last executing test programs:

48.257366653s ago: executing program 1 (id=352):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181)
ftruncate(r0, 0x82081fc) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x800000)

48.180658505s ago: executing program 1 (id=353):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8", 0xb2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27", 0x16}], 0x2}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

48.180484725s ago: executing program 1 (id=354):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c000280080014000080"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0xa, 0x0, 0xf, 0x0, 0x5, 0x9, 0x4, 0xb, 0x3, 0x13, 0xe, 0x72, 0x0, 0xe, 0x3f, 0x0, 0x0, 0xfb, 0x0, '\x00', 0x4, 0x10000002d})

48.099952337s ago: executing program 1 (id=357):
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x210080)
ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000080)={0xc9, 0x0, 0xc})
io_setup(0x1, &(0x7f00000012c0)=<r1=>0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000062c0)={0x0, 0x0, 0x0}, 0x4c084)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x200000000004}])

47.920717955s ago: executing program 1 (id=363):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x7c}}, 0x20040815)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffb, @empty, 0x2}, 0x1c)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x140242, 0x0)
unshare(0x68040200)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000005"], 0x78)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000000c0)={0x8, 'bridge_slave_0\x00', {'vcan0\x00'}, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000300))
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x200007a, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x400000}])
splice(r1, &(0x7f0000000000)=0xc0000000000000, r2, &(0x7f0000000080)=0xdc00, 0x5, 0x6)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r7=>0x0)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r7, &(0x7f0000000200))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000140)=@arm64)

46.910419587s ago: executing program 1 (id=383):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010000000001000000000a00000008000100feffffff"], 0x1c}}, 0x0)
symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)

31.938412648s ago: executing program 32 (id=383):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010000000001000000000a00000008000100feffffff"], 0x1c}}, 0x0)
symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)

28.210344222s ago: executing program 0 (id=633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = getpgrp(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
setpgid(r0, r1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

28.2096077s ago: executing program 0 (id=634):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0xe, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x30}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0)
sendto$inet6(r0, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x202, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x41}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x6, 0x40, 0x2, 0x8, 0x80, 0x5, 0x0, 0x7, 0x0, 0x75, 0x0, 0x0, 0x9}, 0xe)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xf4, 0x3, 0x18000}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc}, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x3, &(0x7f0000001c00)=@framed, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYBLOB="6c1200003f000701feffffff00000000017c0000040042800c0001800600060065580000451202803f12148004", @ANYRESDEC=r1, @ANYRES64=0x0], 0x126c}, 0x1, 0x0, 0x0, 0x4048051}, 0x40480c0)

27.27956785s ago: executing program 0 (id=649):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x4, 0xb5, 0x5, 0xd13, 0x5, 0x8, 0x9fad, 0x4, 0x1e, 0x4, 0x7, 0xffff18bd, 0x5, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x87, 0x1, 0x8, 0x18000, 0xef, 0x6, 0x6, 0x7f, 0x401, 0x3, 0x83, 0x0, 0x6]})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

27.180814087s ago: executing program 0 (id=650):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x305810, 0x0)
semget(0x2, 0x1, 0x200)

27.180554325s ago: executing program 0 (id=651):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000001c0)=0xc)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x2b}}, './file0\x00'})
r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff)
keyctl$invalidate(0x15, r4)
keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r4}, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230d00c8001002fcd1ca9a096721"], 0x10)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x6, 0x40, 0x2, 0x6, 0x4, 0xa, 0x5, 0xa1, 0x6, 0x80000001, 0x8, 0x6, 0x4, 0x81, 0x4, 0x4, 0x3, 0x9, 0x0, 0x2, 0x0, 0x10000000, 0x1000, 0x10001, 0xffffffff, 0xffffff11, 0x2, 0xc9a2, 0x7ff, 0x2, 0x916]})

26.870173025s ago: executing program 0 (id=654):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
sendfile(r7, r7, 0x0, 0x9)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})

26.828414317s ago: executing program 33 (id=654):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
sendfile(r7, r7, 0x0, 0x9)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})

8.516333024s ago: executing program 3 (id=960):
setreuid(0xee01, 0xee01)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setreuid(0xee01, 0xee01) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)

8.430052966s ago: executing program 3 (id=961):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='aufs\x00', 0x0, &(0x7f0000000400))
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000000", @ANYRES32=0x0, @ANYBLOB="06300000d041400008002e0002"], 0x28}}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd3", @ANYBLOB=',rootmo'])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000002840)="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", 0xf83}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)

8.319352832s ago: executing program 3 (id=964):
r0 = socket$packet(0x11, 0x2, 0x300) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x803, 0x0)
setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) (async)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r3, &(0x7f00000001c0)={@val={0x0, 0x8848}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a59c00", "71061734a02cbe0647238c81f23ec29398c67f271139db7c2f9f13cb25109968"}}}}}}}, 0x6e) (async)
ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0x8, 0xfffffffb}) (async)
getitimer(0x2, &(0x7f0000000000)) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x605}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x3c}}, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c0180300a9000b12d25a80648c2594f90324fc6017d1056db3b54a8db1100c02806e3ea970103582c137153e3702052ff93ca8d92b086c9fd748078000be6ec055fef03f7d40d4bb441f2aff23dc696feffe3469e782444dc3eb333c355b0c3fee8ad9b2d5d30f83aa8ce91b6a384ff2b0193e285a", 0x75}], 0x1}, 0x20000004) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa5a86dd60f900f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002317729bab8482c99488efc53499162c9a6ba491a80563610a50bcbdfcd8982d6dec7d179c090594e0fd2ed50dd407d43402209d0ee7ed98370307f1bcfc96eecda0feb36cf0cea6b00"/89], 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x2f5b, 0x10, 0x9, 0x1f8, 0x3, 0x6, 0xfffffffc, 0x9, 0xff, 0x1a, 0xa, 0x12, 0x7, 0x1, 0x5}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x2c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0)

8.199068296s ago: executing program 3 (id=966):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
pread64(r0, &(0x7f0000000180)=""/195, 0xc3, 0x100)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r4, &(0x7f00000008c0)}, 0x20)
r6 = socket$inet(0xa, 0x801, 0x84)
r7 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f00000000c0))
listen(r6, 0x8)
accept4(r6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

8.117118907s ago: executing program 3 (id=970):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x56773be4052dacb4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x9f, &(0x7f0000000080)=[@in6={0xa, 0x1000, 0x4, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b00000003000000000000000000000006000000000000000a0000eb"], 0x2b)
r7 = dup(r1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0)
socket$packet(0x11, 0xa, 0x300)
r10 = socket(0x1e, 0x4, 0x0)
sendmsg$tipc(r10, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d", 0x1}, {&(0x7f0000000300)="b03ef9880b815229", 0x8}], 0x3)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

7.999909001s ago: executing program 3 (id=972):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
io_setup(0xffff7fff, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
io_destroy(r1)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x60}]})
r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffd, 0x34f}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1})
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a3, 0x4})
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="ae24a21f9a824666f9acf0e0163fa8d7ad3a0f8e52dfe78a4408100d6ccf068949dbe6ef096242a591f586f19e69e5761f2c2c367a9f3f8e73f487fc3af670b3d9d57112e4d63c230dd8b25837909c10b4864f30", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x10)
lseek(r0, 0x104, 0x1)
getdents64(r0, &(0x7f0000003340)=""/48, 0x30)

7.944615046s ago: executing program 34 (id=972):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
io_setup(0xffff7fff, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
io_destroy(r1)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x60}]})
r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffd, 0x34f}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1})
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a3, 0x4})
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="ae24a21f9a824666f9acf0e0163fa8d7ad3a0f8e52dfe78a4408100d6ccf068949dbe6ef096242a591f586f19e69e5761f2c2c367a9f3f8e73f487fc3af670b3d9d57112e4d63c230dd8b25837909c10b4864f30", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x10)
lseek(r0, 0x104, 0x1)
getdents64(r0, &(0x7f0000003340)=""/48, 0x30)

3.700213162s ago: executing program 2 (id=1015):
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r4, 0x0, r1, 0x0, 0x20000000000002, 0x2)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c)

670.169118ms ago: executing program 2 (id=1050):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xa, 0x3, 0x50e1}, &(0x7f0000000400)=0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x8, 0x2, 0xfff8})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xfffd}, 0xe)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d00148004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xa, 0x3, 0x50e1}, &(0x7f0000000400)=0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x8, 0x2, 0xfff8}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xfffd}, 0xe) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d00148004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

668.855424ms ago: executing program 2 (id=1052):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xd0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/file0\x00', 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x13, 0x0, &(0x7f0000000300))
r8 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000800)=[@op={0x18}], 0x18, 0x20000000}], 0x1, 0x800)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420690397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7e920f73", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000004c80)="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", 0xc72}], 0x7}}], 0x1, 0x4000800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
r10 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCFLSH(r10, 0x540b, 0x2)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/153, 0x99}], 0x1}, 0x0)

588.391281ms ago: executing program 4 (id=1053):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x0, 0x3, "2924ef"})
r2 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0)

520.082722ms ago: executing program 4 (id=1054):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4U\x00\'', @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x303801, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="15000000", @ANYRES16=r3, @ANYBLOB="110725bd7000fbdbc12504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040), 0x0, 0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20)
recvfrom$inet6(r6, 0x0, 0x0, 0x40010102, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=r6], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a1, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r9 = socket$kcm(0x2d, 0x2, 0x0)
sendmmsg(r9, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="08002cbd7000fcdbdf250d000000080004000300000008000500000200000800040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000040)

430.585901ms ago: executing program 4 (id=1055):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)

429.562207ms ago: executing program 2 (id=1056):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000800)={0x1, "c5c2a91e002b1b80000000003d5eff0010ffffffe70000ffe700", 0x1, 0x7, 0x1, 0x1000000, 0x4040300, 0x2})
r1 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') (rerun: 64)
r3 = socket$igmp(0x2, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @private=0xa010100, 0x1, "34d5fdb244787aae1037b3cc0dfd25debc5e463e671f467a7381248bf19b3846", 0xe7, 0x9, 0x8, 0x8}, 0x3c) (rerun: 64)
pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xadc) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, r1}) (async, rerun: 64)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r4, 0x200, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_TX_MAX={0x0, 0xa7, 0xfb}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (rerun: 64)

379.85887ms ago: executing program 4 (id=1058):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xfa)
setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) (async)
setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4)
sendto$inet6(r1, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)
write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2)
r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000280)='source', 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) (async)
write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4)
syz_emit_ethernet(0x15, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0x6, 0x32, 0x0, @loopback, @multicast1}}}}}, 0x0)

328.960115ms ago: executing program 2 (id=1061):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2509000000050008000700b83ace3ae21b2bf21097424351fb93960000080001000100000005000700050048e47903ade8241730b39a0000"], 0x2c}}, 0x64000)
r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="06300000d041400008"], 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000800000000000097c4b2814a07066457c315200de4fd466f7e5742da7ed4bdbf8b813363bd26761f2d29beec3ba0dc564e88d6393c99d6d5bbfeb42733"], 0x18}}], 0x1, 0x810)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000500)=0xc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = syz_open_dev$loop(&(0x7f0000000300), 0x80, 0x1c1881)
ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x5)
r8 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(r5, &(0x7f0000000740), 0x0, 0x7, 0x5)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = fanotify_init(0xf00, 0x0)
fanotify_mark(r10, 0x1, 0x20, r2, 0x0)

275.61834ms ago: executing program 5 (id=1063):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200000, 0xda)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xff80, 0x0, 0x0, 0xe, 0x1, 0xea8, 0x8, 0x1, 0x3, 0x6, 'syz1\x00'})
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xca40, 0x0)
acct(&(0x7f0000000080)='./file1\x00')
acct(&(0x7f00000002c0)='./file1\x00')

270.605347ms ago: executing program 4 (id=1064):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) (async)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16=r1], 0x1000f) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

179.504561ms ago: executing program 4 (id=1065):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad432bbd171300000000060000"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000080)=0xf7e)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x6, 0x4, 0x800002, 0x0, 0x1, 0xba7e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)

178.463771ms ago: executing program 5 (id=1066):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x1, [0x6, 0x874, 0x80801, 0x451, 0x4, 0x80000000, 0xffffffff, 0xe]})

177.324128ms ago: executing program 2 (id=1067):
r0 = socket$netlink(0x10, 0x3, 0x0)
fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x9, 0x3)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x20, 0x140f, 0x1, 0x70bd27, 0x4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044)
r3 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r3, 0xb)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r6, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f00000000c0)=0x751)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000080)={0x14, 0x39, 0x400, 0x70bd2c, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24044101)

175.203188ms ago: executing program 6 (id=973):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01082abd7000fddbdf252a0000000e0001006e657466657673696d0000000f0002006e657464657673696d30000008000300020000000800030001000000"], 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap(&(0x7f0000e0d000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64)
munmap(&(0x7f0000392000/0x3000)=nil, 0x3000) (async)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x1098c0, 0x0)
readv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r7=>0x0}) (async)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r8, 0x4b32, 0x2) (async)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000180))
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYRESHEX=r6, @ANYRES32=r7, @ANYRESOCT=r5], 0x34}, 0x1, 0x0, 0x0, 0x4807}, 0xc080) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64=r4], 0x7c}}, 0xc0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) (async)
r9 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x800, 0x0, 0x0) (async, rerun: 64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x40, 0x48, 0xd}, 0x18)
fstat(r10, &(0x7f0000000540)) (async, rerun: 32)
mq_timedsend(r9, 0x0, 0x0, 0xe, 0x0) (async, rerun: 32)
mq_unlink(&(0x7f00000014c0)='eth0\x00\xd4|i9\f+\n8eJ\x8ad\xdf)\x03ft\xe4&--\x99\xa4\'\x11\x80.\x96\x1e\xa9G\xf2\xc7\xfbN\x91\xdb\xdd\x91\x06\xa9\x87\xa0\xfflG\xd2\xc8\xe7\x9a\tI\xe1>\xe1\x97\xbf\xbba\xdb\x03\xd9es2}\x992n\x840\xb6\x97\xb1\xd6\x8b') (async, rerun: 64)
close(r9) (async, rerun: 64)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
ioctl$SIOCRSACCEPT(r11, 0x89e3) (async)
pread64(r11, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000)

174.916831ms ago: executing program 5 (id=1068):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800)

50.333696ms ago: executing program 5 (id=1069):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000080), 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000080), 0x4)
fcntl$lock(r1, 0x26, &(0x7f0000000080)) (async)
fcntl$lock(r1, 0x26, &(0x7f0000000080))
syz_emit_vhci(&(0x7f0000019200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x11}, {0x0, "4d6b870320fa349d37bb08113bd13619", "c1b820b0f45e16c86c7583726b2153d2", "b3e39f0de79dec99d0262a2ac9a7d3bc", "c4e161077a9ee1d5389f6864093c2731"}}}}, 0x47)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0x1000}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0x1000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0)

459.404µs ago: executing program 5 (id=1070):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

0s ago: executing program 5 (id=1071):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

ute_socket pid=7315 comm=syz.2.388
[   78.475793][ T7315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7315 comm=syz.2.388
[   78.560514][ T7325] netlink: 'syz.2.390': attribute type 2 has an invalid length.
[   78.562912][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   78.828773][   T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   78.998734][   T55] usb 5-1: Using ep0 maxpacket: 8
[   79.002837][   T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   79.006259][   T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   79.010313][   T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   79.014236][   T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   79.018056][   T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   79.023226][   T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   79.027109][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.235088][   T55] usb 5-1: usb_control_msg returned -32
[   79.237531][   T55] usbtmc 5-1:16.0: can't read capabilities
[   79.504374][   T40] kauditd_printk_skb: 3420 callbacks suppressed
[   79.504384][   T40] audit: type=1400 audit(1760674465.225:3899): avc:  denied  { create } for  pid=7345 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.511920][   T40] audit: type=1400 audit(1760674465.225:3900): avc:  denied  { connect } for  pid=7345 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.517428][   T40] audit: type=1400 audit(1760674465.235:3901): avc:  denied  { read } for  pid=7345 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.534857][   T55] usb 5-1: USB disconnect, device number 5
[   79.560640][   T61] tipc: Subscription rejected, illegal request
[   79.563882][   T40] audit: type=1400 audit(1760674465.285:3902): avc:  denied  { write } for  pid=7345 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.570567][   T40] audit: type=1400 audit(1760674465.285:3903): avc:  denied  { read } for  pid=7352 comm="syz.3.397" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   79.577048][   T40] audit: type=1400 audit(1760674465.295:3904): avc:  denied  { open } for  pid=7352 comm="syz.3.397" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   79.600016][ T7353] syzkaller0: entered promiscuous mode
[   79.602358][ T7353] syzkaller0: entered allmulticast mode
[   79.614017][   T40] audit: type=1400 audit(1760674465.335:3905): avc:  denied  { connect } for  pid=7357 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   79.622196][   T40] audit: type=1400 audit(1760674465.335:3906): avc:  denied  { name_connect } for  pid=7357 comm="syz.0.399" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   79.778975][   T40] audit: type=1400 audit(1760674465.505:3907): avc:  denied  { map_read map_write } for  pid=7357 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   79.785154][   T40] audit: type=1400 audit(1760674465.505:3908): avc:  denied  { read write } for  pid=7357 comm="syz.0.399" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   80.518373][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'.
[   80.555486][ T7368] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   80.558308][ T7368] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[   80.650799][ T7373] pim6reg: entered allmulticast mode
[   80.653302][ T7374] pim6reg: left allmulticast mode
[   80.690192][ T7376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.405'.
[   80.769778][ T7382] autofs4:pid:7382:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e)
[   80.910442][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'.
[   80.913382][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'.
[   80.916367][ T7400] netlink: 'syz.3.414': attribute type 6 has an invalid length.
[   81.008775][ T4246] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   81.160332][ T4246] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[   81.163901][ T4246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.170054][ T4246] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   81.173849][ T4246] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   81.177239][ T4246] usb 7-1: Manufacturer: syz
[   81.181350][ T4246] usb 7-1: config 0 descriptor??
[   81.228639][ T4246] rc_core: IR keymap rc-hauppauge not found
[   81.231196][ T4246] Registered IR keymap rc-empty
[   81.235137][ T4246] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[   81.241974][ T4246] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10
[   81.351446][ T7417] tipc: Started in network mode
[   81.353214][ T7417] tipc: Node identity d2254d0ba983, cluster identity 4711
[   81.356019][ T7417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.359079][ T7416] syzkaller0: entered promiscuous mode
[   81.360901][ T7416] syzkaller0: entered allmulticast mode
[   81.373618][ T7416] tipc: Resetting bearer <eth:syzkaller0>
[   81.398491][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.418'.
[   81.465869][ T6141] usb 7-1: USB disconnect, device number 6
[   81.619670][ T7415] tipc: Resetting bearer <eth:syzkaller0>
[   81.627114][ T7415] tipc: Disabling bearer <eth:syzkaller0>
[   82.018797][   T54] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   82.022113][ T7431] /dev/sr0: Can't open blockdev
[   82.081161][ T7439] program syz.3.425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.084633][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.425'.
[   82.148991][   T54] usb 5-1: device descriptor read/64, error -71
[   82.314828][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'.
[   82.319060][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'.
[   82.398927][   T54] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[   82.529270][   T54] usb 5-1: device descriptor read/64, error -71
[   82.620914][ T7462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7462 comm=syz.3.433
[   82.639988][   T54] usb usb5-port1: attempt power cycle
[   82.667545][ T7465] Bluetooth: MGMT ver 1.23
[   82.713202][ T7469] netlink: 'syz.3.435': attribute type 3 has an invalid length.
[   82.715819][ T7469] netlink: 'syz.3.435': attribute type 3 has an invalid length.
[   82.988735][   T54] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[   83.009382][   T54] usb 5-1: device descriptor read/8, error -71
[   83.073832][ T7478] kvm: emulating exchange as write
[   83.076551][ T7478] overlay: Unknown parameter ':'
[   83.248676][   T54] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[   83.269829][   T54] usb 5-1: device descriptor read/8, error -71
[   83.378901][   T54] usb usb5-port1: unable to enumerate USB device
[   83.446441][ T7494] __nla_validate_parse: 2 callbacks suppressed
[   83.446453][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'.
[   83.452554][ T7494] SELinux:  policydb string length 14080 does not match expected length 8
[   83.455496][ T7494] SELinux: failed to load policy
[   83.458505][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'.
[   83.730228][ T7500] netlink: 'syz.3.448': attribute type 10 has an invalid length.
[   83.736435][ T7500] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   83.819875][ T7504] unsupported nla_type 4111
[   84.357362][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.456'.
[   84.376893][ T7531] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ	Áy|YT¢®{-€í
ê°”,mb/ returned error -2
[   84.463832][ T7542] kAFS: No cell specified
[   84.496049][ T7548] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:00f2:ff00:0000 with DS=0x3
[   84.508760][ T7550] xt_time: unknown flags 0xf4
[   84.681336][ T7555] pim6reg: entered allmulticast mode
[   84.685324][   T40] kauditd_printk_skb: 79 callbacks suppressed
[   84.685335][   T40] audit: type=1400 audit(1760674470.405:3988): avc:  denied  { create } for  pid=7554 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   84.696590][   T40] audit: type=1400 audit(1760674470.405:3989): avc:  denied  { write } for  pid=7554 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   84.735097][ T7557] nbd: socks must be embedded in a SOCK_ITEM attr
[   84.804657][ T7567] nbd: must specify an index to disconnect
[   84.807195][ T7566] netlink: 'syz.3.467': attribute type 3 has an invalid length.
[   84.992174][   T40] audit: type=1400 audit(1760674470.715:3990): avc:  denied  { unlink } for  pid=7577 comm="syz.3.472" name="#5" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   84.999560][   T40] audit: type=1400 audit(1760674470.715:3991): avc:  denied  { mount } for  pid=7577 comm="syz.3.472" name="/" dev="overlay" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   85.012534][   T40] audit: type=1400 audit(1760674470.735:3992): avc:  denied  { unmount } for  pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   85.035749][   T40] audit: type=1400 audit(1760674470.755:3993): avc:  denied  { setopt } for  pid=7579 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.045388][   T40] audit: type=1400 audit(1760674470.755:3994): avc:  denied  { watch } for  pid=7581 comm="syz.3.474" path="/140" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   85.095230][   T40] audit: type=1400 audit(1760674470.815:3995): avc:  denied  { ioctl } for  pid=7583 comm="syz.2.475" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   85.278836][ T1339] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[   85.325782][   T40] audit: type=1400 audit(1760674471.045:3996): avc:  denied  { execute } for  pid=7585 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   85.333524][   T40] audit: type=1400 audit(1760674471.045:3997): avc:  denied  { execute_no_trans } for  pid=7585 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   85.343649][  T167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.410605][  T167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.418699][ T1339] usb 8-1: device descriptor read/64, error -71
[   85.478195][  T167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.496909][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.500580][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.503614][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.506674][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.510255][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.582934][  T167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.615248][ T7590] ipvlan2: entered allmulticast mode
[   85.616975][ T7590] team0: entered allmulticast mode
[   85.618726][ T7590] team_slave_0: entered allmulticast mode
[   85.620536][ T7590] team_slave_1: entered allmulticast mode
[   85.623084][ T7590] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   85.659415][ T1339] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[   85.668681][ T7586] chnl_net:caif_netlink_parms(): no params data found
[   85.808941][ T1339] usb 8-1: device descriptor read/64, error -71
[   85.833242][  T167] dvmrp0 (unregistering): left allmulticast mode
[   85.918926][ T1339] usb usb8-port1: attempt power cycle
[   85.941670][  T167] bond0 (unregistering): Released all slaves
[   85.976241][ T7603] overlayfs: failed to resolve './file1': -2
[   86.058289][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.061387][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.063659][ T7586] bridge_slave_0: entered allmulticast mode
[   86.066648][ T7586] bridge_slave_0: entered promiscuous mode
[   86.070010][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.072337][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.074584][ T7586] bridge_slave_1: entered allmulticast mode
[   86.077206][ T7586] bridge_slave_1: entered promiscuous mode
[   86.258720][ T1339] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[   86.260110][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.274982][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.279336][ T1339] usb 8-1: device descriptor read/8, error -71
[   86.320747][ T7586] team0: Port device team_slave_0 added
[   86.323998][ T7586] team0: Port device team_slave_1 added
[   86.365369][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.367597][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.377027][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.386391][  T167] hsr_slave_0: left promiscuous mode
[   86.389393][  T167] hsr_slave_1: left promiscuous mode
[   86.541517][ T1339] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[   86.559324][ T1339] usb 8-1: device descriptor read/8, error -71
[   86.668879][ T1339] usb usb8-port1: unable to enumerate USB device
[   87.088768][   T64] Bluetooth: hci1: command tx timeout
[   87.490127][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.493065][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.504064][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.558732][   T64] Bluetooth: hci0: command tx timeout
[   87.566018][ T7586] hsr_slave_0: entered promiscuous mode
[   87.569192][ T7586] hsr_slave_1: entered promiscuous mode
[   87.571414][ T7586] debugfs: 'hsr0' already exists in 'hsr'
[   87.573318][ T7586] Cannot create hsr debugfs directory
[   87.750711][ T7631] program syz.0.486 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.797992][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'.
[   87.922111][ T7642] overlayfs: missing 'lowerdir'
[   88.080760][ T7653] syz.3.491: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[   88.085724][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(full) 
[   88.085742][ T7653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   88.085750][ T7653] Call Trace:
[   88.085754][ T7653]  <TASK>
[   88.085759][ T7653]  dump_stack_lvl+0x16c/0x1f0
[   88.085787][ T7653]  warn_alloc+0x248/0x3a0
[   88.085803][ T7653]  ? __pfx_warn_alloc+0x10/0x10
[   88.085818][ T7653]  ? lockdep_hardirqs_on+0x7c/0x110
[   88.085848][ T7653]  ? kasan_save_stack+0x42/0x60
[   88.085867][ T7653]  ? kasan_save_stack+0x33/0x60
[   88.085885][ T7653]  ? kasan_save_track+0x14/0x30
[   88.085907][ T7653]  ? vb2_vmalloc_alloc+0xf9/0x3f0
[   88.085926][ T7653]  ? __vb2_queue_alloc+0x8c9/0x1280
[   88.085943][ T7653]  ? vb2_core_create_bufs+0x559/0xab0
[   88.085962][ T7653]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   88.085984][ T7653]  __vmalloc_node_range_noprof+0xfbc/0x1480
[   88.086020][ T7653]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   88.086047][ T7653]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.086085][ T7653]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   88.086105][ T7653]  vmalloc_user_noprof+0x9e/0xe0
[   88.086128][ T7653]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   88.086145][ T7653]  vb2_vmalloc_alloc+0x135/0x3f0
[   88.086162][ T7653]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[   88.086179][ T7653]  __vb2_queue_alloc+0x8c9/0x1280
[   88.086206][ T7653]  vb2_core_create_bufs+0x559/0xab0
[   88.086230][ T7653]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[   88.086257][ T7653]  ? __mutex_trylock_common+0xe9/0x250
[   88.086284][ T7653]  vb2_create_bufs+0x5e8/0x840
[   88.086305][ T7653]  ? __pfx_vb2_create_bufs+0x10/0x10
[   88.086332][ T7653]  ? __mutex_lock+0x1c5/0x1060
[   88.086353][ T7653]  ? v4l_sanitize_colorspace+0x213/0x400
[   88.086385][ T7653]  vb2_ioctl_create_bufs+0x244/0x3e0
[   88.086403][ T7653]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   88.086433][ T7653]  vidioc_create_bufs+0x7d/0xf0
[   88.086460][ T7653]  v4l_create_bufs+0x151/0x260
[   88.086484][ T7653]  __video_do_ioctl+0xb77/0xf00
[   88.086513][ T7653]  ? __might_fault+0xe3/0x190
[   88.086533][ T7653]  ? __pfx___video_do_ioctl+0x10/0x10
[   88.086566][ T7653]  video_usercopy+0x4d0/0x1720
[   88.086592][ T7653]  ? __pfx___video_do_ioctl+0x10/0x10
[   88.086616][ T7653]  ? selinux_kernel_read_file+0xf0/0x130
[   88.086640][ T7653]  ? __pfx_video_usercopy+0x10/0x10
[   88.086695][ T7653]  v4l2_ioctl+0x1bd/0x250
[   88.086721][ T7653]  ? __pfx_v4l2_ioctl+0x10/0x10
[   88.086747][ T7653]  __x64_sys_ioctl+0x18e/0x210
[   88.086770][ T7653]  do_syscall_64+0xcd/0xfa0
[   88.086793][ T7653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.086805][ T7653] RIP: 0033:0x7f33a5d8eec9
[   88.086815][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.086826][ T7653] RSP: 002b:00007f33a6c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   88.086836][ T7653] RAX: ffffffffffffffda RBX: 00007f33a5fe5fa0 RCX: 00007f33a5d8eec9
[   88.086843][ T7653] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000007
[   88.086850][ T7653] RBP: 00007f33a5e11f91 R08: 0000000000000000 R09: 0000000000000000
[   88.086856][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.086862][ T7653] R13: 00007f33a5fe6038 R14: 00007f33a5fe5fa0 R15: 00007fff454a5178
[   88.086877][ T7653]  </TASK>
[   88.086882][ T7653] Mem-Info:
[   88.198754][ T4246] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   88.199719][ T7653] active_anon:10507 inactive_anon:0 isolated_anon:0
[   88.199719][ T7653]  active_file:4499 inactive_file:50901 isolated_file:0
[   88.199719][ T7653]  unevictable:1768 dirty:39 writeback:0
[   88.199719][ T7653]  slab_reclaimable:12019 slab_unreclaimable:67799
[   88.199719][ T7653]  mapped:24727 shmem:2395 pagetables:1273
[   88.199719][ T7653]  sec_pagetables:304 bounce:0
[   88.199719][ T7653]  kernel_misc_reclaimable:0
[   88.199719][ T7653]  free:452292 free_pcp:17477 free_cma:0
[   88.230990][ T7653] Node 0 active_anon:42152kB inactive_anon:0kB active_file:17956kB inactive_file:203344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98820kB dirty:152kB writeback:0kB shmem:6044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12752kB pagetables:4988kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB
[   88.242916][ T7653] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.252686][ T7653] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.264450][ T7653] lowmem_reserve[]: 0 1236 1236 1236 1236
[   88.266947][ T7653] Node 0 DMA32 free:191500kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42276kB inactive_anon:0kB active_file:17956kB inactive_file:203344kB unevictable:3536kB writepending:152kB zspages:0kB present:2080628kB managed:1265700kB mlocked:0kB bounce:0kB free_pcp:53872kB local_pcp:11432kB free_cma:0kB
[   88.280562][ T7653] lowmem_reserve[]: 0 0 0 0 0
[   88.282666][ T7653] Node 1 Normal free:1602180kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:260kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16572kB local_pcp:2560kB free_cma:0kB
[   88.296059][ T7653] lowmem_reserve[]: 0 0 0 0 0
[   88.298166][ T7653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.302497][ T7653] Node 0 DMA32: 707*4kB (UM) 400*8kB (UME) 158*16kB (ME) 209*32kB (UME) 195*64kB (UME) 173*128kB (UME) 32*256kB (UME) 28*512kB (UME) 14*1024kB (UM) 7*2048kB (UM) 22*4096kB (UM) = 191180kB
[   88.309645][ T7653] Node 1 Normal: 5*4kB (UME) 6*8kB (UME) 8*16kB (ME) 18*32kB (UME) 12*64kB (UME) 9*128kB (UME) 4*256kB (UE) 4*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 388*4096kB (M) = 1602180kB
[   88.315823][ T7653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   88.319275][ T7653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.322326][ T7653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   88.325374][ T7653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.328317][ T7586] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.330912][ T7653] 57791 total pagecache pages
[   88.332413][ T7653] 0 pages in swap cache
[   88.333746][ T7653] Free swap  = 124996kB
[   88.335040][ T7653] Total swap = 124996kB
[   88.336432][ T7653] 1048443 pages RAM
[   88.337617][ T7653] 0 pages HighMem/MovableOnly
[   88.338315][ T7586] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.340330][ T7653] 282705 pages reserved
[   88.344035][ T7653] 0 pages cma reserved
[   88.345610][ T7586] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.351225][ T7586] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.352122][ T4246] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   88.356201][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.361174][ T4246] usb 5-1: Product: syz
[   88.362488][ T4246] usb 5-1: Manufacturer: syz
[   88.364115][ T4246] usb 5-1: SerialNumber: syz
[   88.372015][ T4246] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   88.388656][ T7673] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   88.392353][ T7672] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   88.398391][   T55] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   88.404042][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.414228][ T7586] 8021q: adding VLAN 0 to HW filter on device team0
[   88.417961][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.418012][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.422641][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.422726][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.524023][ T7586] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.524484][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'.
[   88.559861][ T7586] veth0_vlan: entered promiscuous mode
[   88.565589][ T7586] veth1_vlan: entered promiscuous mode
[   88.577050][ T7682] nbd: couldn't find device at index -1471568776
[   88.583083][ T7586] veth0_macvtap: entered promiscuous mode
[   88.590327][ T7586] veth1_macvtap: entered promiscuous mode
[   88.601154][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.608801][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.616301][  T167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.619768][  T167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.623550][  T167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.626977][  T167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.666327][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.669710][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.673154][ T7687] sp0: Synchronizing with TNC
[   88.691849][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.694352][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.767957][ T7698] netlink: 'syz.2.500': attribute type 2 has an invalid length.
[   88.771316][ T7698] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[   88.774013][ T7698] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[   88.844140][ T7704] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   88.846428][ T7704] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   88.958642][ T7715] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.994872][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.509'.
[   88.998065][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'.
[   89.011349][ T7723] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   89.058289][ T7731] binder: Bad value for 'max'
[   89.068238][ T7731] ip6t_srh: unknown srh match flags  4000
[   89.244395][ T7754] xt_bpf: check failed: parse error
[   89.288075][   T29] libceph: connect (1)[b::]:6789 error -101
[   89.290222][   T29] libceph: mon0 (1)[b::]:6789 connect error
[   89.335514][ T7764] netlink: 'syz.2.514': attribute type 10 has an invalid length.
[   89.344483][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.349821][ T7764] team0: Port device bond0 added
[   89.385618][ T7766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7766 comm=syz.3.515
[   89.429147][ T7754] ceph: No mds server is up or the cluster is laggy
[   89.478671][   T55] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[   89.482253][   T55] ath9k_htc: Failed to initialize the device
[   89.509587][   T55] usb 5-1: ath9k_htc: USB layer deinitialized
[   89.525007][ T7773] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   89.567532][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'.
[   89.574586][ T7776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.518'.
[   89.577779][ T7776] netlink: 'syz.2.518': attribute type 13 has an invalid length.
[   89.638954][   T64] Bluetooth: hci0: command tx timeout
[   89.650030][ T5936] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   89.651380][ T7779] program syz.2.519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.700585][   T40] kauditd_printk_skb: 49 callbacks suppressed
[   89.700602][   T40] audit: type=1400 audit(1760674475.425:4047): avc:  denied  { write } for  pid=7781 comm="syz.2.520" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   89.703011][ T7782] usb usb9: usbfs: process 7782 (syz.2.520) did not claim interface 7 before use
[   89.724275][   T55] usb 5-1: USB disconnect, device number 10
[   89.809073][ T7785] xt_CONNSECMARK: invalid mode: 66
[   89.815157][ T7786] xt_CONNSECMARK: invalid mode: 66
[   89.820947][ T5936] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   89.853647][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[   89.857969][ T7790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7790 comm=syz.2.522
[   89.904145][   T40] audit: type=1400 audit(1760674475.625:4048): avc:  denied  { create } for  pid=7791 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   89.917666][   T40] audit: type=1400 audit(1760674475.635:4049): avc:  denied  { setopt } for  pid=7791 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   90.023171][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'.
[   90.072754][ T7798] netlink: 'syz.2.525': attribute type 2 has an invalid length.
[   90.292697][   T40] audit: type=1400 audit(1760674476.015:4050): avc:  denied  { mount } for  pid=7802 comm="syz.3.527" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   90.347019][ T7810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7810 comm=syz.3.530
[   90.446395][   T40] audit: type=1400 audit(1760674476.165:4051): avc:  denied  { getopt } for  pid=7815 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   90.446970][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'.
[   90.453146][   T40] audit: type=1400 audit(1760674476.165:4052): avc:  denied  { create } for  pid=7816 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   90.470781][   T40] audit: type=1400 audit(1760674476.195:4053): avc:  denied  { audit_read } for  pid=7816 comm="syz.0.533" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   90.573847][   T40] audit: type=1400 audit(1760674476.295:4054): avc:  denied  { create } for  pid=7833 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   90.582324][   T40] audit: type=1400 audit(1760674476.295:4055): avc:  denied  { bind } for  pid=7833 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   90.648748][   T40] audit: type=1400 audit(1760674476.365:4056): avc:  denied  { read } for  pid=7838 comm="syz.0.539" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   90.769753][ T7841] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   90.772402][ T7841] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   90.779178][ T7841] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   90.783026][ T7841] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   90.787482][ T7841] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   90.790315][ T7841] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   90.800016][ T7841] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   90.805593][ T7841] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   90.808205][ T7841] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   90.814604][ T7841] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   90.819790][ T7841] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   90.822408][ T7841] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   90.826071][ T7841] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   90.867285][ T7849] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1
[   90.930613][ T7857] input: syz1 as /devices/virtual/input/input12
[   90.953334][ T7856] netlink: 'syz.3.544': attribute type 39 has an invalid length.
[   91.138774][ T7864] kvm: pic: single mode not supported
[   91.138966][ T7864] kvm: pic: level sensitive irq not supported
[   91.142484][ T7864] kvm: pic: non byte read
[   91.148803][ T7864] kvm: pic: non byte read
[   91.152229][ T7864] kvm: pic: non byte read
[   91.156107][ T7864] kvm: pic: non byte read
[   91.161759][ T7864] kvm: pic: non byte read
[   91.167651][ T7864] kvm: pic: level sensitive irq not supported
[   91.167972][ T7864] kvm: pic: non byte read
[   91.172919][ T7864] kvm: pic: non byte read
[   91.210910][ T7867] trusted_key: syz.3.548 sent an empty control message without MSG_MORE.
[   91.279611][ T7866] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   91.314269][ T7871] netlink: 'syz.3.550': attribute type 4 has an invalid length.
[   91.597414][ T7890] netlink: 108 bytes leftover after parsing attributes in process `syz.2.557'.
[   91.600407][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[   91.675472][ T7897] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[   91.819627][ T7896] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   91.856438][ T7910] xt_l2tp: unknown flags: 51
[   92.053228][ T7919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=6 sclass=netlink_tcpdiag_socket pid=7919 comm=syz.0.562
[   92.130825][ T7921] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[   92.354188][ T7929] tipc: Started in network mode
[   92.355778][ T7929] tipc: Node identity ac141403, cluster identity 3865
[   92.358236][ T7929] tipc: New replicast peer: 10.1.1.2
[   92.360215][ T7929] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.536433][ T7941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7941 comm=syz.3.573
[   92.550706][ T7926] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   92.749972][ T7954] tmpfs: Bad value for 'mpol'
[   92.788765][ T6006] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   92.839641][   T64] Bluetooth: hci0: command 0x0419 tx timeout
[   92.841050][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout
[   92.841111][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout
[   92.841170][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout
[   92.944660][ T6006] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   92.945130][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.952896][ T6006] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   92.955350][   T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.956842][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   92.959905][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.962756][ T6006] usb 5-1: SerialNumber: syz
[   92.965821][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.970885][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.097459][ T7971] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   93.098097][ T7962] chnl_net:caif_netlink_parms(): no params data found
[   93.102918][ T7971] SET target dimension over the limit!
[   93.131288][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.174257][ T6006] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[   93.187775][ T6006] usb 5-1: USB disconnect, device number 11
[   93.250328][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.280107][ T7981] vivid-001: disconnect
[   93.286436][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.292265][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.295319][ T7962] bridge_slave_0: entered allmulticast mode
[   93.299483][ T7962] bridge_slave_0: entered promiscuous mode
[   93.304310][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.307698][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.311517][ T7962] bridge_slave_1: entered allmulticast mode
[   93.316348][ T7962] bridge_slave_1: entered promiscuous mode
[   93.368339][ T7980] vivid-001: reconnect
[   93.396009][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.405184][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.406476][ T7994] ./bus: Can't lookup blockdev
[   93.426083][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.439449][ T7997] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   93.480067][   T54] tipc: Node number set to 2886996995
[   93.493863][ T7962] team0: Port device team_slave_0 added
[   93.499260][ T7962] team0: Port device team_slave_1 added
[   93.566135][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.575341][ T8010] gfs2: gfs2 mount does not exist
[   93.578861][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.581065][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.591146][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.597161][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.600487][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.611021][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.621607][ T8016] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[   93.642050][ T8015] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.709480][ T8015] vlan2: entered promiscuous mode
[   93.711700][ T8015] bond1: entered promiscuous mode
[   93.720003][ T7962] hsr_slave_0: entered promiscuous mode
[   93.723085][ T7962] hsr_slave_1: entered promiscuous mode
[   93.726027][ T7962] debugfs: 'hsr0' already exists in 'hsr'
[   93.728482][ T7962] Cannot create hsr debugfs directory
[   93.741114][ T8015] gretap1: entered promiscuous mode
[   93.763516][ T8028] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   93.820570][ T8034] __nla_validate_parse: 2 callbacks suppressed
[   93.820586][ T8034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'.
[   93.823010][ T8033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'.
[   93.856669][ T5938] Bluetooth: hci1: unexpected event for opcode 0x200c
[   93.949438][ T1152] bridge_slave_1: left allmulticast mode
[   93.951811][ T1152] bridge_slave_1: left promiscuous mode
[   93.955985][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.963526][ T1152] bridge_slave_0: left allmulticast mode
[   93.965871][ T1152] bridge_slave_0: left promiscuous mode
[   93.968257][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.218408][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.222618][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.227799][ T1152] bond0 (unregistering): Released all slaves
[   94.234546][ T1152] bond1 (unregistering): Released all slaves
[   94.286537][ T8055] Process accounting resumed
[   94.390637][ T8061] validate_nla: 1 callbacks suppressed
[   94.390653][ T8061] netlink: 'syz.2.607': attribute type 5 has an invalid length.
[   94.405708][ T7962] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.411081][ T7962] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.415394][ T7962] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.420555][ T7962] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.507025][ T8081] Cannot find del_set index 1 as target
[   94.524311][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.536418][ T7962] 8021q: adding VLAN 0 to HW filter on device team0
[   94.546373][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.548710][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.557962][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.560498][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.609521][ T1152] hsr_slave_0: left promiscuous mode
[   94.612354][ T1152] hsr_slave_1: left promiscuous mode
[   94.614744][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.617346][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.627574][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.632690][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.664018][ T1152] veth1_macvtap: left promiscuous mode
[   94.666283][ T1152] veth0_macvtap: left promiscuous mode
[   94.668168][ T1152] veth1_vlan: left promiscuous mode
[   94.670262][ T1152] veth0_vlan: left promiscuous mode
[   94.684971][ T8090] QAT: failed to copy from user cfg_data.
[   94.736462][ T8093] binder: 8091:8093 ioctl 8030560a 200000000180 returned -22
[   94.918783][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout
[   94.929771][ T5938] Bluetooth: hci0: command 0x0419 tx timeout
[   95.001481][ T5938] Bluetooth: hci2: command tx timeout
[   95.257833][ T1152] team0 (unregistering): Port device team_slave_1 removed
[   95.332741][   T40] kauditd_printk_skb: 53 callbacks suppressed
[   95.332751][   T40] audit: type=1400 audit(1760674481.055:4110): avc:  denied  { mounton } for  pid=8099 comm="syz.3.615" path="/192/file0" dev="proc" ino=4026533245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[   95.341983][   T40] audit: type=1400 audit(1760674481.055:4111): avc:  denied  { mount } for  pid=8099 comm="syz.3.615" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   95.352714][ T1152] team0 (unregistering): Port device team_slave_0 removed
[   95.359342][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'.
[   95.796198][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[   95.799106][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[   95.802988][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[   95.805924][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[   95.847960][ T8104] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[   95.856579][ T8104] exFAT-fs (nullb0): invalid boot record signature
[   95.861083][ T8104] exFAT-fs (nullb0): failed to read boot sector
[   95.863729][ T8104] exFAT-fs (nullb0): failed to recognize exfat type
[   95.868139][   T40] audit: type=1400 audit(1760674481.585:4112): avc:  denied  { create } for  pid=8106 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   95.870785][ T8102] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[   95.873333][ T8104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   95.873354][ T8104] overlayfs: missing 'lowerdir'
[   95.878295][   T40] audit: type=1400 audit(1760674481.595:4113): avc:  denied  { connect } for  pid=8106 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   95.904107][ T8102] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.915528][ T8102] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   95.927776][ T8102] bond2: entered allmulticast mode
[   95.930730][   T40] audit: type=1400 audit(1760674481.655:4114): avc:  denied  { bind } for  pid=8106 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   95.931004][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8111 comm=syz.0.619
[   95.937182][   T40] audit: type=1400 audit(1760674481.655:4115): avc:  denied  { listen } for  pid=8106 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   95.945529][ T8102] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   96.006812][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.042864][ T8121] SELinux: syz.2.622 (8121) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   96.172673][ T8133] cgroup: Name too long
[   96.177257][ T8136] program syz.0.624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   96.202996][ T7962] veth0_vlan: entered promiscuous mode
[   96.207966][ T7962] veth1_vlan: entered promiscuous mode
[   96.223058][ T7962] veth0_macvtap: entered promiscuous mode
[   96.226881][ T7962] veth1_macvtap: entered promiscuous mode
[   96.236216][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.243291][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.249067][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.251714][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.255344][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.258168][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.297733][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.301045][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.307091][   T40] audit: type=1400 audit(1760674482.025:4116): avc:  denied  { ioctl } for  pid=8141 comm="syz.3.625" path="socket:[22985]" dev="sockfs" ino=22985 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   96.321989][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.324557][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.364697][ T8150] netlink: 27 bytes leftover after parsing attributes in process `syz.4.577'.
[   96.370774][ T8152] netlink: 68 bytes leftover after parsing attributes in process `syz.0.626'.
[   96.393613][ T8154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.627'.
[   96.482798][   T40] audit: type=1400 audit(1760674482.205:4117): avc:  denied  { setopt } for  pid=8172 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   96.515948][   T40] audit: type=1400 audit(1760674482.235:4118): avc:  denied  { unmount } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   96.536116][ T8179] openvswitch: netlink: IP tunnel dst address not specified
[   96.593475][ T8183] 9pnet_fd: Insufficient options for proto=fd
[   96.998967][ T5938] Bluetooth: hci0: command 0x0419 tx timeout
[   96.999404][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   97.078771][   T64] Bluetooth: hci2: command tx timeout
[   97.085992][   T40] audit: type=1400 audit(1760674482.805:4119): avc:  denied  { connect } for  pid=8198 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   97.184900][   T64] Bluetooth: hci3: ACL packet for unknown connection handle 201
[   97.274024][ T8227] program syz.4.644 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.292089][ T1183] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[   97.298123][ T1183] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[   97.302240][ T1183] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[   97.305710][ T1183] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[   97.331052][ T8233] binder: 8232:8233 ioctl c0306201 2000000003c0 returned -14
[   97.381718][ T8235] syzkaller0: entered promiscuous mode
[   97.384546][ T8235] syzkaller0: entered allmulticast mode
[   97.816628][  T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.821579][  T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.838767][   T54] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[   97.958017][  T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.964484][  T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.990390][   T54] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.994110][   T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   97.996879][   T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[   98.000532][   T54] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   98.003351][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.007907][ T8249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   98.011872][   T54] hub 8-1:1.0: bad descriptor, ignoring hub
[   98.013829][   T54] hub 8-1:1.0: probe with driver hub failed with error -5
[   98.016378][   T54] cdc_wdm 8-1:1.0: skipping garbage
[   98.018213][   T54] cdc_wdm 8-1:1.0: skipping garbage
[   98.022029][   T54] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   98.024010][   T54] cdc_wdm 8-1:1.0: Unknown control protocol
[   98.033009][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.040741][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.043810][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.046730][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.050352][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.057956][  T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.061752][  T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.142889][  T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.146146][  T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.205369][ T8264] chnl_net:caif_netlink_parms(): no params data found
[   98.264445][ T1152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.303580][ T1152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.308650][ T1152] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.312449][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.315083][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.317474][ T8264] bridge_slave_0: entered allmulticast mode
[   98.321543][ T8264] bridge_slave_0: entered promiscuous mode
[   98.324777][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.327547][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.330615][ T8264] bridge_slave_1: entered allmulticast mode
[   98.333623][ T8264] bridge_slave_1: entered promiscuous mode
[   98.350116][ T1152] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.414902][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.424753][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.428794][  T102] bridge_slave_1: left allmulticast mode
[   98.431858][  T102] bridge_slave_1: left promiscuous mode
[   98.434363][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.439492][  T102] bridge_slave_0: left allmulticast mode
[   98.441419][  T102] bridge_slave_0: left promiscuous mode
[   98.443345][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.736316][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.741544][  T102] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[   98.744992][  T102] bond0 (unregistering): Released all slaves
[   98.753405][  T102] bond1 (unregistering): Released all slaves
[   98.760195][  T102] bond2 (unregistering): Released all slaves
[   98.795458][ T8264] team0: Port device team_slave_0 added
[   98.804461][ T8264] team0: Port device team_slave_1 added
[   98.842452][ T8288] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[   98.860666][  T102] : left promiscuous mode
[   98.876100][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.877821][ T8295] netlink: 'syz.4.662': attribute type 10 has an invalid length.
[   98.879394][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.882208][ T8295] __nla_validate_parse: 12 callbacks suppressed
[   98.882219][ T8295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.662'.
[   98.894047][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.902578][ T8295] dummy0: entered promiscuous mode
[   98.905780][ T8295] bridge0: port 3(dummy0) entered blocking state
[   98.907848][ T8295] bridge0: port 3(dummy0) entered disabled state
[   98.910670][ T8295] dummy0: entered allmulticast mode
[   98.913542][ T8295] bridge0: port 3(dummy0) entered blocking state
[   98.915545][ T8295] bridge0: port 3(dummy0) entered forwarding state
[   98.918972][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.921878][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.930632][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.939264][  T102] tipc: Left network mode
[   98.997818][ T8264] hsr_slave_0: entered promiscuous mode
[   99.000552][ T8264] hsr_slave_1: entered promiscuous mode
[   99.002724][ T8264] debugfs: 'hsr0' already exists in 'hsr'
[   99.004571][ T8264] Cannot create hsr debugfs directory
[   99.088728][ T5938] Bluetooth: hci0: command 0x0419 tx timeout
[   99.146552][ T8264] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   99.149034][ T8264] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   99.160108][ T8264] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   99.168708][ T5938] Bluetooth: hci2: command tx timeout
[   99.169770][ T8264] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.176505][  T102] hsr_slave_0: left promiscuous mode
[   99.176987][  T102] hsr_slave_1: left promiscuous mode
[   99.195578][  T102] veth1_macvtap: left promiscuous mode
[   99.195680][  T102] veth0_macvtap: left promiscuous mode
[   99.408382][ T8313] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   99.733833][  T102] team_slave_1 (unregistering): left allmulticast mode
[   99.737276][  T102] team0 (unregistering): Port device team_slave_1 removed
[   99.807361][  T102] team_slave_0 (unregistering): left allmulticast mode
[   99.811973][  T102] team0 (unregistering): Port device team_slave_0 removed
[  100.120991][ T5938] Bluetooth: hci1: command tx timeout
[  100.316499][ T8312] team_slave_0: mtu less than device minimum
[  100.367882][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.388378][ T8264] 8021q: adding VLAN 0 to HW filter on device team0
[  100.401088][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.403905][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.417357][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.420510][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.521625][ T8338] netlink: 14 bytes leftover after parsing attributes in process `syz.4.668'.
[  100.521785][ T8339] netlink: 14 bytes leftover after parsing attributes in process `syz.4.668'.
[  100.609899][ T8338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.615838][ T8338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.620672][ T8338] bond0 (unregistering): Released all slaves
[  100.643449][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.717325][ T8348] input: syz0 as /devices/virtual/input/input13
[  100.748816][ T1339] usb 8-1: USB disconnect, device number 10
[  100.838089][ T8264] veth0_vlan: entered promiscuous mode
[  100.845127][ T8264] veth1_vlan: entered promiscuous mode
[  100.863081][ T8264] veth0_macvtap: entered promiscuous mode
[  100.869035][ T8264] veth1_macvtap: entered promiscuous mode
[  100.877722][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.886252][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.892539][  T102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.899529][  T102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.905242][  T102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.908175][  T102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.942119][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.945366][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.961674][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.964188][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.025169][ T8363] XFS (nbd5): SB validate failed with error -5.
[  101.195486][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'.
[  101.200266][ T8379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8379 comm=syz.3.678
[  101.244100][ T5938] Bluetooth: hci2: command tx timeout
[  101.358685][   T55] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  101.366970][ T8388] team0 (unregistering): Port device team_slave_0 removed
[  101.374528][ T8388] team0 (unregistering): Port device team_slave_1 removed
[  101.405268][ T8403] sctp: [Deprecated]: syz.5.686 (pid 8403) Use of int in maxseg socket option.
[  101.405268][ T8403] Use struct sctp_assoc_value instead
[  101.412481][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  101.412491][   T40] audit: type=1400 audit(1760674487.135:4131): avc:  denied  { read } for  pid=8402 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  101.422286][   T40] audit: type=1400 audit(1760674487.135:4132): avc:  denied  { setattr } for  pid=8402 comm="syz.5.686" name="SCTP" dev="sockfs" ino=23318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  101.508676][   T55] usb 7-1: Using ep0 maxpacket: 8
[  101.511437][   T55] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.515532][   T55] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.519023][   T55] usb 7-1: config 0 interface 0 has no altsetting 0
[  101.521233][   T55] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  101.524710][   T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.530858][   T55] usb 7-1: config 0 descriptor??
[  101.660458][ T8423] overlayfs: missing 'lowerdir'
[  101.665234][   T40] audit: type=1400 audit(1760674487.385:4133): avc:  denied  { bind } for  pid=8425 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  101.699140][   T40] audit: type=1400 audit(1760674487.415:4134): avc:  denied  { setattr } for  pid=8428 comm="syz.4.696" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  101.778175][ T8432] netlink: 'syz.4.697': attribute type 1 has an invalid length.
[  101.780798][ T8432] netlink: 'syz.4.697': attribute type 101 has an invalid length.
[  101.783188][ T8432] netlink: 232 bytes leftover after parsing attributes in process `syz.4.697'.
[  101.868730][ T6006] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  101.875128][   T40] audit: type=1400 audit(1760674487.595:4135): avc:  denied  { write } for  pid=8438 comm="syz.4.700" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  101.921211][ T8441] Bluetooth: MGMT ver 1.23
[  101.944014][   T40] audit: type=1400 audit(1760674487.665:4136): avc:  denied  { setopt } for  pid=8374 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  102.021299][ T6006] usb 10-1: Using ep0 maxpacket: 32
[  102.025403][ T6006] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  102.028497][ T6006] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  102.032343][ T6006] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  102.035279][ T6006] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  102.038327][ T6006] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  102.042317][ T6006] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  102.045874][ T6006] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  102.049207][ T6006] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  102.054090][ T6006] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  102.056912][ T6006] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.061770][ T6006] usb 10-1: config 0 descriptor??
[  102.063995][ T8421] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  102.102730][ T8465] netlink: 'syz.3.704': attribute type 4 has an invalid length.
[  102.105282][ T8465] netlink: 17 bytes leftover after parsing attributes in process `syz.3.704'.
[  102.152636][   T55] usbhid 7-1:0.0: can't add hid device: -71
[  102.154567][   T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  102.163170][   T55] usb 7-1: USB disconnect, device number 7
[  102.175751][   T40] audit: type=1400 audit(1760674487.895:4137): avc:  denied  { listen } for  pid=8477 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  102.208679][ T5938] Bluetooth: hci1: command tx timeout
[  102.236245][ T8481] geneve1: entered allmulticast mode
[  102.272045][ T6006] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  102.352271][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'.
[  102.360062][ T8483] bridge0: port 3(dummy0) entered disabled state
[  102.368876][   T29] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[  102.370056][ T8483] dummy0 (unregistering): left allmulticast mode
[  102.373902][ T8483] bridge0: port 3(dummy0) entered disabled state
[  102.403261][ T8484] netlink: 120 bytes leftover after parsing attributes in process `syz.4.707'.
[  102.406074][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'.
[  102.410798][ T8484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  102.413559][ T8484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  102.470047][   T40] audit: type=1400 audit(1760674488.195:4138): avc:  denied  { read write } for  pid=8420 comm="syz.5.693" name="lp0" dev="devtmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  102.472570][    C2] usblp0: nonzero read bulk status received: -71
[  102.477374][   T40] audit: type=1400 audit(1760674488.195:4139): avc:  denied  { open } for  pid=8420 comm="syz.5.693" path="/dev/usb/lp0" dev="devtmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  102.481513][   T55] usb 10-1: USB disconnect, device number 2
[  102.491081][   T55] usblp0: removed
[  102.531817][   T29] usb 8-1: config 0 has no interfaces?
[  102.534120][   T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  102.537827][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.543359][   T29] usb 8-1: config 0 descriptor??
[  102.766387][   T40] audit: type=1400 audit(1760674488.485:4140): avc:  denied  { setopt } for  pid=8462 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  102.822120][   T29] usb 8-1: USB disconnect, device number 11
[  102.951632][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.713'.
[  102.976611][ T8513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8513 comm=syz.4.714
[  103.340364][ T8535] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  103.399163][   T29] IPVS: starting estimator thread 0...
[  103.489787][ T8546] IPVS: using max 23 ests per chain, 55200 per kthread
[  103.577696][ T8568] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.584631][ T8566] nbd: must specify at least one socket
[  103.788709][   T29] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  103.956934][ T8591] __nla_validate_parse: 1 callbacks suppressed
[  103.956954][ T8591] netlink: 32 bytes leftover after parsing attributes in process `syz.5.738'.
[  103.961154][   T29] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  103.967045][   T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.971749][   T29] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  103.975064][   T29] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  103.977514][   T29] usb 8-1: Manufacturer: syz
[  103.981684][   T29] usb 8-1: config 0 descriptor??
[  104.028803][   T29] rc_core: IR keymap rc-hauppauge not found
[  104.030709][   T29] Registered IR keymap rc-empty
[  104.033085][   T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[  104.037604][   T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input15
[  104.278717][ T5938] Bluetooth: hci1: command tx timeout
[  104.303475][ T8619] netlink: 'syz.3.727': attribute type 178 has an invalid length.
[  104.318814][ T8621] EXT4-fs (nbd2): unable to read superblock
[  104.327998][ T8621] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  104.370293][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.745'.
[  104.443905][ T8633] cgroup: fork rejected by pids controller in /syz4
[  104.457743][ T8633] tipc: Started in network mode
[  104.460570][ T8633] tipc: Node identity e6d296d15de2, cluster identity 4711
[  104.462881][ T8633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.465454][ T8633] syzkaller0: entered promiscuous mode
[  104.467227][ T8633] syzkaller0: entered allmulticast mode
[  104.471859][ T8633] tipc: Resetting bearer <eth:syzkaller0>
[  104.475397][ T8632] tipc: Resetting bearer <eth:syzkaller0>
[  104.487176][ T8632] tipc: Disabling bearer <eth:syzkaller0>
[  104.604521][ T8642] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  104.611980][ T8642] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock
[  104.616485][ T8642] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  104.619782][ T8642] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock
[  104.800668][ T1212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.805318][ T1212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.940611][ T1212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.944849][ T1212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.008686][ T4246] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  105.082155][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.087084][   T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.091073][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.096459][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.100192][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.111333][ T1212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.115644][ T1212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.158969][ T4246] usb 7-1: Using ep0 maxpacket: 16
[  105.162100][ T4246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.165867][ T4246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.169598][ T4246] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  105.174019][ T4246] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  105.177016][ T4246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.181222][ T4246] usb 7-1: config 0 descriptor??
[  105.222135][ T1212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.226251][ T1212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.270128][ T8657] chnl_net:caif_netlink_parms(): no params data found
[  105.370749][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.373411][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.376003][ T8657] bridge_slave_0: entered allmulticast mode
[  105.380708][ T8657] bridge_slave_0: entered promiscuous mode
[  105.392273][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.394577][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.397465][ T8657] bridge_slave_1: entered allmulticast mode
[  105.401447][ T8657] bridge_slave_1: entered promiscuous mode
[  105.454370][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.460270][ T1212] bridge_slave_1: left allmulticast mode
[  105.462226][ T1212] bridge_slave_1: left promiscuous mode
[  105.464151][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.470904][ T1212] bridge_slave_0: left allmulticast mode
[  105.473190][ T1212] bridge_slave_0: left promiscuous mode
[  105.475677][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.599547][ T4246] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  105.602356][ T4246] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  105.605194][ T4246] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  105.607741][ T4246] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  105.611481][ T4246] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  105.621266][ T4246] input: HID 0955:7214 Haptics as /devices/virtual/input/input16
[  105.665259][ T4246] shield 0003:0955:7214.0006: Registered Thunderstrike controller
[  105.668240][ T4246] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  105.694476][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.748389][ T8657] team0: Port device team_slave_0 added
[  105.754118][ T8657] team0: Port device team_slave_1 added
[  105.789210][ T1212] tipc: Left network mode
[  105.793490][ T8652] netlink: 'syz.2.753': attribute type 2 has an invalid length.
[  105.795875][ T8652] netlink: 244 bytes leftover after parsing attributes in process `syz.2.753'.
[  105.831088][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.833462][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.842904][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.847148][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.849915][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.857708][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.902774][ T6100] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  105.907630][ T5996] usb 7-1: USB disconnect, device number 8
[  105.911607][ T6100] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  105.920617][ T6100] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  105.924978][ T6100] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  105.942500][ T8657] hsr_slave_0: entered promiscuous mode
[  105.944876][ T8657] hsr_slave_1: entered promiscuous mode
[  105.970527][ T1212] hsr_slave_0: left promiscuous mode
[  105.972858][ T1212] hsr_slave_1: left promiscuous mode
[  105.974856][ T1212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.977143][ T1212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.980280][ T1212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.982811][ T1212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.003122][ T1212] veth1_macvtap: left promiscuous mode
[  106.005504][ T1212] veth0_macvtap: left promiscuous mode
[  106.007856][ T1212] veth1_vlan: left promiscuous mode
[  106.010188][ T1212] veth0_vlan: left promiscuous mode
[  106.020403][ T8675] CUSE: info not properly terminated
[  106.446780][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  106.446792][   T40] audit: type=1400 audit(1760674492.165:4147): avc:  denied  { read write } for  pid=8680 comm="syz.2.760" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  106.450794][ T6025] hid-generic 000C:0007:000C.0007: unknown main item tag 0x5
[  106.457281][   T40] audit: type=1400 audit(1760674492.165:4148): avc:  denied  { open } for  pid=8680 comm="syz.2.760" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  106.459189][ T6025] hid-generic 000C:0007:000C.0007: unexpected long global item
[  106.470997][ T6025] hid-generic 000C:0007:000C.0007: probe with driver hid-generic failed with error -22
[  106.497409][ T8681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.760'.
[  106.566905][ T5997] usb 8-1: USB disconnect, device number 12
[  106.601881][ T8686] netlink: 'syz.3.761': attribute type 1 has an invalid length.
[  106.604911][ T8686] netlink: 212 bytes leftover after parsing attributes in process `syz.3.761'.
[  106.607945][ T8686] netlink: 'syz.3.761': attribute type 1 has an invalid length.
[  107.160244][   T64] Bluetooth: hci2: command tx timeout
[  107.174985][   T40] audit: type=1400 audit(1760674492.895:4149): avc:  denied  { read write } for  pid=8691 comm="syz.3.763" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  107.183054][   T40] audit: type=1400 audit(1760674492.895:4150): avc:  denied  { open } for  pid=8691 comm="syz.3.763" path="/228/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  107.191257][   T40] audit: type=1400 audit(1760674492.895:4151): avc:  denied  { ioctl } for  pid=8691 comm="syz.3.763" path="/228/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  107.288778][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.766'.
[  107.417671][   T40] audit: type=1400 audit(1760674493.135:4152): avc:  denied  { write } for  pid=8708 comm="syz.3.769" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  107.464268][   T40] audit: type=1400 audit(1760674493.185:4153): avc:  denied  { setattr } for  pid=8711 comm="syz.3.770" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  107.473219][   T40] audit: type=1400 audit(1760674493.195:4154): avc:  denied  { ioctl } for  pid=8711 comm="syz.3.770" path="socket:[24563]" dev="sockfs" ino=24563 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  107.504890][ T8712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  107.511388][ T8717] batadv_slave_1: entered promiscuous mode
[  107.514595][ T8716] batadv_slave_1: left promiscuous mode
[  107.551158][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.774'.
[  107.553163][ T8719] netlink: 'syz.2.773': attribute type 2 has an invalid length.
[  107.557221][ T8719] netlink: 134312 bytes leftover after parsing attributes in process `syz.2.773'.
[  107.562829][ T8719] nbd: must specify a device to reconfigure
[  107.625263][ T8729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.776'.
[  107.626175][ T8727] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  107.797144][ T1212] IPVS: stop unused estimator thread 0...
[  107.802342][   T40] audit: type=1400 audit(1760674493.525:4155): avc:  denied  { watch_reads } for  pid=8745 comm="syz.2.780" path="/73" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  107.863994][ T8657] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  107.868441][ T8657] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.873783][ T8657] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.880266][ T8657] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.925522][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.934606][ T8657] 8021q: adding VLAN 0 to HW filter on device team0
[  107.973634][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.975911][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.985085][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.987341][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.060280][   T40] audit: type=1400 audit(1760674493.785:4156): avc:  denied  { read } for  pid=8758 comm="syz.2.784" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  108.085989][ T8764] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  108.092259][ T8764] block device autoloading is deprecated and will be removed.
[  108.101992][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.137160][ T6141] IPVS: starting estimator thread 0...
[  108.165079][ T8762] netlink: 360 bytes leftover after parsing attributes in process `syz.5.782'.
[  108.198975][ T6006] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  108.248746][ T8771] IPVS: using max 45 ests per chain, 108000 per kthread
[  108.318537][ T8782] FAT-fs (loop5): unable to read boot sector
[  108.320778][ T8657] veth0_vlan: entered promiscuous mode
[  108.331724][ T8657] veth1_vlan: entered promiscuous mode
[  108.352697][ T8657] veth0_macvtap: entered promiscuous mode
[  108.357474][ T8657] veth1_macvtap: entered promiscuous mode
[  108.369043][ T6006] usb 8-1: Using ep0 maxpacket: 8
[  108.375589][ T6006] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  108.378285][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.380487][ T6006] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  108.386373][ T6006] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  108.392162][ T6006] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.392656][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.397231][ T6006] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  108.403273][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.410312][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.413693][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.426242][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.431084][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.485049][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.487426][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.507409][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.511420][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.621678][ T8757] bridge5: entered allmulticast mode
[  108.625387][ T6006] usb 8-1: GET_CAPABILITIES returned 0
[  108.627277][ T6006] usbtmc 8-1:16.0: can't read capabilities
[  108.836337][    C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  108.847990][ T8757] bridge6: entered allmulticast mode
[  108.854541][   T54] usb 8-1: USB disconnect, device number 13
[  108.989717][ T8817] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  109.098283][ T8824] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  109.248776][   T64] Bluetooth: hci2: command tx timeout
[  109.405461][ T8847] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  109.409653][ T8847] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  109.413766][ T8847] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  109.445545][ T8849] netlink: 'syz.5.806': attribute type 5 has an invalid length.
[  110.062554][ T8874] xt_hashlimit: invalid interval
[  110.242376][ T8887] netlink: 'syz.2.820': attribute type 15 has an invalid length.
[  110.245691][ T8887] __nla_validate_parse: 3 callbacks suppressed
[  110.245705][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'.
[  110.345633][ T8896] netlink: 'syz.4.823': attribute type 12 has an invalid length.
[  110.346256][   T64] Bluetooth: hci3: unexpected event for opcode 0x2031
[  110.348098][ T8896] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.823'.
[  110.650653][ T8923] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  110.671009][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.835'.
[  110.816061][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'.
[  110.819974][ T8927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.836'.
[  110.919479][ T8943] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  110.985125][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'.
[  111.026438][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.845'.
[  111.050314][ T8970] /dev/sg0: Can't lookup blockdev
[  111.159348][ T8980] bond1: Unable to set up delay as MII monitoring is disabled
[  111.163603][ T8980] bond1 (unregistering): Released all slaves
[  111.273334][ T8987] tls_set_device_offload_rx: netdev not found
[  111.319117][   T64] Bluetooth: hci2: command tx timeout
[  111.563592][ T8995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.854'.
[  111.620260][   T40] kauditd_printk_skb: 51 callbacks suppressed
[  111.620275][   T40] audit: type=1400 audit(1760674497.345:4208): avc:  denied  { mount } for  pid=8996 comm="syz.3.855" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  111.621350][   T64] Bluetooth: hci3: SCO packet for unknown connection handle 201
[  111.625734][   T40] audit: type=1400 audit(1760674497.345:4209): avc:  denied  { create } for  pid=8996 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  111.637034][ T8997] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  111.642386][   T40] audit: type=1400 audit(1760674497.355:4210): avc:  denied  { setopt } for  pid=8996 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  111.653914][   T40] audit: type=1400 audit(1760674497.355:4211): avc:  denied  { append } for  pid=8996 comm="syz.3.855" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  111.694042][   T40] audit: type=1400 audit(1760674497.415:4212): avc:  denied  { unmount } for  pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  111.711796][   T40] audit: type=1400 audit(1760674497.435:4213): avc:  denied  { listen } for  pid=8998 comm="syz.4.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  111.853878][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.857452][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.862826][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.866819][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.871815][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.875063][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.878192][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.882110][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.885989][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.890036][ T9011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.931319][ T9015] netlink: 92 bytes leftover after parsing attributes in process `syz.4.860'.
[  111.960571][   T40] audit: type=1400 audit(1760674497.685:4214): avc:  denied  { bind } for  pid=9016 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  111.962309][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'.
[  111.974033][ T9019] No source specified
[  111.977351][   T40] audit: type=1400 audit(1760674497.695:4215): avc:  denied  { setattr } for  pid=9018 comm="syz.3.861" name="SMC" dev="sockfs" ino=30109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  112.024020][ T9021] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  112.091318][ T9030] bond3: Removing last arp target with arp_interval on
[  112.251640][   T40] audit: type=1400 audit(1760674497.975:4216): avc:  denied  { mounton } for  pid=9061 comm="syz.4.874" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  112.260977][   T40] audit: type=1400 audit(1760674497.975:4217): avc:  denied  { mount } for  pid=9061 comm="syz.4.874" name="/" dev="pstore" ino=5352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  112.320676][ T9077] veth0_macvtap: left promiscuous mode
[  112.322786][ T9074] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  112.326930][ T9074] block device autoloading is deprecated and will be removed.
[  112.412813][ T9082] sg_read: process 107 (syz.4.880) changed security contexts after opening file descriptor, this is not allowed.
[  112.666793][ T9094] bridge0: entered promiscuous mode
[  112.669572][ T9094] macsec1: entered allmulticast mode
[  112.671482][ T9094] bridge0: entered allmulticast mode
[  112.674875][ T9094] bridge0: port 3(macsec1) entered blocking state
[  112.677410][ T9094] bridge0: port 3(macsec1) entered disabled state
[  112.686007][ T9094] bridge0: left allmulticast mode
[  112.688156][ T9094] bridge0: left promiscuous mode
[  112.691115][  T841] usb 8-1: new low-speed USB device number 14 using dummy_hcd
[  112.718707][ T5997] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  112.850796][  T841] usb 8-1: config 0 has no interfaces?
[  112.853194][  T841] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  112.856330][  T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.870340][  T841] usb 8-1: config 0 descriptor??
[  112.884031][ T5997] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  112.887633][ T5997] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  112.897793][ T5997] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  112.903743][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.907796][ T9089] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  112.913096][ T5997] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  113.090236][ T9084] netlink: 'syz.3.881': attribute type 32 has an invalid length.
[  113.093762][ T9084] tmpfs: Unknown parameter '0xffffffffffffffff'
[  113.324084][  T841] usb 8-1: USB disconnect, device number 14
[  113.383229][ T9089] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  113.387372][ T6100] usb 7-1: USB disconnect, device number 9
[  113.399849][   T64] Bluetooth: hci2: command tx timeout
[  113.748664][ T8789] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  113.768682][ T6100] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  113.768766][   T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  113.911037][ T8789] usb 10-1: unable to get BOS descriptor or descriptor too short
[  113.914273][ T8789] usb 10-1: no configurations
[  113.916147][ T8789] usb 10-1: can't read configurations, error -22
[  113.929146][ T6100] usb 7-1: Using ep0 maxpacket: 8
[  113.930407][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.932810][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  113.935333][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.939928][ T6100] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  113.943077][   T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  113.945897][ T6100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.952994][   T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.960793][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.961864][ T6100] usb 7-1: config 0 descriptor??
[  113.966210][   T29] usb 9-1: config 0 descriptor??
[  114.170243][ T6100] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  114.298755][   T54] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  114.379638][   T29] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  114.454250][   T54] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  114.457534][   T54] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  114.461107][   T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  114.464772][   T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  114.469741][   T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  114.475592][   T54] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  114.480983][   T54] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  114.483684][   T54] usb 8-1: Product: syz
[  114.485003][   T54] usb 8-1: Manufacturer: syz
[  114.493058][   T54] cdc_wdm 8-1:1.0: skipping garbage
[  114.494822][   T54] cdc_wdm 8-1:1.0: skipping garbage
[  114.497624][   T54] cdc_wdm 8-1:1.0: cdc-wdm2: USB WDM device
[  114.499699][   T54] cdc_wdm 8-1:1.0: Unknown control protocol
[  114.576990][   T29] usb 9-1: USB disconnect, device number 2
[  114.643033][ T6006] usb 7-1: USB disconnect, device number 10
[  114.742851][ T5996] usb 8-1: USB disconnect, device number 15
[  114.743368][ T9170] Failed to initialize the IGMP autojoin socket (err -2)
[  114.924201][ T9180] tipc: Failed to obtain node identity
[  114.926047][ T9180] tipc: Enabling of bearer <ib:ip6gretap0> rejected, failed to enable media
[  115.269523][ T9207] __nla_validate_parse: 7 callbacks suppressed
[  115.269540][ T9207] netlink: 44 bytes leftover after parsing attributes in process `syz.4.918'.
[  115.276104][ T9207] netem: unknown loss type 12
[  115.280769][ T9207] netem: change failed
[  115.429694][ T9215] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  115.473542][ T9233] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[  115.526628][ T9242] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[  115.750301][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'.
[  115.837000][ T9280] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  115.837390][ T9281] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  115.917209][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'.
[  115.921078][   T54] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  115.929639][ T9292] netlink: 68 bytes leftover after parsing attributes in process `syz.2.948'.
[  115.962287][ T5938] Bluetooth: hci1: command tx timeout
[  116.090681][   T54] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  116.094088][   T54] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  116.101664][   T54] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  116.110533][   T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.113177][   T54] usb 9-1: Product: à°Š
[  116.114506][   T54] usb 9-1: Manufacturer: �
[  116.115992][   T54] usb 9-1: SerialNumber: Ñ…
[  116.131584][ T9272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  116.134145][ T9272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  116.183991][ T9314] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  116.191549][ T9314] bond5 (unregistering): Released all slaves
[  116.223554][ T9319] netlink: 'syz.3.960': attribute type 29 has an invalid length.
[  116.227174][ T9320] futex_wake_op: syz.5.956 tries to shift op by -1; fix this program
[  116.343968][   T54] usb 9-1: USB disconnect, device number 3
[  116.357822][ T9334] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in;
[  116.357822][ T9334]    program syz.2.963 not setting count and/or reply_len properly
[  116.461371][ T9343] netlink: 'syz.2.965': attribute type 33 has an invalid length.
[  116.461404][ T9344] netlink: 'syz.2.965': attribute type 33 has an invalid length.
[  116.463906][ T9343] netlink: 152 bytes leftover after parsing attributes in process `syz.2.965'.
[  116.469582][ T9344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.965'.
[  116.614769][ T6037] bond0: (slave syz_tun): Releasing backup interface
[  116.733805][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.738364][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.743411][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  116.835025][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.838492][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.842814][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  116.895792][ T5930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  116.899416][ T5930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  116.902393][ T5930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  116.905709][ T5930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  116.912503][ T5930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  116.918947][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.922090][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.925826][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  116.936006][ T9361] Failed to initialize the IGMP autojoin socket (err -2)
[  116.993786][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.997836][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.002353][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  117.078811][ T9366] net_ratelimit: 58 callbacks suppressed
[  117.078822][ T9366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.097514][ T9361] chnl_net:caif_netlink_parms(): no params data found
[  117.305828][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.308129][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.310607][ T9361] bridge_slave_0: entered allmulticast mode
[  117.333426][ T9361] bridge_slave_0: entered promiscuous mode
[  117.336988][   T12] bridge_slave_1: left allmulticast mode
[  117.340931][   T12] bridge_slave_1: left promiscuous mode
[  117.344506][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.351167][   T12] bridge_slave_0: left allmulticast mode
[  117.353102][   T12] bridge_slave_0: left promiscuous mode
[  117.354930][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.517229][   T12] dvmrp0 (unregistering): left allmulticast mode
[  117.858820][   T54] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  118.008665][   T54] usb 9-1: Using ep0 maxpacket: 16
[  118.011698][   T54] usb 9-1: config index 0 descriptor too short (expected 8192, got 36)
[  118.014446][   T54] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.017708][   T54] usb 9-1: config 0 has no interfaces?
[  118.020451][   T54] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  118.023414][   T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.027243][   T54] usb 9-1: config 0 descriptor??
[  118.038683][ T5938] Bluetooth: hci1: command 0x0406 tx timeout
[  118.067795][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.074707][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.079637][   T12] bond0 (unregistering): Released all slaves
[  118.086435][   T12] bond1 (unregistering): Released all slaves
[  118.158280][   T12] bond2 (unregistering): Released all slaves
[  118.169654][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.172178][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.174623][ T9361] bridge_slave_1: entered allmulticast mode
[  118.177553][ T9361] bridge_slave_1: entered promiscuous mode
[  118.227951][ T9393] bridge3: entered promiscuous mode
[  118.230265][ T9393] bridge3: entered allmulticast mode
[  118.237850][   T40] kauditd_printk_skb: 18 callbacks suppressed
[  118.237861][   T40] audit: type=1400 audit(1760674503.955:4236): avc:  denied  { map } for  pid=9382 comm="syz.4.975" path="socket:[32061]" dev="sockfs" ino=32061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  118.252857][   T54] usb 9-1: string descriptor 0 read error: -71
[  118.260499][   T54] usb 9-1: USB disconnect, device number 4
[  118.304678][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.308999][   T12] tipc: Disabling bearer <udp:syz2>
[  118.313949][   T12] tipc: Left network mode
[  118.324251][   T12] IPVS: stopping backup sync thread 7723 ...
[  118.339552][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.456846][ T9361] team0: Port device team_slave_0 added
[  118.480007][ T9361] team0: Port device team_slave_1 added
[  118.556690][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.561802][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.572457][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.580552][   T12] hsr_slave_0: left promiscuous mode
[  118.585098][   T12] hsr_slave_1: left promiscuous mode
[  118.587476][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.590659][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.593578][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.596038][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.613044][   T12] veth1_macvtap: left promiscuous mode
[  118.615261][   T12] veth0_macvtap: left promiscuous mode
[  118.617615][   T12] veth1_vlan: left promiscuous mode
[  118.620642][   T12] veth0_vlan: left promiscuous mode
[  118.681266][   T12] pim6reg (unregistering): left allmulticast mode
[  118.925427][ T9417] comedi comedi0: Cannot bond this driver to itself!
[  118.966176][ T9417] netlink: 32 bytes leftover after parsing attributes in process `syz.5.982'.
[  119.000094][   T64] Bluetooth: hci3: command tx timeout
[  119.134189][ T9427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  119.136498][ T9427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  119.141795][ T9427] vhci_hcd vhci_hcd.0: Device attached
[  119.146013][ T9427] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6)
[  119.148229][ T9427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  119.150559][ T9430] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8)
[  119.153096][ T9430] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  119.155604][ T9427] vhci_hcd vhci_hcd.0: Device attached
[  119.155889][ T9430] vhci_hcd vhci_hcd.0: Device attached
[  119.173940][ T9432] vhci_hcd: connection closed
[  119.174042][ T9428] vhci_hcd: connection closed
[  119.174094][ T9431] vhci_hcd: connection closed
[  119.180907][ T1147] vhci_hcd: stop threads
[  119.186030][ T1147] vhci_hcd: release socket
[  119.187526][ T1147] vhci_hcd: disconnect device
[  119.192600][ T1147] vhci_hcd: stop threads
[  119.194074][ T1147] vhci_hcd: release socket
[  119.195551][ T1147] vhci_hcd: disconnect device
[  119.198807][ T1147] vhci_hcd: stop threads
[  119.200462][ T1147] vhci_hcd: release socket
[  119.202374][ T1147] vhci_hcd: disconnect device
[  119.333252][   T12] team0 (unregistering): Port device team_slave_1 removed
[  119.385625][   T12] team0 (unregistering): Port device team_slave_0 removed
[  119.871035][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.873653][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.881415][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.893771][ T9443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.099673][ T9361] hsr_slave_0: entered promiscuous mode
[  120.103668][ T9361] hsr_slave_1: entered promiscuous mode
[  120.110210][ T9361] debugfs: 'hsr0' already exists in 'hsr'
[  120.113060][ T9361] Cannot create hsr debugfs directory
[  120.191581][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[  120.195533][ T9468] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  120.214709][ T9471] block nbd5: shutting down sockets
[  120.398157][   T12] IPVS: stop unused estimator thread 0...
[  120.477600][ T9492] libceph: resolve '40' (ret=-3): failed
[  120.540473][ T9361] netdevsim netdevsim6 netdevsim0: renamed from eth14
[  120.552785][ T9361] netdevsim netdevsim6 netdevsim1: renamed from eth15
[  120.559261][ T9501] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  120.559550][ T9361] netdevsim netdevsim6 netdevsim2: renamed from eth16
[  120.569559][ T9361] netdevsim netdevsim6 netdevsim3: renamed from eth17
[  120.579978][ T9502] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1004'.
[  120.585585][ T9506] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1004'.
[  120.664687][ T9515] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  120.667115][ T9515] overlayfs: failed to set xattr on upper
[  120.670159][ T9515] overlayfs: ...falling back to redirect_dir=nofollow.
[  120.672387][ T9515] overlayfs: ...falling back to index=off.
[  120.674345][ T9515] overlayfs: ...falling back to uuid=null.
[  120.681551][ T9515] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  120.745858][ T9521] netlink: 'syz.5.1009': attribute type 1 has an invalid length.
[  120.749847][ T9361] 8021q: adding VLAN 0 to HW filter on device team0
[  120.754014][ T9523] Failed to initialize the IGMP autojoin socket (err -2)
[  120.769280][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.771672][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.779525][ T9521] bond1: (slave geneve2): Opening slave failed
[  120.796281][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.799047][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.819568][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1009'.
[  120.834137][ T9526] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.934763][   T40] audit: type=1400 audit(1760674506.655:4237): avc:  denied  { write } for  pid=9534 comm="syz.5.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  121.024829][ T9544] vlan2: entered allmulticast mode
[  121.060934][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.089355][   T64] Bluetooth: hci3: command tx timeout
[  121.226138][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1018'.
[  121.232854][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1018'.
[  121.278923][ T2301] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  121.288122][ T9361] veth0_vlan: entered promiscuous mode
[  121.295455][ T9361] veth1_vlan: entered promiscuous mode
[  121.370617][ T9361] veth0_macvtap: entered promiscuous mode
[  121.381060][ T9361] veth1_macvtap: entered promiscuous mode
[  121.426342][ T9562] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  121.430198][ T9562] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  121.430679][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.438824][ T2301] usb 7-1: Using ep0 maxpacket: 32
[  121.443074][ T2301] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[  121.445699][ T2301] usb 7-1: config 0 has no interface number 0
[  121.447768][ T2301] usb 7-1: config 0 interface 196 has no altsetting 0
[  121.451933][ T2301] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  121.456458][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.458658][ T2301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.461548][ T2301] usb 7-1: Product: syz
[  121.463246][ T2301] usb 7-1: Manufacturer: syz
[  121.465098][ T2301] usb 7-1: SerialNumber: syz
[  121.477464][ T9564] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  121.480130][ T2301] usb 7-1: config 0 descriptor??
[  121.486661][ T9361] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  121.495919][ T9361] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  121.506430][ T9361] wireguard: wg0: Could not create IPv4 socket
[  121.513585][ T9361] wireguard: wg1: Could not create IPv4 socket
[  121.521154][ T9361] wireguard: wg2: Could not create IPv4 socket
[  122.050506][ T9580] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1027'.
[  122.199122][   T40] audit: type=1400 audit(1760674507.925:4238): avc:  denied  { append } for  pid=9585 comm="syz.5.1029" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  122.230810][ T9586] netlink: 'syz.5.1029': attribute type 29 has an invalid length.
[  122.233427][ T9586] netlink: 'syz.5.1029': attribute type 3 has an invalid length.
[  122.235945][ T9586] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1029'.
[  122.270849][ T9592] program syz.5.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.323027][ T9592] tmpfs: Bad value for 'huge'
[  122.340368][ T9597] netlink: 'syz.4.1031': attribute type 1 has an invalid length.
[  122.343633][ T9597] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1031'.
[  122.362354][ T9599] program syz.5.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.391966][ T9601] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  122.484247][ T9610] 8021q: VLANs not supported on ip6_vti0
[  122.490780][ T9610] bridge2: the hash_elasticity option has been deprecated and is always 16
[  122.579933][   T40] audit: type=1800 audit(1760674508.305:4239): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1039" name="file0" dev="tmpfs" ino=532 res=0 errno=0
[  122.587060][   T40] audit: type=1804 audit(1760674508.305:4240): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1039" name="/newroot/96/file0" dev="tmpfs" ino=532 res=1 errno=0
[  122.664830][ T9627] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1042'.
[  122.668264][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'.
[  122.699716][ T9631] comedi comedi0: s526: a I/O base address must be specified
[  122.740035][   T40] audit: type=1400 audit(1760674508.465:4241): avc:  denied  { mount } for  pid=9635 comm="syz.5.1045" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  122.767136][   T40] audit: type=1400 audit(1760674508.485:4242): avc:  denied  { append } for  pid=9638 comm="syz.5.1046" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  122.767233][ T9640] random: crng reseeded on system resumption
[  122.784424][   T40] audit: type=1400 audit(1760674508.505:4243): avc:  denied  { create } for  pid=9632 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  122.786318][ T9642] Failed to initialize the IGMP autojoin socket (err -2)
[  122.787846][ T9633] fuse: Bad value for 'user_id'
[  122.787857][ T9633] fuse: Bad value for 'user_id'
[  122.788026][ T9633] fuse: Bad value for 'user_id'
[  122.788033][ T9633] fuse: Bad value for 'user_id'
[  122.788278][ T9633] fuse: Bad value for 'user_id'
[  122.788285][ T9633] fuse: Bad value for 'user_id'
[  122.788456][ T9633] fuse: Bad value for 'user_id'
[  122.788464][ T9633] fuse: Bad value for 'user_id'
[  122.789693][ T9633] fuse: Bad value for 'user_id'
[  122.789702][ T9633] fuse: Bad value for 'user_id'
[  122.789873][ T9633] fuse: Bad value for 'user_id'
[  122.789881][ T9633] fuse: Bad value for 'user_id'
[  122.790092][ T9633] fuse: Bad value for 'user_id'
[  122.790099][ T9633] fuse: Bad value for 'user_id'
[  122.790273][ T9633] fuse: Bad value for 'user_id'
[  122.790281][ T9633] fuse: Bad value for 'user_id'
[  122.790462][ T9633] fuse: Bad value for 'user_id'
[  122.790469][ T9633] fuse: Bad value for 'user_id'
[  122.790643][ T9633] fuse: Bad value for 'user_id'
[  122.790650][ T9633] fuse: Bad value for 'user_id'
[  122.790883][ T9633] fuse: Bad value for 'user_id'
[  122.790891][ T9633] fuse: Bad value for 'user_id'
[  122.791058][ T9633] fuse: Bad value for 'user_id'
[  122.793003][ T9641] 9p: Unknown uid 00000000004294967295
[  122.793127][   T40] audit: type=1400 audit(1760674508.505:4244): avc:  denied  { getopt } for  pid=9632 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  122.844338][ T9633] fuse: Bad value for 'user_id'
[  122.846484][ T9633] fuse: Bad value for 'user_id'
[  122.848342][ T9633] fuse: Bad value for 'user_id'
[  122.850704][ T9633] fuse: Bad value for 'user_id'
[  122.852393][ T9633] fuse: Bad value for 'user_id'
[  122.854254][ T9633] fuse: Bad value for 'user_id'
[  122.856108][ T9633] fuse: Bad value for 'user_id'
[  122.857914][ T9633] fuse: Bad value for 'user_id'
[  122.862293][ T9633] fuse: Bad value for 'user_id'
[  122.864154][ T9633] fuse: Bad value for 'user_id'
[  122.866191][ T9633] fuse: Bad value for 'user_id'
[  122.867982][ T9633] fuse: Bad value for 'user_id'
[  122.869601][ T9633] fuse: Bad value for 'user_id'
[  122.871393][ T9633] fuse: Bad value for 'user_id'
[  122.873014][ T9633] fuse: Bad value for 'user_id'
[  122.874799][ T9633] fuse: Bad value for 'user_id'
[  122.876402][ T9633] fuse: Bad value for 'user_id'
[  122.878198][ T9633] fuse: Bad value for 'user_id'
[  122.879989][ T9633] fuse: Bad value for 'user_id'
[  122.881849][ T9633] fuse: Bad value for 'user_id'
[  122.883476][ T9633] fuse: Bad value for 'user_id'
[  122.885246][ T9633] fuse: Bad value for 'user_id'
[  122.886840][ T9633] fuse: Bad value for 'user_id'
[  122.888657][ T9633] fuse: Bad value for 'user_id'
[  122.890283][ T9633] fuse: Bad value for 'user_id'
[  122.892062][ T9633] fuse: Bad value for 'user_id'
[  122.893681][ T9633] fuse: Bad value for 'user_id'
[  122.895459][ T9633] fuse: Bad value for 'user_id'
[  122.897061][ T9633] fuse: Bad value for 'user_id'
[  122.898941][ T9633] fuse: Bad value for 'user_id'
[  122.900779][ T9633] fuse: Bad value for 'user_id'
[  122.902722][ T9633] fuse: Bad value for 'user_id'
[  122.904445][ T9633] fuse: Bad value for 'user_id'
[  122.906401][ T9633] fuse: Bad value for 'user_id'
[  122.908310][ T9633] fuse: Bad value for 'user_id'
[  122.910940][ T9633] fuse: Bad value for 'user_id'
[  122.912598][ T9633] fuse: Bad value for 'user_id'
[  122.914349][ T9633] fuse: Bad value for 'user_id'
[  122.915951][ T9633] fuse: Bad value for 'user_id'
[  122.917758][ T9633] fuse: Bad value for 'user_id'
[  122.919559][ T9633] fuse: Bad value for 'user_id'
[  122.921696][ T9633] fuse: Bad value for 'user_id'
[  122.923689][ T9633] fuse: Bad value for 'user_id'
[  122.925642][ T9633] fuse: Bad value for 'user_id'
[  122.927541][ T9633] fuse: Bad value for 'user_id'
[  122.929418][ T9633] fuse: Bad value for 'user_id'
[  122.931093][ T9633] fuse: Bad value for 'user_id'
[  122.932955][ T9633] fuse: Bad value for 'user_id'
[  122.934569][ T9633] fuse: Bad value for 'user_id'
[  122.936367][ T9633] fuse: Bad value for 'user_id'
[  122.937954][ T9633] fuse: Bad value for 'user_id'
[  122.940278][ T9633] fuse: Bad value for 'user_id'
[  122.941913][ T9633] fuse: Bad value for 'user_id'
[  122.943746][ T9633] fuse: Bad value for 'user_id'
[  122.945338][ T9633] fuse: Bad value for 'user_id'
[  122.947093][ T9633] fuse: Bad value for 'user_id'
[  122.948819][ T9633] fuse: Bad value for 'user_id'
[  122.950603][ T9633] fuse: Bad value for 'user_id'
[  122.952222][ T9633] fuse: Bad value for 'user_id'
[  122.954007][ T9633] fuse: Bad value for 'user_id'
[  122.955605][ T9633] fuse: Bad value for 'user_id'
[  122.957371][ T9633] fuse: Bad value for 'user_id'
[  122.959218][ T9633] fuse: Bad value for 'user_id'
[  122.961104][ T9633] fuse: Bad value for 'user_id'
[  122.962667][ T9633] fuse: Bad value for 'user_id'
[  122.964481][ T9633] fuse: Bad value for 'user_id'
[  122.966052][ T9633] fuse: Bad value for 'user_id'
[  122.968325][ T9633] fuse: Bad value for 'user_id'
[  122.969958][ T9633] fuse: Bad value for 'user_id'
[  122.971776][ T9633] fuse: Bad value for 'user_id'
[  122.973413][ T9633] fuse: Bad value for 'user_id'
[  122.975287][ T9633] fuse: Bad value for 'user_id'
[  122.977125][ T9633] fuse: Bad value for 'user_id'
[  122.979261][ T9633] fuse: Bad value for 'user_id'
[  122.980940][ T9633] fuse: Bad value for 'user_id'
[  122.982733][ T9633] fuse: Bad value for 'user_id'
[  122.984332][ T9633] fuse: Bad value for 'user_id'
[  122.986161][ T9633] fuse: Bad value for 'user_id'
[  122.987794][ T9633] fuse: Bad value for 'user_id'
[  122.989625][ T9633] fuse: Bad value for 'user_id'
[  122.991206][ T9633] fuse: Bad value for 'user_id'
[  122.992991][ T9633] fuse: Bad value for 'user_id'
[  122.994585][ T9633] fuse: Bad value for 'user_id'
[  122.996342][ T9633] fuse: Bad value for 'user_id'
[  122.997924][ T9633] fuse: Bad value for 'user_id'
[  123.000294][ T9633] fuse: Bad value for 'user_id'
[  123.002010][ T9633] fuse: Bad value for 'user_id'
[  123.003965][ T9633] fuse: Bad value for 'user_id'
[  123.005804][ T9633] fuse: Bad value for 'user_id'
[  123.007757][ T9633] fuse: Bad value for 'user_id'
[  123.009606][ T9633] fuse: Bad value for 'user_id'
[  123.011730][ T9633] fuse: Bad value for 'user_id'
[  123.013346][ T9633] fuse: Bad value for 'user_id'
[  123.015142][ T9633] fuse: Bad value for 'user_id'
[  123.016744][ T9633] fuse: Bad value for 'user_id'
[  123.018507][ T9633] fuse: Bad value for 'user_id'
[  123.020250][ T9633] fuse: Bad value for 'user_id'
[  123.022453][ T9633] fuse: Bad value for 'user_id'
[  123.024520][ T9633] fuse: Bad value for 'user_id'
[  123.026819][ T9633] fuse: Bad value for 'user_id'
[  123.029025][ T9633] fuse: Bad value for 'user_id'
[  123.031158][ T9633] fuse: Bad value for 'user_id'
[  123.032832][ T9633] fuse: Bad value for 'user_id'
[  123.034615][ T9633] fuse: Bad value for 'user_id'
[  123.036259][ T9633] fuse: Bad value for 'user_id'
[  123.235476][ T9651] comedi comedi3: bad chanlist[0]=0x00000001 chan=1 range length=4
[  124.003100][ T2301] ipheth 7-1:0.196: Unable to find endpoints
[  124.008447][ T9639] Unrecognized hibernate image header format!
[  124.011116][ T9639] PM: hibernation: Image mismatch: architecture specific data
[  124.012210][ T2301] usb 7-1: USB disconnect, device number 11
[  124.023069][ T9655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.125757][ T9666] hfs: unable to load iocharset "io#harset"
[  124.131138][ T9666] macsec0: entered promiscuous mode
[  124.133819][ T9666] macsec0: entered allmulticast mode
[  124.136247][ T9666] veth1_macvtap: entered allmulticast mode
[  124.180297][   T40] audit: type=1326 audit(1760674509.905:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.188872][   T40] audit: type=1326 audit(1760674509.905:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.196421][   T40] audit: type=1326 audit(1760674509.905:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.206275][   T40] audit: type=1326 audit(1760674509.905:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.215549][   T40] audit: type=1326 audit(1760674509.905:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.223601][   T40] audit: type=1326 audit(1760674509.905:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.233800][   T40] audit: type=1326 audit(1760674509.915:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.243459][   T40] audit: type=1326 audit(1760674509.915:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.252277][   T40] audit: type=1326 audit(1760674509.915:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.261336][   T40] audit: type=1326 audit(1760674509.915:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd818eec9 code=0x7ffc0000
[  124.317948][ T9681] smc: net device ip6_vti0 applied user defined pnetid SYZ1
[  124.324505][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.328112][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.331264][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.334407][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.337332][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.342530][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.345139][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.347971][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.350903][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.353842][ T6006] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  124.363191][ T6006] hid-generic 0003:0004:0000.0009: hidraw1: USB HID v0.00 Device [syz0] on syz1
[  124.381113][ T9682] kAFS: unparsable volume name
[  124.409935][ T9691] fido_id[9691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  124.473782][  T841] Process accounting resumed
[  124.497301][ T9702] Process accounting resumed
[  124.544524][ T2301] libceph: mon0 (1)[c::]:6789 connect error
[  124.637720][   T64] Bluetooth: hci1: unexpected event for opcode 0x0c7d
[  124.654349][ T9716] random: crng reseeded on system resumption
[  124.734670][ T9727] can0: slcan on ttyS3.
[  124.738906][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  124.759831][    C0] 
[  124.760657][    C0] =============================
[  124.762203][    C0] [ BUG: Invalid wait context ]
[  124.763895][    C0] syzkaller #0 Not tainted
[  124.765460][    C0] -----------------------------
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  124.767625][    C0] kworker/u32:8/1152 is trying to lock:
[  124.770366][    C0] ffff88802b935430 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0
[  124.773572][    C0] other info that might help us debug this:
[  124.775539][    C0] context-{2:2}
[  124.776697][    C0] 7 locks held by kworker/u32:8/1152:
[  124.778473][    C0]  #0: ffff88801b491948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  124.783096][    C0]  #1: ffffc90006547d00 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  124.787655][    C0]  #2: ffff88803248d250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xcf0
[  124.791095][    C0]  #3: ffff8880243930e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1cd/0xcf0
[  124.794889][    C0]  #4: ffffffff8e3c4340 (rcu_callback){....}-{0:0}, at: rcu_core+0x73d/0x1530
[  124.797676][    C0]  #5: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0
[  124.800749][    C0]  #6: ffff88802b935980 (&kvm->srcu){.?.?}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0
[  124.803946][    C0] stack backtrace:
[  124.805191][    C0] CPU: 0 UID: 0 PID: 1152 Comm: kworker/u32:8 Not tainted syzkaller #0 PREEMPT(full) 
[  124.805212][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  124.805224][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  124.805247][    C0] Call Trace:
[  124.805254][    C0]  <IRQ>
[  124.805260][    C0]  dump_stack_lvl+0x116/0x1f0
[  124.805282][    C0]  __lock_acquire+0xa12/0x1c90
[  124.805295][    C0]  ? __lock_acquire+0xb8a/0x1c90
[  124.805308][    C0]  lock_acquire+0x179/0x350
[  124.805320][    C0]  ? kvm_xen_set_evtchn_fast+0x254/0xeb0
[  124.805333][    C0]  _raw_read_lock_irqsave+0x46/0x90
[  124.805346][    C0]  ? kvm_xen_set_evtchn_fast+0x254/0xeb0
[  124.805356][    C0]  kvm_xen_set_evtchn_fast+0x254/0xeb0
[  124.805366][    C0]  ? kvm_xen_set_evtchn_fast+0x23a/0xeb0
[  124.805378][    C0]  ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10
[  124.805389][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  124.805406][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  124.805417][    C0]  ? debug_object_deactivate+0x1ec/0x3a0
[  124.805440][    C0]  ? __pfx_xen_timer_callback+0x10/0x10
[  124.805450][    C0]  xen_timer_callback+0x1db/0x2a0
[  124.805460][    C0]  ? __pfx_xen_timer_callback+0x10/0x10
[  124.805471][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  124.805485][    C0]  __hrtimer_run_queues+0x5ed/0xad0
[  124.805502][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  124.805517][    C0]  ? read_tsc+0x9/0x20
[  124.805527][    C0]  hrtimer_interrupt+0x397/0x8e0
[  124.805538][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x3f0
[  124.805552][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  124.805564][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  124.805576][    C0] RIP: 0010:unwind_next_frame+0x161d/0x20a0
[  124.805595][    C0] Code: cb f9 ff ff e8 c4 65 b9 00 e9 c1 f9 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 56 05 00 00 <49> 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48
[  124.805605][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00000246
[  124.805612][    C0] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc90000008000
[  124.805619][    C0] RDX: 1ffff92000000f51 RSI: ffffc90000007f10 RDI: ffffc90000007a90
[  124.805625][    C0] RBP: 0000000000000009 R08: 0000000000000001 R09: 0000000000000000
[  124.805631][    C0] R10: 0000000000000000 R11: 000000000000a382 R12: ffffc90000007aa0
[  124.805637][    C0] R13: ffffc90000007a50 R14: ffffc90000007f40 R15: ffffc90000007a84
[  124.805646][    C0]  ? rcu_core+0x79c/0x1530
[  124.805661][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  124.805672][    C0]  arch_stack_walk+0x94/0x100
[  124.805687][    C0]  ? handle_softirqs+0x219/0x8e0
[  124.805703][    C0]  stack_trace_save+0x8e/0xc0
[  124.805713][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  124.805723][    C0]  ? __lock_acquire+0xb8a/0x1c90
[  124.805735][    C0]  kasan_save_stack+0x33/0x60
[  124.805748][    C0]  ? kasan_save_stack+0x33/0x60
[  124.805760][    C0]  ? kasan_save_track+0x14/0x30
[  124.805771][    C0]  ? __kasan_save_free_info+0x3b/0x60
[  124.805781][    C0]  ? __kasan_slab_free+0x5f/0x80
[  124.805793][    C0]  ? slab_free_after_rcu_debug+0x110/0x340
[  124.805805][    C0]  ? rcu_core+0x79c/0x1530
[  124.805826][    C0]  kasan_save_track+0x14/0x30
[  124.805838][    C0]  __kasan_save_free_info+0x3b/0x60
[  124.805849][    C0]  __kasan_slab_free+0x5f/0x80
[  124.805862][    C0]  slab_free_after_rcu_debug+0x110/0x340
[  124.805874][    C0]  ? rcu_core+0x797/0x1530
[  124.805887][    C0]  rcu_core+0x79c/0x1530
[  124.805902][    C0]  ? __pfx_rcu_core+0x10/0x10
[  124.805916][    C0]  ? __pfx_try_to_wake_up+0x10/0x10
[  124.805931][    C0]  ? mark_held_locks+0x49/0x80
[  124.805943][    C0]  handle_softirqs+0x219/0x8e0
[  124.805959][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  124.805974][    C0]  ? nsim_dev_trap_report_work+0x8b5/0xcf0
[  124.805986][    C0]  do_softirq+0xb2/0xf0
[  124.805995][    C0]  </IRQ>
[  124.805998][    C0]  <TASK>
[  124.806001][    C0]  __local_bh_enable_ip+0x100/0x120
[  124.806010][    C0]  nsim_dev_trap_report_work+0x8b5/0xcf0
[  124.806025][    C0]  process_one_work+0x9cf/0x1b70
[  124.806041][    C0]  ? __pfx_process_one_work+0x10/0x10
[  124.806056][    C0]  ? assign_work+0x1a0/0x250
[  124.806069][    C0]  worker_thread+0x6c8/0xf10
[  124.806085][    C0]  ? __pfx_worker_thread+0x10/0x10
[  124.806098][    C0]  kthread+0x3c5/0x780
[  124.806110][    C0]  ? __pfx_kthread+0x10/0x10
[  124.806123][    C0]  ? rcu_is_watching+0x12/0xc0
[  124.806132][    C0]  ? __pfx_kthread+0x10/0x10
[  124.806144][    C0]  ret_from_fork+0x675/0x7d0
[  124.806155][    C0]  ? __pfx_kthread+0x10/0x10
[  124.806167][    C0]  ret_from_fork_asm+0x1a/0x30
[  124.806181][    C0]  </TASK>
[  124.808863][ T2301] libceph: mon0 (1)[c::]:6789 connect error
[  124.899921][ T9710] ceph: No mds server is up or the cluster is laggy
[  124.901536][ T9727] can0 (unregistered): slcan off ttyS3.
[  124.999598][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  125.233208][ T1152] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.270202][ T9710] PM: hibernation: Basic memory bitmaps freed
[  125.331864][ T1152] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.401682][ T1152] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.484003][ T1152] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.578818][ T1152] bridge_slave_1: left allmulticast mode
[  125.580934][ T1152] bridge_slave_1: left promiscuous mode
[  125.582769][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.585851][ T1152] bridge_slave_0: left promiscuous mode
[  125.587625][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.791474][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.794964][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.798095][ T1152] bond0 (unregistering): Released all slaves
[  125.862693][ T1152] bond1 (unregistering): Released all slaves
[  126.083936][ T1152] hsr_slave_0: left promiscuous mode
[  126.086133][ T1152] hsr_slave_1: left promiscuous mode
[  126.088177][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.091090][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.094290][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.096540][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.101231][ T1152] veth1_macvtap: left promiscuous mode
[  126.103013][ T1152] veth1_vlan: left promiscuous mode
[  126.104714][ T1152] veth0_vlan: left promiscuous mode
[  126.252115][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  126.259192][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  126.794364][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.892769][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.961899][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.021858][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.126467][ T1152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.182035][ T1152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.291829][ T1152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.373763][ T1152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.466061][ T1152] bridge_slave_1: left allmulticast mode
[  127.468276][ T1152] bridge_slave_1: left promiscuous mode
[  127.470760][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.474303][ T1152] bridge_slave_0: left allmulticast mode
[  127.476490][ T1152] bridge_slave_0: left promiscuous mode
[  127.478926][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.483161][ T1152] bridge_slave_1: left allmulticast mode
[  127.485357][ T1152] bridge_slave_1: left promiscuous mode
[  127.487590][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.491471][ T1152] bridge_slave_0: left allmulticast mode
[  127.493310][ T1152] bridge_slave_0: left promiscuous mode
[  127.495120][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.708019][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.711766][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.715537][ T1152] bond0 (unregistering): Released all slaves
[  127.719827][ T1152] bond1 (unregistering): Released all slaves
[  127.725991][ T1152] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  128.144088][ T1152] team0: Port device bond0 removed
[  128.146663][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.150398][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.153656][ T1152] bond0 (unregistering): Released all slaves
[  128.219255][ T1152] bond1 (unregistering): Released all slaves
[  128.283713][ T1152] bond2 (unregistering): Released all slaves
[  128.287666][ T1152] bond3 (unregistering): Released all slaves
[  128.291414][ T1152] bond4 (unregistering): Released all slaves
[  128.865150][ T1152] hsr_slave_0: left promiscuous mode
[  128.867518][ T1152] hsr_slave_1: left promiscuous mode
[  128.869854][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.872556][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.876419][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.879103][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.884170][ T1152] hsr_slave_0: left promiscuous mode
[  128.886694][ T1152] hsr_slave_1: left promiscuous mode
[  128.890064][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.892955][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.896031][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.898386][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.904483][ T1152] veth1_macvtap: left allmulticast mode
[  128.906478][ T1152] veth1_macvtap: left promiscuous mode
[  128.908187][ T1152] veth0_macvtap: left promiscuous mode
[  128.909950][ T1152] veth1_vlan: left promiscuous mode
[  128.911593][ T1152] veth0_vlan: left promiscuous mode
[  128.913960][ T1152] veth1_macvtap: left promiscuous mode
[  128.915706][ T1152] veth0_macvtap: left promiscuous mode
[  128.917290][ T1152] veth1_vlan: left promiscuous mode
[  128.919055][ T1152] veth0_vlan: left promiscuous mode
[  129.097749][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  129.131068][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  129.386966][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  129.424389][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  130.164394][ T1152] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
04:15:10  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff853088d5 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc90000006fc8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=000000000000002d R14=ffffffff9ae077a0 R15=ffffffff85308870
RIP=ffffffff853088ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69d9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3b684b CR3=0000000057bde000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefc12fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefc12fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefc12fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefc12fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefc1305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefc1313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefdb74a8 00007f1fefdb74a0 00007f1fefdb7498 00007f1fefdb7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ff091d100 00007f1fefdb7460 00007f1fefdb0004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1fefdb74b8 00007f1fefdb74b0 00007f1fefdb74a8 00007f1fefdb74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f974f2 RDX=ffff88803153a480
RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea00011a4ac0 RSP=ffffc90003d2f2b8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bd32bb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6ad9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fee6f317d60 CR3=0000000031a3a000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee6e7b76c3 00007fee6e7b76c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3eb82cf0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557e7d1bc 0000555557e7d070
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557e86fe7 0000555557e863d0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000402d8820800 0100000008060601 2bf6048080808080 808080100002d0ee
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000806 0601288a01800402 d0c6080001000000 0806060127f42208
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001800304800402 d0c6080001000000 0806060127f40408 0004800300040024
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 888008001b800401 c7100008004bb600 33537974742f7665 642f01ffffffffff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040fe0031010000f d0031f80040fc003 2fd010000fb00308 80040fa003361000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000000d5a0c RBX=0000000000000002 RCX=ffffffff8b6632a9 RDX=ffffed100d4c6656
RSI=ffffffff8bf1e340 RDI=ffffffff819285cd RBP=ffffed1003b59920 RSP=ffffc90000187de8
R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001
R12=0000000000000002 R13=ffff88801dacc900 R14=ffffffff908329d0 R15=0000000000000000
RIP=ffffffff8b661d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6bd9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055b418e0fde0 CR3=000000004d188000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddd8212fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddd8212fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddd8212fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddd8212fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddd821305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddd821313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161610004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080000000 RBX=ffffea00017f0000 RCX=ffffffff8212b06b RDX=ffff888024a40000
RSI=ffffffff8212b346 RDI=0000000000000001 RBP=ffff888032fd9cb0 RSP=ffffc900048cf848
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=1ffffffff1c79e69
R12=ffff888032fd9cb1 R13=ffff888032fd9d50 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81bd38c7 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007fddd8fa36c0 ffffffff 00c00000
GS =0000 ffff8880d6cd9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f9f3d084f98 CR3=000000004d188000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c212fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c212fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c212fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c212fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c21305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c21313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c3b74a8 00007f9f3c3b74a0 00007f9f3c3b7498 00007f9f3c3b7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3cf1d100 00007f9f3c3b7460 00007f9f3c3b7478 00007f9f3c3b74c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f3c3b74b8 00007f9f3c3b74b0 00007f9f3c3b74a8 00007f9f3c3b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000