiscuous mode
[  124.467994][ T5995] debugfs: 'hsr0' already exists in 'hsr'
[  124.471593][ T5995] Cannot create hsr debugfs directory
[  124.493231][ T5991] hsr_slave_0: entered promiscuous mode
[  124.498506][ T5991] hsr_slave_1: entered promiscuous mode
[  124.504818][ T5991] debugfs: 'hsr0' already exists in 'hsr'
[  124.508146][ T5991] Cannot create hsr debugfs directory
[  124.938035][ T5999] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.006619][ T5999] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  125.169628][ T5999] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  125.176714][ T5999] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  125.511192][ T5988] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  125.579214][ T5988] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  125.586964][ T5988] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  125.621493][ T5988] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  125.722415][ T5989] Bluetooth: hci3: command tx timeout
[  125.754029][ T5991] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.788474][ T5991] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.824703][ T5989] Bluetooth: hci2: command tx timeout
[  125.826059][ T5994] Bluetooth: hci0: command tx timeout
[  125.839554][ T5991] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.937237][ T5991] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.973429][ T5994] Bluetooth: hci1: command tx timeout
[  126.081297][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.091736][ T5995] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  126.115490][ T5995] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  126.138930][ T5999] 8021q: adding VLAN 0 to HW filter on device team0
[  126.153300][ T5995] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  126.181440][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.185856][ T5995] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  126.223297][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.228157][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.307270][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.313132][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.333647][ T5988] 8021q: adding VLAN 0 to HW filter on device team0
[  126.390006][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.402114][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.412581][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.416036][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.525863][ T5999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.647104][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.682762][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.714112][   T41] audit: type=1400 audit(1757353672.530:89): avc:  denied  { sys_module } for  pid=5999 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  126.735428][ T5991] 8021q: adding VLAN 0 to HW filter on device team0
[  126.777468][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.793967][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.810664][ T5995] 8021q: adding VLAN 0 to HW filter on device team0
[  126.817542][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.845846][ T4777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.934375][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.937943][ T4777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.972448][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.975111][ T4777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.053224][ T5991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  127.134287][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.313216][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.326743][ T5999] veth0_vlan: entered promiscuous mode
[  127.355270][ T5999] veth1_vlan: entered promiscuous mode
[  127.459292][ T5988] veth0_vlan: entered promiscuous mode
[  127.527416][ T5999] veth0_macvtap: entered promiscuous mode
[  127.536032][ T5988] veth1_vlan: entered promiscuous mode
[  127.542088][ T5999] veth1_macvtap: entered promiscuous mode
[  127.652873][ T5988] veth0_macvtap: entered promiscuous mode
[  127.661910][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.682066][ T5988] veth1_macvtap: entered promiscuous mode
[  127.719383][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.744151][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.755956][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.800761][ T5994] Bluetooth: hci3: command tx timeout
[  127.840142][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.844940][ T4777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.848752][ T4777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.875620][ T4777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.878812][ T5994] Bluetooth: hci0: command tx timeout
[  127.884025][ T5989] Bluetooth: hci2: command tx timeout
[  127.884769][ T4777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.930294][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.971325][   T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.988866][   T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.052629][ T5989] Bluetooth: hci1: command tx timeout
[  128.068173][   T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.073029][   T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.105897][ T4777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.120453][ T4777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.133965][ T5991] veth0_vlan: entered promiscuous mode
[  128.235561][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.242770][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.281319][ T5995] veth0_vlan: entered promiscuous mode
[  128.292670][ T5991] veth1_vlan: entered promiscuous mode
[  128.362214][   T41] audit: type=1400 audit(1757353674.160:90): avc:  denied  { mount } for  pid=5999 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  128.403614][   T41] audit: type=1400 audit(1757353674.160:91): avc:  denied  { mounton } for  pid=5999 comm="syz-executor" path="/syzkaller.wGZuYX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  128.437132][   T41] audit: type=1400 audit(1757353674.160:92): avc:  denied  { mount } for  pid=5999 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  128.446782][   T41] audit: type=1400 audit(1757353674.170:93): avc:  denied  { mounton } for  pid=5999 comm="syz-executor" path="/syzkaller.wGZuYX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  128.455062][ T5995] veth1_vlan: entered promiscuous mode
[  128.474781][   T41] audit: type=1400 audit(1757353674.170:94): avc:  denied  { mounton } for  pid=5999 comm="syz-executor" path="/syzkaller.wGZuYX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  128.474830][   T41] audit: type=1400 audit(1757353674.180:95): avc:  denied  { unmount } for  pid=5999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  128.474863][   T41] audit: type=1400 audit(1757353674.220:96): avc:  denied  { mounton } for  pid=5999 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  128.474898][   T41] audit: type=1400 audit(1757353674.220:97): avc:  denied  { mount } for  pid=5999 comm="syz-executor" name="/" dev="gadgetfs" ino=8074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  128.474932][   T41] audit: type=1400 audit(1757353674.230:98): avc:  denied  { mount } for  pid=5999 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  128.555056][ T5999] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  128.558214][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.572660][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.705632][ T5991] veth0_macvtap: entered promiscuous mode
[  128.722376][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.725770][ T5995] veth0_macvtap: entered promiscuous mode
[  128.726253][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.753093][ T5991] veth1_macvtap: entered promiscuous mode
[  128.793234][ T5995] veth1_macvtap: entered promiscuous mode
[  128.845547][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.856932][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.872731][   T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.880397][ T4777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.885528][ T4777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.929913][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.934015][ T4777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.947400][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.026696][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[  129.093577][ T6082] binder: 6078:6082 ioctl c018620c 200000000000 returned -22
[  129.119060][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.124727][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.124765][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.124795][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.445909][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.449470][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.586686][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.593124][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.680938][ T4639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.685084][ T4639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.710271][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.720891][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.057338][ T6103] Zero length message leads to an empty skb
[  130.346327][ T6112] binder: 6111:6112 ioctl 6609 0 returned -22
[  131.433587][ T6139] program syz.1.21 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.443532][ T6139] ata1.00: non-matching transfer count (0/2304)
[  131.740476][   T41] kauditd_printk_skb: 79 callbacks suppressed
[  131.740492][   T41] audit: type=1400 audit(1757353677.550:178): avc:  denied  { create } for  pid=6149 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  131.798024][   T41] audit: type=1400 audit(1757353677.610:179): avc:  denied  { read write } for  pid=6149 comm="syz.3.26" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  131.870243][ T6150] vxcan1: tx drop: invalid da for name 0x0000000000000016
[  131.874130][ T6150] tmpfs: Bad value for 'mpol'
[  131.888218][ T6150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.26'.
[  131.890339][   T41] audit: type=1400 audit(1757353677.610:180): avc:  denied  { open } for  pid=6149 comm="syz.3.26" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  131.945140][   T41] audit: type=1400 audit(1757353677.650:181): avc:  denied  { create } for  pid=6152 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  131.965864][   T41] audit: type=1400 audit(1757353677.650:182): avc:  denied  { write } for  pid=6152 comm="syz.1.27" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  131.969356][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[  131.982054][   T41] audit: type=1400 audit(1757353677.680:183): avc:  denied  { create } for  pid=6152 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  132.009332][   T41] audit: type=1400 audit(1757353677.680:184): avc:  denied  { ioctl } for  pid=6149 comm="syz.3.26" path="socket:[11471]" dev="sockfs" ino=11471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  132.028435][ T6156] macvlan2: entered allmulticast mode
[  132.039748][   T41] audit: type=1400 audit(1757353677.680:185): avc:  denied  { bind } for  pid=6149 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  132.074386][ T6156] veth1_vlan: entered allmulticast mode
[  132.079766][   T41] audit: type=1400 audit(1757353677.680:186): avc:  denied  { write } for  pid=6149 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  132.106973][   T41] audit: type=1400 audit(1757353677.680:187): avc:  denied  { mounton } for  pid=6149 comm="syz.3.26" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  132.233113][   T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  132.271901][ T6160] vxfs: WRONG superblock magic 00000000 at 1
[  132.278128][ T6160] vxfs: WRONG superblock magic 00000000 at 8
[  132.284725][ T6160] vxfs: can't find superblock.
[  132.391416][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'.
[  132.478337][   T25] usb 7-1: Using ep0 maxpacket: 8
[  132.537999][   T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  132.542329][   T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.561904][   T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  132.565524][   T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.578361][   T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.620981][   T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  132.631897][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.857840][   T25] usb 7-1: usb_control_msg returned -32
[  132.876037][   T25] usbtmc 7-1:16.0: can't read capabilities
[  133.381223][ T6200] process 'syz.0.38' launched './file0' with NULL argv: empty string added
[  133.515519][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'.
[  133.629168][ T6211] IPv6: NLM_F_CREATE should be specified when creating new route
[  133.752488][ T6232] netlink: 'syz.0.44': attribute type 28 has an invalid length.
[  133.757364][ T6232] netlink: 'syz.0.44': attribute type 3 has an invalid length.
[  133.771904][ T6232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.44'.
[  133.864543][ T6217] usbtmc 7-1:16.0: usb_control_msg returned -32
[  134.102897][ T6242] /dev/sr0: Can't open blockdev
[  134.140559][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[  134.351363][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.52'.
[  134.357442][    C2] vkms_vblank_simulate: vblank timer overrun
[  134.443456][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'.
[  134.453328][ T6271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.54'.
[  134.459050][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'.
[  134.546257][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[  134.578346][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.602605][ T6278] binder: 6277:6278 ioctl c0046209 9999999999999999 returned -22
[  134.613286][ T6280] binder: 6277:6280 ioctl c0046209 9999999999999999 returned -22
[  134.634279][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.750972][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.971641][    C2] vkms_vblank_simulate: vblank timer overrun
[  135.071019][   T25] usb 7-1: USB disconnect, device number 2
[  135.510166][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[  135.518102][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.66'.
[  135.530082][ T6309] geneve2: entered promiscuous mode
[  135.532985][ T6309] geneve2: entered allmulticast mode
[  135.542816][ T6291] 9pnet_fd: Insufficient options for proto=fd
[  135.636744][ T6314] Bluetooth: MGMT ver 1.23
[  135.752646][ T6316] erspan0: vlans aren't supported yet for dev_uc|mc_add()
[  135.842267][ T6316] 9pnet: Could not find request transport: virtdo
[  135.947317][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.68'.
[  136.165087][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'.
[  136.188401][ T6335] 9pnet: Could not find request transport: vi
[  136.286013][ T6344] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  136.297329][ T6344] program syz.3.76 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.656018][    C2] vkms_vblank_simulate: vblank timer overrun
[  136.833105][   T41] kauditd_printk_skb: 86 callbacks suppressed
[  136.833121][   T41] audit: type=1400 audit(1757353682.640:274): avc:  denied  { connect } for  pid=6358 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.858991][   T41] audit: type=1400 audit(1757353682.640:275): avc:  denied  { write } for  pid=6358 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.917284][   T41] audit: type=1400 audit(1757353682.650:276): avc:  denied  { mounton } for  pid=6358 comm="syz.2.82" path="/proc/30/cgroup" dev="proc" ino=11652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  136.935737][   T41] audit: type=1400 audit(1757353682.740:277): avc:  denied  { create } for  pid=6360 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  136.952537][   T41] audit: type=1400 audit(1757353682.760:278): avc:  denied  { connect } for  pid=6360 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  137.006156][ T6363] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  137.025756][ T6363] overlayfs: missing 'lowerdir'
[  137.254391][ T6368] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.269081][ T6363] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[  137.269578][ T6368] qnx4: unable to read the superblock
[  137.309257][ T6366] input: syz1 as /devices/virtual/input/input5
[  137.324807][ T6373] openvswitch: netlink: Key type 30 is not supported
[  137.338347][   T41] audit: type=1400 audit(1757353683.120:279): avc:  denied  { read } for  pid=6364 comm="syz.3.83" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  137.418378][   T41] audit: type=1400 audit(1757353683.120:280): avc:  denied  { open } for  pid=6364 comm="syz.3.83" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  137.454045][   T41] audit: type=1400 audit(1757353683.120:281): avc:  denied  { ioctl } for  pid=6364 comm="syz.3.83" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  137.474629][    C2] vkms_vblank_simulate: vblank timer overrun
[  137.483653][   T41] audit: type=1400 audit(1757353683.120:282): avc:  denied  { read } for  pid=5369 comm="acpid" name="event4" dev="devtmpfs" ino=2855 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.509858][    C2] vkms_vblank_simulate: vblank timer overrun
[  137.511186][ T6376] syz_tun: entered promiscuous mode
[  137.516323][   T41] audit: type=1400 audit(1757353683.120:283): avc:  denied  { open } for  pid=5369 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2855 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.539355][ T6376] batadv_slave_0: entered promiscuous mode
[  137.549737][ T6376] hsr1: entered allmulticast mode
[  137.552587][ T6376] syz_tun: entered allmulticast mode
[  137.590002][ T6376] batadv_slave_0: entered allmulticast mode
[  137.609746][ T6384] autofs: Bad value for 'fd'
[  137.695254][ T6384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  137.702626][ T6384] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  137.891821][    C2] vkms_vblank_simulate: vblank timer overrun
[  137.950662][    C2] vkms_vblank_simulate: vblank timer overrun
[  138.076346][ T6399] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.108492][    C2] vkms_vblank_simulate: vblank timer overrun
[  138.153520][ T6399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  138.388049][ T5995] syz_tun (unregistering): left promiscuous mode
[  138.783770][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.839647][    C2] vkms_vblank_simulate: vblank timer overrun
[  138.895779][    C2] vkms_vblank_simulate: vblank timer overrun
[  138.906854][ T6419] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[  138.988433][ T6419] netlink: 'syz.2.99': attribute type 4 has an invalid length.
[  139.215780][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.315921][ T5994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.324538][ T5994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.350294][ T5994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.379700][ T5994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.384729][ T5994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.429746][   T25] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  139.442687][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.610444][   T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  139.617421][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  139.635083][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  139.645440][   T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  139.649909][ T6458] netlink: 'syz.2.105': attribute type 32 has an invalid length.
[  139.658586][   T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  139.666285][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.682606][   T25] usb 8-1: config 0 descriptor??
[  139.714393][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.904579][ T6468] __nla_validate_parse: 4 callbacks suppressed
[  139.904598][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[  139.915943][ T6468] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  139.920237][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.930080][ T6444] chnl_net:caif_netlink_parms(): no params data found
[  140.170848][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.178092][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.195145][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.196738][ T1147] bridge_slave_1: left allmulticast mode
[  140.199193][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.201473][ T1147] bridge_slave_1: left promiscuous mode
[  140.204944][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.209876][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.212677][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.212703][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.212723][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.212742][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.212762][   T25] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.230451][   T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  140.269289][ T1147] bridge_slave_0: left allmulticast mode
[  140.272872][ T1147] bridge_slave_0: left promiscuous mode
[  140.276196][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.428378][ T6040] usb 8-1: USB disconnect, device number 2
[  140.626031][    C2] vkms_vblank_simulate: vblank timer overrun
[  140.812499][ T6476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.107'.
[  141.098157][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.110731][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.123369][ T1147] bond0 (unregistering): Released all slaves
[  141.215009][ T6489] netlink: 'syz.3.110': attribute type 39 has an invalid length.
[  141.409516][ T5989] Bluetooth: hci2: command tx timeout
[  141.457885][ T6494] binfmt_misc: register: failed to install interpreter file ./file1
[  141.461381][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.493742][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.500176][ T6444] bridge_slave_0: entered allmulticast mode
[  141.506840][ T6444] bridge_slave_0: entered promiscuous mode
[  141.523609][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.526859][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.527609][    C2] vkms_vblank_simulate: vblank timer overrun
[  141.529346][   T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  141.543588][ T6444] bridge_slave_1: entered allmulticast mode
[  141.566759][ T6444] bridge_slave_1: entered promiscuous mode
[  141.651219][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  141.654113][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  141.685146][    C2] vkms_vblank_simulate: vblank timer overrun
[  141.690069][   T25] usb 6-1: device descriptor read/64, error -71
[  141.726793][    C2] vkms_vblank_simulate: vblank timer overrun
[  141.736932][ T6501] comedi comedi3: comedi_config --init_data is deprecated
[  141.790253][    C2] vkms_vblank_simulate: vblank timer overrun
[  141.846646][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'.
[  141.855144][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  141.869123][ T6496] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  141.895400][ T6496] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  141.904330][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.947695][    C2] vkms_vblank_simulate: vblank timer overrun
[  141.964433][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.968459][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  142.007646][    C2] vkms_vblank_simulate: vblank timer overrun
[  142.108102][   T41] kauditd_printk_skb: 26 callbacks suppressed
[  142.108120][   T41] audit: type=1400 audit(1757353687.930:310): avc:  denied  { setopt } for  pid=6509 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  142.135212][   T41] audit: type=1400 audit(1757353687.930:311): avc:  denied  { read } for  pid=6509 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  142.158638][   T25] usb 6-1: device descriptor read/64, error -71
[  142.224224][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  142.237435][ T6512] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.116'.
[  142.269898][   T25] usb usb6-port1: attempt power cycle
[  142.318719][ T6444] team0: Port device team_slave_0 added
[  142.341376][    C2] vkms_vblank_simulate: vblank timer overrun
[  142.360323][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  142.425279][ T6444] team0: Port device team_slave_1 added
[  142.491142][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  142.496816][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  142.504317][ T6496] xfrm0 speed is unknown, defaulting to 1000
[  142.602200][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.620506][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.628507][   T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  142.640688][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.667955][ T1147] batadv_slave_0: left promiscuous mode
[  142.679688][   T41] audit: type=1400 audit(1757353688.490:312): avc:  denied  { append } for  pid=6513 comm="syz.2.117" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  142.703630][    C2] vkms_vblank_simulate: vblank timer overrun
[  142.723238][ T5982] udevd[5982]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory
[  142.750959][   T41] audit: type=1400 audit(1757353688.530:313): avc:  denied  { write } for  pid=6513 comm="syz.2.117" name="udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  142.772568][   T25] usb 6-1: device descriptor read/8, error -71
[  142.803053][ T1147] hsr_slave_0: left promiscuous mode
[  142.830641][ T1147] hsr_slave_1: left promiscuous mode
[  142.853494][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.877870][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.910211][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.913567][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.028512][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  143.036245][ T1147] veth1_vlan: left allmulticast mode
[  143.062244][ T1147] veth1_macvtap: left promiscuous mode
[  143.065254][ T1147] veth0_macvtap: left promiscuous mode
[  143.067837][ T1147] veth1_vlan: left promiscuous mode
[  143.070444][ T1147] veth0_vlan: left promiscuous mode
[  143.088988][   T25] usb 6-1: device descriptor read/8, error -71
[  143.198744][   T25] usb usb6-port1: unable to enumerate USB device
[  143.410516][ T6529] ieee802154 phy0 wpan0: encryption failed: -22
[  143.481350][ T5989] Bluetooth: hci2: command tx timeout
[  144.457959][ T6532] usb 2-1: USB disconnect, device number 2
[  144.947600][ T6535] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  145.578671][ T5989] Bluetooth: hci2: command tx timeout
[  145.837995][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  146.001395][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  147.547782][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.551690][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.592171][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.641813][ T5989] Bluetooth: hci2: command tx timeout
[  147.772498][   T41] audit: type=1400 audit(1757353693.540:314): avc:  denied  { read } for  pid=6538 comm="syz.3.123" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  147.835248][   T41] audit: type=1400 audit(1757353693.540:315): avc:  denied  { open } for  pid=6538 comm="syz.3.123" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  147.908353][   T41] audit: type=1400 audit(1757353693.540:316): avc:  denied  { ioctl } for  pid=6538 comm="syz.3.123" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  147.943948][   T41] audit: type=1400 audit(1757353693.750:317): avc:  denied  { write } for  pid=6539 comm="syz.2.124" name="file0" dev="9p" ino=35913891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  147.980120][   T41] audit: type=1400 audit(1757353693.750:318): avc:  denied  { ioctl } for  pid=6539 comm="syz.2.124" path="/22/file0/file0" dev="9p" ino=35913891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  148.240939][ T6444] hsr_slave_0: entered promiscuous mode
[  148.244398][ T6444] hsr_slave_1: entered promiscuous mode
[  148.277860][ T6444] debugfs: 'hsr0' already exists in 'hsr'
[  148.292362][ T6444] Cannot create hsr debugfs directory
[  148.426712][ T6559] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[  148.430565][ T6559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.435209][ T6559] IPv6: NLM_F_CREATE should be specified when creating new route
[  148.563107][ T6566] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[  148.621327][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[  148.626108][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[  148.767067][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[  148.853453][   T41] audit: type=1400 audit(1757353694.670:319): avc:  denied  { create } for  pid=6554 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  148.863664][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[  148.870326][   T41] audit: type=1400 audit(1757353694.670:320): avc:  denied  { connect } for  pid=6554 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  149.024135][   T41] audit: type=1400 audit(1757353694.840:321): avc:  denied  { connect } for  pid=6580 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  149.070335][   T41] audit: type=1400 audit(1757353694.880:322): avc:  denied  { create } for  pid=6581 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  149.147823][   T41] audit: type=1400 audit(1757353694.930:323): avc:  denied  { name_bind } for  pid=6581 comm="syz.1.133" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  149.566394][ T6444] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.627878][ T6444] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.640613][ T6444] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.762712][ T6608] netlink: 56 bytes leftover after parsing attributes in process `syz.1.138'.
[  149.894239][ T6444] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  150.162369][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.179079][ T6444] 8021q: adding VLAN 0 to HW filter on device team0
[  150.199820][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.221993][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.285515][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.312737][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.545878][ T6619] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  150.639443][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  150.643586][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  150.664188][ T6444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.721944][ T6444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.746583][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.142'.
[  151.086457][ T6643] netlink: 52 bytes leftover after parsing attributes in process `syz.1.144'.
[  151.093522][ T6643] Bluetooth: MGMT ver 1.23
[  151.408762][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.145'.
[  151.418013][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.548757][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'.
[  151.616931][ T6660] nbd: must specify an index to disconnect
[  152.002596][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6684 comm=syz.1.150
[  152.020270][ T6683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6683 comm=syz.1.150
[  152.061705][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'.
[  152.384272][ T6444] veth0_vlan: entered promiscuous mode
[  152.400297][ T6444] veth1_vlan: entered promiscuous mode
[  152.471745][ T6444] veth0_macvtap: entered promiscuous mode
[  152.477801][ T6444] veth1_macvtap: entered promiscuous mode
[  152.514609][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.540047][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.553458][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.558568][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.573150][ T4777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.599623][ T4777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.872433][ T6700] netlink: 'syz.1.156': attribute type 21 has an invalid length.
[  152.881069][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.954260][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.087376][ T4777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.120013][ T4777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.195720][   T41] kauditd_printk_skb: 13 callbacks suppressed
[  153.195738][   T41] audit: type=1400 audit(1757353699.000:337): avc:  denied  { mounton } for  pid=6444 comm="syz-executor" path="/syzkaller.gCoU2F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  153.305427][   T41] audit: type=1400 audit(1757353699.120:338): avc:  denied  { execute } for  pid=6719 comm="syz.1.159" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  153.331253][ T6717] mmap: syz.2.160 (6717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  153.432628][ T6060] IPVS: starting estimator thread 0...
[  153.439774][   T41] audit: type=1400 audit(1757353699.260:339): avc:  denied  { execute_no_trans } for  pid=6719 comm="syz.1.159" path="/57/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  153.520677][ T6722] IPVS: using max 28 ests per chain, 67200 per kthread
[  153.552141][ T6731] 9pnet_virtio: no channels available for device syz
[  153.841181][   T41] audit: type=1400 audit(1757353699.660:340): avc:  denied  { read } for  pid=6734 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  153.976080][ T6740] capability: warning: `syz.2.163' uses 32-bit capabilities (legacy support in use)
[  153.999660][   T41] audit: type=1400 audit(1757353699.800:341): avc:  denied  { lock } for  pid=6733 comm="syz.4.165" path="socket:[11235]" dev="sockfs" ino=11235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  154.392796][ T6731] syz.3.162: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  154.437997][ T6731] CPU: 2 UID: 0 PID: 6731 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) 
[  154.438021][ T6731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  154.438032][ T6731] Call Trace:
[  154.438037][ T6731]  <TASK>
[  154.438044][ T6731]  dump_stack_lvl+0x16c/0x1f0
[  154.438072][ T6731]  warn_alloc+0x248/0x3a0
[  154.438092][ T6731]  ? __pfx_warn_alloc+0x10/0x10
[  154.438124][ T6731]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  154.438148][ T6731]  ? __vmalloc_node_noprof+0xad/0xf0
[  154.438175][ T6731]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  154.438205][ T6731]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  154.438264][ T6731]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  154.438296][ T6731]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  154.438319][ T6731]  vmalloc_user_noprof+0x9e/0xe0
[  154.438341][ T6731]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  154.438366][ T6731]  vb2_vmalloc_alloc+0x135/0x3f0
[  154.438391][ T6731]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  154.438414][ T6731]  __vb2_queue_alloc+0x8c6/0x1280
[  154.438450][ T6731]  vb2_core_reqbufs+0xa90/0xfe0
[  154.438480][ T6731]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  154.438506][ T6731]  ? __pfx___might_resched+0x10/0x10
[  154.438533][ T6731]  ? __mutex_lock+0x1c5/0x1060
[  154.438554][ T6731]  ? avc_has_extended_perms+0x47c/0x1090
[  154.438578][ T6731]  vb2_reqbufs+0x1a3/0x1f0
[  154.438600][ T6731]  ? __pfx_vb2_reqbufs+0x10/0x10
[  154.438621][ T6731]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  154.438642][ T6731]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  154.438665][ T6731]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[  154.438693][ T6731]  v4l_reqbufs+0x14f/0x1e0
[  154.438713][ T6731]  __video_do_ioctl+0xb3d/0xfc0
[  154.438738][ T6731]  ? __might_fault+0xe3/0x190
[  154.438755][ T6731]  ? __pfx___video_do_ioctl+0x10/0x10
[  154.438809][ T6731]  video_usercopy+0x4cd/0x1720
[  154.438831][ T6731]  ? __pfx___video_do_ioctl+0x10/0x10
[  154.438850][ T6731]  ? selinux_kernel_read_file+0x120/0x130
[  154.438876][ T6731]  ? __pfx_video_usercopy+0x10/0x10
[  154.438913][ T6731]  v4l2_ioctl+0x1ba/0x250
[  154.438932][ T6731]  ? __pfx_v4l2_ioctl+0x10/0x10
[  154.438953][ T6731]  __x64_sys_ioctl+0x18b/0x210
[  154.438981][ T6731]  do_syscall_64+0xcd/0x4c0
[  154.439006][ T6731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.439024][ T6731] RIP: 0033:0x7f7f7158ebe9
[  154.439039][ T6731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.439055][ T6731] RSP: 002b:00007f7f72479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.439073][ T6731] RAX: ffffffffffffffda RBX: 00007f7f717c5fa0 RCX: 00007f7f7158ebe9
[  154.439088][ T6731] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003
[  154.439104][ T6731] RBP: 00007f7f71611e19 R08: 0000000000000000 R09: 0000000000000000
[  154.439114][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.439124][ T6731] R13: 00007f7f717c6038 R14: 00007f7f717c5fa0 R15: 00007ffdb6c98b58
[  154.439147][ T6731]  </TASK>
[  154.617211][ T6753] __nla_validate_parse: 4 callbacks suppressed
[  154.617230][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'.
[  154.628971][ T6731] Mem-Info:
[  154.855161][ T6731] active_anon:11729 inactive_anon:0 isolated_anon:0
[  154.855161][ T6731]  active_file:10917 inactive_file:40643 isolated_file:0
[  154.855161][ T6731]  unevictable:1768 dirty:35 writeback:0
[  154.855161][ T6731]  slab_reclaimable:12163 slab_unreclaimable:70541
[  154.855161][ T6731]  mapped:27097 shmem:5215 pagetables:1310
[  154.855161][ T6731]  sec_pagetables:306 bounce:0
[  154.855161][ T6731]  kernel_misc_reclaimable:0
[  154.855161][ T6731]  free:418567 free_pcp:17894 free_cma:0
[  154.901366][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.906469][ T6731] Node 0 active_anon:46916kB inactive_anon:0kB active_file:43668kB inactive_file:162376kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:108388kB dirty:136kB writeback:0kB shmem:17324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13168kB pagetables:5056kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB
[  154.919067][ T6731] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  154.939913][ T6758] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  154.949402][ T6731] Node 0 
[  154.956258][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[  154.973216][ T6731] DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  154.986166][ T6731] lowmem_reserve[]: 0 1233 1233 1233 1233
[  154.992247][ T6731] Node 0 DMA32 free:62988kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47164kB inactive_anon:0kB active_file:43668kB inactive_file:162376kB unevictable:3536kB writepending:136kB present:2080628kB managed:1263448kB mlocked:0kB bounce:0kB free_pcp:56684kB local_pcp:25252kB free_cma:0kB
[  155.014920][ T6731] lowmem_reserve[]: 0 0 0 0 0
[  155.018696][ T6731] Node 1 Normal free:1595580kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16520kB local_pcp:5024kB free_cma:0kB
[  155.037729][ T6731] lowmem_reserve[]: 0 0 0 0 0
[  155.041187][ T6731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  155.045719][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.049513][ T6731] Node 0 DMA32: 3*4kB (ME) 1*8kB (U) 2*16kB (ME) 110*32kB (UME) 113*64kB (UME) 150*128kB (ME) 22*256kB (UM) 11*512kB (M) 7*1024kB (M) 5*2048kB (UM) 1*4096kB (M) = 62772kB
[  155.070425][ T6731] Node 1 Normal: 41*4kB (UE) 15*8kB (UME) 18*16kB (UME) 24*32kB (UME) 18*64kB (UME) 6*128kB (ME) 2*256kB (U) 5*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 387*4096kB (M) = 1595580kB
[  155.084069][ T6731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  155.089003][ T6731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.094489][ T6731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  155.100130][ T6731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.104769][ T6731] 56756 total pagecache pages
[  155.107774][ T6731] 0 pages in swap cache
[  155.110321][ T6731] Free swap  = 124996kB
[  155.112851][ T6731] Total swap = 124996kB
[  155.129844][ T6731] 1048443 pages RAM
[  155.133254][ T6731] 0 pages HighMem/MovableOnly
[  155.150357][ T6731] 283268 pages reserved
[  155.152477][ T6731] 0 pages cma reserved
[  155.340426][ T6767] netlink: zone id is out of range
[  155.357232][ T6767] netlink: zone id is out of range
[  155.414560][ T6767] netlink: set zone limit has 4 unknown bytes
[  155.595524][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.793651][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.826304][ T6783] program syz.1.175 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.012467][ T6788] overlayfs: statfs failed on './file0'
[  156.041276][   T41] audit: type=1400 audit(1757353701.820:342): avc:  denied  { getattr } for  pid=6787 comm="syz.4.178" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  156.057350][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  156.155601][   T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  156.187596][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  156.392085][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  156.399746][   T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  156.454907][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'.
[  156.473956][   T48] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  156.494401][   T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.519818][   T48] usb 6-1: Product: syz
[  156.551827][   T48] usb 6-1: Manufacturer: syz
[  156.567092][   T48] usb 6-1: SerialNumber: syz
[  156.594049][   T48] usb 6-1: config 0 descriptor??
[  156.645910][   T41] audit: type=1400 audit(1757353702.450:343): avc:  denied  { create } for  pid=6803 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  156.662892][ T6807] hugetlbfs: Bad value for 'uid'
[  156.682133][   T41] audit: type=1400 audit(1757353702.480:344): avc:  denied  { bind } for  pid=6805 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.718795][ T6807] hugetlbfs: Bad value for 'uid'
[  156.735311][   T41] audit: type=1400 audit(1757353702.480:345): avc:  denied  { listen } for  pid=6805 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.778994][   T41] audit: type=1400 audit(1757353702.560:346): avc:  denied  { accept } for  pid=6805 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.981070][ T6815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.187'.
[  157.203464][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.447554][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.545837][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.647453][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.783321][ T6844] netlink: 164 bytes leftover after parsing attributes in process `syz.2.194'.
[  157.827862][ T6844] netlink: 164 bytes leftover after parsing attributes in process `syz.2.194'.
[  157.846265][ T6844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.194'.
[  157.871514][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  158.008758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  158.101022][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'.
[  158.217420][ T6861] =======================================================
[  158.217420][ T6861] WARNING: The mand mount option has been deprecated and
[  158.217420][ T6861]          and is ignored by this kernel. Remove the mand
[  158.217420][ T6861]          option from the mount to silence this warning.
[  158.217420][ T6861] =======================================================
[  158.264053][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.292898][   T41] kauditd_printk_skb: 11 callbacks suppressed
[  158.292913][   T41] audit: type=1400 audit(1757353704.110:358): avc:  denied  { create } for  pid=6864 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  158.315384][   T41] audit: type=1400 audit(1757353704.120:359): avc:  denied  { connect } for  pid=6864 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  158.579739][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  158.782814][  T841] usb 6-1: USB disconnect, device number 6
[  159.160563][ T6894] capability: warning: `syz.1.211' uses deprecated v2 capabilities in a way that may be insecure
[  159.371909][   T41] audit: type=1400 audit(1757353705.190:360): avc:  denied  { listen } for  pid=6903 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  159.583778][   T41] audit: type=1400 audit(1757353705.400:361): avc:  denied  { connect } for  pid=6908 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  159.595493][    C0] vkms_vblank_simulate: vblank timer overrun
[  159.607195][   T41] audit: type=1400 audit(1757353705.400:362): avc:  denied  { write } for  pid=6908 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  159.637939][   T41] audit: type=1400 audit(1757353705.400:363): avc:  denied  { read } for  pid=6908 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  159.663428][    C0] vkms_vblank_simulate: vblank timer overrun
[  159.762324][ T6904] netlink: 48 bytes leftover after parsing attributes in process `syz.3.215'.
[  159.905667][ T6922] netlink: 272 bytes leftover after parsing attributes in process `syz.2.220'.
[  159.976621][   T41] audit: type=1400 audit(1757353705.790:364): avc:  denied  { read } for  pid=6926 comm="syz.1.221" path="socket:[15753]" dev="sockfs" ino=15753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.128504][ T5994] Bluetooth: hci4: command 0x1003 tx timeout
[  160.142482][ T5989] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  160.179582][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.205515][   T41] audit: type=1400 audit(1757353706.020:365): avc:  denied  { mounton } for  pid=6931 comm="syz.3.223" path="/proc/192/task" dev="proc" ino=14822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  160.249068][   T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  160.316705][   T41] audit: type=1400 audit(1757353706.120:366): avc:  denied  { connect } for  pid=6934 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.429396][   T50] usb 7-1: Using ep0 maxpacket: 32
[  160.434731][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.452482][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.456356][   T50] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  160.461114][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.497459][   T50] usb 7-1: config 0 descriptor??
[  160.662482][ T6942] netlink: 'syz.1.226': attribute type 1 has an invalid length.
[  160.688627][ T6942] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.937039][   T50] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  161.181424][ T6942] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  161.468675][ T6966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  161.657711][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'.
[  161.675598][   T41] audit: type=1400 audit(1757353707.490:367): avc:  denied  { read } for  pid=6969 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  161.702178][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[  161.705587][ T6971] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  161.709306][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.887506][    C0] vkms_vblank_simulate: vblank timer overrun
[  162.169621][ T6987] vlan2: entered promiscuous mode
[  162.173661][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  162.177201][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  162.194872][ T6987] bridge0: entered promiscuous mode
[  162.197165][    C0] vkms_vblank_simulate: vblank timer overrun
[  162.216369][ T6992] vhci_hcd vhci_hcd.0: Device attached
[  162.289999][  T841] usb 7-1: reset high-speed USB device number 3 using dummy_hcd
[  162.420668][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.470370][  T820] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  162.484579][ T6993] vhci_hcd: connection reset by peer
[  162.500779][   T12] vhci_hcd: stop threads
[  162.503278][   T12] vhci_hcd: release socket
[  162.525400][   T12] vhci_hcd: disconnect device
[  162.564110][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.713000][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'.
[  162.726961][ T7027] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.246' resets device
[  162.806809][ T7033] erofs (device loop3): cannot find valid erofs superblock
[  162.978038][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.023758][ T5994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  163.029838][ T5994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  163.036702][ T5994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  163.043331][ T5994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  163.056516][ T5994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.074156][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.131586][ T7043] xfrm0 speed is unknown, defaulting to 1000
[  163.415595][ T7057] tipc: Started in network mode
[  163.418069][ T7057] tipc: Node identity , cluster identity 4711
[  163.423360][ T7057] tipc: Failed to set node id, please configure manually
[  163.428819][ T7057] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  163.473997][ T7043] chnl_net:caif_netlink_parms(): no params data found
[  163.501996][ T1150] bridge_slave_1: left allmulticast mode
[  163.505314][ T1150] bridge_slave_1: left promiscuous mode
[  163.508628][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.520665][ T1150] bridge_slave_0: left allmulticast mode
[  163.522914][ T1150] bridge_slave_0: left promiscuous mode
[  163.525434][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.528841][ T7068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7068 comm=syz.1.254
[  163.551703][   T41] kauditd_printk_skb: 7 callbacks suppressed
[  163.551720][   T41] audit: type=1400 audit(1757353709.370:375): avc:  denied  { bind } for  pid=7069 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  163.654935][   T41] audit: type=1400 audit(1757353709.460:376): avc:  denied  { map } for  pid=7071 comm="syz.3.257" path="socket:[15895]" dev="sockfs" ino=15895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  163.689295][   T41] audit: type=1400 audit(1757353709.470:377): avc:  denied  { append } for  pid=7071 comm="syz.3.257" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.024089][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.061023][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.100707][ T1150] bond0 (unregistering): Released all slaves
[  164.156003][   T41] audit: type=1400 audit(1757353709.970:378): avc:  denied  { map } for  pid=7078 comm="syz.1.258" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  164.166264][ T7079] binder_alloc: 7078: binder_alloc_buf, no vma
[  164.169557][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.258'.
[  164.178629][   T41] audit: type=1400 audit(1757353709.980:379): avc:  denied  { call } for  pid=7078 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  164.416536][   T41] audit: type=1400 audit(1757353710.230:380): avc:  denied  { create } for  pid=7096 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  164.424396][   T41] audit: type=1400 audit(1757353710.230:381): avc:  denied  { getopt } for  pid=7096 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  164.453019][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.456194][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.459598][ T7043] bridge_slave_0: entered allmulticast mode
[  164.463545][ T7043] bridge_slave_0: entered promiscuous mode
[  164.511975][ T7097] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  164.515928][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.523822][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.526271][ T7043] bridge_slave_1: entered allmulticast mode
[  164.529376][ T7043] bridge_slave_1: entered promiscuous mode
[  164.561076][   T41] audit: type=1400 audit(1757353710.370:382): avc:  denied  { create } for  pid=7107 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  164.568714][   T41] audit: type=1400 audit(1757353710.380:383): avc:  denied  { setopt } for  pid=7107 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  164.580800][ T7106] macvlan2: entered promiscuous mode
[  164.582837][ T7106] macvlan2: entered allmulticast mode
[  164.624948][   T41] audit: type=1400 audit(1757353710.440:384): avc:  denied  { getopt } for  pid=7111 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  164.721101][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.724631][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'.
[  164.728055][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'.
[  164.739270][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.793789][ T7128] kernel read not supported for file /policy (pid: 7128 comm: syz.2.270)
[  164.831272][ T7130] netlink: 4876 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.834475][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.836615][ T7123] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  164.841779][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841808][ T7130] netlink: 5 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841815][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841822][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841829][ T7130] netlink: 5 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841835][ T7130] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841844][ T7130] netlink: 112 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.841851][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  164.873288][ T1150] hsr_slave_0: left promiscuous mode
[  164.879122][ T1150] hsr_slave_1: left promiscuous mode
[  164.882275][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.885331][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.895163][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.899534][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.926505][ T1150] veth1_macvtap: left promiscuous mode
[  164.929528][ T1150] veth0_macvtap: left promiscuous mode
[  164.931392][ T1150] veth1_vlan: left promiscuous mode
[  164.933101][ T1150] veth0_vlan: left promiscuous mode
[  164.939451][ T7135] NILFS (nullb0): couldn't find nilfs on the device
[  165.158492][ T5989] Bluetooth: hci2: command tx timeout
[  165.208333][   T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  165.359833][   T35] usb 8-1: Using ep0 maxpacket: 32
[  165.382560][ T7137] netlink: 'syz.3.273': attribute type 21 has an invalid length.
[  165.443407][   T35] usb 8-1: unable to get BOS descriptor or descriptor too short
[  165.448608][   T35] usb 8-1: unable to read config index 0 descriptor/start: -71
[  165.454222][   T35] usb 8-1: can't read configurations, error -71
[  165.547831][ T1150] team0 (unregistering): Port device team_slave_1 removed
[  165.606076][ T1150] team0 (unregistering): Port device team_slave_0 removed
[  165.977486][ T7159] netlink: 'syz.3.277': attribute type 7 has an invalid length.
[  165.980722][ T7159] netlink: 'syz.3.277': attribute type 8 has an invalid length.
[  166.026158][ T7043] team0: Port device team_slave_0 added
[  166.029799][ T7043] team0: Port device team_slave_1 added
[  166.088847][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.091966][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.101155][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.105284][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.107441][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.116236][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.119988][ T6222] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  166.180396][ T7171] overlayfs: conflicting lowerdir path
[  166.194032][ T7043] hsr_slave_0: entered promiscuous mode
[  166.196255][ T7043] hsr_slave_1: entered promiscuous mode
[  166.199810][ T7043] debugfs: 'hsr0' already exists in 'hsr'
[  166.201740][ T7043] Cannot create hsr debugfs directory
[  166.896267][ T7043] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  166.911355][ T7043] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  166.917571][ T7043] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  166.939081][ T7043] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  167.006765][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.023132][ T7043] 8021q: adding VLAN 0 to HW filter on device team0
[  167.027923][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.031048][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.043475][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.046203][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.077682][ T7230] 9pnet_virtio: no channels available for device syz
[  167.205178][ T7247] netlink: 'syz.3.297': attribute type 12 has an invalid length.
[  167.240514][ T5989] Bluetooth: hci2: command tx timeout
[  167.248352][   T49] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  167.252006][   T14] wlan1: Trigger new scan to find an IBSS to join
[  167.257561][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.307986][ T7260] ufs: You didn't specify the type of your ufs filesystem
[  167.307986][ T7260] 
[  167.307986][ T7260] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  167.307986][ T7260] 
[  167.307986][ T7260] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  167.320274][ T7260] ufs: ufstype=old is supported read-only
[  167.324704][ T7260] block nbd2: Attempted send on invalid socket
[  167.326817][ T7260] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.339732][ T7260] 9pnet_virtio: no channels available for device syz
[  167.395685][ T7271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7271 comm=syz.2.300
[  167.399927][ T7272] syz.3.301 uses obsolete (PF_INET,SOCK_PACKET)
[  167.408382][   T49] usb 6-1: Using ep0 maxpacket: 32
[  167.412557][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.416071][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.416295][ T7043] veth0_vlan: entered promiscuous mode
[  167.419305][   T49] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  167.424020][   T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.427806][ T7043] veth1_vlan: entered promiscuous mode
[  167.428633][   T49] usb 6-1: config 0 descriptor??
[  167.461372][ T7043] veth0_macvtap: entered promiscuous mode
[  167.465572][ T7043] veth1_macvtap: entered promiscuous mode
[  167.468350][  T841] usb 7-1: device descriptor read/64, error -110
[  167.482925][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.491723][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.500992][   T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.503731][   T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.515905][   T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.520142][   T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.548356][  T820] vhci_hcd: vhci_device speed not set
[  167.556867][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.560739][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.574639][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.577250][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.680387][ T7283] netlink: 'syz.5.242': attribute type 2 has an invalid length.
[  167.698005][ T7281] xfrm0 speed is unknown, defaulting to 1000
[  167.703711][ T7280] xfrm0 speed is unknown, defaulting to 1000
[  167.718341][  T841] usb 7-1: reset high-speed USB device number 3 using dummy_hcd
[  167.845420][   T49] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  167.858376][  T841] usb 7-1: device descriptor read/64, error -32
[  167.972014][ T7297] policy can only be matched on NF_INET_PRE_ROUTING
[  167.972030][ T7297] unable to load match
[  168.091470][ T7314] misc userio: Begin command sent, but we're already running
[  168.120902][  T841] usb 7-1: reset high-speed USB device number 3 using dummy_hcd
[  168.129756][   T49] usb 6-1: USB disconnect, device number 7
[  168.138992][  T841] usb 7-1: device descriptor read/8, error -32
[  168.166668][ T7320] overlayfs: failed to resolve 'xino=on': -2
[  168.363487][ T7326] netlink: 'syz.5.315': attribute type 8 has an invalid length.
[  168.408374][  T841] usb 7-1: reset high-speed USB device number 3 using dummy_hcd
[  168.417077][ T7330] overlay: Bad value for 'redirect_dir'
[  168.428383][ T7047] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  168.431194][  T841] usb 7-1: device descriptor read/8, error -32
[  168.539907][  T841] raw-gadget.0 gadget.2: failed to queue suspend event
[  168.544513][   T48] usb 7-1: USB disconnect, device number 3
[  168.555420][ T7336] 9pnet_virtio: no channels available for device syz
[  168.561889][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  168.597126][ T7047] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  168.602105][ T7047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  168.605485][ T7047] usb 8-1: Product: syz
[  168.607127][ T7047] usb 8-1: Manufacturer: syz
[  168.608846][ T7047] usb 8-1: SerialNumber: syz
[  168.612869][ T7047] usb 8-1: config 0 descriptor??
[  168.617289][ T7047] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  168.620452][ T7047] dvb-usb: bulk message failed: -22 (2/0)
[  168.626830][ T7047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  168.631333][ T7047] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  168.633873][ T7047] usb 8-1: media controller created
[  168.646867][ T7047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  168.650779][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  168.710197][   T48] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  168.713736][    C2] raw-gadget.0 gadget.2: ignoring, device is not running
[  168.717167][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  168.788826][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  168.808575][   T41] kauditd_printk_skb: 30 callbacks suppressed
[  168.808587][   T41] audit: type=1404 audit(1757353714.620:415): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  168.818153][   T41] audit: type=1400 audit(1757353714.630:416): avc:  denied  { read append } for  pid=7319 comm="syz.3.313" name="i2c-2" dev="devtmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  168.821734][ T7047] cxusb: set interface failed
[  168.829447][ T7047] dvb-usb: bulk message failed: -22 (1/0)
[  168.848576][   T48] usb 7-1: device descriptor read/64, error -32
[  168.854628][ T7047] DVB: Unable to find symbol mt352_attach()
[  168.856772][ T7047] dvb-usb: bulk message failed: -22 (5/0)
[  168.860080][ T7047] zl10353_read_register: readreg error (reg=127, ret==-121)
[  168.862380][ T7047] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  168.868712][   T41] audit: type=1404 audit(1757353714.680:417): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  168.897765][   T41] audit: type=1400 audit(1757353714.710:418): avc:  denied  { read write } for  pid=5988 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  168.908370][   T41] audit: type=1400 audit(1757353714.710:419): avc:  denied  { open } for  pid=5988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  168.916563][   T41] audit: type=1400 audit(1757353714.710:420): avc:  denied  { ioctl } for  pid=5988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  168.924532][   T41] audit: type=1400 audit(1757353714.730:421): avc:  denied  { read write } for  pid=7350 comm="syz.1.322" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  168.924554][   T41] audit: type=1400 audit(1757353714.730:422): avc:  denied  { open } for  pid=7350 comm="syz.1.322" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  168.933038][ T7047] rc_core: IR keymap rc-dvico-mce not found
[  168.933051][ T7047] Registered IR keymap rc-empty
[  168.939209][ T7047] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[  168.951462][ T7047] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input8
[  168.957138][   T41] audit: type=1400 audit(1757353714.770:423): avc:  denied  { mount } for  pid=7352 comm="syz.1.323" name="/" dev="configfs" ino=3151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  168.959555][   T48] raw-gadget.0 gadget.2: failed to queue suspend event
[  168.965598][   T41] audit: type=1400 audit(1757353714.780:424): avc:  denied  { read } for  pid=5369 comm="acpid" name="event3" dev="devtmpfs" ino=2913 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  168.979621][ T7047] dvb-usb: schedule remote query interval to 100 msecs.
[  168.983117][ T7047] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  168.986844][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  168.995460][ T7047] usb 8-1: USB disconnect, device number 5
[  169.039237][ T7360] overlayfs: missing 'workdir'
[  169.074672][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  169.089111][ T7047] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  169.140667][   T48] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  169.143838][    C2] raw-gadget.0 gadget.2: ignoring, device is not running
[  169.146650][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  169.220827][ T7380] Bluetooth: MGMT ver 1.23
[  169.228429][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  169.288415][   T48] usb 7-1: device descriptor read/64, error -32
[  169.318468][ T5989] Bluetooth: hci2: command tx timeout
[  169.408415][   T48] raw-gadget.0 gadget.2: failed to queue suspend event
[  169.412609][   T48] usb usb7-port1: attempt power cycle
[  169.414389][   T48] raw-gadget.0 gadget.2: failed to queue disconnect event
[  169.416830][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  169.470229][ T7395] FAT-fs (nullb0): bogus number of reserved sectors
[  169.472267][ T7395] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  169.486558][ T7397] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  169.495794][   T49] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.498487][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  169.498894][  T842] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  169.500993][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  169.504314][   T49] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  169.514843][ T7397] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  169.535349][ T7401] fido_id[7401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  169.658503][  T842] usb 6-1: Invalid ep0 maxpacket: 64
[  169.708635][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  169.738996][ T7419] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.742978][ T7419] batadv_slave_0: entered promiscuous mode
[  169.768391][   T48] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  169.789230][    C2] raw-gadget.0 gadget.2: ignoring, device is not running
[  169.792498][   T48] usb 7-1: device descriptor read/8, error -32
[  169.800749][  T842] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  169.881454][ T7425] fuse: Unknown parameter 'group_id΋\µeý4Œk
[  169.881454][ T7425] V£ÅlÐÀ-9¾—¦'÷o­¦ Z·#>&�tdBÿëV»c¡¦e:L[õÄŠúRÃ)CèvVH"nÏÔÕ£�à/Õ8:¤‡×½À!+.;ÓǘÏRheî¼í¢kú�¤5m݇L¹嗟JWO!¢0.;]YÈb²*]]!º�¦b’X©®¦ $_×ß<k6�
[  169.881454][ T7425] ZûŒ²
Iú‡ ¥±uhïè$Çÿ[ ‡7#†IIKvÖb*ñÚÅzžÛ'
[  169.898578][   T48] raw-gadget.0 gadget.2: failed to queue suspend event
[  169.903026][   T48] raw-gadget.0 gadget.2: failed to queue reset event
[  169.907824][ T6222] nci: nci_rsp_packet: unknown rsp opcode 0xc06
[  169.948705][  T842] usb 6-1: Invalid ep0 maxpacket: 64
[  169.951653][  T842] usb usb6-port1: attempt power cycle
[  169.968377][   T48] raw-gadget.0 gadget.2: failed to queue resume event
[  170.028306][   T48] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  170.049070][    C2] raw-gadget.0 gadget.2: ignoring, device is not running
[  170.051844][   T48] usb 7-1: device descriptor read/8, error -32
[  170.160281][   T48] raw-gadget.0 gadget.2: failed to queue suspend event
[  170.162594][   T48] usb usb7-port1: unable to enumerate USB device
[  170.228310][ T6040] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  170.288442][ T4777] wlan1: Trigger new scan to find an IBSS to join
[  170.288577][  T842] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  170.309076][  T842] usb 6-1: Invalid ep0 maxpacket: 64
[  170.388337][ T6040] usb 10-1: Using ep0 maxpacket: 8
[  170.392407][ T6040] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  170.395844][ T6040] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.400073][ T6040] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  170.404091][ T6040] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  170.407688][ T6040] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  170.412474][ T6040] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  170.415827][ T6040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.448434][  T842] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  170.468781][  T842] usb 6-1: Invalid ep0 maxpacket: 64
[  170.471200][  T842] usb usb6-port1: unable to enumerate USB device
[  170.625691][ T6040] usb 10-1: usb_control_msg returned -32
[  170.628379][ T6040] usbtmc 10-1:16.0: can't read capabilities
[  170.739020][ T7448] xfrm0 speed is unknown, defaulting to 1000
[  170.798168][ T7460] __nla_validate_parse: 79 callbacks suppressed
[  170.798180][ T7460] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.356'.
[  170.805939][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'.
[  170.978068][ T7443] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0
[  170.980807][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.351'.
[  170.981522][ T7471] overlayfs: cannot append lower layer
[  170.993344][   T50] usb 10-1: USB disconnect, device number 2
[  171.110979][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'.
[  171.148749][ T7488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.174857][ T7488] xfrm0 speed is unknown, defaulting to 1000
[  171.398880][ T5989] Bluetooth: hci2: command tx timeout
[  173.158569][   T14] wlan1: Creating new IBSS network, BSSID 8e:f2:f0:86:99:5f
[  177.875978][   T41] kauditd_printk_skb: 104 callbacks suppressed
[  177.875993][   T41] audit: type=1400 audit(1757353723.690:529): avc:  denied  { search } for  pid=7504 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.887885][   T41] audit: type=1400 audit(1757353723.700:530): avc:  denied  { search } for  pid=7504 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.897859][   T41] audit: type=1400 audit(1757353723.700:531): avc:  denied  { search } for  pid=7504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.907294][   T41] audit: type=1400 audit(1757353723.700:532): avc:  denied  { search } for  pid=7504 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.916692][   T41] audit: type=1400 audit(1757353723.700:533): avc:  denied  { read open } for  pid=7505 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.925913][   T41] audit: type=1400 audit(1757353723.700:534): avc:  denied  { getattr } for  pid=7505 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.936247][   T41] audit: type=1400 audit(1757353723.710:535): avc:  denied  { add_name } for  pid=7504 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.945496][   T41] audit: type=1400 audit(1757353723.710:536): avc:  denied  { create } for  pid=7504 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  177.954596][   T41] audit: type=1400 audit(1757353723.710:537): avc:  denied  { write open } for  pid=7504 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=3474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  177.965411][   T41] audit: type=1400 audit(1757353723.710:538): avc:  denied  { append } for  pid=7504 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=3474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  187.345148][   T41] kauditd_printk_skb: 4 callbacks suppressed
[  187.345164][   T41] audit: type=1400 audit(1757353733.160:543): avc:  denied  { bind } for  pid=7528 comm="syz.5.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  187.356875][   T41] audit: type=1400 audit(1757353733.160:544): avc:  denied  { listen } for  pid=7528 comm="syz.5.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  187.365045][   T41] audit: type=1400 audit(1757353733.160:545): avc:  denied  { accept } for  pid=7528 comm="syz.5.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  187.373181][   T41] audit: type=1400 audit(1757353733.170:546): avc:  denied  { ioctl } for  pid=7528 comm="syz.5.370" path="socket:[19715]" dev="sockfs" ino=19715 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  187.385842][   T41] audit: type=1400 audit(1757353733.180:547): avc:  denied  { name_bind } for  pid=7535 comm="syz.2.372" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  187.407962][   T41] audit: type=1400 audit(1757353733.220:548): avc:  denied  { setopt } for  pid=7529 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  187.414062][   T41] audit: type=1400 audit(1757353733.230:549): avc:  denied  { read } for  pid=7529 comm="syz.1.371" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  187.422386][   T41] audit: type=1400 audit(1757353733.240:550): avc:  denied  { bind } for  pid=7530 comm="syz.3.373" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  187.428721][   T41] audit: type=1400 audit(1757353733.240:551): avc:  denied  { name_bind } for  pid=7530 comm="syz.3.373" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  187.429984][ T7542] netlink: 252 bytes leftover after parsing attributes in process `syz.5.374'.
[  187.435109][   T41] audit: type=1400 audit(1757353733.240:552): avc:  denied  { node_bind } for  pid=7530 comm="syz.3.373" saddr=ff02::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  187.462961][ T7546] 8021q: VLANs not supported on ip6gre0
[  187.800647][ T7565] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[  187.803271][ T7565] netlink: 224 bytes leftover after parsing attributes in process `syz.1.380'.
[  188.038470][ T6040] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  188.168371][ T6040] usb 8-1: device descriptor read/64, error -71
[  188.354348][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[  188.357381][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[  188.408386][ T6040] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  188.548379][ T6040] usb 8-1: device descriptor read/64, error -71
[  188.670957][ T6040] usb usb8-port1: attempt power cycle
[  188.823838][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[  188.827731][ T7594] netlink: 1 bytes leftover after parsing attributes in process `syz.1.392'.
[  188.859470][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  188.917533][ T7595] netlink: 'syz.2.391': attribute type 10 has an invalid length.
[  188.921459][ T7595] syz_tun: entered promiscuous mode
[  188.927244][ T7595] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  188.930749][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  188.999006][   T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  189.002290][    C3] raw-gadget.0 gadget.2: ignoring, device is not running
[  189.005302][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  189.008995][ T6040] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  189.039804][ T6040] usb 8-1: device descriptor read/8, error -71
[  189.088561][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  189.148312][   T50] usb 7-1: device descriptor read/64, error -32
[  189.268457][   T50] raw-gadget.0 gadget.2: failed to queue suspend event
[  189.270841][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  189.288350][ T6040] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  189.308753][ T6040] usb 8-1: device descriptor read/8, error -71
[  189.348377][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  189.408366][   T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  189.411414][    C3] raw-gadget.0 gadget.2: ignoring, device is not running
[  189.413760][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  189.420659][ T6040] usb usb8-port1: unable to enumerate USB device
[  189.478578][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  189.548317][   T50] usb 7-1: device descriptor read/64, error -32
[  189.558643][ T4936] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  189.668323][   T50] raw-gadget.0 gadget.2: failed to queue suspend event
[  189.670586][   T50] usb usb7-port1: attempt power cycle
[  189.672667][   T50] raw-gadget.0 gadget.2: failed to queue disconnect event
[  189.675154][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  189.688360][ T4936] usb 8-1: device descriptor read/64, error -71
[  189.739197][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  189.742282][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  189.938386][ T4936] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  189.950455][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  190.018338][   T50] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  190.038483][    C3] raw-gadget.0 gadget.2: ignoring, device is not running
[  190.040758][   T50] usb 7-1: device descriptor read/8, error -32
[  190.068389][ T4936] usb 8-1: device descriptor read/64, error -71
[  190.149672][   T50] raw-gadget.0 gadget.2: failed to queue suspend event
[  190.152616][   T50] raw-gadget.0 gadget.2: failed to queue reset event
[  190.188427][ T4936] usb usb8-port1: attempt power cycle
[  190.218343][   T50] raw-gadget.0 gadget.2: failed to queue resume event
[  190.278457][   T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  190.298601][    C3] raw-gadget.0 gadget.2: ignoring, device is not running
[  190.301580][   T50] usb 7-1: device descriptor read/8, error -32
[  190.410868][   T50] raw-gadget.0 gadget.2: failed to queue suspend event
[  190.413314][   T50] usb usb7-port1: unable to enumerate USB device
[  190.441491][ T7603] kvm: user requested TSC rate below hardware speed
[  190.467736][ T7605] kvm: user requested TSC rate below hardware speed
[  190.539852][ T4936] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  190.569115][ T4936] usb 8-1: device descriptor read/8, error -71
[  190.828602][ T4936] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  190.860800][ T7616] netlink: 'syz.3.398': attribute type 7 has an invalid length.
[  190.863754][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.398'.
[  191.018095][ T7634] program syz.2.402 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.025119][ T7634] trusted_key: encrypted_key: insufficient parameters specified
[  191.030522][ T7634] openvswitch: netlink: Message has 8 unknown bytes.
[  191.038561][ T4936] usb 8-1: device not accepting address 13, error -71
[  191.043200][ T4936] usb usb8-port1: unable to enumerate USB device
[  191.339248][ T7647] team0 (unregistering): Port device team_slave_0 removed
[  191.343377][ T7647] team0 (unregistering): Port device team_slave_1 removed
[  191.400625][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.403541][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.433792][ T7669] kvm: kvm [7668]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000041)
[  191.673975][ T7691] 9p: Unknown uid 00000000004294967295
[  191.748985][ T7695] netlink: 3 bytes leftover after parsing attributes in process `syz.5.421'.
[  191.751882][ T7695] 0ªX¹¦À: renamed from caif0
[  191.798493][ T7695] 0ªX¹¦À: entered allmulticast mode
[  191.800901][ T7695] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  191.873042][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.424'.
[  191.912419][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.424'.
[  192.051341][ T7722] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  192.064984][ T7722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  192.068617][ T7722] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  192.340045][ T7731] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.400096][   T41] kauditd_printk_skb: 85 callbacks suppressed
[  192.400107][   T41] audit: type=1400 audit(1757353738.220:638): avc:  denied  { mounton } for  pid=7733 comm="syz.2.434" path="/121/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  192.427213][ T7731] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.483798][ T7731] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.507987][   T41] audit: type=1400 audit(1757353738.320:639): avc:  denied  { create } for  pid=7733 comm="syz.2.434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  192.515679][   T41] audit: type=1400 audit(1757353738.320:640): avc:  denied  { mounton } for  pid=7733 comm="syz.2.434" path="/121/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  192.549317][ T7731] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.696142][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.705190][ T1150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.714364][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.722438][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.747433][   T41] audit: type=1400 audit(1757353738.560:641): avc:  denied  { setopt } for  pid=7737 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  192.788866][   T41] audit: type=1400 audit(1757353738.610:642): avc:  denied  { create } for  pid=7739 comm="syz.5.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  192.807864][   T41] audit: type=1400 audit(1757353738.620:643): avc:  denied  { ioctl } for  pid=7741 comm="syz.1.437" path="socket:[18332]" dev="sockfs" ino=18332 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  192.815585][   T41] audit: type=1400 audit(1757353738.620:644): avc:  denied  { write } for  pid=7741 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  192.864874][ T7747] __nla_validate_parse: 1 callbacks suppressed
[  192.864890][ T7747] netlink: 256 bytes leftover after parsing attributes in process `syz.5.439'.
[  192.871662][ T7747] unsupported nlmsg_type 40
[  193.047475][   T41] audit: type=1400 audit(1757353738.860:645): avc:  denied  { ioctl } for  pid=7773 comm="syz.5.446" path="socket:[21525]" dev="sockfs" ino=21525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  193.053021][ T7775] macvtap1: entered allmulticast mode
[  193.059188][ T7775] veth0_macvtap: entered allmulticast mode
[  193.109051][ T7780] netlink: 'syz.1.448': attribute type 15 has an invalid length.
[  193.111538][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'.
[  193.122935][   T41] audit: type=1400 audit(1757353738.940:646): avc:  denied  { ioctl } for  pid=7782 comm="syz.3.450" path="socket:[20712]" dev="sockfs" ino=20712 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  193.131700][   T41] audit: type=1400 audit(1757353738.940:647): avc:  denied  { execute_no_trans } for  pid=7782 comm="syz.3.450" path="/135/file0" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  193.227820][ T7794] netlink: 344 bytes leftover after parsing attributes in process `syz.3.453'.
[  193.365325][ T7812] overlayfs: conflicting lowerdir path
[  193.393602][ T7814] batman_adv: batadv0: Adding interface: dummy0
[  193.396191][ T7814] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.405738][ T7814] batman_adv: batadv0: Interface activated: dummy0
[  193.468088][ T7819] openvswitch: netlink: EtherType 0 is less than min 600
[  193.535523][ T7821] netlink: 'syz.3.461': attribute type 6 has an invalid length.
[  193.539098][ T7821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.461'.
[  193.545365][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.549496][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.057813][ T7865] tty tty3: ldisc open failed (-12), clearing slot 2
[  194.062714][ T7866] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0
[  194.387458][ T5994] block nbd1: Receive control failed (result -32)
[  194.387469][ T5989] block nbd0: Receive control failed (result -32)
[  194.470738][ T7902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  194.475601][ T7902] lo speed is unknown, defaulting to 1000
[  194.477519][ T7902] lo speed is unknown, defaulting to 1000
[  194.479812][ T7902] lo speed is unknown, defaulting to 1000
[  194.487954][ T7902] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  194.498883][ T7902] lo speed is unknown, defaulting to 1000
[  194.501747][ T7902] lo speed is unknown, defaulting to 1000
[  194.504215][ T7902] lo speed is unknown, defaulting to 1000
[  194.506973][ T7902] lo speed is unknown, defaulting to 1000
[  194.609469][ T7909] netlink: 180 bytes leftover after parsing attributes in process `syz.3.487'.
[  194.749492][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.491'.
[  194.983836][ T7931] usb usb5: usbfs: process 7931 (syz.1.493) did not claim interface 0 before use
[  195.102683][ T7940] veth1_macvtap: left promiscuous mode
[  195.104876][ T7940] macsec0: entered promiscuous mode
[  195.106999][ T7940] macsec0: entered allmulticast mode
[  195.112218][ T7940] macsec0: left promiscuous mode
[  195.113796][ T7940] macsec0: left allmulticast mode
[  195.450941][ T7965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.504'.
[  195.658438][  T842] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  195.818335][  T842] usb 8-1: Using ep0 maxpacket: 8
[  195.820740][  T842] usb 8-1: too many configurations: 129, using maximum allowed: 8
[  195.823867][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.826371][  T842] usb 8-1: config 0 has no interface number 0
[  195.828764][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.832970][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.835484][  T842] usb 8-1: config 0 has no interface number 0
[  195.837602][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.844374][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.846996][  T842] usb 8-1: config 0 has no interface number 0
[  195.849468][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.853634][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.856209][  T842] usb 8-1: config 0 has no interface number 0
[  195.858581][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.863531][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.866200][  T842] usb 8-1: config 0 has no interface number 0
[  195.868096][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.872925][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.875508][  T842] usb 8-1: config 0 has no interface number 0
[  195.877356][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.882234][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.884693][  T842] usb 8-1: config 0 has no interface number 0
[  195.886511][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.890794][  T842] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  195.893622][  T842] usb 8-1: config 0 has no interface number 0
[  195.895526][  T842] usb 8-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  195.901350][  T842] usb 8-1: New USB device found, idVendor=0a5c, idProduct=bd27, bcdDevice=6e.27
[  195.904298][  T842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.906846][  T842] usb 8-1: Product: syz
[  195.908196][  T842] usb 8-1: Manufacturer: syz
[  195.910025][  T842] usb 8-1: SerialNumber: syz
[  195.914078][  T842] usb 8-1: config 0 descriptor??
[  195.924234][ T7979] NILFS (nbd1): device size too small
[  196.117906][ T7959] tmpfs: Cannot enable quota on remount
[  196.120740][   T49] usb 8-1: USB disconnect, device number 14
[  196.189464][ T7993] program syz.5.515 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.223779][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[  196.230686][ T7999] ip6gre1: entered allmulticast mode
[  196.273465][ T8000] netlink: 10 bytes leftover after parsing attributes in process `syz.5.516'.
[  197.082298][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  197.427263][ T8017] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  197.478100][ T8018] syzkaller1: entered promiscuous mode
[  197.480560][ T8018] syzkaller1: entered allmulticast mode
[  197.681404][   T41] kauditd_printk_skb: 44 callbacks suppressed
[  197.681416][   T41] audit: type=1400 audit(1757353743.500:692): avc:  denied  { bind } for  pid=8027 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  197.690971][   T41] audit: type=1400 audit(1757353743.500:693): avc:  denied  { ioctl } for  pid=8027 comm="syz.5.525" path="socket:[21269]" dev="sockfs" ino=21269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  197.750267][   T41] audit: type=1400 audit(1757353743.570:694): avc:  denied  { ioctl } for  pid=8029 comm="syz.5.526" path="socket:[21283]" dev="sockfs" ino=21283 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  197.812200][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.814688][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.824847][ T8044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8044 comm=syz.3.530
[  197.873162][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20240 sclass=netlink_route_socket pid=8048 comm=syz.3.532
[  197.956164][ T8059] netlink: 'syz.3.537': attribute type 21 has an invalid length.
[  197.970940][   T41] audit: type=1400 audit(1757353743.853:695): avc:  denied  { open } for  pid=8061 comm="syz.5.538" path="/dev/ptyqe" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  197.979442][   T41] audit: type=1400 audit(1757353743.853:696): avc:  denied  { ioctl } for  pid=8061 comm="syz.5.538" path="/dev/ptyqe" dev="devtmpfs" ino=141 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  197.989641][   T41] audit: type=1400 audit(1757353743.853:697): avc:  denied  { connect } for  pid=8062 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  198.011143][ T8066] syzkaller1: entered promiscuous mode
[  198.012861][ T8066] syzkaller1: entered allmulticast mode
[  198.062386][   T41] audit: type=1400 audit(1757353743.943:698): avc:  denied  { listen } for  pid=8073 comm="syz.5.543" lport=60979 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  198.072594][   T41] audit: type=1400 audit(1757353743.943:699): avc:  denied  { accept } for  pid=8073 comm="syz.5.543" lport=60979 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  198.083048][   T41] audit: type=1400 audit(1757353743.943:700): avc:  denied  { read append } for  pid=8074 comm="syz.1.542" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  198.090945][   T41] audit: type=1400 audit(1757353743.943:701): avc:  denied  { setopt } for  pid=8073 comm="syz.5.543" lport=60979 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  198.102601][ T8076] syzkaller1: entered promiscuous mode
[  198.104741][ T8076] syzkaller1: entered allmulticast mode
[  198.151118][ T8076] openvswitch: netlink: Duplicate or invalid key (type 0).
[  198.153479][ T8076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.202417][ T8082] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  198.210875][ T8082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  198.282483][ T8095] 9pnet_fd: p9_fd_create_tcp (8095): problem connecting socket to 127.0.0.1
[  198.451212][ T8107] VFS: Mount too revealing
[  198.523219][ T8123] __nla_validate_parse: 3 callbacks suppressed
[  198.523230][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[  198.529917][ T8123] trusted_key: syz.2.556 sent an empty control message without MSG_MORE.
[  198.633203][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'.
[  198.637691][ T8136] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  198.640753][ T8136] netlink: 44 bytes leftover after parsing attributes in process `syz.5.561'.
[  198.670136][ T8143] virtio-fs: tag </dev/sg0> not found
[  198.673834][ T8143] netlink: 'syz.5.563': attribute type 1 has an invalid length.
[  198.676242][ T8143] netlink: 136 bytes leftover after parsing attributes in process `syz.5.563'.
[  198.682114][ T8143] netlink: 'syz.5.563': attribute type 2 has an invalid length.
[  198.684482][ T8143] netlink: 'syz.5.563': attribute type 1 has an invalid length.
[  198.723444][ T8143] block nbd5: Attempted send on invalid socket
[  198.727523][ T8143] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  198.732573][ T8143] XFS (nbd5): SB validate failed with error -5.
[  198.809294][ T8156] netlink: 'syz.2.566': attribute type 12 has an invalid length.
[  198.811871][ T8156] netlink: 'syz.2.566': attribute type 29 has an invalid length.
[  198.814505][ T8156] netlink: 148 bytes leftover after parsing attributes in process `syz.2.566'.
[  198.869337][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  198.941749][ T8160] tls_set_device_offload: netdev not found
[  199.120224][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.123255][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.153975][ T8180] netlink: 'syz.5.572': attribute type 21 has an invalid length.
[  199.156207][ T8180] netlink: 128 bytes leftover after parsing attributes in process `syz.5.572'.
[  199.159836][ T8180] netlink: 'syz.5.572': attribute type 6 has an invalid length.
[  199.163880][ T8180] netlink: 3 bytes leftover after parsing attributes in process `syz.5.572'.
[  199.256835][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.579'.
[  199.265288][ T8202] efs: device does not support 512 byte blocks
[  199.267078][ T8202] device does not support 512 byte blocks
[  199.267078][ T8202] 
[  199.401450][ T8216] geneve2: entered promiscuous mode
[  199.403707][ T8216] geneve2: entered allmulticast mode
[  199.405516][ T6222] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  199.409391][ T6222] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  199.412324][ T6222] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  199.414872][ T6222] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  199.684341][ T8236] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  199.778655][ T5989] Bluetooth: hci1: unexpected event for opcode 0x2028
[  199.814510][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'.
[  199.819802][ T8246] IPv6: sit1: Disabled Multicast RS
[  199.821690][ T8246] sit1: entered allmulticast mode
[  200.200999][ T8275] pim6reg: entered allmulticast mode
[  200.203784][ T8275] pim6reg: left allmulticast mode
[  200.383441][ T8284] vlan0: entered promiscuous mode
[  200.550860][ T8309] netlink: 'syz.3.615': attribute type 2 has an invalid length.
[  200.873470][ T8332] geneve2: entered promiscuous mode
[  201.023004][ T8337] xfrm0 speed is unknown, defaulting to 1000
[  201.025540][ T8337] lo speed is unknown, defaulting to 1000
[  201.106766][ T8343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34580 sclass=netlink_tcpdiag_socket pid=8343 comm=syz.3.625
[  201.118680][ T5989] Bluetooth: hci1: unexpected event 0x07 length: 31 < 255
[  201.121008][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.121022][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.126320][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.128720][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.150626][ T8282] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  201.158833][ T5994] Bluetooth: hci1: Opcode 0x206a failed: -110
[  201.240802][ T8352] syzkaller1: entered promiscuous mode
[  201.242524][ T8352] syzkaller1: entered allmulticast mode
[  201.247709][ T8353] ------------[ cut here ]------------
[  201.249825][ T8353] WARNING: CPU: 1 PID: 8353 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0
[  201.253125][ T8353] Modules linked in:
[  201.254917][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.5.628 Not tainted syzkaller #0 PREEMPT(full) 
[  201.259568][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  201.262972][ T8353] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0
[  201.265734][ T8353] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 3f c1 7e 0e 00 75 0b c6 05 36 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  201.272828][ T8353] RSP: 0018:ffffc900055a77f0 EFLAGS: 00010246
[  201.274659][ T8353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  201.277019][ T8353] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40
[  201.279559][ T8353] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009
[  201.281967][ T8353] R10: 000000000000002a R11: 0000000000000000 R12: 0000000000040d40
[  201.284433][ T8353] R13: 1ffff92000ab4f13 R14: ffffffff9ae7fa24 R15: 000000000000002a
[  201.286981][ T8353] FS:  00007f79ba66b6c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000
[  201.290758][ T8353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.293513][ T8353] CR2: 00007f79ba66af98 CR3: 0000000012921000 CR4: 0000000000352ef0
[  201.296780][ T8353] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003
[  201.300149][ T8353] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  201.302613][ T8353] Call Trace:
[  201.303669][ T8353]  <TASK>
[  201.304595][ T8353]  ? do_syscall_64+0xcd/0x4c0
[  201.306051][ T8353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.307881][ T8353]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  201.309892][ T8353]  ? kasan_quarantine_put+0x10a/0x240
[  201.311513][ T8353]  ? lockdep_hardirqs_on+0x7c/0x110
[  201.313105][ T8353]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.314872][ T8353]  ? policy_nodemask+0xea/0x4e0
[  201.316374][ T8353]  alloc_pages_mpol+0x1fb/0x550
[  201.317849][ T8353]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  201.319497][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  201.319738][ T8353]  ? v9fs_fid_get_acl+0x7a/0x120
[  201.324866][ T8353]  ___kmalloc_large_node+0xed/0x160
[  201.326464][ T8353]  ? v9fs_fid_get_acl+0x7a/0x120
[  201.327980][ T8353]  __kmalloc_large_node_noprof+0x1c/0x70
[  201.329803][ T8353]  __kmalloc_noprof.cold+0xc/0x61
[  201.331368][ T8353]  ? __pfx_iget5_locked+0x10/0x10
[  201.333002][ T8353]  ? v9fs_cache_inode_get_cookie+0x28f/0x3a0
[  201.334831][ T8353]  v9fs_fid_get_acl+0x7a/0x120
[  201.336282][ T8353]  v9fs_get_acl+0xee/0x530
[  201.337634][ T8353]  v9fs_inode_from_fid_dotl+0x264/0x2f0
[  201.339453][ T8353]  v9fs_mount+0x4fd/0xa90
[  201.340760][ T8353]  ? __pfx_v9fs_mount+0x10/0x10
[  201.342246][ T8353]  ? cap_capable+0xb3/0x250
[  201.343712][ T8353]  ? __pfx_v9fs_mount+0x10/0x10
[  201.345171][ T8353]  legacy_get_tree+0x10c/0x220
[  201.346632][ T8353]  vfs_get_tree+0x8b/0x340
[  201.347995][ T8353]  path_mount+0x1513/0x2000
[  201.349511][ T8353]  ? __pfx_path_mount+0x10/0x10
[  201.351051][ T8353]  ? kmem_cache_free+0x2d1/0x4d0
[  201.352688][ T8353]  ? putname+0x154/0x1a0
[  201.354508][ T8353]  ? putname+0x154/0x1a0
[  201.356641][ T8353]  ? __x64_sys_mount+0x28d/0x310
[  201.358163][ T8353]  __x64_sys_mount+0x28d/0x310
[  201.359756][ T8353]  ? __pfx___x64_sys_mount+0x10/0x10
[  201.361381][ T8353]  ? fd_install+0x244/0x750
[  201.362819][ T8353]  do_syscall_64+0xcd/0x4c0
[  201.364240][ T8353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.366036][ T8353] RIP: 0033:0x7f79b978ebe9
[  201.367411][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.373635][ T8353] RSP: 002b:00007f79ba66b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  201.376289][ T8353] RAX: ffffffffffffffda RBX: 00007f79b99c6090 RCX: 00007f79b978ebe9
[  201.378795][ T8353] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  201.381220][ T8353] RBP: 00007f79b9811e19 R08: 0000200000000500 R09: 0000000000000000
[  201.383654][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.386046][ T8353] R13: 00007f79b99c6128 R14: 00007f79b99c6090 R15: 00007ffcc361a4a8
[  201.388505][ T8353]  </TASK>
[  201.389480][ T8353] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  201.391691][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.5.628 Not tainted syzkaller #0 PREEMPT(full) 
[  201.394495][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  201.397733][ T8353] Call Trace:
[  201.398807][ T8353]  <TASK>
[  201.399735][ T8353]  dump_stack_lvl+0x3d/0x1f0
[  201.401160][ T8353]  vpanic+0x6e8/0x7a0
[  201.402425][ T8353]  ? __pfx_vpanic+0x10/0x10
[  201.403898][ T8353]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  201.405765][ T8353]  panic+0xca/0xd0
[  201.406932][ T8353]  ? __pfx_panic+0x10/0x10
[  201.408334][ T8353]  check_panic_on_warn+0xab/0xb0
[  201.409881][ T8353]  __warn+0xf6/0x3c0
[  201.411086][ T8353]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  201.412940][ T8353]  report_bug+0x3c3/0x580
[  201.414257][ T8353]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  201.416065][ T8353]  handle_bug+0x184/0x210
[  201.417393][ T8353]  exc_invalid_op+0x17/0x50
[  201.418776][ T8353]  asm_exc_invalid_op+0x1a/0x20
[  201.420309][ T8353] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0
[  201.422323][ T8353] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 3f c1 7e 0e 00 75 0b c6 05 36 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  201.428039][ T8353] RSP: 0018:ffffc900055a77f0 EFLAGS: 00010246
[  201.429922][ T8353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  201.432292][ T8353] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40
[  201.434658][ T8353] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009
[  201.437032][ T8353] R10: 000000000000002a R11: 0000000000000000 R12: 0000000000040d40
[  201.439405][ T8353] R13: 1ffff92000ab4f13 R14: ffffffff9ae7fa24 R15: 000000000000002a
[  201.441723][ T8353]  ? do_syscall_64+0xcd/0x4c0
[  201.443282][ T8353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.445123][ T8353]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  201.447036][ T8353]  ? kasan_quarantine_put+0x10a/0x240
[  201.448641][ T8353]  ? lockdep_hardirqs_on+0x7c/0x110
[  201.450227][ T8353]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.452029][ T8353]  ? policy_nodemask+0xea/0x4e0
[  201.453549][ T8353]  alloc_pages_mpol+0x1fb/0x550
[  201.455052][ T8353]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  201.456677][ T8353]  ? v9fs_fid_get_acl+0x7a/0x120
[  201.458198][ T8353]  ___kmalloc_large_node+0xed/0x160
[  201.459793][ T8353]  ? v9fs_fid_get_acl+0x7a/0x120
[  201.461297][ T8353]  __kmalloc_large_node_noprof+0x1c/0x70
[  201.463054][ T8353]  __kmalloc_noprof.cold+0xc/0x61
[  201.464563][ T8353]  ? __pfx_iget5_locked+0x10/0x10
[  201.466113][ T8353]  ? v9fs_cache_inode_get_cookie+0x28f/0x3a0
[  201.467906][ T8353]  v9fs_fid_get_acl+0x7a/0x120
[  201.469390][ T8353]  v9fs_get_acl+0xee/0x530
[  201.470743][ T8353]  v9fs_inode_from_fid_dotl+0x264/0x2f0
[  201.472486][ T8353]  v9fs_mount+0x4fd/0xa90
[  201.473812][ T8353]  ? __pfx_v9fs_mount+0x10/0x10
[  201.475280][ T8353]  ? cap_capable+0xb3/0x250
[  201.476667][ T8353]  ? __pfx_v9fs_mount+0x10/0x10
[  201.478122][ T8353]  legacy_get_tree+0x10c/0x220
[  201.479622][ T8353]  vfs_get_tree+0x8b/0x340
[  201.481006][ T8353]  path_mount+0x1513/0x2000
[  201.482411][ T8353]  ? __pfx_path_mount+0x10/0x10
[  201.483919][ T8353]  ? kmem_cache_free+0x2d1/0x4d0
[  201.485428][ T8353]  ? putname+0x154/0x1a0
[  201.486715][ T8353]  ? putname+0x154/0x1a0
[  201.488009][ T8353]  ? __x64_sys_mount+0x28d/0x310
[  201.489524][ T8353]  __x64_sys_mount+0x28d/0x310
[  201.490974][ T8353]  ? __pfx___x64_sys_mount+0x10/0x10
[  201.492614][ T8353]  ? fd_install+0x244/0x750
[  201.493983][ T8353]  do_syscall_64+0xcd/0x4c0
[  201.495390][ T8353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.497147][ T8353] RIP: 0033:0x7f79b978ebe9
[  201.498513][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.504286][ T8353] RSP: 002b:00007f79ba66b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  201.506807][ T8353] RAX: ffffffffffffffda RBX: 00007f79b99c6090 RCX: 00007f79b978ebe9
[  201.509057][ T8353] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  201.511447][ T8353] RBP: 00007f79b9811e19 R08: 0000200000000500 R09: 0000000000000000
[  201.513816][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.516180][ T8353] R13: 00007f79b99c6128 R14: 00007f79b99c6090 R15: 00007ffcc361a4a8
[  201.518569][ T8353]  </TASK>
[  201.520233][ T8353] Kernel Offset: disabled
[  201.521556][ T8353] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:49:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000003 RBX=0000000000000001 RCX=1ffffffff35cc410 RDX=0000000000000004
RSI=ffffffff8c162d00 RDI=0000000000000001 RBP=0000007c7da5851c RSP=ffffc900043efab8
R8 =0000000000000001 R9 =00000000000049d3 R10=ffff88816dd42017 R11=0000000000000010
R12=0000000000000000 R13=00000000000032c9 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff8188886d RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c404916 CR3=000000000e380000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000020000000 Opmask02=00000000f8000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd96159470 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd961595f6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd961595f6 00007ffd961595fc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01c8612e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01c8612e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01c8612e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01c8612e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01c8612ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01c8612fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85646a35 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc900055a7160
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b115060 R15=ffffffff856469d0
RIP=ffffffff85646a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f79ba66b6c0 ffffffff 00c00000
GS =0000 ffff8880d67b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f79ba66af98 CR3=0000000012921000 CR4=00352ef0
DR0=000000000000000a DR1=0000000000000002 DR2=0000000000000003 DR3=0000000080000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=0000000000000001 Opmask02=00000000ffff7fdf Opmask03=0000000001041000
Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a7e42ef980 000055a7e42ef980
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a7e4298e30
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a7e429f2b0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb47fdf1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d4975a5483 737326d1cd089a59
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5d3498b25a8cb17 73737376290d31ee
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6a03af856dbb864 000055a2be57ad8f 00000000000000c1 0000000000000033
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 726f702d6f007974 00736576616c7300 306d656d702f6b63
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000002ece525d80 RCX=0000000000000000 RDX=0000002ece525d80
RSI=7fffffffffffffff RDI=0000002ece525d80 RBP=ffff88806a6285f8 RSP=ffffc90000658e98
R8 =0000000000000005 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=ffff88806a627c80 R14=dffffc0000000000 R15=7fffffffffffffff
RIP=ffffffff81bb8980 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f79ba68c6c0 ffffffff 00c00000
GS =0000 ffff8880d68b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c47df43 CR3=0000000012921000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d367d866bd652193 fc3fb1ea8459f768
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f556a153320526a df106e174294db07
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 443dfbd84985d764 1a38deedb9ca38cf
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc53dee1656a4b45 ae89b3576732d0ee
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c240
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007ccfa89d4b 007c7b699d4b8738
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007c54d60000 597a339c5d5ff575
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007c873854d6 7ac6d6a07a40221e
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007c989bb2b5 7bdc669679e510d6
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9a85e5c5f8c48e8 6619a0a11154a85a
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86c72d32aef4d1fd 31119b164325af88
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000009d6b9 RBX=0000000000000003 RCX=ffffffff8b944c29 RDX=0000000000000000
RSI=ffffffff8de522d0 RDI=ffffffff8c162d80 RBP=ffffed1003bda488 RSP=ffffc900001a7df8
R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000
R12=0000000000000003 R13=ffff88801ded2440 R14=ffffffff90ab6b90 R15=0000000000000000
RIP=ffffffff8b94378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2c5a85 CR3=0000000032b5c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556bf0605600 0000556bf0605600
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcec8f2650 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2d2d2d205d3335 333854205b5d3930 373734322e313032 20205b203a6c656e
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532362e332e7a79 733d6d6d6f632033 3433383d64697020 74656b636f735f67
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6169647063745f6b 6e696c74656e3d73 73616c6373203038 3534333d65707974
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f67736d6c6e2034 3d6c6f636f746f72 70203a6567617373 656d206b6e696c74
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e2064657a696e 676f6365726e7520 3a78756e694c4553 205d333433385420
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000