last executing test programs:

16.822122155s ago: executing program 2 (id=716):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffc, 0xfffffffb, 0x101, 0xe65, 0x0, 0x20008004}}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1b) (async)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x8481)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r3, 0x40000000, {0x2a00, 0x80010000, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x19, 0x0, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00')
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) (async)
epoll_create(0x10) (async)
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)

16.683120401s ago: executing program 2 (id=717):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000080))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000))

16.621930891s ago: executing program 2 (id=719):
r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000002240)={@val={0x8, 0xf6}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x36)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/49)

16.500630399s ago: executing program 0 (id=722):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x6, 0x4, 0xc, 0x2, 0x7bf})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async)
r2 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000100)={@default, @bcast, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x2e, 0x0, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r7 = memfd_secret(0x80000)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="28b87d3cf68cf69cb62079a857fc42ce7a4b3fe6224ffa04770750b3104beb8ca2852362"], 0x9) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)

16.431985813s ago: executing program 2 (id=723):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x10})
chdir(&(0x7f0000000080)='./file1\x00')
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
r2 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea)
r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x501000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000440)={0x8, 0x3, "64e608cd50f01e960ba475369ce8cfd9223dbfed98af75cad9e9c7ea79e0c14a367cb28ac6a3bc5dffe3975f3558b9fd9f083ec2ee0f74d9ddfb7e7de7f284e2cb8d6f4a03facf880b4f4f28abf16b3f83eac48410d3c0cf20c814e2e06188d058264278c73605218c4dc38ab22f29b3f2f3a83b5f7ae874ae36d133e9a04637862407eb867f7e34262a76eaf5d4121db02c485ea51d16bf04695276f58cf15b2dae463d81f3aedd1da964d42f31a0f28f77cc015b60dc82236223424d42d5c437878286f7cfb2b9122feab2ec25a01e2b4a0b5a88ac470c999a835a1eafaf44a64e5cabe16300979b122cf4fc2f8186302c94d2d6e1bde635a1333210d0f79c"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bda7, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2a}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4)
r7 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0600000041a2a100010300e60000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0)
setpgid(0x0, r7)

16.352003979s ago: executing program 0 (id=724):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r1], 0x84}}, 0x20008040)

16.351755586s ago: executing program 0 (id=725):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x176)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB], 0x4c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691c00000000201500000000000000000000000000000000000000000000000000000000000d000000000800", 0x0, 0x48)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @local, 0x9}], 0x1c)
read$FUSE(r6, &(0x7f0000004340)={0x2020}, 0x2020)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup(r8)
getsockname$packet(r9, 0x0, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603248095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff001b4100010001007f000700030000000400000001000010ffffffff0a000d00000000000101000000000000060000000000000007000000000000007fffffffffffffff"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x1000)

16.351401491s ago: executing program 2 (id=726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404001, 0x0)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="030002000000140000004520002800680000030690780a010100e00000014e204e25", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3161b07800087600"/20], 0x32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008"], 0x4c}, 0x1, 0x0, 0x0, 0x40884}, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$dsp(r3, &(0x7f00000000c0)=""/69, 0x45)
ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000040))

16.06294012s ago: executing program 2 (id=727):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6)
r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
exit(0x0) (async)
exit(0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0xffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x3, 0x0, 0x3}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x3, 0x0, 0x3})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000380)=0x2, 0x4)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x92, 0x4cb], 0x80}, 0x10)
write(r0, &(0x7f0000000000)="47000000010081", 0x7)

16.043732561s ago: executing program 32 (id=727):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6)
r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
exit(0x0) (async)
exit(0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0xffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x3, 0x0, 0x3}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x3, 0x0, 0x3})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000380)=0x2, 0x4)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x92, 0x4cb], 0x80}, 0x10)
write(r0, &(0x7f0000000000)="47000000010081", 0x7)

15.470083219s ago: executing program 0 (id=737):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"})
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000240)='./file0/../file0/file0\x00', 0x0)

15.221130274s ago: executing program 0 (id=738):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x890, 0x4)
socket$inet(0x2, 0x80000, 0x200)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x2004)

14.897806958s ago: executing program 0 (id=744):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)='m ', 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x26)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x26, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r2})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r6], 0x1}, 0x58)
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000000c0))

14.843785726s ago: executing program 33 (id=744):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)='m ', 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x26)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x26, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r2})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r6], 0x1}, 0x58)
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000000c0))

3.28845815s ago: executing program 4 (id=892):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x401, 0x32, 0xfffffffa, 0x7, 0x2680000, 0xff, 0x1, 0xf}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r9 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x859b}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r9, 0x0)
r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400), 0x636840, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x81, @private1, 0x322}}, 0x0, 0x0, 0x29, 0x0, "2ded6c142ffc055bb179cf78c483762e4f4fa0d90bd6251f470de70230f649276553e8725f2fcdc871f9053d4992a42a26a935586bb06034823dc7beb2411c5e66b02e0db8f82fec9eae142b0ca3a84c"}, 0xd8)
clock_gettime(0x9, &(0x7f0000000280))
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r12, 0x3ba0, &(0x7f0000000100)={0x48, 0xc, 0x0, 0x0, 0x4e2e, 0x400000800})
ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000040))

3.162395649s ago: executing program 4 (id=896):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x23bb, 0x7a, &(0x7f0000000180)=""/122, 0x1f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x3, 0x1f, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000200)=[r0], &(0x7f0000000240)=[{0x1, 0x4}, {0x3, 0x3, 0xf, 0x4}, {0x1, 0x2, 0xa, 0x1}, {0x3, 0x3, 0xc, 0x8}, {0x4, 0x5, 0x8, 0xb}, {0x5, 0x3, 0x7, 0x8}, {0x2, 0x5, 0x5, 0xc}], 0x10, 0x3}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000380)=""/199, 0xc7, 0x0, &(0x7f0000000480)=""/8, 0x8}}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000e80)=ANY=[], 0x1d8)

3.089133599s ago: executing program 4 (id=897):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000d400128009000100766c61"], 0x110}}, 0x4000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x6, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfa, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="40005200060010"], 0x24}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.812128309s ago: executing program 4 (id=905):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000500)=""/4107, 0x100b}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/250, 0xfa}], 0x9, 0x0, 0x0)

2.742780251s ago: executing program 4 (id=906):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x2004c944)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0dcb018cefe4"})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002680)="75f60520bd942f2aef", 0x9}], 0x1}}], 0x1, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

2.738935464s ago: executing program 4 (id=909):
creat(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x3000}}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x1a3)
ioctl$sock_inet_SIOCSARP(r2, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x1, @random="89a08d8ed953"}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'rose0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

1.941466408s ago: executing program 5 (id=926):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r7)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x11000, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x9, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84, 0xfe}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x80000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]})
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r14 = accept4(r13, 0x0, 0x0, 0x80800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f00000001c0)) (async)
setsockopt$sock_int(r14, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async)
sendmmsg$alg(r14, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffd12}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23"}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7"}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af"}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5"}, {&(0x7f00000017c0)="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"}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800)
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4)

1.081795401s ago: executing program 5 (id=937):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00')
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)

1.075000119s ago: executing program 5 (id=938):
symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') (async)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) (async)
io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0)

1.002787758s ago: executing program 3 (id=939):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002800)={0x0, <r1=>0x0}, &(0x7f0000002840)=0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10)
r3 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={<r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r6, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2)
close_range(r6, r0, 0x2)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
r8 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000100)=0x21)
r9 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f00000000c0)=0x32)
r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c61796261636b20536e2f74"], 0xa8)
close(r10)
setresuid(r1, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x0, 0x32, 0x0, 0x1}, 0x28)
r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0)
ioctl$CDROMREADAUDIO(r11, 0x5392, &(0x7f0000000280)={@msf={0x4, 0xd5, 0x7f}, 0x0, 0x0, 0x0})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18000, &(0x7f0000000000)=ANY=[@ANYBLOB="9b1a6c4d3e4a2313b4015f", @ANYRES8=r4, @ANYBLOB=',dont_hash,audit,\x00'])
ioctl$CDROM_NEXT_WRITABLE(r11, 0x5394, &(0x7f0000000400))
getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@delqdisc={0x88, 0x25, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0xd}, {0xfff2, 0xb}, {0x3, 0xfff3}}, [@TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x17}, @qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xc}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xece4}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xe}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20040040)

1.002411504s ago: executing program 5 (id=940):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x20, 0x40eb8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
r7 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0)
mq_notify(r7, &(0x7f0000000300)={0x0, 0x1b, 0x1})
mq_notify(r7, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008d804dd00000000000001090224"], 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(r8)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x6c, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xb36}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0x8}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r8, 0x4004550d, 0x0)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setns(r9, 0x2000000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r9}, 0x8)

462.474548ms ago: executing program 1 (id=945):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0b000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000600)={"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"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0), 0x0, 0x0, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r3, 0x8b1a, &(0x7f0000000040))
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)
modify_ldt$write2(0x11, &(0x7f00000002c0)={0x7ff, 0x20001000, 0x400, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00', 0x8})
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f00000001c0)={"04557797b4ea8f7cdb6d82d3", 0x0, 0x0, 0x81, &(0x7f0000000140)={0x53, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "1ce0af32", 0x40, "121d47a7", 0x2, 0xf, 0xbd, "14af44", "99a89236b30d9652080d5a112aeb1626e81c98c16fb5732d34f23b3fb6cd837a9e155225f1e86bed30f2911aea1d"}, 0x1, 0x7, 0x3, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)

253.059017ms ago: executing program 1 (id=946):
r0 = inotify_init()
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
readv(r1, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@fwd={0xf}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x56, 0x6}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @union={0x9, 0x8, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x5}, {0x5, 0x1, 0xabc5}, {0x6, 0x1, 0x1c}, {0x8, 0x0, 0x8}, {0x2, 0x2, 0x3}, {0xf, 0x4, 0xff}, {0xf, 0x5, 0x62}, {0x10, 0x3, 0x4}]}, @var={0x4, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000200), 0xcb, 0x0, 0x1, 0x1}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x87000000, 0x0, r2, 0x6, '\x00', 0x0, r3, 0x1, 0x1, 0x3}, 0x50)

252.146241ms ago: executing program 5 (id=947):
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x14e40, 0x101)
dup(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r2}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

251.895963ms ago: executing program 1 (id=948):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac'])
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000001c0)={"04557797b4ea8f7cdb6d82d3", 0x0, 0x0, 0x81, &(0x7f0000000140)={0x53, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "1ce0af32", 0x40, "121d47a7", 0x2, 0xf, 0xbd, "14af44", "99a89236b30d9652080d5a112aeb1626e81c98c16fb5732d34f23b3fb6cd837a9e155225f1e86bed30f2911aea1d"}, 0x1, 0x7, 0x3, 0x0})
openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) (async)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000001c0)={"04557797b4ea8f7cdb6d82d3", 0x0, 0x0, 0x81, &(0x7f0000000140)={0x53, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "1ce0af32", 0x40, "121d47a7", 0x2, 0xf, 0xbd, "14af44", "99a89236b30d9652080d5a112aeb1626e81c98c16fb5732d34f23b3fb6cd837a9e155225f1e86bed30f2911aea1d"}, 0x1, 0x7, 0x3, 0x0}) (async)

251.660563ms ago: executing program 5 (id=949):
r0 = socket$inet6(0x2d, 0x2, 0xfeffffff)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}}, 0x7, 0x32a, 0x2, 0x8, 0x80, 0x85b8, 0x3}, 0x9c)

152.797813ms ago: executing program 3 (id=950):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r1=>0x0})
r2 = socket(0x10, 0x803, 0x0)
getpeername$unix(r2, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x23, 0x6, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', <r9=>0x0})
lseek(0xffffffffffffffff, 0x1, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x1)
mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

152.487662ms ago: executing program 1 (id=951):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0001040000000000200012800800010067747000140002800500050000000000080007000a010102"], 0x40}}, 0x50) (async)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1ac2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece)
read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000030000000d000000000000110400000000000000000000000000000200000000020000000004e11202000000006100"], 0x0, 0x43}, 0x28) (async)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) (async)
r7 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc1f9fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb010000000008000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "900800004000005243d41ec185fddc40000000000000009900", [0x1, 0x5]}})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000450, &(0x7f0000000200)=ANY=[@ANYBLOB="e3d7def7dc085dcf657bcabdadce440a4d6c718850c3ad4372921c6173401127aef4971a5e97a07c993ed38a37d60f6f289bae7753ac4253c4e875d64a62918f4dbb795a4ac3c1e66d686bf2304ea669f7deb32166bc6b67511fb024966926", @ANYRES16, @ANYRES16=r0, @ANYRESDEC=0x0])
chdir(&(0x7f0000000280)='./file0\x00') (async)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x4, 0x0)
r9 = gettid()
syz_open_procfs(r9, &(0x7f0000000000)='attr/keycreate\x00')

73.127898ms ago: executing program 1 (id=952):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0)
landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

72.902192ms ago: executing program 3 (id=953):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x98002, 0x0) (async)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x98002, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0)
recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/21, 0x15, 0x0, &(0x7f0000000040)={0x23, 0x5, 0x3, 0x98}, 0x10)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)

1.194618ms ago: executing program 3 (id=954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x40048c5}, 0x4000044)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000080), 0x8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r8 = fcntl$dupfd(r7, 0x0, r7)
write$sndseq(r8, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0xb92a}, {0x6, 0xfd}, {0x0, 0x8}, @control={0x7, 0x9fa, 0x7}}], 0x38) (async, rerun: 32)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x5, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80)

744.786µs ago: executing program 3 (id=955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x20)
r2 = socket(0x1, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x24, 0x0, 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20)
r4 = dup(r1)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x58e7ad0b2b8f820c}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040081}, 0xc004)

484.789µs ago: executing program 1 (id=956):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x84084)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x24040890)
ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000001c0))
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000002300)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r13], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

0s ago: executing program 3 (id=957):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x80, 0x3, 0xf2}]}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xeb, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9e2c3c5f89"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5e2086fb91"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "709496017ba7820cf80691d066"}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_SSID={0x15, 0x34, @random="cef0a3ba1bd6aadca74382bf752cb9d982"}]}, 0x78}, 0x1, 0x0, 0x0, 0x200c0001}, 0x40000)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) (async)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$TCFLSH(r8, 0x400455c8, 0x2) (async)
ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf256400000008000300", @ANYRES32=r9, @ANYBLOB="0cc5b5a463c62f7141a8b1b8e7dd009910060000002200000061a430d01c66edccf17bbc346b3e4ce3356302fd154e7ce44224199f2477c3557df8b893037c045c48ec20dc3c386e437d03de0e3a5608e30eda59200a6cbd7fa863fd648313a6c711ee6ce8a3e67d226a"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000104) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x29, 0x6, @thr={&(0x7f0000000000)="70ed5293b226b02271f9bf4ddef6059961d4811547f31c82fa93ec6567f939dbd907c348a69ef7eb4c78261be0ca8afdc35f542762c2913af4bd", &(0x7f0000000100)="f9ad78baeda1ac4a96a64f206e7d3c410fbddad1caac844588082cd683cdca5ac92cdaac96274b603187cbae8e19adae3a9ca610037bf0ae5ad0ddafd28e04136e8bcafbc3512671cc779e1027dc135ea9d467dccfeb76a334a667f8df3de029bbdfadecc4a84411f3122f4a2035c67939f401c0ed8443b97a697f3b81643066cbbf164ff3adb957ee3b19ec42"}}, &(0x7f0000000080)) (async)
ioctl$sock_ifreq(r10, 0x8938, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_names='veth1\x00'})

kernel console output (not intermixed with test programs):

:  denied  { read append } for  pid=6208 comm="syz.3.49" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   56.180458][   T40] audit: type=1400 audit(1757429781.071:254): avc:  denied  { open } for  pid=6208 comm="syz.3.49" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   56.234600][   T40] audit: type=1400 audit(1757429781.121:255): avc:  denied  { ioctl } for  pid=6208 comm="syz.3.49" path="socket:[9708]" dev="sockfs" ino=9708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.287679][   T60] usb 6-1: device descriptor read/64, error -71
[   56.297710][   T40] audit: type=1326 audit(1757429781.191:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.3.49" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00aeb8ebe9 code=0x0
[   56.362578][   T40] audit: type=1400 audit(1757429781.251:257): avc:  denied  { setopt } for  pid=6208 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   56.397983][   T60] usb usb6-port1: attempt power cycle
[   56.735806][   T60] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   56.758815][   T60] usb 6-1: device descriptor read/8, error -71
[   56.923930][   T40] audit: type=1400 audit(1757429781.811:258): avc:  denied  { setopt } for  pid=6215 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.925008][ T6216] Zero length message leads to an empty skb
[   56.988531][   T40] audit: type=1400 audit(1757429781.881:259): avc:  denied  { mount } for  pid=6219 comm="syz.0.51" name="/" dev="autofs" ino=11320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   56.996161][   T60] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   56.997907][ T6209] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   57.001511][ T6209] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   57.007554][ T6209] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   57.012473][   T40] audit: type=1400 audit(1757429781.901:260): avc:  denied  { wake_alarm } for  pid=6219 comm="syz.0.51" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.022072][   T40] audit: type=1400 audit(1757429781.911:261): avc:  denied  { mounton } for  pid=6219 comm="syz.0.51" path="/11/file1" dev="autofs" ino=11320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[   57.026349][   T60] usb 6-1: device descriptor read/8, error -71
[   57.033507][ T6209] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   57.035422][ T6209] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   57.042932][ T6209] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   57.057080][ T6209] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   57.058749][   T40] audit: type=1400 audit(1757429781.951:262): avc:  denied  { connect } for  pid=6222 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.060136][ T6209] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   57.069137][ T6209] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   57.074691][ T6209] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   57.077628][ T6209] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   57.083400][ T6209] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   57.136281][   T60] usb usb6-port1: unable to enumerate USB device
[   57.136600][ T6225] macvtap1: entered allmulticast mode
[   57.140938][ T6225] veth0_macvtap: entered allmulticast mode
[   57.154847][ T6227] afs: Unknown parameter 'autocel'
[   57.257791][ T6236] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   57.260469][ T6236] macvtap1: entered allmulticast mode
[   57.262193][ T6236] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   57.265526][ T6236] batman_adv: batadv0: Adding interface: macvtap1
[   57.267900][ T6236] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.276528][ T6236] batman_adv: batadv0: Interface activated: macvtap1
[   57.490011][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.497952][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.635867][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   57.785816][ T4241] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   57.935784][ T4241] usb 5-1: Using ep0 maxpacket: 32
[   57.941570][ T4241] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   57.951749][ T4241] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[   57.954852][ T6276] SELinux: failed to load policy
[   57.955177][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.959934][ T4241] usb 5-1: Product: syz
[   57.961620][ T4241] usb 5-1: Manufacturer: syz
[   57.963609][ T4241] usb 5-1: SerialNumber: syz
[   57.969332][ T4241] usb 5-1: config 0 descriptor??
[   57.976130][ T4241] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[   57.991412][ T6279] qnx4: no qnx4 filesystem (no root dir).
[   58.187653][ T4241] usb 5-1: USB disconnect, device number 2
[   58.519667][ T6292] tipc: Started in network mode
[   58.521914][ T6292] tipc: Node identity 9aa2813608a1, cluster identity 4711
[   58.525046][ T6292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.530828][ T6291] tipc: Disabling bearer <eth:syzkaller0>
[   58.740691][ T6303] PKCS7: Unknown OID: [4] 5.25.43183(bad)
[   58.742634][ T6303] PKCS7: Only support pkcs7_signedData type
[   58.792867][ T6308] ieee802154 phy0 wpan0: encryption failed: -22
[   58.826937][  T837] cfg80211: failed to load regulatory.db
[   58.908492][ T6323] syzkaller1: entered promiscuous mode
[   58.910501][ T6323] syzkaller1: entered allmulticast mode
[   58.961223][ T6330] netlink: 'syz.0.88': attribute type 39 has an invalid length.
[   58.971888][ T6325] netlink: 'syz.2.87': attribute type 4 has an invalid length.
[   58.993598][ T6325] netlink: 'syz.2.87': attribute type 4 has an invalid length.
[   59.006483][   T63] Bluetooth: hci0: command 0x0419 tx timeout
[   59.038028][ T6338] netlink: 'syz.1.89': attribute type 10 has an invalid length.
[   59.049343][ T6338] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   59.061978][ T6342] binder: 6340:6342 ioctl c0306201 200000000080 returned -14
[   59.087099][   T63] Bluetooth: hci3: command 0x0419 tx timeout
[   59.087171][ T5977] Bluetooth: hci2: command 0x0419 tx timeout
[   59.089653][   T63] Bluetooth: hci1: command 0x0419 tx timeout
[   59.198435][ T6356] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.219749][ T6357] tmpfs: Invalid gid '0x00000000ffffffff'
[   59.546660][ T6388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6388 comm=syz.3.107
[   59.613436][ T6400] __nla_validate_parse: 10 callbacks suppressed
[   59.613447][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.107'.
[   59.617919][ T6401] netlink: 'syz.2.111': attribute type 13 has an invalid length.
[   59.628895][ T6395] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   59.632740][ T6400] bpf: Bad value for 'uid'
[   59.644518][ T6401] gretap0: refused to change device tx_queue_len
[   59.647390][ T6401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   59.662204][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'.
[   59.681969][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   59.685279][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   59.890012][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'.
[   60.020784][ T6434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6434 comm=syz.2.123
[   60.367851][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   60.367872][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   60.487162][ T6462] tls_set_device_offload: netdev not found
[   60.489493][ T6462] netlink: 'syz.2.130': attribute type 12 has an invalid length.
[   60.493041][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[   60.496260][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'.
[   60.561099][ T6462] hsr_slave_1 (unregistering): left promiscuous mode
[   61.085741][   T63] Bluetooth: hci0: command 0x0419 tx timeout
[   61.089501][ T6500] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   61.092060][ T6500] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   61.165759][   T63] Bluetooth: hci3: command 0x0419 tx timeout
[   61.165790][ T5977] Bluetooth: hci2: command 0x0419 tx timeout
[   61.177161][ T5977] Bluetooth: hci1: command 0x0419 tx timeout
[   61.179947][ T6500] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   61.182753][ T6500] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   61.245177][   T40] kauditd_printk_skb: 97 callbacks suppressed
[   61.245193][   T40] audit: type=1400 audit(1757429786.131:360): avc:  denied  { create } for  pid=6520 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   61.256865][   T40] audit: type=1400 audit(1757429786.141:361): avc:  denied  { ioctl } for  pid=6520 comm="syz.3.145" path="socket:[11244]" dev="sockfs" ino=11244 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   61.291449][   T40] audit: type=1400 audit(1757429786.181:362): avc:  denied  { create } for  pid=6524 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   61.294780][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.320836][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.324267][ T6525] 9pnet: Could not find request transport: vuntinfo
[   61.328464][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.332093][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.335392][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.339215][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.343099][ T6528] netlink: 'syz.3.146': attribute type 12 has an invalid length.
[   61.440388][ T6539] binder: 6538:6539 ioctl c018620b 0 returned -14
[   61.483322][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'.
[   61.535231][ T6549] warning: `syz.3.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.535356][   T40] audit: type=1400 audit(1757429786.421:363): avc:  denied  { ioctl } for  pid=6548 comm="syz.3.151" path="socket:[12062]" dev="sockfs" ino=12062 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   61.581065][   T40] audit: type=1400 audit(1757429786.471:364): avc:  denied  { mount } for  pid=6552 comm="syz.3.152" name="/" dev="hugetlbfs" ino=10045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   61.595715][   T40] audit: type=1400 audit(1757429786.481:365): avc:  denied  { unmount } for  pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   61.667989][   T40] audit: type=1400 audit(1757429786.561:366): avc:  denied  { create } for  pid=6558 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   61.677827][   T40] audit: type=1400 audit(1757429786.571:367): avc:  denied  { read } for  pid=6558 comm="syz.2.154" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   61.694306][   T40] audit: type=1400 audit(1757429786.571:368): avc:  denied  { open } for  pid=6558 comm="syz.2.154" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   61.738237][ T6579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.795699][   T40] audit: type=1400 audit(1757429786.681:369): avc:  denied  { write } for  pid=6585 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   61.796244][ T6586] trusted_key: encrypted_key: keylen parameter is missing
[   61.804902][ T6500] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   61.815298][ T6500] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   61.820347][ T6500] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   61.822232][ T6500] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   62.175752][  T838] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   62.286520][   T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   62.327151][  T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.331471][  T838] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   62.338651][  T838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.342251][  T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.345381][  T838] usb 6-1: Product: syz
[   62.347667][  T838] usb 6-1: Manufacturer: syz
[   62.349507][  T838] usb 6-1: SerialNumber: syz
[   62.356653][  T838] cdc_mbim 6-1:1.0: skipping garbage
[   62.435711][   T60] usb 8-1: Using ep0 maxpacket: 8
[   62.439233][   T60] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[   62.442737][   T60] usb 8-1: config 179 has no interface number 0
[   62.445417][   T60] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   62.450146][   T60] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   62.454787][   T60] usb 8-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.459247][   T60] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   62.464735][   T60] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   62.468592][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.472824][ T6621] PKCS7: Unknown OID: [4] 5.25.43183(bad)
[   62.475018][ T6601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   62.475364][ T6621] PKCS7: Only support pkcs7_signedData type
[   62.523042][ T6625] dvmrp1: entered allmulticast mode
[   62.555467][ T6599] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   62.559859][ T6629] process 'syz.0.172' launched '/dev/fd/3' with NULL argv: empty string added
[   62.598366][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.600888][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.603290][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.605612][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.609151][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.611498][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.613860][    T9] hid-generic 0003:0005:0004.0002: unknown main item tag 0x0
[   62.620547][    T9] hid-generic 0003:0005:0004.0002: hidraw1: USB HID v3.6f Device [syz0] on syz0
[   62.679902][    T9] usb 8-1: USB disconnect, device number 2
[   62.682249][ T6601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.761006][  T838] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[   62.763762][  T838] cdc_mbim 6-1:1.0: bind() failure
[   62.770314][  T838] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   62.773093][  T838] cdc_ncm 6-1:1.1: bind() failure
[   63.785086][ T6649] loop7: detected capacity change from 0 to 7
[   63.790661][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.794331][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.797256][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.800366][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.803569][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.806628][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.809474][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.813278][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.816986][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.820709][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.823972][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.827338][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.827761][ T6003] usb 6-1: USB disconnect, device number 6
[   63.831752][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.835227][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.838341][ T5965] ldm_validate_partition_table(): Disk read failed.
[   63.841707][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.845016][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.847830][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.850786][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.856530][ T6653] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   63.857750][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.859775][ T6653] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   63.863165][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   63.866746][ T6653] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   63.898997][ T6654] macvtap2: entered allmulticast mode
[   63.901450][ T6654] batman_adv: batadv0: Adding interface: macvtap2
[   63.903647][ T6654] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.912632][ T6654] batman_adv: batadv0: Interface activated: macvtap2
[   63.913986][ T5965] Dev loop7: unable to read RDB block 0
[   63.918257][ T5965]  loop7: unable to read partition table
[   63.920840][ T5965] loop7: partition table beyond EOD, truncated
[   63.928094][ T6649] ldm_validate_partition_table(): Disk read failed.
[   63.930702][ T6649] Dev loop7: unable to read RDB block 0
[   63.933550][ T6649]  loop7: unable to read partition table
[   63.936233][ T6649] loop7: partition table beyond EOD, truncated
[   63.938951][ T6649] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   63.982693][ T6660] bond0: (slave wlan1): Opening slave failed
[   64.225812][  T837] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   64.395950][  T837] usb 7-1: Using ep0 maxpacket: 8
[   64.399769][  T837] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[   64.403046][  T837] usb 7-1: config 179 has no interface number 0
[   64.404970][  T837] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   64.411877][  T837] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   64.416642][  T837] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   64.421189][  T837] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   64.425226][  T837] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   64.430610][  T837] usb 7-1: config 179 interface 65 has no altsetting 0
[   64.433650][  T837] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   64.438140][  T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.461598][  T837] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input6
[   64.530156][ T6687] program syz.0.189 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   64.533275][ T6687] ata1.00: non-matching transfer count (808464432/0)
[   64.654243][   T59] usb 7-1: USB disconnect, device number 2
[   64.654372][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   64.693585][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.700444][ T6699] validate_nla: 60 callbacks suppressed
[   64.700454][ T6699] netlink: 'syz.3.192': attribute type 3 has an invalid length.
[   64.704546][ T6699] netlink: 'syz.3.192': attribute type 1 has an invalid length.
[   64.919868][ T6715] __nla_validate_parse: 10 callbacks suppressed
[   64.919885][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'.
[   65.041803][ T6722] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   65.102908][ T6723] NILFS (loop3): device size too small
[   65.516465][ T6733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.202'.
[   65.549116][ T6737] syz.3.204 uses obsolete (PF_INET,SOCK_PACKET)
[   65.624269][ T6750] deleting an unspecified loop device is not supported.
[   65.698840][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.209'.
[   65.723244][ T6760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6760 comm=syz.1.210
[   65.757977][ T6770] loop2: detected capacity change from 0 to 7
[   65.762630][ T5965] Dev loop2: unable to read RDB block 7
[   65.764690][ T5965]  loop2: AHDI p1 p2 p3
[   65.767680][ T5965] loop2: partition table partially beyond EOD, truncated
[   65.771253][ T5965] loop2: p1 start 1601398130 is beyond EOD, truncated
[   65.773443][ T5965] loop2: p2 start 1702059890 is beyond EOD, truncated
[   65.786923][ T6770] Dev loop2: unable to read RDB block 7
[   65.793916][ T6770]  loop2: AHDI p1 p2 p3
[   65.795969][ T6770] loop2: partition table partially beyond EOD, truncated
[   65.798538][ T6770] loop2: p1 start 1601398130 is beyond EOD, truncated
[   65.800656][ T6770] loop2: p2 start 1702059890 is beyond EOD, truncated
[   65.867664][ T6776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.964449][ T6787] /dev/nullb0: Can't open blockdev
[   65.968476][ T6787] lo: entered allmulticast mode
[   66.055150][ T6792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.219'.
[   66.059288][ T6792] unsupported nlmsg_type 40
[   66.065397][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -14
[   66.088364][ T6797] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[   66.195556][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[   66.196221][   T59] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   66.200330][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.245098][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.282453][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'.
[   66.286198][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.227'.
[   66.291325][ T6818] tipc: Started in network mode
[   66.293422][ T6818] tipc: Node identity deed108591da, cluster identity 4711
[   66.297561][ T6818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.345715][   T59] usb 6-1: device descriptor read/64, error -71
[   66.374996][ T6822] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   66.381721][ T6822] netlink: 'syz.0.229': attribute type 10 has an invalid length.
[   66.384147][ T6822] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[   66.573554][ T4241] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   66.586191][   T59] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   66.715791][   T59] usb 6-1: device descriptor read/64, error -71
[   66.727655][ T4241] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   66.731953][ T4241] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   66.736794][ T4241] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   66.742135][ T4241] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   66.746114][ T4241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.760889][ T4241] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   66.765162][ T4241] usb 8-1: invalid MIDI out EP 0
[   66.829215][ T4241] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22
[   66.836148][   T59] usb usb6-port1: attempt power cycle
[   66.959056][  T838] usb 8-1: USB disconnect, device number 3
[   67.185727][   T59] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   67.206509][   T59] usb 6-1: device descriptor read/8, error -71
[   67.298814][  T837] tipc: Node number set to 1329008773
[   67.307374][   T40] kauditd_printk_skb: 51 callbacks suppressed
[   67.307384][   T40] audit: type=1400 audit(1757429792.201:421): avc:  denied  { getopt } for  pid=6846 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   67.455884][   T59] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   67.489236][   T59] usb 6-1: device descriptor read/8, error -71
[   67.495587][ T6854] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.238'.
[   67.514822][ T6854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   67.519129][ T6854] block device autoloading is deprecated and will be removed.
[   67.563744][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'.
[   67.596344][   T59] usb usb6-port1: unable to enumerate USB device
[   67.744228][ T6863] input: syz0 as /devices/virtual/input/input8
[   67.750539][   T40] audit: type=1400 audit(1757429792.641:422): avc:  denied  { ioctl } for  pid=5363 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2910 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   67.762636][ T6863] macvtap2: entered allmulticast mode
[   67.764420][ T6863] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   67.768258][ T6863] batman_adv: batadv0: Adding interface: macvtap2
[   67.770246][ T6863] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.778829][ T6863] batman_adv: batadv0: Interface activated: macvtap2
[   68.113347][ T6873] trusted_key: encrypted_key: insufficient parameters specified
[   68.270303][   T40] audit: type=1400 audit(1757429793.161:423): avc:  denied  { append } for  pid=6881 comm="syz.0.247" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   68.297043][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[   68.348459][   T40] audit: type=1400 audit(1757429793.241:424): avc:  denied  { relabelfrom } for  pid=6888 comm="syz.0.249" name="" dev="pipefs" ino=16413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   68.362911][   T40] audit: type=1400 audit(1757429793.251:425): avc:  denied  { execute } for  pid=6886 comm="syz.3.248" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   68.370077][ T6887] netlink: 'syz.3.248': attribute type 2 has an invalid length.
[   68.472355][   T40] audit: type=1400 audit(1757429793.361:426): avc:  denied  { append } for  pid=6897 comm="syz.3.253" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   68.514910][ T6902] netlink: 'syz.3.254': attribute type 10 has an invalid length.
[   68.520732][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.525214][ T6902] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   68.590486][   T40] audit: type=1326 audit(1757429793.481:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.3.255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00aeb8ebe9 code=0x0
[   68.675808][  T838] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   68.845927][  T838] usb 5-1: Using ep0 maxpacket: 8
[   68.850737][  T838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   68.854928][  T838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   68.859064][  T838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 3
[   68.863296][  T838] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   68.869269][  T838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   68.873082][  T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.877325][ T6909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.892841][ T1151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.896497][ T1151] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.899884][ T1151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.903585][ T1151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.961592][   T40] audit: type=1400 audit(1757429793.851:428): avc:  denied  { ioctl } for  pid=6912 comm="syz.1.258" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   69.004584][ T6918] ptm ptm0: ldisc open failed (-12), clearing slot 0
[   69.048928][   T40] audit: type=1400 audit(1757429793.941:429): avc:  denied  { append } for  pid=6920 comm="syz.1.260" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   69.081129][  T838] usb 5-1: GET_CAPABILITIES returned 0
[   69.083596][  T838] usbtmc 5-1:16.0: can't read capabilities
[   69.106149][ T6922] program syz.1.260 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.358275][  T838] usb 5-1: USB disconnect, device number 3
[   69.451576][ T6927] block nbd2: Attempted send on invalid socket
[   69.453760][ T6927] blk_print_req_error: 25 callbacks suppressed
[   69.453770][ T6927] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.460654][ T6927] block nbd2: Attempted send on invalid socket
[   69.463130][ T6927] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.501888][ T6929] overlayfs: failed to resolve 'verity=require': -2
[   69.538445][   T40] audit: type=1400 audit(1757429794.431:430): avc:  denied  { ioctl } for  pid=6930 comm="syz.2.264" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   69.655939][  T838] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   69.690784][   T53] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[   69.693317][   T53] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[   69.696457][   T53] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[   69.700428][   T53] hid-generic 0000:0004:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   69.799701][ T6939] mmap: syz.2.267 (6939) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   69.808329][  T838] usb 8-1: Using ep0 maxpacket: 16
[   69.812699][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.818138][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.822701][  T838] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   69.828003][  T838] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   69.831194][  T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.836772][  T838] usb 8-1: config 0 descriptor??
[   69.952042][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   70.043938][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'.
[   70.248960][  T838] usbhid 8-1:0.0: can't add hid device: -71
[   70.251070][  T838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   70.270245][  T838] usb 8-1: USB disconnect, device number 4
[   70.296461][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[   71.028853][ T6980] block nbd0: Attempted send on invalid socket
[   71.030928][ T6980] I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   71.033951][ T6980] qnx4: unable to read the superblock
[   71.142500][ T6986] netlink: 'syz.0.284': attribute type 4 has an invalid length.
[   71.179063][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.181145][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.190421][ T6993] IPVS: Unknown mcast interface: pimreg
[   71.267951][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'.
[   71.406020][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'.
[   71.414415][ T7011] bridge0: entered promiscuous mode
[   71.425030][ T7011] bridge0: port 3(macvlan2) entered blocking state
[   71.427234][ T7011] bridge0: port 3(macvlan2) entered disabled state
[   71.429289][ T7011] macvlan2: entered allmulticast mode
[   71.431268][ T7011] bridge0: entered allmulticast mode
[   71.436417][ T7011] macvlan2: left allmulticast mode
[   71.445749][ T7011] bridge0: left allmulticast mode
[   71.448175][ T7011] bridge0: left promiscuous mode
[   71.664396][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.296'.
[   71.735256][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[   72.059110][ T7005] syz.0.288 (7005): drop_caches: 2
[   72.121441][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'.
[   72.131217][ T7032] netlink: 'syz.0.299': attribute type 178 has an invalid length.
[   72.232373][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   72.237156][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   72.346655][   T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   72.361562][   T40] kauditd_printk_skb: 16 callbacks suppressed
[   72.361573][   T40] audit: type=1400 audit(1757429797.251:447): avc:  denied  { write } for  pid=7043 comm="syz.0.304" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.370555][   T40] audit: type=1400 audit(1757429797.251:448): avc:  denied  { open } for  pid=7043 comm="syz.0.304" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.373863][ T7044] netlink: 'syz.0.304': attribute type 2 has an invalid length.
[   72.378246][   T40] audit: type=1400 audit(1757429797.251:449): avc:  denied  { read } for  pid=7043 comm="syz.0.304" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.381354][ T7044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.495951][   T53] usb 8-1: Using ep0 maxpacket: 8
[   72.500268][   T53] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[   72.503148][   T53] usb 8-1: config 179 has no interface number 0
[   72.505353][   T53] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   72.509612][   T53] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   72.513353][   T53] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[   72.520892][   T53] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26223, setting to 1024
[   72.524640][   T53] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   72.525864][   T40] audit: type=1400 audit(1757429797.411:450): avc:  denied  { create } for  pid=7053 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   72.529237][   T53] usb 8-1: config 179 interface 65 has no altsetting 0
[   72.537555][   T53] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   72.540629][   T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.545353][ T7030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   72.556139][   T53] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input9
[   72.558734][ T7052] nbd0: detected capacity change from 0 to 127
[   72.565474][ T5977] block nbd0: Receive control failed (result -32)
[   72.568468][ T6069] block nbd0: Send control failed (result -32)
[   72.570575][ T6069] block nbd0: Request send failed, requeueing
[   72.581030][ T6069] block nbd0: Dead connection, failed to find a fallback
[   72.583301][ T6069] block nbd0: shutting down sockets
[   72.585139][   T67] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.588168][   T67] buffer_io_error: 25 callbacks suppressed
[   72.588175][   T67] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.589374][ T6069] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.595551][ T6069] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.603505][ T6069] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.606635][   T40] audit: type=1400 audit(1757429797.491:451): avc:  denied  { write } for  pid=7056 comm="syz.2.310" laddr=fe80::b lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   72.611982][ T5363] input input9: unable to receive magic message: -110
[   72.613711][ T6069] Buffer I/O error on dev nbd0, logical block 2, async page read
[   72.613806][ T6069] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.613819][ T6069] Buffer I/O error on dev nbd0, logical block 3, async page read
[   72.613888][ T6069] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.613900][ T6069] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.613958][ T6069] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.633952][ T6069] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.638038][ T6069] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.641189][ T6069] Buffer I/O error on dev nbd0, logical block 2, async page read
[   72.643754][ T6069] Buffer I/O error on dev nbd0, logical block 3, async page read
[   72.644445][ T5363] input input9: unable to receive magic message: -32
[   72.650690][ T6069] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.653333][ T6069] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.653757][ T5363] input input9: unable to receive magic message: -32
[   72.657641][ T6069] ldm_validate_partition_table(): Disk read failed.
[   72.661600][ T6069] Dev nbd0: unable to read RDB block 0
[   72.665096][ T6069]  nbd0: unable to read partition table
[   72.673018][ T6069] ldm_validate_partition_table(): Disk read failed.
[   72.677358][ T5363] input input9: unable to receive magic message: -32
[   72.679991][ T6069] Dev nbd0: unable to read RDB block 0
[   72.682615][ T6069]  nbd0: unable to read partition table
[   72.685359][ T5363] input input9: unable to receive magic message: -32
[   72.708384][   T40] audit: type=1400 audit(1757429797.601:452): avc:  denied  { mounton } for  pid=7067 comm="syz.1.314" path="/53/file0/bus" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[   72.708599][ T7068] overlay: filesystem on ./file0 not supported
[   72.729747][   T40] audit: type=1400 audit(1757429797.621:453): avc:  denied  { unmount } for  pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   72.750051][ T7030] input input9: unable to receive magic message: -32
[   72.754712][ T7030] SELinux:  policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c
[   72.758091][ T7030] SELinux: failed to load policy
[   72.761972][ T7072] batman_adv: batadv0: Adding interface: gretap1
[   72.764161][ T7072] batman_adv: batadv0: Interface activated: gretap1
[   72.787449][ T7030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7030 comm=syz.3.298
[   72.827706][ T7084] tmpfs: Bad value for 'mpol'
[   72.930448][  T837] usb 8-1: USB disconnect, device number 5
[   72.932368][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   72.958566][   T40] audit: type=1326 audit(1757429797.851:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.0.316" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0056b8ebe9 code=0x0
[   73.096981][ T7085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7085 comm=syz.0.316
[   73.115771][ T2293] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   73.267617][ T2293] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   73.270897][ T2293] usb 6-1: config 0 interface 0 has no altsetting 0
[   73.274946][ T2293] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   73.277908][ T2293] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   73.280473][ T2293] usb 6-1: Product: syz
[   73.281966][ T2293] usb 6-1: Manufacturer: syz
[   73.283725][ T2293] usb 6-1: SerialNumber: syz
[   73.286745][ T2293] usb 6-1: config 0 descriptor??
[   73.291469][ T2293] usb 6-1: selecting invalid altsetting 0
[   73.490627][ T6018] usb 6-1: USB disconnect, device number 11
[   73.656158][   T40] audit: type=1400 audit(1757429798.551:455): avc:  denied  { connect } for  pid=7106 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.709646][ T7116] netlink: 'syz.0.329': attribute type 21 has an invalid length.
[   73.712345][ T7116] netlink: 'syz.0.329': attribute type 6 has an invalid length.
[   73.719398][   T40] audit: type=1400 audit(1757429798.611:456): avc:  denied  { mounton } for  pid=7113 comm="syz.0.329" path="/file0" dev="ramfs" ino=15965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   73.719510][ T7116] overlay: Unknown parameter 'fsname'
[   73.744153][ T7116] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   73.748170][ T7116] overlayfs: failed to set xattr on upper
[   73.749592][ T7112] SELinux: failed to load policy
[   73.749911][ T7116] overlayfs: ...falling back to redirect_dir=nofollow.
[   73.754101][ T7116] overlayfs: ...falling back to index=off.
[   73.757275][ T7116] overlayfs: ...falling back to uuid=null.
[   73.759130][ T7116] overlayfs: conflicting lowerdir path
[   73.827459][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.926101][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.936456][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.945460][ T7143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.987063][ T7120] veth0_macvtap: left allmulticast mode
[   73.990970][ T7120] batman_adv: batadv0: Interface deactivated: macvtap2
[   73.993422][ T7120] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   73.999179][ T1151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.004547][ T1151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.008612][ T1151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.012098][ T1151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.355790][  T838] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   74.508581][  T838] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   74.514555][  T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   74.522713][  T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   74.530598][  T838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   74.545805][  T838] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   74.550192][  T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.558299][  T838] usb 7-1: config 0 descriptor??
[   74.742197][ T7174] loop2: detected capacity change from 0 to 7
[   74.746614][ T7174] Dev loop2: unable to read RDB block 7
[   74.748393][ T7174]  loop2: AHDI p1 p2 p3
[   74.749705][ T7174] loop2: partition table partially beyond EOD, truncated
[   74.751996][ T7174] loop2: p1 start 1601398130 is beyond EOD, truncated
[   74.754078][ T7174] loop2: p2 start 1702059890 is beyond EOD, truncated
[   74.806479][ T5378] Dev loop2: unable to read RDB block 7
[   74.809246][ T5378]  loop2: AHDI p1 p2 p3
[   74.811357][ T5378] loop2: partition table partially beyond EOD, truncated
[   74.815557][ T5378] loop2: p1 start 1601398130 is beyond EOD, truncated
[   74.819164][ T5378] loop2: p2 start 1702059890 is beyond EOD, truncated
[   74.970531][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.973808][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.977075][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.979422][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.981706][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.984285][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.987771][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.990860][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.990879][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   74.990891][  T838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   75.011573][  T838] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   75.062104][ T7193] netlink: 'syz.0.351': attribute type 10 has an invalid length.
[   75.064577][ T7193] __nla_validate_parse: 7 callbacks suppressed
[   75.064586][ T7193] netlink: 2 bytes leftover after parsing attributes in process `syz.0.351'.
[   75.069544][ T7193] team0: entered promiscuous mode
[   75.071098][ T7193] team_slave_0: entered promiscuous mode
[   75.072911][ T7193] team_slave_1: entered promiscuous mode
[   75.074912][ T7193] bridge0: port 3(team0) entered blocking state
[   75.077668][ T7193] bridge0: port 3(team0) entered disabled state
[   75.080184][ T7193] team0: entered allmulticast mode
[   75.081860][ T7193] team_slave_0: entered allmulticast mode
[   75.083646][ T7193] team_slave_1: entered allmulticast mode
[   75.139510][ T7202] SELinux:  Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped).
[   75.172306][ T7206] netlink: 45 bytes leftover after parsing attributes in process `syz.3.355'.
[   75.231459][ T7155] qnx4: no qnx4 filesystem (no root dir).
[   75.241030][   T59] usb 7-1: USB disconnect, device number 3
[   75.305842][ T7213] tipc: Started in network mode
[   75.307985][ T7213] tipc: Node identity 2, cluster identity 4711
[   75.310564][ T7213] tipc: Node number set to 2
[   75.372774][ T7221] fuse: Unknown parameter 'r���:�uL�R��ode'
[   75.636014][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[   75.640287][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'.
[   75.763772][ T7238] mkiss: ax0: crc mode is auto.
[   75.903026][ T7249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7249 comm=syz.2.370
[   75.908498][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'.
[   75.928447][ T7249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7249 comm=syz.2.370
[   75.941016][ T7249] vlan2: entered allmulticast mode
[   75.943207][ T7249] bond2: entered allmulticast mode
[   76.065128][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'.
[   76.115576][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'.
[   76.118427][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407
[   76.119429][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'.
[   76.123100][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07
[   76.125449][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'.
[   76.125465][ T7271] netlink: 50 bytes leftover after parsing attributes in process `syz.3.378'.
[   76.228911][ T7279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7279 comm=syz.0.381
[   76.228933][ T7280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7280 comm=syz.0.381
[   76.415203][ T7295] CUSE: unknown device info "�<�5����<Z�j5������9�$�+��r�(�0X�8"
[   76.418641][ T7295] CUSE: unknown device info "eQ���mŀ%���P;T������38R�2߫Jg���$�O��k�J�;fA��v#ܗ�5��i�R/Ab?`W4���w�F��odADxa�*��"
[   76.424013][ T7295] CUSE: unknown device info "��dP�"
[   76.426464][ T7295] CUSE: unknown device info "O{S�n`�����W�A{����F4Q���>�\���
�z��0z,~XY�+A}s��F'%���:�Ij!�@�Q��mߑR��GQ��q6*�5p)�x�?,"
[   76.432114][ T7295] CUSE: unknown device info "��&b��%Z��W��)��3\my�	��"
[   76.435137][ T7295] CUSE: unknown device info "ҭS��������mM��i�_��0˱�ݯ;q�]�{�i��79�{�0Ե�t��~��>V����Z�\�.9��OC����U�&�q����msf�k��c��""
[   76.441090][ T7295] CUSE: DEVNAME unspecified
[   76.479396][ T7298] ./bus: Can't lookup blockdev
[   76.529134][ T7258] kvm_intel: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf
[   76.547369][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf
[   76.550310][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae
[   76.567790][ T7303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   76.568717][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b
[   76.578777][ T7303] Context (ID=0x4d4) not attached to queue pair (handle=0x4d5:0x0)
[   76.587150][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a
[   76.590124][ T7258] kvm: kvm [7257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a
[   76.756078][  T838] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   76.797105][ T7307] /dev/sr0: Can't open blockdev
[   76.897377][  T838] usb 8-1: device descriptor read/64, error -71
[   76.948262][ T7323] openvswitch: netlink: Unknown key attributes 2
[   77.145995][  T838] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   77.217779][ T7332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.221998][ T7332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.275776][  T838] usb 8-1: device descriptor read/64, error -71
[   77.314412][ T7332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.317781][ T7332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.385879][   T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   77.388613][  T838] usb usb8-port1: attempt power cycle
[   77.401805][ T7332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.404758][ T7332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.471497][ T7332] bond0: (slave netdevsim0): Releasing backup interface
[   77.477408][ T7332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.481407][ T7332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.535753][   T53] usb 7-1: Using ep0 maxpacket: 16
[   77.538631][   T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.542069][   T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.545088][   T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   77.549044][   T53] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   77.551773][   T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.553431][   T68] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.556117][   T53] usb 7-1: config 0 descriptor??
[   77.557110][   T68] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.566928][ T1142] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.569640][ T1142] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.577551][ T1142] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.580163][ T1142] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.586938][ T1142] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.589893][ T1142] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.671312][ T7345] overlayfs: failed to resolve './bus': -2
[   77.676738][ T7347] binfmt_misc: register: failed to install interpreter file ./file1
[   77.725878][  T838] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   77.732114][ T7351] input: syz1 as /devices/virtual/input/input11
[   77.746306][  T838] usb 8-1: device descriptor read/8, error -71
[   77.766939][   T53] input: HID 0955:7214 Haptics as /devices/virtual/input/input12
[   77.789366][   T53] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[   77.791949][   T53] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[   77.880933][ T7361] IPv6: NLM_F_REPLACE set, but no existing node found!
[   77.925003][ T7363] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   77.935213][   T40] kauditd_printk_skb: 40 callbacks suppressed
[   77.935225][   T40] audit: type=1400 audit(1757429802.821:497): avc:  denied  { name_bind } for  pid=7362 comm="syz.1.406" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   77.987135][  T838] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   78.006321][  T838] usb 8-1: device descriptor read/8, error -71
[   78.059256][ T7327] netlink: 'syz.2.397': attribute type 2 has an invalid length.
[   78.063481][ T7353] netlink: 'syz.2.397': attribute type 2 has an invalid length.
[   78.125716][  T838] usb usb8-port1: unable to enumerate USB device
[   78.250358][ T7377] ntfs3(sr0): Primary boot signature is not NTFS.
[   78.253152][ T7377] ntfs3(sr0): try to read out of volume at offset 0xf800
[   78.504760][ T7390] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   78.570358][   T40] audit: type=1400 audit(1757429803.461:498): avc:  denied  { create } for  pid=7396 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   78.578471][   T40] audit: type=1400 audit(1757429803.461:499): avc:  denied  { setopt } for  pid=7396 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   78.797512][ T6003] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[   78.803126][ T6003] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   78.806940][ T6003] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   78.815841][  T837] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   78.885418][ T7412] program syz.1.421 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.893093][ T7412] ipvlan1: entered allmulticast mode
[   78.895035][ T7412] veth0_vlan: entered allmulticast mode
[   78.897994][   T40] audit: type=1326 audit(1757429803.791:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.1.421" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14ab98ebe9 code=0x0
[   78.926207][ T6050] usb 7-1: reset high-speed USB device number 4 using dummy_hcd
[   78.945763][  T837] usb 8-1: device descriptor read/64, error -71
[   79.001988][ T7413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7413 comm=syz.1.421
[   79.057333][ T6050] usb 7-1: device descriptor read/64, error -32
[   79.185719][  T837] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   79.295734][ T6050] usb 7-1: reset high-speed USB device number 4 using dummy_hcd
[   79.315729][  T837] usb 8-1: device descriptor read/64, error -71
[   79.425702][ T6050] usb 7-1: device descriptor read/64, error -32
[   79.427946][  T837] usb usb8-port1: attempt power cycle
[   79.569815][   T40] audit: type=1400 audit(1757429804.461:501): avc:  denied  { name_bind } for  pid=7414 comm="syz.3.422" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   79.673805][ T6050] usb 7-1: reset high-speed USB device number 4 using dummy_hcd
[   79.697903][ T6050] usb 7-1: device descriptor read/8, error -32
[   79.810325][   T40] audit: type=1400 audit(1757429804.701:502): avc:  denied  { nlmsg_write } for  pid=7421 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   79.854131][ T7427] syz_tun: entered allmulticast mode
[   79.899022][ T7426] syz_tun: left allmulticast mode
[   79.980361][ T7438] Illegal XDP return value 4294967274 on prog  (id 124) dev syz_tun, expect packet loss!
[   80.048738][   T40] audit: type=1400 audit(1757429804.931:503): avc:  denied  { create } for  pid=7436 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   80.065716][   T40] audit: type=1400 audit(1757429804.951:504): avc:  denied  { override_creds } for  pid=7439 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   80.133733][ T7451] __nla_validate_parse: 9 callbacks suppressed
[   80.133748][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'.
[   80.208752][ T7410] hub 8-0:1.0: USB hub found
[   80.215905][ T7410] hub 8-0:1.0: 1 port detected
[   80.488064][ T7470] overlayfs: workdir and upperdir must be separate subtrees
[   80.609654][ T6003] usb 7-1: USB disconnect, device number 4
[   80.877239][ T7485] netlink: 'syz.3.444': attribute type 15 has an invalid length.
[   80.886400][ T7485] hfsplus: unable to find HFS+ superblock
[   80.968950][   T40] audit: type=1400 audit(1757429805.861:505): avc:  denied  { append } for  pid=7500 comm="syz.2.447" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   81.103028][ T7508] openvswitch: netlink: Key type 527 is out of range max 32
[   81.231872][ T7524] xfrm1: entered allmulticast mode
[   81.325714][   T40] audit: type=1400 audit(1757429806.211:506): avc:  denied  { ioctl } for  pid=7536 comm="syz.2.456" path="socket:[20883]" dev="sockfs" ino=20883 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   81.815102][ T7570] blk_print_req_error: 141 callbacks suppressed
[   81.815114][ T7570] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.821710][ T7570] buffer_io_error: 138 callbacks suppressed
[   81.821718][ T7570] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.827508][ T7570] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.830312][ T7570] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.832837][ T7570] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.837213][ T7570] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.840540][ T7570] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.843475][ T7570] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.846328][ T7570] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.849162][ T7570] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.851627][ T7570] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.854555][ T7570] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.857493][ T7570] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.860345][ T7570] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.862817][ T7570] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.865903][ T7570] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.868440][ T7570] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.868507][ T7577] random: crng reseeded on system resumption
[   81.871260][ T7570] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.871345][ T7570] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.879785][ T7570] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.884432][ T7570] ldm_validate_partition_table(): Disk read failed.
[   81.886855][ T7577] netlink: 'syz.0.464': attribute type 1 has an invalid length.
[   81.888332][ T7570] Dev nbd0: unable to read RDB block 0
[   81.890054][ T7577] NCSI netlink: No device for ifindex 0
[   81.893487][ T7570]  nbd0: unable to read partition table
[   82.292901][ T7616] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   82.448038][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'.
[   82.548647][ T7632] =======================================================
[   82.548647][ T7632] WARNING: The mand mount option has been deprecated and
[   82.548647][ T7632]          and is ignored by this kernel. Remove the mand
[   82.548647][ T7632]          option from the mount to silence this warning.
[   82.548647][ T7632] =======================================================
[   82.662347][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[   82.746930][ T7647] ldm_validate_partition_table(): Disk read failed.
[   82.749956][ T7647] Dev nbd0: unable to read RDB block 0
[   82.752626][ T7647]  nbd0: unable to read partition table
[   82.771333][ T5378] ldm_validate_partition_table(): Disk read failed.
[   82.774923][ T5378] Dev nbd0: unable to read RDB block 0
[   82.777800][ T5378]  nbd0: unable to read partition table
[   82.783486][ T5378] ldm_validate_partition_table(): Disk read failed.
[   82.789699][ T5378] Dev nbd0: unable to read RDB block 0
[   82.792480][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'.
[   82.792796][ T5378]  nbd0: unable to read partition table
[   82.850317][ T5965] ldm_validate_partition_table(): Disk read failed.
[   82.856313][ T5965] Dev nbd0: unable to read RDB block 0
[   82.860407][ T5965]  nbd0: unable to read partition table
[   82.877312][ T5965] ldm_validate_partition_table(): Disk read failed.
[   82.880384][ T5965] Dev nbd0: unable to read RDB block 0
[   82.883085][ T5965]  nbd0: unable to read partition table
[   82.956897][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.493'.
[   82.958901][ T7685] tipc: Failed to remove unknown binding: 66,1,1/0:1747579053/1747579055
[   82.989236][   T40] kauditd_printk_skb: 17 callbacks suppressed
[   82.989251][   T40] audit: type=1400 audit(1757429807.881:524): avc:  denied  { ioctl } for  pid=7688 comm="syz.2.494" path="socket:[21079]" dev="sockfs" ino=21079 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   83.109377][ T7700] syzkaller0: entered promiscuous mode
[   83.111211][ T7700] syzkaller0: entered allmulticast mode
[   83.150152][ T7696] 9pnet_fd: Insufficient options for proto=fd
[   83.165324][ T7705] capability: warning: `syz.1.499' uses 32-bit capabilities (legacy support in use)
[   83.169133][ T7696] overlayfs: workdir and upperdir must be separate subtrees
[   83.220633][ T7711] ./cgroup: Can't lookup blockdev
[   83.221468][   T40] audit: type=1400 audit(1757429808.111:525): avc:  denied  { mounton } for  pid=7710 comm="syz.2.501" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   83.296344][   T40] audit: type=1400 audit(1757429808.181:526): avc:  denied  { read write } for  pid=7723 comm="syz.2.503" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   83.297313][ T7725] loop6: detected capacity change from 0 to 524287999
[   83.303787][   T40] audit: type=1400 audit(1757429808.191:527): avc:  denied  { open } for  pid=7723 comm="syz.2.503" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   83.464636][ T7707] cgroup: fork rejected by pids controller in /syz1
[   84.323031][ T7869] fuse: Unknown parameter '0x0000000000000003'
[   84.342536][ T7745] bridge_slave_0: left allmulticast mode
[   84.344774][ T7745] bridge_slave_0: left promiscuous mode
[   84.347889][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.357746][ T7745] bridge_slave_1: left allmulticast mode
[   84.360010][ T7745] bridge_slave_1: left promiscuous mode
[   84.362513][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.365391][   T40] audit: type=1400 audit(1757429809.251:528): avc:  denied  { mounton } for  pid=7873 comm="syz.1.509" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   84.375431][ T7745] bond0: (slave bond_slave_0): Releasing backup interface
[   84.384907][ T7745] bond0: (slave bond_slave_1): Releasing backup interface
[   84.394537][ T7745] team0: Port device team_slave_0 removed
[   84.399876][ T7745] team0: Port device team_slave_1 removed
[   84.401998][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.404388][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.408998][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.411143][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.417385][ T7745] batman_adv: batadv0: Interface deactivated: macvtap1
[   84.419387][ T7745] batman_adv: batadv0: Removing interface: macvtap1
[   84.422295][ T7745] batman_adv: batadv0: Interface deactivated: macvtap2
[   84.424433][ T7745] batman_adv: batadv0: Removing interface: macvtap2
[   84.429033][ T7787] team0: Mode changed to "activebackup"
[   84.430990][ T7861] netlink: 'syz.3.507': attribute type 4 has an invalid length.
[   84.446372][ T7788] team0: Unable to change to the same mode the team is in
[   84.495820][   T40] audit: type=1400 audit(1757429809.381:529): avc:  denied  { associate } for  pid=7888 comm="syz.2.513" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   84.509015][   T40] audit: type=1400 audit(1757429809.381:530): avc:  denied  { read write } for  pid=7888 comm="syz.2.513" name="file0" dev="9p" ino=35913923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.519118][   T40] audit: type=1400 audit(1757429809.381:531): avc:  denied  { open } for  pid=7888 comm="syz.2.513" path="/120/file0/file0" dev="9p" ino=35913923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.528883][   T40] audit: type=1804 audit(1757429809.411:532): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.513" name="/newroot/120/file0/file0" dev="9p" ino=35913923 res=1 errno=0
[   84.538564][   T40] audit: type=1400 audit(1757429809.411:533): avc:  denied  { map } for  pid=7888 comm="syz.2.513" path="/120/file0/file0" dev="9p" ino=35913923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.578453][ T7904] IPv6: NLM_F_CREATE should be specified when creating new route
[   84.633184][ T7913] evm: overlay not supported
[   84.675393][ T7918] netlink: 'syz.1.521': attribute type 39 has an invalid length.
[   84.733356][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'.
[   84.735281][ T7927] syzkaller0: entered promiscuous mode
[   84.739220][ T7927] syzkaller0: entered allmulticast mode
[   84.774244][ T7932] qnx6: unable to read the first superblock
[   84.776861][ T7932] qnx6: unable to read the first superblock
[   84.779063][ T7932] qnx6: unable to read the first superblock
[   84.894105][ T7958] program syz.2.534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.910654][ T7958] mkiss: ax0: crc mode is auto.
[   84.940008][ T7962] ldm_validate_partition_table(): Disk read failed.
[   84.943084][ T7962] Dev nbd0: unable to read RDB block 0
[   84.945971][ T7962]  nbd0: unable to read partition table
[   85.082963][ T7974] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   85.086911][ T7974] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   85.125863][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'.
[   85.128570][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'.
[   85.886733][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.986547][ T8008] trusted_key: encrypted_key: keyword 'new0default' not recognized
[   86.011965][ T8007] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   86.015830][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.017745][ T8011] binder: 8010:8011 ioctl c0306201 200000000080 returned -14
[   86.064833][ T8007] mkiss: ax0: crc mode is auto.
[   86.160463][ T8019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.556'.
[   86.166279][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.170918][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.218596][ T8026] netlink: 'syz.3.558': attribute type 1 has an invalid length.
[   86.224201][ T8026] netlink: 212 bytes leftover after parsing attributes in process `syz.3.558'.
[   86.228281][ T8026] netlink: 'syz.3.558': attribute type 1 has an invalid length.
[   86.232930][ T8017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.555'.
[   86.255037][ T8029] fuseblk: Bad value for 'fd'
[   86.259343][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.267732][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.559'.
[   86.270700][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'.
[   86.364885][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[   86.645751][   T59] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[   86.775754][   T59] usb 6-1: device descriptor read/64, error -71
[   86.895118][ T8065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.569'.
[   86.982247][ T2293] IPVS: starting estimator thread 0...
[   86.985167][ T8073] tipc: Enabled bearer <udp:s>, priority 10
[   87.015708][   T59] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[   87.032441][ T8076] /dev/nullb0: Can't open blockdev
[   87.089077][ T8074] IPVS: using max 44 ests per chain, 105600 per kthread
[   87.103098][ T8082] netlink: 'syz.0.576': attribute type 39 has an invalid length.
[   87.156643][   T59] usb 6-1: device descriptor read/64, error -71
[   87.180490][ T8086] SELinux:  Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped).
[   87.204857][ T8086] lo speed is unknown, defaulting to 1000
[   87.209195][ T8086] lo speed is unknown, defaulting to 1000
[   87.215140][ T8086] lo speed is unknown, defaulting to 1000
[   87.220721][ T8086] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   87.227890][ T8086] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   87.246412][ T8086] lo speed is unknown, defaulting to 1000
[   87.250767][ T8086] lo speed is unknown, defaulting to 1000
[   87.254033][ T8086] lo speed is unknown, defaulting to 1000
[   87.257459][ T8086] lo speed is unknown, defaulting to 1000
[   87.266826][   T59] usb usb6-port1: attempt power cycle
[   87.307250][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'.
[   87.339953][ T8094] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.420702][ T8096] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   87.583397][ T8101] netlink: 'syz.0.583': attribute type 5 has an invalid length.
[   87.605913][   T59] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[   87.626202][   T59] usb 6-1: device descriptor read/8, error -71
[   87.876596][   T59] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[   87.896132][   T59] usb 6-1: device descriptor read/8, error -71
[   88.016516][   T59] usb usb6-port1: unable to enumerate USB device
[   88.076483][ T8119] binder: Bad value for 'max'
[   88.734485][ T8161] netlink: 'syz.0.604': attribute type 10 has an invalid length.
[   88.743101][   T40] kauditd_printk_skb: 26 callbacks suppressed
[   88.743116][   T40] audit: type=1400 audit(1757429813.631:560): avc:  denied  { relabelfrom } for  pid=8160 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.753574][   T40] audit: type=1400 audit(1757429813.631:561): avc:  denied  { relabelto } for  pid=8160 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.919418][   T40] audit: type=1400 audit(1757429813.811:562): avc:  denied  { write } for  pid=8167 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   88.975886][   T10] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[   89.041585][ T8175] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   89.102583][ T8175] netlink: 60 bytes leftover after parsing attributes in process `syz.0.609'.
[   89.108447][ T8175] /dev/nullb0: Can't open blockdev
[   89.137436][   T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   89.141420][   T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.147255][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   89.150575][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.225781][   T40] audit: type=1400 audit(1757429814.111:563): avc:  denied  { lock } for  pid=8177 comm="syz.0.610" path="socket:[21933]" dev="sockfs" ino=21933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.294113][ T8184] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[   89.359935][ T8188] netlink: 52 bytes leftover after parsing attributes in process `syz.0.615'.
[   89.362864][   T10] usb 8-1: usb_control_msg returned -32
[   89.364595][   T10] usbtmc 8-1:16.0: can't read capabilities
[   89.372969][   T10] usb 8-1: USB disconnect, device number 13
[   89.452058][ T8196] loop4: detected capacity change from 0 to 2560
[   89.455264][ T8196] buffer_io_error: 458 callbacks suppressed
[   89.455279][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.462540][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.465940][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.468757][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.472114][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.476274][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.479529][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.482761][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.486197][ T8196] ldm_validate_partition_table(): Disk read failed.
[   89.488859][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.492192][ T8196] Buffer I/O error on dev loop4, logical block 0, async page read
[   89.495602][ T8196] Dev loop4: unable to read RDB block 0
[   89.498351][ T8196]  loop4: unable to read partition table
[   89.501619][ T8196] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[   89.508179][ T8200] /dev/nullb0: Can't open blockdev
[   89.553404][   T40] audit: type=1400 audit(1757429814.441:564): avc:  denied  { ioctl } for  pid=8195 comm="syz.0.619" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   89.589716][ T8204] overlayfs: workdir and upperdir must reside under the same mount
[   89.738109][ T8222] netlink: 'syz.0.624': attribute type 8 has an invalid length.
[   89.854454][ T8232] trusted_key: encrypted_key: insufficient parameters specified
[   89.860446][ T8232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8232 comm=syz.1.625
[   89.911862][   T40] audit: type=1400 audit(1757429814.801:565): avc:  denied  { read } for  pid=8235 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   89.971297][   T40] audit: type=1400 audit(1757429814.861:566): avc:  denied  { read } for  pid=8235 comm="syz.3.629" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   89.977959][   T40] audit: type=1400 audit(1757429814.861:567): avc:  denied  { open } for  pid=8235 comm="syz.3.629" path="/163/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   89.984778][   T40] audit: type=1400 audit(1757429814.861:568): avc:  denied  { ioctl } for  pid=8235 comm="syz.3.629" path="/163/file0/file0" dev="fuse" ino=3 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   90.049289][ T8242] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   90.092297][ T8247] netlink: 'syz.3.632': attribute type 1 has an invalid length.
[   90.117451][ T8247] xfs: Unknown parameter 'usrquota
'
[   90.142972][   T40] audit: type=1400 audit(1757429815.031:569): avc:  denied  { write } for  pid=8252 comm="syz.3.634" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   90.416159][ T6050] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[   90.565704][ T6050] usb 8-1: Using ep0 maxpacket: 8
[   90.569975][ T6050] usb 8-1: config 255 has an invalid interface number: 236 but max is 2
[   90.573301][ T6050] usb 8-1: config 255 contains an unexpected descriptor of type 0x2, skipping
[   90.577067][ T6050] usb 8-1: config 255 has an invalid interface number: 193 but max is 2
[   90.580255][ T6050] usb 8-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config
[   90.584274][ T6050] usb 8-1: config 255 has 2 interfaces, different from the descriptor's value: 3
[   90.587887][ T6050] usb 8-1: config 255 has no interface number 0
[   90.590445][ T6050] usb 8-1: config 255 has no interface number 1
[   90.593511][ T6050] usb 8-1: config 255 interface 236 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[   90.597424][ T6050] usb 8-1: config 255 interface 236 altsetting 6 endpoint 0xA has invalid maxpacket 80, setting to 64
[   90.601732][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has an endpoint descriptor with address 0x1C, changing to 0xC
[   90.607097][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[   90.611389][ T6050] usb 8-1: config 255 interface 236 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   90.616293][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   90.620752][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[   90.625175][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[   90.629974][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[   90.634534][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[   90.640901][ T6050] usb 8-1: config 255 interface 236 altsetting 6 endpoint 0x8 has invalid maxpacket 26373, setting to 64
[   90.645459][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   90.651615][ T6050] usb 8-1: config 255 interface 236 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64
[   90.656487][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[   90.660794][ T6050] usb 8-1: config 255 interface 236 altsetting 6 has 17 endpoint descriptors, different from the interface descriptor's value: 16
[   90.667395][ T6050] usb 8-1: config 255 interface 193 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[   90.672796][ T6050] usb 8-1: config 255 interface 236 has no altsetting 0
[   90.675476][ T6050] usb 8-1: config 255 interface 193 has no altsetting 0
[   90.680073][ T6050] usb 8-1: New USB device found, idVendor=19d2, idProduct=0023, bcdDevice=c2.84
[   90.683477][ T6050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.686925][ T6050] usb 8-1: Product: syz
[   90.688394][ T8273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49923 sclass=netlink_route_socket pid=8273 comm=syz.1.637
[   90.688594][ T6050] usb 8-1: Manufacturer: ࠌ
[   90.688608][ T6050] usb 8-1: SerialNumber: syz
[   90.693056][ T8253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   90.694021][ T8270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49923 sclass=netlink_route_socket pid=8270 comm=syz.1.637
[   90.810004][ T8282] binder: 8281:8282 ioctl c0306201 200000000080 returned -14
[   90.849144][ T8288] fuse: blksize only supported for fuseblk
[   90.926725][ T6050] option 8-1:255.236: GSM modem (1-port) converter detected
[   90.935363][ T6050] usb 8-1: USB disconnect, device number 14
[   90.950020][ T6050] option 8-1:255.236: device disconnected
[   91.052626][ T8314] lo speed is unknown, defaulting to 1000
[   91.116215][ T8322] 9pnet_fd: p9_fd_create_unix (8322): problem connecting socket: �q�Y�3aK: -91
[   91.121121][ T8323] 9pnet_fd: p9_fd_create_unix (8323): problem connecting socket: �q�Y�3aK: -91
[   91.725189][ T8353] __nla_validate_parse: 5 callbacks suppressed
[   91.725205][ T8353] netlink: 68 bytes leftover after parsing attributes in process `syz.2.655'.
[   92.010905][ T8377] overlayfs: workdir and upperdir must be separate subtrees
[   92.024800][ T8380] snd_dummy snd_dummy.0: control 0:3:128:syz0:-2 is already present
[   92.052209][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'.
[   92.058075][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'.
[   92.098894][   T10] libceph: connect (1)[c::]:6789 error -101
[   92.101726][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   92.104855][   T10] libceph: connect (1)[c::]:6789 error -101
[   92.107318][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   92.155095][ T8394] ceph: No mds server is up or the cluster is laggy
[   92.357557][ T8423] kvm: pic: non byte read
[   92.360115][ T8423] kvm: pic: level sensitive irq not supported
[   92.360371][ T8423] kvm: pic: non byte read
[   92.364631][ T8423] kvm: pic: level sensitive irq not supported
[   92.364910][ T8423] kvm: pic: non byte read
[   92.371566][ T8423] kvm: pic: non byte read
[   92.374866][ T8423] kvm: pic: non byte read
[   92.377655][ T8423] kvm: pic: non byte read
[   92.380240][ T8423] kvm: pic: single mode not supported
[   92.380249][ T8423] kvm: pic: level sensitive irq not supported
[   92.382926][ T8423] kvm: pic: non byte read
[   92.385930][ T8426] macvlan2: entered promiscuous mode
[   92.388040][ T8423] kvm: pic: non byte read
[   92.388232][ T8426] macvlan2: entered allmulticast mode
[   92.390929][ T8423] kvm: pic: non byte read
[   92.391598][ T8426] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   92.539678][ T8431] usb usb8: usbfs: process 8431 (syz.0.676) did not claim interface 0 before use
[   92.543328][ T8429] tmpfs: Unknown parameter 'mp��ol'
[   92.612684][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'.
[   92.620438][ T8443] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[   92.622869][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.681'.
[   92.811362][ T8472] can0: slcan on ttyprintk.
[   92.832066][ T8474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'.
[   92.835022][ T8474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'.
[   92.877660][ T8457] can0 (unregistered): slcan off ttyprintk.
[   93.189464][ T8522] overlayfs: failed to resolve './file1': -2
[   93.196280][   T59] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   93.326011][   T59] usb 6-1: device descriptor read/64, error -71
[   93.403297][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'.
[   93.576020][   T59] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   93.709871][ T8590] syzkaller1: entered promiscuous mode
[   93.711685][ T8590] syzkaller1: entered allmulticast mode
[   93.717723][   T59] usb 6-1: device descriptor read/64, error -71
[   93.790925][ T8594] netlink: 'syz.0.721': attribute type 13 has an invalid length.
[   93.825831][   T10] hid_parser_main: 5 callbacks suppressed
[   93.825843][   T10] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   93.830926][   T10] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   93.833379][   T10] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0
[   93.836959][   T59] usb usb6-port1: attempt power cycle
[   93.843411][   T10] hid-generic 0003:0004:0000.0006: hidraw1: USB HID v0.00 Device [syz0] on syz1
[   93.900192][ T8603] trusted_key: syz.2.723 sent an empty control message without MSG_MORE.
[   93.958415][ T8606] netlink: 100 bytes leftover after parsing attributes in process `syz.0.724'.
[   94.195892][   T59] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[   94.216689][   T59] usb 6-1: device descriptor read/8, error -71
[   94.298510][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.306537][   T40] kauditd_printk_skb: 15 callbacks suppressed
[   94.306547][   T40] audit: type=1400 audit(1757429819.201:585): avc:  denied  { execute } for  pid=8613 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   94.317477][   T40] audit: type=1400 audit(1757429819.201:586): avc:  denied  { execute_no_trans } for  pid=8613 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   94.383867][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.419536][   T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.423578][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.428653][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.432376][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.435969][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.441087][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.462341][ T8618] lo speed is unknown, defaulting to 1000
[   94.465870][   T59] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[   94.487118][   T59] usb 6-1: device descriptor read/8, error -71
[   94.532571][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.566717][ T8618] chnl_net:caif_netlink_parms(): no params data found
[   94.598835][   T59] usb usb6-port1: unable to enumerate USB device
[   94.668095][ T8641] netlink: 112 bytes leftover after parsing attributes in process `syz.3.734'.
[   94.672124][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.674969][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.677569][ T8618] bridge_slave_0: entered allmulticast mode
[   94.680282][ T8618] bridge_slave_0: entered promiscuous mode
[   94.683423][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.686178][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.688606][ T8618] bridge_slave_1: entered allmulticast mode
[   94.691636][ T8618] bridge_slave_1: entered promiscuous mode
[   94.728450][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   94.741327][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   94.759261][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   94.760121][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.768743][ T8647] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   94.775139][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.027397][ T1142] bond0 (unregistering): Released all slaves
[   95.037847][ T1142] bond1 (unregistering): Released all slaves
[   95.044614][ T1142] bond2 (unregistering): Released all slaves
[   95.074415][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   95.128075][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   95.130526][ T8618] team0: Port device team_slave_0 added
[   95.134420][ T1142] tipc: Left network mode
[   95.136172][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   95.138754][ T8618] team0: Port device team_slave_1 added
[   95.141479][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   95.161085][ T8647] xfrm0 speed is unknown, defaulting to 1000
[   95.236132][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.238792][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.249954][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.258595][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.261417][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.272408][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.278033][ T8664] �������[SR��W: renamed from lo
[   95.324033][ T1142] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[   95.328052][ T8668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8668 comm=syz.3.742
[   95.332182][ T8668] netlink: 'syz.3.742': attribute type 10 has an invalid length.
[   95.362802][ T8668] team0: entered promiscuous mode
[   95.364359][ T8668] team_slave_0: entered promiscuous mode
[   95.366462][ T8668] team_slave_1: entered promiscuous mode
[   95.368786][ T8668] 8021q: adding VLAN 0 to HW filter on device team0
[   95.370875][ T8668] bridge0: port 3(team0) entered blocking state
[   95.372899][ T8668] bridge0: port 3(team0) entered disabled state
[   95.374891][ T8668] team0: entered allmulticast mode
[   95.376700][ T8668] team_slave_0: entered allmulticast mode
[   95.378483][ T8668] team_slave_1: entered allmulticast mode
[   95.408487][   T40] audit: type=1400 audit(1757429820.301:587): avc:  denied  { map } for  pid=8672 comm="syz.3.743" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   95.440324][ T8618] hsr_slave_0: entered promiscuous mode
[   95.442553][ T8618] hsr_slave_1: entered promiscuous mode
[   95.444592][ T8618] debugfs: 'hsr0' already exists in 'hsr'
[   95.446446][ T8618] Cannot create hsr debugfs directory
[   95.477175][   T40] audit: type=1400 audit(1757429820.371:588): avc:  denied  { create } for  pid=8672 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   95.509937][   T40] audit: type=1400 audit(1757429820.401:589): avc:  denied  { listen } for  pid=8672 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   95.517841][   T40] audit: type=1400 audit(1757429820.401:590): avc:  denied  { accept } for  pid=8672 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   95.525555][ T1142] hsr_slave_0: left promiscuous mode
[   95.553375][ T1142] veth1_macvtap: left promiscuous mode
[   95.556345][ T1142] veth0_macvtap: left promiscuous mode
[   95.559092][ T1142] veth1_vlan: left promiscuous mode
[   95.561366][ T1142] veth0_vlan: left promiscuous mode
[   95.628308][   T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.637723][   T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.649516][   T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.666659][   T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.669200][   T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.142990][   T40] audit: type=1400 audit(1757429821.031:591): avc:  denied  { getopt } for  pid=8686 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.457371][ T5977] Bluetooth: hci2: command tx timeout
[   96.753405][ T8696] __nla_validate_parse: 2 callbacks suppressed
[   96.753435][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.750'.
[   96.760501][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.750'.
[   96.854765][ T8679] �������[SR��W speed is unknown, defaulting to 1000
[   96.873923][ T8679] xfrm0 speed is unknown, defaulting to 1000
[   96.921266][ T8709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8709 comm=syz.3.753
[   97.040673][   T40] audit: type=1400 audit(1757429821.931:592): avc:  denied  { setattr } for  pid=8716 comm="syz.3.755" path="socket:[24343]" dev="sockfs" ino=24343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   97.040875][ T8718] team0: left allmulticast mode
[   97.052311][ T8718] team_slave_0: left allmulticast mode
[   97.054162][ T8718] team_slave_1: left allmulticast mode
[   97.057764][ T8718] bridge0: port 3(team0) entered disabled state
[   97.062539][ T8718] bond0: (slave batadv0): Releasing backup interface
[   97.065537][ T8718] bridge_slave_0: left allmulticast mode
[   97.067895][ T8718] bridge_slave_0: left promiscuous mode
[   97.069776][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.073075][ T8718] bridge_slave_1: left allmulticast mode
[   97.074851][ T8718] bridge_slave_1: left promiscuous mode
[   97.077097][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.081590][ T8718] bond0: (slave bond_slave_0): Releasing backup interface
[   97.086104][ T8718] bond0: (slave bond_slave_1): Releasing backup interface
[   97.089036][ T8718] team_slave_0: left promiscuous mode
[   97.091541][ T8718] team0: Port device team_slave_0 removed
[   97.093654][ T8718] team_slave_1: left promiscuous mode
[   97.098350][ T8718] team0: Port device team_slave_1 removed
[   97.101385][ T8718] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.106875][ T8718] batman_adv: batadv0: Removing interface: macvtap2
[   97.110508][ T8618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.116438][ T8618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.123695][ T8618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.130490][ T8719] team0: Mode changed to "activebackup"
[   97.139641][ T8618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.168983][ T8718] tipc: Enabled bearer <eth:team0>, priority 0
[   97.299773][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.303237][ T8679] chnl_net:caif_netlink_parms(): no params data found
[   97.330957][ T8618] 8021q: adding VLAN 0 to HW filter on device team0
[   97.371045][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.374137][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.406460][ T8748] netlink: 304 bytes leftover after parsing attributes in process `syz.1.761'.
[   97.454035][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.456755][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.482574][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.506960][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.509658][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.512028][ T8679] bridge_slave_0: entered allmulticast mode
[   97.514736][ T8679] bridge_slave_0: entered promiscuous mode
[   97.518274][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.520715][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.523207][ T8679] bridge_slave_1: entered allmulticast mode
[   97.526009][ T8679] bridge_slave_1: entered promiscuous mode
[   97.528245][ T8753] netlink: 10 bytes leftover after parsing attributes in process `syz.1.762'.
[   97.592136][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.608361][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.616202][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.684039][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.712941][ T8679] team0: Port device team_slave_0 added
[   97.725929][ T5977] Bluetooth: hci0: command tx timeout
[   97.730898][ T8679] team0: Port device team_slave_1 added
[   97.761425][ T8771] vlan0: entered promiscuous mode
[   97.763747][ T8771] vlan0: entered allmulticast mode
[   97.768387][ T8771] hsr_slave_1: entered allmulticast mode
[   97.772499][ T8771] netlink: 48 bytes leftover after parsing attributes in process `syz.3.767'.
[   97.821780][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.823931][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.831886][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.851455][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.865506][   T40] audit: type=1400 audit(1757429822.751:593): avc:  denied  { name_bind } for  pid=8779 comm="syz.1.769" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   97.873221][   T40] audit: type=1400 audit(1757429822.761:594): avc:  denied  { name_connect } for  pid=8779 comm="syz.1.769" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   97.954904][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.959127][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.969220][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.072152][ T8679] hsr_slave_0: entered promiscuous mode
[   98.075123][ T8679] hsr_slave_1: entered promiscuous mode
[   98.162696][ T8804] SELinux:  Context � is not valid (left unmapped).
[   98.225018][ T1142] team0: left allmulticast mode
[   98.227340][ T1142] team_slave_0: left allmulticast mode
[   98.229650][ T1142] team_slave_1: left allmulticast mode
[   98.233248][ T1142] bridge0: port 3(team0) entered disabled state
[   98.244119][ T1142] bridge_slave_1: left allmulticast mode
[   98.247240][ T1142] bridge_slave_1: left promiscuous mode
[   98.250596][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.257283][ T1142] bridge_slave_0: left allmulticast mode
[   98.259803][ T1142] bridge_slave_0: left promiscuous mode
[   98.262308][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.351070][ T8819] netlink: 'syz.3.778': attribute type 10 has an invalid length.
[   98.354259][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'.
[   98.412201][ T1142] dvmrp1 (unregistering): left allmulticast mode
[   98.525957][ T5977] Bluetooth: hci2: command tx timeout
[   98.625132][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.629509][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.633030][ T1142] bond0 (unregistering): Released all slaves
[   98.647661][ T8819] dummy0: entered promiscuous mode
[   98.652361][ T8819] bridge0: port 1(dummy0) entered blocking state
[   98.654684][ T8819] bridge0: port 1(dummy0) entered disabled state
[   98.657661][ T8819] dummy0: entered allmulticast mode
[   98.756087][ T8827] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[   98.805944][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.842406][ T8679] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   98.849476][ T8679] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   98.859088][ T8679] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   98.864189][ T8679] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   98.996031][ T1142] hsr_slave_0: left promiscuous mode
[   98.999793][ T1142] hsr_slave_1: left promiscuous mode
[   99.006668][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.010291][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.038625][ T8853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (65416116 ns). Using initial count to start timer.
[   99.039982][ T1142] veth1_macvtap: left promiscuous mode
[   99.046890][ T1142] veth0_macvtap: left promiscuous mode
[   99.048892][ T1142] veth1_vlan: left promiscuous mode
[   99.050828][ T1142] veth0_vlan: left promiscuous mode
[   99.140599][ T8868] vxcan1: tx address claim with different name
[   99.263434][ T8874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.660315][ T1142] team_slave_1 (unregistering): left promiscuous mode
[   99.663971][ T1142] team0 (unregistering): Port device team_slave_1 removed
[   99.729783][ T1142] team_slave_0 (unregistering): left promiscuous mode
[   99.733494][ T1142] team0 (unregistering): Port device team_slave_0 removed
[   99.817301][ T5977] Bluetooth: hci0: command tx timeout
[  100.241138][ T1142] lo (unregistering): left allmulticast mode
[  100.247828][ T8618] veth0_vlan: entered promiscuous mode
[  100.259713][ T8618] veth1_vlan: entered promiscuous mode
[  100.283478][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.336907][ T8679] 8021q: adding VLAN 0 to HW filter on device team0
[  100.345494][ T8618] veth0_macvtap: entered promiscuous mode
[  100.371491][ T8618] veth1_macvtap: entered promiscuous mode
[  100.378357][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.380508][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.383681][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.386127][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.431444][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.441296][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.452629][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.457849][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.461591][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.469057][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.525766][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.531632][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.561876][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.565161][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.576079][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  100.576092][   T40] audit: type=1400 audit(1757429825.471:596): avc:  denied  { mounton } for  pid=8618 comm="syz-executor" path="/syzkaller.PMm01l/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  100.585909][ T6018] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  100.593588][   T40] audit: type=1400 audit(1757429825.481:597): avc:  denied  { mounton } for  pid=8618 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  100.611049][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.615712][ T5977] Bluetooth: hci2: command tx timeout
[  100.649142][ T8910] macvtap1: entered allmulticast mode
[  100.650820][ T8910] veth0_macvtap: entered allmulticast mode
[  100.656479][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'.
[  100.659471][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.728'.
[  100.740405][ T6018] usb 6-1: unable to get BOS descriptor or descriptor too short
[  100.743922][ T6018] usb 6-1: not running at top speed; connect to a high speed hub
[  100.751626][   T40] audit: type=1400 audit(1757429825.641:598): avc:  denied  { read } for  pid=8915 comm="syz.4.794" path="socket:[26276]" dev="sockfs" ino=26276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  100.752508][ T6018] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.753183][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.794'.
[  100.773690][ T6018] usb 6-1: config 1 interface 0 has no altsetting 0
[  100.775226][ T8679] veth0_vlan: entered promiscuous mode
[  100.783589][ T8679] veth1_vlan: entered promiscuous mode
[  100.788791][ T6018] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.792433][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.796064][ T6018] usb 6-1: Product: syz
[  100.797893][ T6018] usb 6-1: Manufacturer: syz
[  100.799888][ T6018] usb 6-1: SerialNumber: syz
[  100.801177][ T8679] veth0_macvtap: entered promiscuous mode
[  100.806242][ T8679] veth1_macvtap: entered promiscuous mode
[  100.816300][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.822949][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.830337][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.833227][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.838293][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.842648][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.891736][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.894992][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.917918][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.921233][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.008113][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.012177][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.018983][ T8939] netlink: 'syz.5.796': attribute type 30 has an invalid length.
[  101.019794][ T6018] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  101.030661][ T6018] usb 6-1: USB disconnect, device number 20
[  101.068526][ T8931] kvm: kvm [8924]: vcpu1, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0xfffffc18
[  101.071332][ T8931] kvm: kvm [8924]: vcpu1, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xfffffc18
[  101.092501][ T8931] kvm: kvm [8924]: vcpu1, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0xfffffc18
[  101.095369][ T8931] kvm: kvm [8924]: vcpu1, guest rIP: 0x912f Unhandled WRMSR(0x186) = 0xfffffc18
[  101.099168][ T8931] kvm: kvm [8924]: vcpu1, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0xfffffc18
[  101.103413][ T8931] kvm: kvm [8924]: vcpu1, guest rIP: 0x912f Unhandled WRMSR(0x187) = 0xfffffc18
[  101.203269][   T40] audit: type=1400 audit(1757429826.091:599): avc:  denied  { watch watch_with_perm watch_reads } for  pid=8959 comm="syz.5.799" path="/4/bus" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.252856][ T8971] netlink: 'syz.5.801': attribute type 1 has an invalid length.
[  101.255223][ T8971] netlink: 212 bytes leftover after parsing attributes in process `syz.5.801'.
[  101.259981][ T8971] netlink: 'syz.5.801': attribute type 1 has an invalid length.
[  101.303808][ T8975] /dev/nullb0: Can't open blockdev
[  101.489498][ T9002] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  101.498152][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9006 comm=syz.3.810
[  101.498163][ T9005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9005 comm=syz.3.810
[  101.549330][ T9010] mmap: syz.1.812 (9010): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  101.561877][   T40] audit: type=1400 audit(1757429826.451:600): avc:  denied  { create } for  pid=9011 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  101.601963][ T9012] Bluetooth: MGMT ver 1.23
[  101.701048][   T40] audit: type=1326 audit(1757429826.591:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.1.817" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14ab98ebe9 code=0x0
[  101.735975][ T6018] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[  101.885785][ T5977] Bluetooth: hci0: command tx timeout
[  101.898696][ T6018] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  101.901550][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  101.906155][ T6018] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  101.910661][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  101.914954][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  101.921296][ T6018] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  101.924240][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  101.928542][ T6018] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  101.933253][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  101.937248][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  101.942971][ T6018] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  101.946057][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  101.950234][ T6018] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  101.954913][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  101.959933][ T6018] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  101.971743][ T6018] usb 10-1: string descriptor 0 read error: -22
[  101.974349][ T6018] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  101.978086][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.993513][ T6018] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  102.003609][ T9038] netlink: 'syz.3.821': attribute type 6 has an invalid length.
[  102.007249][ T9038] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.821'.
[  102.250132][ T9041] kvm: requested 36876 ns i8254 timer period limited to 200000 ns
[  102.307880][ T2293] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  102.344333][   T40] audit: type=1326 audit(1757429827.231:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.1.817" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14ab98ebe9 code=0x0
[  102.465782][ T2293] usb 8-1: Using ep0 maxpacket: 8
[  102.468757][ T2293] usb 8-1: config 0 has no interfaces?
[  102.470604][ T2293] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  102.473469][ T2293] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.477396][ T2293] usb 8-1: config 0 descriptor??
[  102.606951][ T9058] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.696036][ T5977] Bluetooth: hci2: command tx timeout
[  102.885908][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.890388][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.009645][   T40] audit: type=1400 audit(1757429827.901:603): avc:  denied  { watch } for  pid=9071 comm="syz.1.829" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  103.019317][   T40] audit: type=1400 audit(1757429827.901:604): avc:  denied  { watch_sb } for  pid=9071 comm="syz.1.829" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  103.966686][ T5977] Bluetooth: hci0: command tx timeout
[  104.203219][ T9102] syzkaller1: entered promiscuous mode
[  104.205588][ T9102] syzkaller1: entered allmulticast mode
[  104.213465][ T9102] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40
[  105.016149][ T6018] usb 8-1: USB disconnect, device number 15
[  105.031431][ T9114] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  105.199222][ T9127] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  105.268618][   T40] audit: type=1400 audit(1757429830.161:605): avc:  denied  { getattr } for  pid=9133 comm="syz.4.847" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  105.270872][ T9135] overlayfs: statfs failed on './file0'
[  105.429890][ T9147] netlink: 'syz.4.851': attribute type 11 has an invalid length.
[  105.524612][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'.
[  105.592811][   T40] audit: type=1400 audit(1757429830.481:606): avc:  denied  { ioctl } for  pid=9153 comm="syz.1.854" path="socket:[29750]" dev="sockfs" ino=29750 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  105.635049][ T9160] sctp: [Deprecated]: syz.3.856 (pid 9160) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.635049][ T9160] Use struct sctp_sack_info instead
[  105.663169][ T9163] netlink: 'syz.3.857': attribute type 2 has an invalid length.
[  105.720308][ T9165] geneve1: entered allmulticast mode
[  105.764048][ T9168] netlink: 'syz.1.858': attribute type 4 has an invalid length.
[  105.771492][ T9168] netlink: 'syz.1.858': attribute type 4 has an invalid length.
[  105.822384][   T40] audit: type=1400 audit(1757429830.711:607): avc:  denied  { read } for  pid=9172 comm="syz.1.861" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  105.830058][   T40] audit: type=1400 audit(1757429830.711:608): avc:  denied  { open } for  pid=9172 comm="syz.1.861" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  105.882656][ T9173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9173 comm=syz.1.861
[  105.888920][   T40] audit: type=1400 audit(1757429830.781:609): avc:  denied  { ioctl } for  pid=9172 comm="syz.1.861" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  106.020577][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.864'.
[  106.288179][ T6018] usb 10-1: USB disconnect, device number 2
[  106.302225][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'.
[  106.405693][ T6174] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  106.412605][ T9213] comedi comedi0: pcl730: I/O port conflict (0x3,4)
[  106.457244][ T9225] binder: 9223:9225 ioctl 400c620e 200000000640 returned -22
[  106.464876][   T40] audit: type=1400 audit(1757429831.351:610): avc:  denied  { connect } for  pid=9223 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  106.523923][ T9235] input: syz1 as /devices/virtual/input/input17
[  106.587008][ T6174] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  106.590240][ T6174] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  106.591403][ T9232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9232 comm=syz.5.879
[  106.594029][ T6174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  106.605817][ T6174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  106.609589][ T6174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  106.614295][ T6174] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.617381][ T6174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.620070][ T9251] binder: 9250:9251 unknown command 0
[  106.622203][ T9251] binder: 9250:9251 ioctl c0306201 200000000080 returned -22
[  106.628771][ T6174] usb 6-1: config 0 descriptor??
[  106.636321][ T9192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.731415][ T9259] tipc: Can't bind to reserved service type 2
[  106.811546][   T40] audit: type=1400 audit(1757429831.701:611): avc:  denied  { watch } for  pid=9264 comm="syz.5.887" path="/17/file0/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  106.820672][   T40] audit: type=1400 audit(1757429831.701:612): avc:  denied  { watch_sb } for  pid=9264 comm="syz.5.887" path="/17/file0/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  106.980184][   T40] audit: type=1400 audit(1757429831.871:613): avc:  denied  { setopt } for  pid=9278 comm="syz.5.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  106.986828][   T40] audit: type=1400 audit(1757429831.871:614): avc:  denied  { setopt } for  pid=9278 comm="syz.5.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  107.044149][   T40] audit: type=1400 audit(1757429831.931:615): avc:  denied  { map } for  pid=9280 comm="syz.4.892" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  107.062337][ T6174] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  107.070640][ T6174] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  107.197677][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.895'.
[  107.241721][ T9287] fuse: Unknown parameter 'fdʖ5�''
[  107.244830][ T9301] netlink: 32 bytes leftover after parsing attributes in process `syz.5.898'.
[  107.248706][ T9301] openvswitch: netlink: Flow actions attr not present in new flow.
[  107.314432][ T9308] /dev/sg0: Can't lookup blockdev
[  107.336349][ T9192] geneve2: entered promiscuous mode
[  107.337882][ T9192] geneve2: entered allmulticast mode
[  107.356867][ T9308] netlink: 'syz.5.900': attribute type 11 has an invalid length.
[  107.477028][ T6174] usb 6-1: USB disconnect, device number 21
[  107.486168][   T63] Bluetooth: hci0: command 0x0405 tx timeout
[  107.572548][ T9334] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  107.708760][ T9358] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  108.050454][ T9379] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  108.277456][ T9403] program syz.1.923 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.350615][ T9408] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  108.352680][ T9408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  108.356212][ T9408] vhci_hcd vhci_hcd.0: Device attached
[  108.359629][ T9413] Can't find ip_set type bitmap:ip
[  108.371510][ T9411] vhci_hcd: connection closed
[  108.371619][   T12] vhci_hcd: stop threads
[  108.374604][   T12] vhci_hcd: release socket
[  108.380776][   T12] vhci_hcd: disconnect device
[  108.782001][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  108.784851][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  109.467709][ T9471] ALSA: mixer_oss: invalid OSS volume 'PHONEX�0�IN'
[  109.787761][ T9485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.942'.
[  110.164890][ T9512] netlink: 'syz.3.950': attribute type 1 has an invalid length.
[  110.179521][ T9512] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.189977][ T9512] vlan3: entered allmulticast mode
[  110.191647][ T9512] veth1: entered allmulticast mode
[  110.199507][ T9515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9515 comm=syz.1.951
[  110.239500][ T9518] overlayfs: workdir and upperdir must be separate subtrees
[  110.327612][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'.
[  110.328554][ T9529] usb usb8: usbfs: process 9529 (syz.3.955) did not claim interface 0 before use
[  110.361229][ T9534] netlink: 'syz.1.956': attribute type 1 has an invalid length.
[  110.368284][ T9534] gretap2: entered promiscuous mode
[  110.421073][ T9539] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI
[  110.424779][ T9539] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[  110.427484][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.3.957 Not tainted syzkaller #0 PREEMPT(full) 
[  110.431343][ T9539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  110.434642][ T9539] RIP: 0010:h5_recv+0x104/0x950
[  110.436177][ T9539] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 91 77 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  110.442074][ T9539] RSP: 0018:ffffc90004097c00 EFLAGS: 00010293
[  110.443973][ T9539] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b16fa
[  110.446420][ T9539] RDX: ffff8880295ba440 RSI: ffffffff887b173f RDI: 0000000000000005
[  110.448853][ T9539] RBP: ffffc90004097d88 R08: 0000000000000005 R09: 0000000000000000
[  110.451333][ T9539] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[  110.453786][ T9539] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47e80
[  110.456232][ T9539] FS:  00007f00acdd56c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000
[  110.458978][ T9539] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.461027][ T9539] CR2: 00007f5dc36fee9c CR3: 0000000020045000 CR4: 0000000000352ef0
[  110.463496][ T9539] Call Trace:
[  110.464552][ T9539]  <TASK>
[  110.465490][ T9539]  ? __pfx_h5_recv+0x10/0x10
[  110.466951][ T9539]  hci_uart_tty_receive+0x251/0x7e0
[  110.468570][ T9539]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[  110.470346][ T9539]  tty_ioctl+0x580/0x1680
[  110.471709][ T9539]  ? __pfx_tty_ioctl+0x10/0x10
[  110.473206][ T9539]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  110.475322][ T9539]  ? hook_file_ioctl_common+0x145/0x410
[  110.477043][ T9539]  ? selinux_file_ioctl+0x180/0x270
[  110.478680][ T9539]  ? selinux_file_ioctl+0xb4/0x270
[  110.480276][ T9539]  ? __pfx_tty_ioctl+0x10/0x10
[  110.481787][ T9539]  __x64_sys_ioctl+0x18b/0x210
[  110.483304][ T9539]  do_syscall_64+0xcd/0x4c0
[  110.484740][ T9539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.486581][ T9539] RIP: 0033:0x7f00aeb8ebe9
[  110.487977][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.493890][ T9539] RSP: 002b:00007f00acdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.496611][ T9539] RAX: ffffffffffffffda RBX: 00007f00aedc6180 RCX: 00007f00aeb8ebe9
[  110.499099][ T9539] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000008
[  110.501581][ T9539] RBP: 00007f00aec11e19 R08: 0000000000000000 R09: 0000000000000000
[  110.504035][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.506494][ T9539] R13: 00007f00aedc6218 R14: 00007f00aedc6180 R15: 00007ffe6403b558
[  110.508944][ T9539]  </TASK>
[  110.509939][ T9539] Modules linked in:
[  110.511482][ T9539] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  110.513421][ T9539] RIP: 0010:h5_recv+0x104/0x950
[  110.515187][ T9539] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 91 77 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  110.521385][ T9539] RSP: 0018:ffffc90004097c00 EFLAGS: 00010293
[  110.523375][ T9539] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b16fa
[  110.526140][ T9539] RDX: ffff8880295ba440 RSI: ffffffff887b173f RDI: 0000000000000005
[  110.528650][ T9539] RBP: ffffc90004097d88 R08: 0000000000000005 R09: 0000000000000000
[  110.531137][ T9539] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[  110.533646][ T9539] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47e80
[  110.536451][ T9539] FS:  00007f00acdd56c0(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000
[  110.539235][ T9539] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.541847][ T9539] CR2: 00005596fe386300 CR3: 0000000020045000 CR4: 0000000000352ef0
[  110.544376][ T9539] Kernel panic - not syncing: Fatal exception
[  110.547143][ T9539] Kernel Offset: disabled
[  110.548507][ T9539] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:57:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88806a53fe80 RCX=ffffffff81af8f21 RDX=ffff8880298b0000
RSI=ffffffff81af8efb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000640f888
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=dffffc0000000000 R13=ffffed100d4a7fd1 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81af8efd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005596fe386300 CR3=000000000e380000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8554b530 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8554b6b6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8554b6b6 00007ffd8554b6bc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14aba12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14aba12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14aba12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14aba12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14aba12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14aba12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff85646fb0 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90004097518
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622a66 R15=dffffc0000000000
RIP=ffffffff85646fd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f00acdd56c0 ffffffff 00c00000
GS =0000 ffff8880d67b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f5dc36fee9c CR3=0000000020045000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6403ba66
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6403ba66 00007ffe6403ba6c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aed974a8 00007f00aed974a0 00007f00aed97498 00007f00aed97470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00af8fd100 00007f00aed97460 00007f00aed97478 00007f00aed974c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aed974b8 00007f00aed974b0 00007f00aed974a8 00007f00aed974a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88806a63b540 RCX=ffffffff81afa673 RDX=ffff88801de8c880
RSI=ffffffff81afa64d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb981e
R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4c76a9
RIP=ffffffff81afa64f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d68b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbf20725e9c CR3=0000000046297000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=00000000fefce002 Opmask02=00000000fefcf800 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6403ba66
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6403ba66 00007ffe6403ba6c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aec12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aed974a8 00007f00aed974a0 00007f00aed97498 00007f00aed97470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00af8fd100 00007f00aed97460 00007f00aed97478 00007f00aed974c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00aed974b8 00007f00aed974b0 00007f00aed974a8 00007f00aed974a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=1ffff11006c6ecc0 RBX=ffff888036376600 RCX=ffffffff8b8afed9 RDX=0000000000000005
RSI=ffffffff8b8aff16 RDI=0000000000000007 RBP=ffffc90004627df8 RSP=ffffc90004627d68
R8 =0000000000000007 R9 =0000000000001000 R10=ffff88803637661e R11=0000000000000000
R12=dffffc0000000000 R13=fffff520008c4fc6 R14=ffffc90004627e35 R15=0000000000000002
RIP=ffffffff8b8affa2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9976cabc80 ffffffff 00c00000
GS =0000 ffff8880d69b5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005596fe399b48 CR3=000000002c335000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0eefe00 Opmask01=0000000000000001 Opmask02=000000003f3f013d Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9976f45b20 00007f9976f45b20
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000029656e6f6e28
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9976f45b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2028282828282828 2820202018201818 2018181818181810 20003b7c2629280a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2022222222222222 2220202012201212 2012121212121210 2000317626232200
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 00000000873d7373 6e64725f77656e01
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000