last executing test programs:

44.910060303s ago: executing program 2 (id=414):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x5, @pix={0x5, 0x4b99, 0x41282448, 0x2, 0x4119, 0x5f, 0x4, 0x3017, 0x0, 0x0, 0x2, 0x2}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x1, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x30000000)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB="aa736e8df75099c98832feea41c21366a97fe5a5cbe1c8c488317837dc80897574f2ad1f849413d96922290d1147c92dc6c59766438bc64eeac3b2"], 0x3c}}, 0x0)

44.742759662s ago: executing program 2 (id=415):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}], 0x10)
sendto$inet6(r1, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2={0x1f, 0x1, @any, 0x7, 0x2}, @nl=@unspec, 0x10, 0x0, 0x0, 0x0, 0x88, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xc81, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfc00}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x90)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0cf2ff000200010004", @ANYRES8=r3, @ANYRESDEC=0x0, @ANYRES64=r2], 0x408100)

43.872939475s ago: executing program 2 (id=427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x5, 0x1}, 0x20)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20080)
r3 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_mreqn(r3, 0x0, 0x5, &(0x7f0000000000)={@rand_addr=0x1000000, @loopback}, 0x3)
setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x990000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x5, 0x1}, 0x20) (async)
syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20080) (async)
socket$inet(0x2, 0x3, 0x3) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x5, &(0x7f0000000000)={@rand_addr=0x1000000, @loopback}, 0x3) (async)
setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0) (async)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x990000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)

43.870384075s ago: executing program 2 (id=428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) (async)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) (async)

43.793136419s ago: executing program 2 (id=430):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
setresuid(0xee01, 0xee00, 0x0) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x32314152, 0x3, 0x0, [{0x8, 0xf}, {0x9, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}})
setfsuid(0x0) (async)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000001100), 0x12)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
fdatasync(r4) (async)
r6 = socket$kcm(0x29, 0x2, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000000140)='GPL\x00', 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7})
sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r10, 0x0) (async)
syz_open_dev$admmidi(&(0x7f0000000300), 0xea46, 0x650000) (async)
r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r11, 0xc0405519, &(0x7f0000000040)={0xa, 0x1, 0x0, 0x5, 'syz0\x00', 0x7f}) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x79, 0x0, 0x6a, 0x5, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe7, 0x0, 0x8, 0x9, 0x5, 0x7f, 0x2], 0x0, 0x99800})

43.573284566s ago: executing program 2 (id=434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)="4f3bfde51b257f40b531a791f199cacee8f62ae4697ddb55785b914fbca62fa27ec2c61603de043c8b6af88900b78db3227cd984567ddd47cd0bc8c36135122f9bb5c7fc00eb9dedfd226bd2c3b54ff4d6800a203cbe81c0a59ee0521498ed6f62350e110573643f3975500e20e9bb155a1f1b5d99064cca598143f1e80dda01af92141258213dea5a4952597a72f4553969974c49d2132a4e6b4949e4721ca06a5be8e2189ac6d2daba92000000000000000000", 0xb4}], 0x1)

43.548686579s ago: executing program 32 (id=434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)="4f3bfde51b257f40b531a791f199cacee8f62ae4697ddb55785b914fbca62fa27ec2c61603de043c8b6af88900b78db3227cd984567ddd47cd0bc8c36135122f9bb5c7fc00eb9dedfd226bd2c3b54ff4d6800a203cbe81c0a59ee0521498ed6f62350e110573643f3975500e20e9bb155a1f1b5d99064cca598143f1e80dda01af92141258213dea5a4952597a72f4553969974c49d2132a4e6b4949e4721ca06a5be8e2189ac6d2daba92000000000000000000", 0xb4}], 0x1)

24.470771295s ago: executing program 3 (id=471):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x8, 0x7fff0016}]})
r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r3, 0x0, r3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002600)=ANY=[], 0x28}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
ptrace(0x10, r0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x785, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x9f1, 0x48, &(0x7f00000002c0)=""/72, 0x40f00, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x7, 0x573}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x1], &(0x7f0000000440)=[{0x3, 0x5, 0x3, 0x4}], 0x10, 0x4e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='xen_cpu_write_gdt_entry\x00', r7, 0x0, 0x8}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0x6], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xe4, &(0x7f0000000080)=""/28)

23.616366266s ago: executing program 3 (id=483):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', <r0=>0x0, 0x10, 0x20, 0x80000000, 0xb3, {{0x25, 0x4, 0x3, 0x0, 0x94, 0x68, 0x0, 0x9f, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xb, "2c0995bcdd95a90eb1"}, @timestamp_prespec={0x44, 0xc, 0x1c, 0x3, 0x4, [{@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x44, 0x87, 0x3, 0x4, [{@multicast2, 0x6}, {@rand_addr=0x64010100, 0xff}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7}, {@broadcast, 0x3}, {@local, 0x1}]}, @generic={0x94, 0x3, '4'}, @end, @rr={0x7, 0x7, 0xd5, [@empty]}, @generic={0x88, 0x12, "7914ecc682f37691e228cb410c1997ff"}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000580))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x3, 0x7, 0x3, 0x80, 0x1fcb6682ad7eb0d2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xec, &(0x7f0000000180)=""/236, 0x41100, 0xa, '\x00', r0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xc, 0xfffffffc, 0x1}, 0x10, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)

23.522794802s ago: executing program 3 (id=484):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa}]}, &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

23.520402806s ago: executing program 3 (id=485):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000003000005"], 0x48)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0xffffffff}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20)
syz_clone(0x2080, &(0x7f0000000380)="3bf91b27909d8d2c090d692ca0a2db2b8acd3c05a70e813de848600be7e3b861f4948d07d68deef2ab58be9903ba2aec43075b304a0cb8a7279e07758e6bd1c9294ac0eecf431b13c83fa66767e0dc590d336c459bb11bc91ac0523b7c061b124411fcfbcf246af74c8cb40c24b25e13084a5666ade08fb061b8cbc1c8f395bb8ed54f40e1e607bc1e1aa5e27e6fd99da838719cf54427c7af71fced0f2b3f3349f6b1bbdbef004d405f6296f3e8a3c187a8a1bdb1b03945c80931c78246c64daba3644a08d558", 0xc7, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)="e093847b17ddcd26b221268bce")
pipe(&(0x7f0000000180))
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x428, 0xffffffff, 0xf0, 0x1c0, 0xf0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_batadv\x00', {0x42c2}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x7fff, 0x0, 0x1ff, {0xb9}}}, @common=@srh1={{0x90}, {0x2e, 0x4, 0xff, 0x6b, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x3e}, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 0x440, 0x2940}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)

23.332616525s ago: executing program 3 (id=486):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e04, @remote}}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x206, 0x0, 0x0, 0x2, 0x72, 0xc, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) (async)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000002680)='bbr\x00', 0x4) (async, rerun: 64)
getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (rerun: 64)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x0)

23.042982749s ago: executing program 3 (id=493):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_fh={0x8, 0xfb, {0xa}}, 0x18002)

22.984267751s ago: executing program 33 (id=493):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_fh={0x8, 0xfb, {0xa}}, 0x18002)

2.130566681s ago: executing program 1 (id=551):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r2=>0x0})
r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x400040, 0x80)
ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000200))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={<r6=>r1, 0x600000}, &(0x7f00000002c0)=0x8)
ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000300)=""/181)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom$inet(r7, &(0x7f0000000400)=""/91, 0x5b, 0x22100, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000480)={r6, 0xffff}, 0x8)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f00000004c0)=@generic={0x1, 0x100, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000500)={0x0, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, r9], 0x2, 0x80000, 0x0, <r10=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000600)={<r11=>0x0, <r12=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x2, 0x50, 0x2, {}, {r11, r12/1000+60000}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x2d, 0x2, 0x0, 0x0, "723b9023dfcb50b74290b93eb5b36ba0f74f1d310aeab1930f9d771c01a1ca63c9518e9943268c94de3f89b7b99e1e518f0fcbbe00529d8456d4619117d4ffdc"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40801)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r10, 0xc01064c2, &(0x7f0000000740)={<r13=>0x0, 0x0, r10})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r10, 0xc01064c2, &(0x7f0000000780)={<r14=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000007c0)={<r15=>0x0, 0x1, r10})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000000800)={<r16=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f00000008c0)={&(0x7f0000000840)=[0x0, 0x0, r13, 0x0, r14, r15, r16], &(0x7f0000000880)=[0xffff], 0x7})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r4}, 0x8)
clock_gettime(0x0, &(0x7f0000000940)={<r17=>0x0, <r18=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000ac0)=@multiplanar_userptr={0x4, 0x1, 0x4, 0x4000, 0x0, {r17, r18/1000+10000}, {0x1, 0x0, 0x4, 0x9, 0x5, 0x3, "20c8b575"}, 0x8, 0x2, {&(0x7f0000000a00)=[{0x1, 0x0, {&(0x7f0000000980)}, 0xffffa009}, {0x40, 0x3, {&(0x7f00000009c0)}, 0x8}]}, 0xb5})

2.052238238s ago: executing program 1 (id=553):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x200, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0xffffff22, 0x12e81565}]}}}}}}}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x7a120]}}], 0x1c)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0)
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0x124a6333d1185a5c}}}, 0x14)
syz_open_procfs(r1, &(0x7f0000000240)='smaps_rollup\x00')
syz_usb_disconnect(0xffffffffffffffff)
read$eventfd(r2, &(0x7f0000000040), 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x200, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0xffffff22, 0x12e81565}]}}}}}}}}, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
fchdir(r2) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) (async)
write$sndseq(r3, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x7a120]}}], 0x1c) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) (async)
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0x124a6333d1185a5c}}}, 0x14) (async)
syz_open_procfs(r1, &(0x7f0000000240)='smaps_rollup\x00') (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
read$eventfd(r2, &(0x7f0000000040), 0x8) (async)

1.761965079s ago: executing program 1 (id=561):
fspick(0xffffffffffffff9c, 0x0, 0xf)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)={0x58, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080)

1.754900527s ago: executing program 1 (id=564):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x46)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x28, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x32314752})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000280)=@x86={0x6, 0x5, 0x8, 0x0, 0x4, 0x2, 0x1, 0x2, 0x7, 0x4, 0x7f, 0x5, 0x0, 0x3, 0xb, 0x8, 0x81, 0x6, 0x0, '\x00', 0xbf, 0x10})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000000)=0x4)

1.512632886s ago: executing program 5 (id=567):
r0 = userfaultfd(0x801)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x89, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600))
r3 = socket(0x2a, 0xa, 0x100000a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xfc, 0x30, 0x1, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_ct={0x90, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x2, 0x6, 0x3, 0x5}}, @TCA_CT_LABELS={0x14, 0x7, "77c6256bd6e7e4e22a56a78303625938"}, @TCA_CT_MARK={0x8, 0x5, 0xffffffff}, @TCA_CT_LABELS_MASK={0x14, 0x8, "fcbc33ecf2eda5f4c8a931f0a999b84b"}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x3, 0x1ffffffe, 0x4)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x104, &(0x7f00000000c0)=0x2, 0x0, 0x4)

1.462713854s ago: executing program 1 (id=569):
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60030000000000000000000000000ffff00000000fe8000000000000000000000000000aa2900000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594e8f7838c8db5d5"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = dup(r3)
r7 = fcntl$dupfd(r4, 0x406, r5)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
fchdir(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_cb_call\x00', r1, 0x0, 0x6}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xe, 0xec0d, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4808)

1.352707883s ago: executing program 5 (id=570):
r0 = socket(0x2a, 0x2, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x0, 0x8}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x9, 0xffe0}, {}, {0x1c, 0xfff1}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.351375286s ago: executing program 5 (id=572):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x3, 0x9, 0x58565559, 0x0, 0x8000, 0x5, 0x6, 0xf, 0x1, 0x7, 0x0, 0x1}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)
fchdir(r1)
gettid()
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
recvmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2002)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0xb0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@multicast2, @empty, 0xffffff00, 0x0, 'ip6_vti0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x33, 0x3, 0x2c}, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}, {0xa0, 0x4}}, @common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
rmdir(&(0x7f0000000040)='./control\x00')

1.29246172s ago: executing program 0 (id=573):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001"], 0x24}}, 0x0) (async)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)
r5 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) (async)
r6 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r5, &(0x7f0000000200)='THAWED\x00', 0x7) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x60}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)

1.152643122s ago: executing program 5 (id=574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c810)

1.152324097s ago: executing program 0 (id=575):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

989.377301ms ago: executing program 0 (id=576):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = syz_io_uring_setup(0x7aca, &(0x7f0000000080)={0x0, 0xb1c9, 0x10000, 0x1, 0x232}, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/68, 0x44}], &(0x7f0000000240)=[0x7, 0xffffffff, 0x7]}, 0x20)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x2200, 0x84, 0xa}, 0x18)
faccessat(r2, &(0x7f0000000340)='./file0\x00', 0x56)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
unshare(0x10000000)
sendmsg$key(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0xf, 0x7, 0x0, 0x3a, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_key={0x12, 0x9, 0x408, 0x0, "bce61ed604ba248889be652ee3b0138f327e6d0b995e96cc0b09eee679d38d6ad8e011b0d2c9b237751328ec5f5959d2c1b1de9128b8009200929d88e2be04ca11e31bb9a7f930bfa39a22468ddcbbc0c6114be44a04a286cf7c52ef90f2fa5cc54853d15bdac9983a49f46ce4a74932a46a3715403bc7371af4b3238a424505e0"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd26, 0x3501}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_lifetime={0x4, 0x2, 0x10000, 0x4, 0xfffffffffffffffb, 0x5}, @sadb_key={0x9, 0x9, 0x1d0, 0x0, "b60bf10420c91df5daf76d9d0e2fae034807a2465355b8d9a5ff7ec62848b8eb269b1458a6e81213df349f92705e5daafef42904e0d70f0c9ccc"}, @sadb_key={0x16, 0x9, 0x540, 0x0, "3929e9c1ab6155155dc7a4edc53ee52af5959fe54b28263c28a3228b6320102307288fdbea29a425d39c0c7f781fd5bf1ada4a9ed17611292cd78ddae55f08edc67387162f89c29f77bca4542f4b4974635d2dbf120a9783e770c4be98ed4acc50f686f0e60356c701c8c61a7ad8f78cb9e9632964d07e8d1ce02227692bb24696b04a0e56a6e9e0297def960bef3b46cf61fa1f5b1d8f55c37f070fda6cad01f108a848654053f1"}]}, 0x1d0}}, 0x20040010)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r3)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x324, r5, 0x410, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff159}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffdad}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x929}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x21}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f16e545}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x1a, &(0x7f0000000ac0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @alu={0x7, 0x1, 0x8, 0x5, 0xb, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa373}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000bc0)='syzkaller\x00', 0xf86, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000c00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0xd, 0x96, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[r3], &(0x7f0000000cc0)=[{0x4, 0x4, 0x8, 0xb}, {0x0, 0x4, 0x6, 0x5}], 0x10, 0x50, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000dc0)={0x0, r6}, 0x8)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000001200)={0x95, 0x7, &(0x7f0000000e00)})
ioctl$TIOCNXCL(r3, 0x540d)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000002300)={0xfff, 0x0, &(0x7f0000002280)=[{&(0x7f0000001240)=""/51, 0x33}, {&(0x7f0000001280)=""/4096, 0x1000}], &(0x7f00000022c0)=[0x7fff, 0x3, 0x50cf, 0x5], 0x2}, 0x20)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000023c0)={'wg0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x7c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x28}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x10)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000002500))
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002580)={0xd4, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x76f}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000028c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002880)={&(0x7f0000002780)={0xf4, r9, 0x910, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004090)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r4)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x20, r10, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0xc000)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002a40)="269b917b925e50b68f0a1524a18af9094d8aab0d5b2c373870af805db10943a522881c8d73538fae036b34e1e84490c7adca39081cfd98dcc195593dc6d82a8fd77ec92ed57b6c3d5f4a17275554ee737ea88aedf615e0b4fc0930c22b479ebcc749", 0x62)
bpf$TOKEN_CREATE(0x24, &(0x7f0000002ac0)={0x0, r1}, 0x8)
syz_open_dev$tty20(0xc, 0x4, 0x0)

989.04674ms ago: executing program 5 (id=577):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1d0, 0x234, 0x1d0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53", 0x68, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x420, 0x4200)
bind$phonet(r2, &(0x7f0000000100)={0x23, 0x81, 0x5, 0x7}, 0x10)
r3 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r3, 0x400455c8, 0x20000000009) (async)
ioctl$TCFLSH(r3, 0x400455c8, 0x20000000009)
openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)

922.577766ms ago: executing program 0 (id=578):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]})
r2 = epoll_create1(0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r3 = dup2(r2, r1)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0xc484, {<r4=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0xfffffffffffffffa})
ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x1, 0x6, 0x80, 0x6, 0x8, r4})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={<r5=>0x0})
r6 = socket$key(0xf, 0x3, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r5, 0x3, r6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x38, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "01959e56da"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x0)

772.83709ms ago: executing program 5 (id=579):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000001300)=ANY=[])
syz_usb_disconnect(r0)

371.36047ms ago: executing program 4 (id=583):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')
creat(&(0x7f0000000240)='./file0\x00', 0x0)

321.431835ms ago: executing program 1 (id=584):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x8, 0x7fff0016}]})
r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ptrace(0x10, r0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)={0x3, 0x4}, 0x4)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e6572696300"/87], 0xe0}}, 0x0)
sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0)

320.994826ms ago: executing program 4 (id=585):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read$snddsp(r0, &(0x7f0000000380)=""/147, 0x93)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000102010400000000000000000a0093003c0001802c0001"], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="0a0006ffffff00"], 0x28}}, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc038563b, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000480), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x84182, 0x26, 0x1d}, 0x18)
r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140))
mount_setattr(r8, &(0x7f0000000100)='./file0\x00', 0x8800, &(0x7f0000000280)={0xc, 0xf5, 0x20000, {r9}}, 0x20)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x2)

130.884799ms ago: executing program 4 (id=586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e955a9c4a074e1a10ec47c069c39a65f7fddd3ef3d24"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

130.578964ms ago: executing program 4 (id=587):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r0 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) (async)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]}) (async)
syz_clone3(&(0x7f0000000340)={0x181004000, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

692.168µs ago: executing program 0 (id=588):
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600000f500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRESOCT, @ANYRES32=0x41424344, @ANYBLOB="c2a41a55"], 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x7afb5c31b386c52a}, 0x20000000) (async)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x59114}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x8}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x84)

375.848µs ago: executing program 4 (id=589):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800050300000000010000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200040000001400010000000000000000000000ffff"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

187.318µs ago: executing program 0 (id=590):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640), 0x0, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000))
r3 = gettid()
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x6}, &(0x7f00000001c0)=0x8)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0xcd5, 0x7, {}, {<r7=>0x0}, 0x401, 0xffffffffffffff53})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x9, 0xc6c, {r3}, {r7}, 0x3, 0x10001})

0s ago: executing program 4 (id=591):
r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async, rerun: 64)
r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7) (rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0x5, "f42a97b96d"}}) (async)
accept4$alg(r2, 0x0, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0)
fcntl$addseals(r1, 0x409, 0x2) (async)
r4 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0x0, 0x8000}) (async)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) (async, rerun: 64)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (rerun: 64)

kernel console output (not intermixed with test programs):

[   37.932631][   T39] audit: type=1400 audit(1739734044.573:81): avc:  denied  { rlimitinh } for  pid=5851 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.938618][   T39] audit: type=1400 audit(1739734044.573:82): avc:  denied  { siginh } for  pid=5851 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.551493][   T39] audit: type=1400 audit(1739734045.213:83): avc:  denied  { read } for  pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   38.560021][   T39] audit: type=1400 audit(1739734045.213:84): avc:  denied  { append } for  pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   38.567947][   T39] audit: type=1400 audit(1739734045.213:85): avc:  denied  { open } for  pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   38.576672][   T39] audit: type=1400 audit(1739734045.213:86): avc:  denied  { getattr } for  pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
Warning: Permanently added '[localhost]:8199' (ED25519) to the list of known hosts.
[   40.043627][   T39] audit: type=1400 audit(1739734046.703:87): avc:  denied  { name_bind } for  pid=5915 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   41.785463][ T5917] cgroup: Unknown subsys name 'net'
[   41.932352][ T5917] cgroup: Unknown subsys name 'cpuset'
[   41.940155][ T5917] cgroup: Unknown subsys name 'rlimit'
[   42.153505][ T5934] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   42.871563][ T5917] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.486045][   T39] kauditd_printk_skb: 17 callbacks suppressed
[   45.486063][   T39] audit: type=1400 audit(1739734052.143:105): avc:  denied  { execmem } for  pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   45.693158][   T39] audit: type=1400 audit(1739734052.353:106): avc:  denied  { create } for  pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.703014][   T39] audit: type=1400 audit(1739734052.353:107): avc:  denied  { read write } for  pid=5941 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.715370][   T39] audit: type=1400 audit(1739734052.353:108): avc:  denied  { open } for  pid=5941 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.724853][   T39] audit: type=1400 audit(1739734052.373:109): avc:  denied  { ioctl } for  pid=5942 comm="syz-executor" path="socket:[3748]" dev="sockfs" ino=3748 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.742694][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.748403][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.748567][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.751076][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.754968][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.755532][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.757554][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.759892][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.763290][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.764500][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.765833][ T5947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   45.768445][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   45.770088][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.771671][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.775231][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.780722][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.784827][   T39] audit: type=1400 audit(1739734052.443:110): avc:  denied  { read } for  pid=5941 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.789785][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.791243][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.791982][   T39] audit: type=1400 audit(1739734052.443:111): avc:  denied  { open } for  pid=5941 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.792824][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   45.793053][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.796080][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.796713][   T39] audit: type=1400 audit(1739734052.443:112): avc:  denied  { mounton } for  pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   45.807002][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.823852][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   45.826233][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.971815][   T39] audit: type=1400 audit(1739734052.633:113): avc:  denied  { module_request } for  pid=5942 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   46.037800][ T5952] chnl_net:caif_netlink_parms(): no params data found
[   46.041959][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   46.099158][ T5946] chnl_net:caif_netlink_parms(): no params data found
[   46.103241][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   46.243971][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.247404][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.250463][ T5952] bridge_slave_0: entered allmulticast mode
[   46.252871][ T5952] bridge_slave_0: entered promiscuous mode
[   46.276939][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.279647][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.282495][ T5942] bridge_slave_0: entered allmulticast mode
[   46.285730][ T5942] bridge_slave_0: entered promiscuous mode
[   46.304525][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.307342][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.310703][ T5952] bridge_slave_1: entered allmulticast mode
[   46.313989][ T5952] bridge_slave_1: entered promiscuous mode
[   46.322095][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.325078][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.328283][ T5942] bridge_slave_1: entered allmulticast mode
[   46.331627][ T5942] bridge_slave_1: entered promiscuous mode
[   46.434433][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.437123][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.439170][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.441312][ T5946] bridge_slave_0: entered allmulticast mode
[   46.443458][ T5946] bridge_slave_0: entered promiscuous mode
[   46.447458][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.451742][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.454456][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.457268][ T5941] bridge_slave_0: entered allmulticast mode
[   46.460686][ T5941] bridge_slave_0: entered promiscuous mode
[   46.465334][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.469232][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.471713][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.473796][ T5946] bridge_slave_1: entered allmulticast mode
[   46.475944][ T5946] bridge_slave_1: entered promiscuous mode
[   46.493629][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.496312][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.498492][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.500584][ T5941] bridge_slave_1: entered allmulticast mode
[   46.502746][ T5941] bridge_slave_1: entered promiscuous mode
[   46.574686][ T5952] team0: Port device team_slave_0 added
[   46.578603][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.605790][ T5952] team0: Port device team_slave_1 added
[   46.610673][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.616649][ T5942] team0: Port device team_slave_0 added
[   46.623080][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.644127][ T5942] team0: Port device team_slave_1 added
[   46.647675][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.659601][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.661706][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.669202][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.687113][ T5946] team0: Port device team_slave_0 added
[   46.712410][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.714563][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.722280][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.727580][ T5946] team0: Port device team_slave_1 added
[   46.753315][ T5941] team0: Port device team_slave_0 added
[   46.771103][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.773650][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.783349][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.789927][ T5941] team0: Port device team_slave_1 added
[   46.800571][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.803105][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.811497][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.825114][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.827251][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.834666][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.843104][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.845810][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.855387][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.895041][ T5952] hsr_slave_0: entered promiscuous mode
[   46.897912][ T5952] hsr_slave_1: entered promiscuous mode
[   46.927498][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.930367][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.937391][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.966196][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.969017][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.979946][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.016596][ T5946] hsr_slave_0: entered promiscuous mode
[   47.018870][ T5946] hsr_slave_1: entered promiscuous mode
[   47.020707][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.023028][ T5946] Cannot create hsr debugfs directory
[   47.030247][ T5942] hsr_slave_0: entered promiscuous mode
[   47.033201][ T5942] hsr_slave_1: entered promiscuous mode
[   47.035693][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.038844][ T5942] Cannot create hsr debugfs directory
[   47.165980][ T5941] hsr_slave_0: entered promiscuous mode
[   47.169901][ T5941] hsr_slave_1: entered promiscuous mode
[   47.172507][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.175372][ T5941] Cannot create hsr debugfs directory
[   47.322542][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.331123][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.352380][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.373836][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.405913][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.411999][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.426742][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.431746][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.457092][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.467637][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.472265][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.486248][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.515341][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.521160][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.525099][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.530061][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.603054][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.616796][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.622866][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[   47.642918][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.645945][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.663233][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.666029][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.686541][ T5952] 8021q: adding VLAN 0 to HW filter on device team0
[   47.696305][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.704687][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.707257][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.718563][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.724807][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.727547][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.742513][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   47.757233][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.760365][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.773156][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.775876][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.791924][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   47.803596][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.806557][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.814200][   T39] audit: type=1400 audit(1739734054.473:114): avc:  denied  { sys_module } for  pid=5946 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   47.818779][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.822305][ T5951] Bluetooth: hci3: command tx timeout
[   47.822400][ T5948] Bluetooth: hci0: command tx timeout
[   47.823278][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.828402][ T5951] Bluetooth: hci1: command tx timeout
[   47.898793][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.899111][ T5951] Bluetooth: hci2: command tx timeout
[   47.930744][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.951003][ T5946] veth0_vlan: entered promiscuous mode
[   47.963094][ T5946] veth1_vlan: entered promiscuous mode
[   47.966994][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.975835][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.997256][ T5952] veth0_vlan: entered promiscuous mode
[   48.010566][ T5952] veth1_vlan: entered promiscuous mode
[   48.013586][ T5946] veth0_macvtap: entered promiscuous mode
[   48.021210][ T5946] veth1_macvtap: entered promiscuous mode
[   48.044686][ T5942] veth0_vlan: entered promiscuous mode
[   48.054435][ T5941] veth0_vlan: entered promiscuous mode
[   48.056695][ T5942] veth1_vlan: entered promiscuous mode
[   48.068424][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.073651][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.080485][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.084019][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.087211][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.091349][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.097884][ T5941] veth1_vlan: entered promiscuous mode
[   48.114836][ T5952] veth0_macvtap: entered promiscuous mode
[   48.119262][ T5952] veth1_macvtap: entered promiscuous mode
[   48.139127][ T5942] veth0_macvtap: entered promiscuous mode
[   48.144912][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.148788][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.153738][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.159348][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.161980][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.164968][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.171102][ T5942] veth1_macvtap: entered promiscuous mode
[   48.180562][ T5952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.182791][ T5952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.184982][ T5952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.187225][ T5952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.204946][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.207962][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.211066][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.214005][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.217396][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.226142][ T5941] veth0_macvtap: entered promiscuous mode
[   48.232957][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.233255][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.236175][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.236200][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.236209][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.240152][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.243351][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.254905][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.257489][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.260789][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.263259][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.277621][ T5941] veth1_macvtap: entered promiscuous mode
[   48.281914][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.285292][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.301964][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.305115][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.307638][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.310592][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.313352][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.317047][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.322593][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.328763][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.333080][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.335996][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.340867][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.344667][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.349126][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.355293][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.363869][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.380490][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.383865][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.386401][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.390850][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.398985][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.401385][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.429334][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.431799][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.452722][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   48.455477][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   48.459422][ T6006] netlink: 'syz.3.4': attribute type 7 has an invalid length.
[   48.465409][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.467785][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.473608][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.476022][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.476430][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.481458][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.485452][ T6006] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   48.507141][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.510718][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.589368][ T6013] Zero length message leads to an empty skb
[   48.609147][ T6017] xt_hashlimit: size too large, truncated to 1048576
[   48.632506][ T6020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=6020 comm=syz.1.2
[   48.654001][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.757275][ T6035] fuse: Unknown parameter 'ß'
[   48.794231][ T5951] Bluetooth: min 0 < 6
[   48.795656][ T6038] program syz.1.9 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.844807][ T6048] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   48.879685][ T6048] evm: overlay not supported
[   49.292892][ T6073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   49.296040][ T6073] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[   49.371592][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'.
[   49.515823][ T6096] mkiss: ax0: crc mode is auto.
[   49.554621][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[   49.559078][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   49.796980][ T6117] gfs2: gfs2 mount does not exist
[   49.870324][ T6127] process 'syz.2.39' launched './file0' with NULL argv: empty string added
[   49.898330][ T5948] Bluetooth: hci3: command tx timeout
[   49.899877][ T5951] Bluetooth: hci1: command tx timeout
[   49.908136][ T5951] Bluetooth: hci0: command tx timeout
[   49.921264][ T6130] loop7: detected capacity change from 0 to 524287999
[   49.926668][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.929536][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.932528][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.935141][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.941633][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.944205][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.946576][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.949238][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.951692][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.954270][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.958855][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.961472][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.964080][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.966727][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.970866][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.973446][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.976362][ T6130] ldm_validate_partition_table(): Disk read failed.
[   49.978214][ T5951] Bluetooth: hci2: command tx timeout
[   49.982912][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.985511][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.988243][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   49.990832][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   49.993327][ T6130] Dev loop7: unable to read RDB block 0
[   49.995944][ T6130]  loop7: unable to read partition table
[   49.997725][ T6130] loop_reread_partitions: partition scan of loop7 (ÿŸ¾‚³˜±Ä6�tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5)
[   50.041735][ T6139] syz.3.42 uses obsolete (PF_INET,SOCK_PACKET)
[   50.497424][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'.
[   50.501023][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'.
[   50.523592][ T6151] mmap: syz.0.45 (6151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   50.565439][   T39] kauditd_printk_skb: 156 callbacks suppressed
[   50.565453][   T39] audit: type=1400 audit(1739734057.223:271): avc:  denied  { ioctl } for  pid=6158 comm="syz.0.47" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   50.581169][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'.
[   50.586059][   T39] audit: type=1400 audit(1739734057.243:272): avc:  denied  { unmount } for  pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   50.626768][ T6162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   50.651788][ T6162] mac80211_hwsim hwsim3 
: renamed from wlan1 (while UP)
[   50.654113][   T39] audit: type=1400 audit(1739734057.313:273): avc:  denied  { ioctl } for  pid=6161 comm="syz.3.48" path="socket:[10643]" dev="sockfs" ino=10643 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   50.666382][   T39] audit: type=1400 audit(1739734057.323:274): avc:  denied  { mounton } for  pid=6161 comm="syz.3.48" path="/14/bus/bus" dev="overlay" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   50.666401][ T6162] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[   50.677418][ T6162] Error validating options; rc = [-22]
[   50.829079][   T39] audit: type=1400 audit(1739734057.493:275): avc:  denied  { create } for  pid=6174 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   50.836161][   T39] audit: type=1400 audit(1739734057.493:276): avc:  denied  { write } for  pid=6174 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   50.844810][   T39] audit: type=1400 audit(1739734057.503:277): avc:  denied  { connect } for  pid=6174 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   50.865915][   T39] audit: type=1400 audit(1739734057.523:278): avc:  denied  { accept } for  pid=6178 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   50.994742][ T6197] netlink: 548 bytes leftover after parsing attributes in process `syz.3.56'.
[   51.041613][   T39] audit: type=1400 audit(1739734057.703:279): avc:  denied  { read } for  pid=6199 comm="syz.3.58" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   51.050960][   T39] audit: type=1400 audit(1739734057.703:280): avc:  denied  { open } for  pid=6199 comm="syz.3.58" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   51.247968][ T6214] overlayfs: failed to resolve './file0': -2
[   51.345887][ T6155] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   51.349350][ T6155] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   51.367268][ T6155] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   51.370503][ T6155] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   51.377254][ T6155] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   51.381526][ T6155] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   51.389146][ T6155] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   51.390940][ T6155] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   51.496856][ T6226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer.
[   51.585278][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.601455][ T6229] batadv_slave_1: entered promiscuous mode
[   51.780184][ T6233] tipc: Invalid UDP bearer configuration
[   51.780225][ T6233] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   51.858131][   T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   52.008584][   T64] usb 6-1: Using ep0 maxpacket: 16
[   52.015016][   T64] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   52.017599][   T64] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   52.020512][   T64] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   52.023392][   T64] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   52.027423][   T64] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   52.031498][   T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   52.035338][   T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.037779][   T64] usb 6-1: Product: syz
[   52.041726][   T64] usb 6-1: Manufacturer: syz
[   52.043121][   T64] usb 6-1: SerialNumber: syz
[   52.168394][   T35] usb 7-1: device descriptor read/64, error -71
[   52.272440][   T64] usb 6-1: 0:2 : does not exist
[   52.299199][   T64] usb 6-1: USB disconnect, device number 2
[   52.408157][   T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   52.502825][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   52.548383][   T35] usb 7-1: device descriptor read/64, error -71
[   52.643244][ T6267] netlink: 'syz.1.77': attribute type 64 has an invalid length.
[   52.646200][ T6267] netlink: 'syz.1.77': attribute type 4 has an invalid length.
[   52.658360][   T35] usb usb7-port1: attempt power cycle
[   52.686419][ T6271] Bluetooth: MGMT ver 1.23
[   52.686650][ T6269] IPv6: addrconf: prefix option has invalid lifetime
[   52.732305][ T6273] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   52.806766][ T6277] input: syz0 as /devices/virtual/input/input5
[   52.809538][ T6277] input: failed to attach handler leds to device input5, error: -6
[   53.009494][ T6288] 9pnet_fd: Insufficient options for proto=fd
[   53.009812][   T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   53.038665][   T35] usb 7-1: device descriptor read/8, error -71
[   53.106857][ T6292] capability: warning: `syz.0.87' uses 32-bit capabilities (legacy support in use)
[   53.298668][   T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   53.332683][   T35] usb 7-1: device descriptor read/8, error -71
[   53.370044][ T6305] sp0: Synchronizing with TNC
[   53.388728][ T6312] netlink: 'syz.1.93': attribute type 64 has an invalid length.
[   53.390957][ T6312] netlink: 'syz.1.93': attribute type 4 has an invalid length.
[   53.438273][   T35] usb usb7-port1: unable to enumerate USB device
[   53.464869][ T6319] __nla_validate_parse: 7 callbacks suppressed
[   53.464881][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'.
[   53.466339][ T6322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6322 comm=syz.1.97
[   53.467129][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'.
[   53.779003][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   53.928213][    T8] usb 5-1: Using ep0 maxpacket: 8
[   53.932018][    T8] usb 5-1: config index 0 descriptor too short (expected 50970, got 27)
[   53.935167][    T8] usb 5-1: config 21 has too many interfaces: 151, using maximum allowed: 32
[   53.939061][    T8] usb 5-1: config 21 has an invalid descriptor of length 108, skipping remainder of the config
[   53.942485][    T8] usb 5-1: config 21 has 0 interfaces, different from the descriptor's value: 151
[   53.945978][    T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   53.950039][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.352138][ T6338] capability: warning: `syz.3.101' uses deprecated v2 capabilities in a way that may be insecure
[   54.659537][ T6347] xt_ecn: cannot match TCP bits for non-tcp packets
[   54.929627][ T6358] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   54.932478][ T6358] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   54.963961][ T6363] Bluetooth: MGMT ver 1.23
[   54.981138][ T6365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.177416][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'.
[   55.262154][ T6397] xfs: Unknown parameter 'norecoveryñø¶\Ë'
[   55.314152][ T6402] netlink: 10 bytes leftover after parsing attributes in process `syz.2.125'.
[   55.533307][ T6417] netlink: 'syz.2.132': attribute type 10 has an invalid length.
[   55.533998][ T6420] =======================================================
[   55.533998][ T6420] WARNING: The mand mount option has been deprecated and
[   55.533998][ T6420]          and is ignored by this kernel. Remove the mand
[   55.533998][ T6420]          option from the mount to silence this warning.
[   55.533998][ T6420] =======================================================
[   55.537500][ T6417] bond0: (slave wlan1): Opening slave failed
[   55.574862][   T39] kauditd_printk_skb: 69 callbacks suppressed
[   55.574905][   T39] audit: type=1400 audit(1739734062.233:350): avc:  denied  { unmount } for  pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   55.710601][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.137'.
[   55.783440][   T39] audit: type=1400 audit(1739734062.443:351): avc:  denied  { listen } for  pid=6438 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   55.789659][   T39] audit: type=1400 audit(1739734062.443:352): avc:  denied  { create } for  pid=6438 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   55.790175][ T6439] 9pnet_fd: p9_fd_create_unix (6439): problem connecting socket: ./cgroup: -111
[   55.795533][   T39] audit: type=1400 audit(1739734062.443:353): avc:  denied  { write } for  pid=6438 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   55.800387][ T6439] gfs2: gfs2 mount does not exist
[   55.804947][   T39] audit: type=1400 audit(1739734062.443:354): avc:  denied  { nlmsg_read } for  pid=6438 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   55.872230][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'.
[   55.891274][   T39] audit: type=1400 audit(1739734062.553:355): avc:  denied  { execute_no_trans } for  pid=6446 comm="syz.3.143" path="/51/file0" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   55.930949][   T39] audit: type=1400 audit(1739734062.593:356): avc:  denied  { mount } for  pid=6449 comm="syz.3.144" name="/" dev="ramfs" ino=11052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   55.936038][ T6450] netlink: 52 bytes leftover after parsing attributes in process `syz.3.144'.
[   55.953579][   T39] audit: type=1400 audit(1739734062.613:357): avc:  denied  { unmount } for  pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   55.980627][   T39] audit: type=1400 audit(1739734062.643:358): avc:  denied  { getopt } for  pid=6451 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.035952][ T6457] ALSA: mixer_oss: invalid OSS volume ''
[   56.038665][ T6457] netlink: 'syz.1.146': attribute type 10 has an invalid length.
[   56.041096][ T6457] netlink: 2 bytes leftover after parsing attributes in process `syz.1.146'.
[   56.043627][ T6457] team0: entered promiscuous mode
[   56.045135][ T6457] team_slave_0: entered promiscuous mode
[   56.046964][ T6457] team_slave_1: entered promiscuous mode
[   56.049376][ T6457] bridge0: port 3(team0) entered blocking state
[   56.051384][ T6457] bridge0: port 3(team0) entered disabled state
[   56.053409][ T6457] team0: entered allmulticast mode
[   56.054946][ T6457] team_slave_0: entered allmulticast mode
[   56.056969][ T6457] team_slave_1: entered allmulticast mode
[   56.061197][ T6457] bridge0: port 3(team0) entered blocking state
[   56.063231][ T6457] bridge0: port 3(team0) entered forwarding state
[   56.150881][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'.
[   56.212613][   T39] audit: type=1400 audit(1739734062.873:359): avc:  denied  { connect } for  pid=6469 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   56.240568][ T6474] vivid-000: disconnect
[   56.243204][ T6473] vivid-000: reconnect
[   56.440515][    T8] usb 5-1: string descriptor 0 read error: -71
[   56.450138][    T8] usb 5-1: USB disconnect, device number 2
[   56.493001][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'.
[   56.521858][ T6482] netlink: 'syz.1.150': attribute type 10 has an invalid length.
[   56.558178][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.560607][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.562938][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.565275][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.567637][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.570098][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.572440][ T6499] netlink: 'syz.3.161': attribute type 27 has an invalid length.
[   56.602029][ T6503] sp0: Synchronizing with TNC
[   56.679107][ T6509] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   56.687008][ T6509] CIFS mount error: No usable UNC path provided in device string!
[   56.687008][ T6509] 
[   56.690574][ T6509] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   57.158144][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   57.328100][    T8] usb 6-1: Using ep0 maxpacket: 16
[   57.330919][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.333949][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.336683][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   57.340557][    T8] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   57.343072][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.351977][    T8] usb 6-1: config 0 descriptor??
[   57.701386][ T6548] fuse: blksize only supported for fuseblk
[   57.762639][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[   57.763929][ T6551] macsec0: entered promiscuous mode
[   57.765212][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[   57.770496][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[   57.772464][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[   57.774419][    T8] shield 0003:0955:7214.0002: unknown main item tag 0x0
[   57.780864][    T8] input: HID 0955:7214 Haptics as /devices/virtual/input/input6
[   57.794252][    T8] shield 0003:0955:7214.0002: Registered Thunderstrike controller
[   57.796768][    T8] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[   57.924893][ T6566] nbd: must specify a device to reconfigure
[   57.959581][ T6529] random: crng reseeded on system resumption
[   58.003123][ T6574] syz.2.182: attempt to access beyond end of device
[   58.003123][ T6574] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0
[   58.007692][ T6574] ADFS-fs (nbd2): error: unable to read block 3, try 0
[   58.039690][ T6578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6578 comm=syz.0.184
[   58.054246][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.102122][ T6586] syz.0.186 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   58.423822][ T6529] tc_dump_action: action bad kind
[   58.437393][    T8] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   58.437690][  T835] usb 6-1: USB disconnect, device number 3
[   58.441204][    T8] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   58.452248][ T6624] 9pnet: p9_errstr2errno: server reported unknown error �ÎL-åÅu¸×¥BãͨÉA•e‹&|Û£�^î
[   58.470726][ T6626] warning: `syz.2.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.064058][ T6669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   59.066678][ T6669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   59.140378][ T6686] __nla_validate_parse: 10 callbacks suppressed
[   59.140389][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.250437][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.259016][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.261920][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.264927][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.267606][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.270552][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.273176][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.276524][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.280023][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.219'.
[   59.400129][ T6712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6712 comm=syz.3.224
[   59.447393][ T6719] loop2: detected capacity change from 0 to 7
[   59.452018][ T6719] Dev loop2: unable to read RDB block 7
[   59.453631][ T6719]  loop2: AHDI p1 p2
[   59.454755][ T6719] loop2: partition table partially beyond EOD, truncated
[   59.461335][ T6719] loop2: p1 size 2432696320 extends beyond EOD, truncated
[   59.475660][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   59.540245][ T6725] (syz.0.229,6725,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   59.564370][ T6704] kvm: pic: non byte write
[   59.565693][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.573453][ T6725] bridge_slave_1: left allmulticast mode
[   59.575083][ T6725] bridge_slave_1: left promiscuous mode
[   59.576785][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.585730][ T6725] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   59.630363][ T6729] IPv6: sit1: Disabled Multicast RS
[   59.632611][ T6729] sit1: entered allmulticast mode
[   59.778122][ T6737] overlay: Bad value for 'workdir'
[   59.865708][ T6741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6741 comm=syz.2.234
[   59.984974][ T6759] program syz.2.239 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.028089][  T835] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   60.131173][ T6752] pim6reg: entered allmulticast mode
[   60.133298][ T6752] macvlan0: entered allmulticast mode
[   60.134822][ T6752] veth1_vlan: entered allmulticast mode
[   60.198722][  T835] usb 5-1: Using ep0 maxpacket: 8
[   60.202696][  T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   60.206186][  T835] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   60.209388][  T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.218243][  T835] usb 5-1: config 0 descriptor??
[   60.233867][ T6773] cgroup: Name too long
[   60.428781][  T835] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   60.508252][   T35] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   60.607453][   T39] kauditd_printk_skb: 83 callbacks suppressed
[   60.607466][   T39] audit: type=1400 audit(1739734067.263:443): avc:  denied  { read write } for  pid=6793 comm="syz.3.252" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   60.616831][   T39] audit: type=1400 audit(1739734067.263:444): avc:  denied  { open } for  pid=6793 comm="syz.3.252" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   60.625802][   T39] audit: type=1400 audit(1739734067.273:445): avc:  denied  { ioctl } for  pid=6793 comm="syz.3.252" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   60.681583][   T35] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[   60.683948][   T35] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   60.687921][   T35] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[   60.691406][   T35] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[   60.692690][   T39] audit: type=1400 audit(1739734067.353:446): avc:  denied  { mount } for  pid=6801 comm="syz.2.256" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   60.694493][   T35] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   60.699370][ T6802] xt_hashlimit: invalid rate
[   60.707245][   T35] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.712940][   T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   60.715708][   T35] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   60.718145][   T35] usb 6-1: Product: syz
[   60.719378][   T35] usb 6-1: Manufacturer: syz
[   60.720798][   T35] usb 6-1: SerialNumber: syz
[   60.723536][   T35] usb 6-1: config 0 descriptor??
[   60.725520][ T6775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   60.729521][   T35] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   60.733350][   T35] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[   60.743973][   T39] audit: type=1400 audit(1739734067.403:447): avc:  denied  { shutdown } for  pid=6804 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   60.745561][ T6805] validate_nla: 94 callbacks suppressed
[   60.745572][ T6805] netlink: 'syz.2.257': attribute type 16 has an invalid length.
[   60.753222][ T6805] netlink: 'syz.2.257': attribute type 17 has an invalid length.
[   60.799312][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.834243][   T39] audit: type=1400 audit(1739734067.493:448): avc:  denied  { read } for  pid=6734 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   60.837570][   T35] usb 5-1: USB disconnect, device number 3
[   60.853493][   T39] audit: type=1400 audit(1739734067.513:449): avc:  denied  { create } for  pid=6810 comm="syz.2.260" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   60.874545][   T39] audit: type=1400 audit(1739734067.533:450): avc:  denied  { bind } for  pid=6812 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   60.900661][ T6813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.966052][   T39] audit: type=1400 audit(1739734067.623:451): avc:  denied  { read } for  pid=6810 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   60.974207][   T39] audit: type=1400 audit(1739734067.623:452): avc:  denied  { mounton } for  pid=6810 comm="syz.2.260" path="/81/file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   61.097964][   T30] usb 6-1: USB disconnect, device number 4
[   61.102402][   T30] ldusb 6-1:0.0: LD USB Device #1 now disconnected
[   61.718123][   T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   61.854072][ T6846] gre1: entered promiscuous mode
[   61.858613][ T6840] bridge_slave_1: left allmulticast mode
[   61.860282][ T6840] bridge_slave_1: left promiscuous mode
[   61.861937][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.870182][   T35] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   61.870206][ T6840] bridge_slave_0: left allmulticast mode
[   61.872822][   T35] usb 5-1: config 0 interface 0 has no altsetting 0
[   61.874952][ T6840] bridge_slave_0: left promiscuous mode
[   61.879933][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.880335][   T35] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   61.884440][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.886688][   T35] usb 5-1: Product: syz
[   61.887884][   T35] usb 5-1: Manufacturer: syz
[   61.889957][   T35] usb 5-1: SerialNumber: syz
[   61.892277][   T35] usb 5-1: config 0 descriptor??
[   61.900207][   T35] usb 5-1: selecting invalid altsetting 0
[   62.088171][ T5984] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   62.190802][   T25] usb 5-1: USB disconnect, device number 4
[   62.241147][ T5984] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   62.244220][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.247205][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.255992][ T5984] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   62.260504][ T5984] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   62.263028][ T5984] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   62.265298][ T5984] usb 7-1: Manufacturer: syz
[   62.267705][ T5984] usb 7-1: config 0 descriptor??
[   62.672837][ T5984] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[   62.675163][ T5984] appleir 0003:05AC:8243.0003: No inputs registered, leaving
[   62.690877][ T5984] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   62.940472][ T6845] netlink: 'syz.2.269': attribute type 7 has an invalid length.
[   62.943515][ T6845] netlink: 'syz.2.269': attribute type 8 has an invalid length.
[   64.118814][ T5985] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[   69.309764][ T5985] usb 7-1: device descriptor read/64, error -110
[   69.558239][ T5985] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[   69.698362][ T5985] usb 7-1: device descriptor read/64, error -32
[   69.948258][ T5985] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[   69.980513][ T5985] usb 7-1: device descriptor read/8, error -32
[   70.218717][ T5985] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[   70.238456][ T5985] usb 7-1: device descriptor read/8, error -32
[   70.361712][    T8] usb 7-1: USB disconnect, device number 6
[   70.375932][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   70.448381][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   70.526582][    T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   70.529858][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[   70.532700][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   70.608277][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   70.678196][    T8] usb 7-1: device descriptor read/64, error -32
[   70.789153][    T8] raw-gadget.1 gadget.2: failed to queue suspend event
[   70.792876][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   70.858293][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   70.918416][    T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   70.920881][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[   70.923058][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   70.988476][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   71.048187][    T8] usb 7-1: device descriptor read/64, error -32
[   71.158805][    T8] raw-gadget.1 gadget.2: failed to queue suspend event
[   71.160872][    T8] usb usb7-port1: attempt power cycle
[   71.162437][    T8] raw-gadget.1 gadget.2: failed to queue disconnect event
[   71.164537][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   71.229727][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   71.232315][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   71.438593][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   71.498314][    T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   71.501888][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[   71.518312][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[   71.520391][    T8] usb 7-1: device descriptor read/8, error -32
[   71.628628][    T8] raw-gadget.1 gadget.2: failed to queue suspend event
[   71.631498][    T8] raw-gadget.1 gadget.2: failed to queue reset event
[   71.698187][    T8] raw-gadget.1 gadget.2: failed to queue resume event
[   71.758179][    T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   71.778404][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[   71.780509][    T8] usb 7-1: device descriptor read/8, error -32
[   71.888337][    T8] raw-gadget.1 gadget.2: failed to queue suspend event
[   71.891054][    T8] usb usb7-port1: unable to enumerate USB device
[   74.833753][ T6845] ip6gretap0: entered promiscuous mode
[   74.836508][ T6845] batadv_slave_1: entered promiscuous mode
[   74.839135][ T6845] gretap0: entered promiscuous mode
[   74.852401][ T6845] raw-gadget.1 gadget.2: failed to queue disconnect event
[   74.867339][   T39] kauditd_printk_skb: 9 callbacks suppressed
[   74.867352][   T39] audit: type=1400 audit(1739734081.523:462): avc:  denied  { setopt } for  pid=6887 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.879123][   T39] audit: type=1400 audit(1739734081.543:463): avc:  denied  { ioctl } for  pid=6891 comm="syz.2.283" path="socket:[13715]" dev="sockfs" ino=13715 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   75.015253][ T6903] __nla_validate_parse: 31 callbacks suppressed
[   75.015266][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'.
[   75.020777][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'.
[   75.054998][   T39] audit: type=1400 audit(1739734081.713:464): avc:  denied  { getopt } for  pid=6908 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   75.069026][ T6911] syz.0.289: attempt to access beyond end of device
[   75.069026][ T6911] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0
[   75.073191][ T6911] qnx6: unable to read the first superblock
[   75.075048][ T6911] syz.0.289: attempt to access beyond end of device
[   75.075048][ T6911] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[   75.078679][ T6911] qnx6: unable to read the first superblock
[   75.080382][ T6911] qnx6: unable to read the first superblock
[   75.095186][ T6915] netlink: 'syz.3.291': attribute type 1 has an invalid length.
[   75.105159][   T39] audit: type=1400 audit(1739734081.763:465): avc:  denied  { write } for  pid=6912 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   75.145206][   T39] audit: type=1400 audit(1739734081.803:466): avc:  denied  { create } for  pid=6917 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   75.147252][ T6918] block nbd0: Unsupported socket: shutdown callout must be supported.
[   75.159724][   T39] audit: type=1400 audit(1739734081.813:467): avc:  denied  { read write } for  pid=6919 comm="syz.2.293" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.161940][ T6918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.168776][   T39] audit: type=1400 audit(1739734081.813:468): avc:  denied  { open } for  pid=6919 comm="syz.2.293" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.177323][   T39] audit: type=1400 audit(1739734081.813:469): avc:  denied  { ioctl } for  pid=6919 comm="syz.2.293" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.184445][   T39] audit: type=1400 audit(1739734081.823:470): avc:  denied  { ioctl } for  pid=6917 comm="syz.0.292" path="socket:[14610]" dev="sockfs" ino=14610 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   75.341532][ T6935] xt_TCPMSS: Only works on TCP SYN packets
[   75.364055][   T39] audit: type=1400 audit(1739734082.023:471): avc:  denied  { bind } for  pid=6938 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   75.464822][ T6944] syz.2.301: attempt to access beyond end of device
[   75.464822][ T6944] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0
[   75.468624][ T6944] qnx6: unable to read the first superblock
[   75.470441][ T6944] syz.2.301: attempt to access beyond end of device
[   75.470441][ T6944] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   75.474002][ T6944] qnx6: unable to read the first superblock
[   75.475660][ T6944] qnx6: unable to read the first superblock
[   75.562335][ T6952] bridge_slave_0: left allmulticast mode
[   75.564116][ T6952] bridge_slave_0: left promiscuous mode
[   75.567688][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.573713][ T6952] bond0: (slave bridge_slave_1): Releasing backup interface
[   75.574193][ T6954] loop6: detected capacity change from 0 to 524287999
[   75.587819][    C2] blk_print_req_error: 7 callbacks suppressed
[   75.587833][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.592230][    C2] buffer_io_error: 7 callbacks suppressed
[   75.592238][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.599084][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.601853][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.604261][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.607574][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.611927][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.614519][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.617158][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.619973][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.623169][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.626020][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.628904][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.631558][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.671445][ T6952] bond0: (slave bond_slave_0): Releasing backup interface
[   75.673381][ T6956] loop6: detected capacity change from 524287999 to 0
[   75.680438][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.683154][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[   75.685360][ T6954] ldm_validate_partition_table(): Disk read failed.
[   75.687234][ T6954] Dev loop6: unable to read RDB block 0
[   75.690059][ T6954]  loop6: unable to read partition table
[   75.691758][ T6954] loop6: partition table beyond EOD, truncated
[   75.696867][ T6954] loop_reread_partitions: partition scan of loop6 (‰u0AŠ°ßjû$UXàÈ¿`LÊAó‰8ü»K#UYì«ÒW 7ÐðŽŠØ–ºg c–Þú) failed (rc=-5)
[   75.727425][ T6952] bond0: (slave bond_slave_1): Releasing backup interface
[   75.741006][ T6958] netlink: 'syz.0.303': attribute type 10 has an invalid length.
[   75.831875][ T6952] team0: Port device team_slave_0 removed
[   75.837961][ T6952] team0: Port device team_slave_1 removed
[   75.840462][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.842584][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.847828][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.850392][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.868670][ T6957] vlan2: entered allmulticast mode
[   75.870583][ T6957] bond0: entered allmulticast mode
[   75.872801][ T6957] bridge0: port 1(vlan2) entered blocking state
[   75.874722][ T6957] bridge0: port 1(vlan2) entered disabled state
[   75.981504][ T6972] bridge2: entered promiscuous mode
[   75.983136][ T6972] bridge2: entered allmulticast mode
[   76.084513][ T6981] kvm: emulating exchange as write
[   76.595173][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[   77.045478][ T7037] tipc: Started in network mode
[   77.047322][ T7037] tipc: Node identity fee52d528b6c, cluster identity 4711
[   77.050502][ T7037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.075400][ T7037] syzkaller0: entered promiscuous mode
[   77.077665][ T7037] syzkaller0: entered allmulticast mode
[   77.080649][ T7037] tipc: Resetting bearer <eth:syzkaller0>
[   77.088678][ T7036] tipc: Resetting bearer <eth:syzkaller0>
[   77.899278][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   78.090434][ T6883] tipc: Node number set to 1971924306
[   81.751215][  T834] cfg80211: failed to load regulatory.db
[   90.290255][ T7036] tipc: Disabling bearer <eth:syzkaller0>
[   90.374116][   T39] kauditd_printk_skb: 41 callbacks suppressed
[   90.374133][   T39] audit: type=1400 audit(1739734097.033:513): avc:  denied  { create } for  pid=7093 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   90.385333][   T39] audit: type=1400 audit(1739734097.033:514): avc:  denied  { remount } for  pid=7095 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   90.393950][   T39] audit: type=1400 audit(1739734097.053:515): avc:  denied  { sys_admin } for  pid=7093 comm="syz.0.346" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   90.419581][ T7104] xt_nfacct: accounting object `syz1' does not exists
[   90.422692][   T39] audit: type=1400 audit(1739734097.083:516): avc:  denied  { watch watch_reads } for  pid=7103 comm="syz.0.350" path="pipe:[8261]" dev="pipefs" ino=8261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   90.427834][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[   90.443574][   T39] audit: type=1400 audit(1739734097.103:517): avc:  denied  { execute } for  pid=7097 comm="syz.1.347" name="file0" dev="ramfs" ino=13999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   90.451172][   T39] audit: type=1400 audit(1739734097.103:518): avc:  denied  { execute_no_trans } for  pid=7097 comm="syz.1.347" path="/file0" dev="ramfs" ino=13999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   90.627061][ T7125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31810 sclass=netlink_route_socket pid=7125 comm=syz.2.355
[   90.680050][ T7129] nbd1: detected capacity change from 0 to 67108884
[   90.684784][ T7090] block nbd1: Send control failed (result -89)
[   90.687384][ T7090] block nbd1: Request send failed, requeueing
[   90.693311][ T5951] block nbd1: Receive control failed (result -32)
[   90.698623][   T71] block nbd1: Dead connection, failed to find a fallback
[   90.700897][   T71] block nbd1: shutting down sockets
[   90.702459][   T71] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.705069][   T71] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.708803][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.711578][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.713986][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.716509][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.718907][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.721498][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.723723][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.726235][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.728686][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.731210][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.733463][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.735959][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.739151][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.741684][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.743832][ T7090] ldm_validate_partition_table(): Disk read failed.
[   90.745742][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.748392][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.750590][ T7090] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.753090][ T7090] Buffer I/O error on dev nbd1, logical block 0, async page read
[   90.755360][ T7090] Dev nbd1: unable to read RDB block 0
[   90.757135][ T7090]  nbd1: unable to read partition table
[   90.762761][ T7090] ldm_validate_partition_table(): Disk read failed.
[   90.764806][ T7090] Dev nbd1: unable to read RDB block 0
[   90.767146][ T7090]  nbd1: unable to read partition table
[   90.801994][ T7139] netlink: 144 bytes leftover after parsing attributes in process `syz.1.363'.
[   90.828606][   T39] audit: type=1400 audit(1739734097.483:519): avc:  denied  { getopt } for  pid=7140 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.998423][   T39] audit: type=1400 audit(1739734097.663:520): avc:  denied  { connect } for  pid=7154 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   91.118443][ T7158] trusted_key: encrypted_key: master key parameter '' is invalid
[   91.419008][   T39] audit: type=1400 audit(1739734098.073:521): avc:  denied  { getopt } for  pid=7171 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   91.425191][   T39] audit: type=1400 audit(1739734098.083:522): avc:  denied  { mounton } for  pid=7171 comm="syz.2.374" path="/103/file0" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   91.426417][ T7172] overlayfs: statfs failed on './file0'
[   91.461386][ T7173] tmpfs: Unknown parameter 'mpoúÆãˆl'
[   91.796220][ T7198] netlink: 'syz.2.383': attribute type 9 has an invalid length.
[   91.803781][ T7198] overlayfs: failed to resolve './file0': -2
[   91.845525][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[   91.888421][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[   91.975174][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.388'.
[   91.980775][ T7216] bridge0: port 3(team0) entered disabled state
[   91.982943][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.985863][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.284091][ T7239] geneve2: entered promiscuous mode
[   92.286110][ T7239] geneve2: entered allmulticast mode
[   92.403594][ T7216] syz.1.388 (7216): drop_caches: 2
[   92.501536][ T7257] xt_hashlimit: size too large, truncated to 1048576
[   92.502730][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'.
[   92.602633][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[   92.983947][ T7288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=7288 comm=syz.2.414
[   92.987833][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'.
[   92.997711][ T7288] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.007754][ T7288] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.010725][ T7288] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.014363][ T7288] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   93.600406][ T7301] pimreg: entered allmulticast mode
[   93.659702][ T7309] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7309 comm: syz.0.421)
[   93.888154][ T6883] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   94.038280][ T6883] usb 6-1: device descriptor read/64, error -71
[   94.173018][ T7347] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   94.288182][ T6883] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   94.366524][ T7351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.438409][ T6883] usb 6-1: device descriptor read/64, error -71
[   94.475282][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.483390][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.486655][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.492917][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.495925][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   94.500990][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.511411][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.513762][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.516367][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.521175][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.523516][ T5951] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   94.526074][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.559467][ T6883] usb usb6-port1: attempt power cycle
[   94.752592][   T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.765545][ T7370] bridge0: port 2(syz_tun) entered blocking state
[   94.769040][ T7370] bridge0: port 2(syz_tun) entered disabled state
[   94.771877][ T7370] syz_tun: entered allmulticast mode
[   94.775525][ T7370] syz_tun: entered promiscuous mode
[   94.777404][ T7370] vlan2: entered promiscuous mode
[   94.779275][ T7370] bond0: entered promiscuous mode
[   94.894967][   T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.920207][ T7371] chnl_net:caif_netlink_parms(): no params data found
[   94.926063][ T6883] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   94.948510][ T6883] usb 6-1: device descriptor read/8, error -71
[   95.041087][   T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.046122][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.048767][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.050991][ T7371] bridge_slave_0: entered allmulticast mode
[   95.053310][ T7371] bridge_slave_0: entered promiscuous mode
[   95.056012][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.058276][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.060394][ T7371] bridge_slave_1: entered allmulticast mode
[   95.062596][ T7371] bridge_slave_1: entered promiscuous mode
[   95.082870][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.087628][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.111292][ T7371] team0: Port device team_slave_0 added
[   95.117608][ T7371] team0: Port device team_slave_1 added
[   95.137895][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.140845][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.147962][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.198215][ T6883] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   95.218575][ T6883] usb 6-1: device descriptor read/8, error -71
[   95.239126][   T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.244074][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.246127][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.253577][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.281934][ T7371] hsr_slave_0: entered promiscuous mode
[   95.283920][ T7371] hsr_slave_1: entered promiscuous mode
[   95.286982][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.289267][ T7371] Cannot create hsr debugfs directory
[   95.328377][ T6883] usb usb6-port1: unable to enumerate USB device
[   95.378340][ T7371] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.383524][ T7371] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.386849][ T7371] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.392402][ T7371] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.403270][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.405315][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.407476][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.409542][ T7371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.444761][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.454887][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.458550][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.470253][ T7371] 8021q: adding VLAN 0 to HW filter on device team0
[   95.476957][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.478873][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.491349][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.493492][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.514548][   T65] bridge_slave_1: left allmulticast mode
[   95.516187][   T65] bridge_slave_1: left promiscuous mode
[   95.519176][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.523428][   T65] bridge_slave_0: left allmulticast mode
[   95.524900][   T65] bridge_slave_0: left promiscuous mode
[   95.526390][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.558598][ T5985] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   95.730579][ T5985] usb 5-1: Using ep0 maxpacket: 8
[   95.734712][ T5985] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   95.737239][ T5985] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   95.747976][ T5985] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   95.750734][ T5985] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   95.753466][ T5985] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.757128][ T5985] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   95.761308][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.791614][   T65] ip6gretap0 (unregistering): left promiscuous mode
[   95.972706][   T39] kauditd_printk_skb: 62 callbacks suppressed
[   95.972749][   T39] audit: type=1400 audit(1739734102.633:585): avc:  denied  { write } for  pid=7382 comm="syz.0.438" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   95.981018][ T5985] usb 5-1: usb_control_msg returned -71
[   95.982623][ T5985] usbtmc 5-1:16.0: can't read capabilities
[   95.987778][ T5985] usb 5-1: USB disconnect, device number 5
[   96.261820][   T65] gretap0 (unregistering): left promiscuous mode
[   96.438151][ T6170] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   96.539290][ T5948] Bluetooth: hci1: command tx timeout
[   96.589222][ T6170] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.590690][ T7398] ceph: Path missing in source
[   96.592730][ T6170] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.597799][ T6170] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.603932][ T6170] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.606485][ T6170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.616144][ T6170] usb 8-1: config 0 descriptor??
[   97.025967][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.030665][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.032710][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.035389][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.037926][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.040653][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.042625][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.044834][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.046791][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.050991][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.053048][ T6170] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   97.055454][ T6170] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   97.059221][ T6170] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   97.073235][ T7410] CIFS mount error: No usable UNC path provided in device string!
[   97.073235][ T7410] 
[   97.076971][ T7410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   97.094398][ T7410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53760 sclass=netlink_route_socket pid=7410 comm=syz.0.446
[   97.421335][   T39] audit: type=1400 audit(1739734104.083:586): avc:  denied  { nlmsg_read } for  pid=7414 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   97.433169][   T39] audit: type=1400 audit(1739734104.093:587): avc:  denied  { setopt } for  pid=7414 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   97.464275][   T39] audit: type=1326 audit(1739734104.123:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.471467][   T39] audit: type=1326 audit(1739734104.123:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.477750][   T39] audit: type=1326 audit(1739734104.123:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.484720][   T39] audit: type=1326 audit(1739734104.123:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.492147][   T39] audit: type=1326 audit(1739734104.123:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.498954][   T39] audit: type=1326 audit(1739734104.133:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.507294][   T39] audit: type=1326 audit(1739734104.133:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a438cde9 code=0x7ffc0000
[   97.551756][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.601136][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.639181][   T65] bond0 (unregistering): Released all slaves
[   98.368290][    T8] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[   98.490738][   T65] bond1 (unregistering): Released all slaves
[   98.507682][ T7396] vlan0: entered promiscuous mode
[   98.618268][ T5948] Bluetooth: hci1: command tx timeout
[   98.628453][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.781800][ T7371] veth0_vlan: entered promiscuous mode
[   98.840222][ T7371] veth1_vlan: entered promiscuous mode
[   98.855059][ T7371] veth0_macvtap: entered promiscuous mode
[   98.858850][ T7371] veth1_macvtap: entered promiscuous mode
[   98.865622][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.869441][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.872303][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.875357][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.881346][ T6883] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   98.884628][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.887759][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.891670][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.900188][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.903266][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.906112][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.909865][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.913389][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.970013][ T7371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.972717][ T7371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.975245][ T7371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.977680][ T7371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.038196][ T6883] usb 5-1: Using ep0 maxpacket: 8
[   99.048443][ T6883] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.051263][ T6883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   99.054053][ T6883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   99.059522][   T65] batadv_slave_1: left promiscuous mode
[   99.062691][ T6883] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.066658][ T6883] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   99.069598][ T6883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.078146][   T65] hsr_slave_0: left promiscuous mode
[   99.080998][   T65] hsr_slave_1: left promiscuous mode
[   99.083439][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.085868][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.099510][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.102602][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.131768][ T7465] FAULT_INJECTION: forcing a failure.
[   99.131768][ T7465] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   99.134998][   T65] veth1_macvtap: left promiscuous mode
[   99.135516][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.3.459 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0
[   99.135532][ T7465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   99.135539][ T7465] Call Trace:
[   99.135601][ T7465]  <TASK>
[   99.135607][ T7465]  dump_stack_lvl+0x16c/0x1f0
[   99.135847][ T7465]  should_fail_ex+0x50a/0x650
[   99.136014][ T7465]  _copy_from_user+0x2e/0xd0
[   99.136050][ T7465]  kstrtouint_from_user+0xd7/0x1c0
[   99.136064][ T7465]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   99.136080][ T7465]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   99.136183][ T7465]  proc_fail_nth_write+0x84/0x250
[   99.136263][ T7465]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   99.136275][ T7465]  ? ksys_write+0x12b/0x250
[   99.136313][ T7465]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   99.136326][ T7465]  vfs_write+0x24c/0x1150
[   99.136341][ T7465]  ? __fget_files+0x1fc/0x3a0
[   99.136368][ T7465]  ? __pfx___mutex_lock+0x10/0x10
[   99.136381][ T7465]  ? __pfx_vfs_write+0x10/0x10
[   99.136400][ T7465]  ? __fget_files+0x206/0x3a0
[   99.136413][ T7465]  ksys_write+0x12b/0x250
[   99.136427][ T7465]  ? __pfx_ksys_write+0x10/0x10
[   99.136446][ T7465]  do_syscall_64+0xcd/0x250
[   99.136459][ T7465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.136492][ T7465] RIP: 0033:0x7f57aa58b89f
[   99.136502][ T7465] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   99.136512][ T7465] RSP: 002b:00007f57ab330030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   99.136539][ T7465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57aa58b89f
[   99.136545][ T7465] RDX: 0000000000000001 RSI: 00007f57ab3300a0 RDI: 0000000000000004
[   99.136551][ T7465] RBP: 00007f57ab330090 R08: 0000000000000000 R09: 0000000000000000
[   99.136556][ T7465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   99.136562][ T7465] R13: 0000000000000000 R14: 00007f57aa7a6080 R15: 00007fffc9989b48
[   99.136574][ T7465]  </TASK>
[   99.201987][   T65] veth0_macvtap: left promiscuous mode
[   99.203707][   T65] veth1_vlan: left promiscuous mode
[   99.205490][   T65] veth0_vlan: left promiscuous mode
[   99.278104][ T6883] usb 5-1: GET_CAPABILITIES returned 0
[   99.279853][ T6883] usbtmc 5-1:16.0: can't read capabilities
[   99.280028][ T5985] usb 8-1: USB disconnect, device number 2
[   99.301046][   T35] usb 5-1: USB disconnect, device number 6
[  100.698151][ T5948] Bluetooth: hci1: command tx timeout
[  102.778235][ T5948] Bluetooth: hci1: command tx timeout
[  106.172321][   T65] team0 (unregistering): Port device team_slave_1 removed
[  107.123643][   T65] team0 (unregistering): Port device team_slave_0 removed
[  113.262931][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.265901][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.289890][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.292174][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.301510][   T39] kauditd_printk_skb: 26 callbacks suppressed
[  113.301521][   T39] audit: type=1400 audit(1739734119.963:621): avc:  denied  { mounton } for  pid=7371 comm="syz-executor" path="/syzkaller.cNqTWP/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  113.313678][   T39] audit: type=1400 audit(1739734119.963:622): avc:  denied  { mounton } for  pid=7371 comm="syz-executor" path="/syzkaller.cNqTWP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  113.321237][   T39] audit: type=1400 audit(1739734119.973:623): avc:  denied  { mount } for  pid=7371 comm="syz-executor" name="/" dev="gadgetfs" ino=9254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  113.424476][   T39] audit: type=1326 audit(1739734120.083:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.432190][   T39] audit: type=1326 audit(1739734120.083:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.447309][   T39] audit: type=1326 audit(1739734120.093:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.456615][   T39] audit: type=1326 audit(1739734120.093:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.462433][ T7507] trusted_key: encrypted_key: insufficient parameters specified
[  113.465147][   T39] audit: type=1326 audit(1739734120.093:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.473028][   T39] audit: type=1326 audit(1739734120.103:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.479969][   T39] audit: type=1326 audit(1739734120.103:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.3.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57aa58cde9 code=0x7ffc0000
[  113.841712][ T7543] sp0: Synchronizing with TNC
[  114.363296][ T7552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  114.756946][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'.
[  114.762702][ T7575] netlink: 'syz.4.490': attribute type 4 has an invalid length.
[  114.810555][ T7580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.492'.
[  114.922567][ T7590] zonefs (nbd1) ERROR: Not a zoned block device
[  114.929993][ T7591] syz.1.495: attempt to access beyond end of device
[  114.929993][ T7591] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[  114.933784][ T7591] syz.1.495: attempt to access beyond end of device
[  114.933784][ T7591] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[  114.937177][ T7591] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  114.941367][ T7591] syz.1.495: attempt to access beyond end of device
[  114.941367][ T7591] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  114.945262][ T7591] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  114.948873][ T7591] syz.1.495: attempt to access beyond end of device
[  114.948873][ T7591] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[  114.952374][ T7591] syz.1.495: attempt to access beyond end of device
[  114.952374][ T7591] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  114.955872][ T7591] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  114.961749][ T7591] syz.1.495: attempt to access beyond end of device
[  114.961749][ T7591] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  114.965421][ T7591] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  114.968524][ T7591] syz.1.495: attempt to access beyond end of device
[  114.968524][ T7591] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  114.972072][ T7591] syz.1.495: attempt to access beyond end of device
[  114.972072][ T7591] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0
[  114.975790][ T7591] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  114.979111][ T7591] syz.1.495: attempt to access beyond end of device
[  114.979111][ T7591] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0
[  114.982748][ T7591] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  114.985372][ T7591] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  115.031110][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.036089][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.047631][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.050655][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.053908][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  115.056167][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.165915][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.203584][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.497'.
[  115.349344][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.551936][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.560833][ T7599] chnl_net:caif_netlink_parms(): no params data found
[  115.608102][ T7651] tmpfs: Bad value for 'mpol'
[  115.619407][ T7646] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  115.739297][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.752083][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.754875][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.757589][ T7599] bridge_slave_0: entered allmulticast mode
[  115.761468][ T7599] bridge_slave_0: entered promiscuous mode
[  115.767133][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.770034][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.772586][ T7599] bridge_slave_1: entered allmulticast mode
[  115.775397][ T7599] bridge_slave_1: entered promiscuous mode
[  115.791018][ T7653] batman_adv: batadv0: Adding interface: ipvlan2
[  115.793197][ T7653] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.801741][ T7653] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  115.839143][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.844165][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.875291][ T7599] team0: Port device team_slave_0 added
[  115.878409][ T7599] team0: Port device team_slave_1 added
[  115.899041][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.901068][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.907914][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.912991][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.914921][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.922224][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.961809][ T7599] hsr_slave_0: entered promiscuous mode
[  115.963788][ T7599] hsr_slave_1: entered promiscuous mode
[  115.965561][ T7599] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.967694][ T7599] Cannot create hsr debugfs directory
[  116.773615][ T7671] netlink: 'syz.4.508': attribute type 12 has an invalid length.
[  117.100406][ T5948] Bluetooth: hci2: command tx timeout
[  118.110204][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.159762][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.199658][ T1139] bond0 (unregistering): Released all slaves
[  118.270130][ T1139] tipc: Left network mode
[  118.349845][ T7691] netlink: 'syz.1.515': attribute type 10 has an invalid length.
[  118.351155][ T7599] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  118.358442][ T7691] bridge0: port 3(team0) entered blocking state
[  118.360317][ T7691] bridge0: port 3(team0) entered listening state
[  118.362161][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.364192][ T7691] bridge0: port 2(bridge_slave_1) entered listening state
[  118.366179][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.368369][ T7691] bridge0: port 1(bridge_slave_0) entered listening state
[  118.379794][ T7691] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  118.383413][ T7599] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  118.390756][ T7599] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  118.463434][ T7599] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  118.466967][ T7691] tc_dump_action: action bad kind
[  118.496602][   T39] kauditd_printk_skb: 31 callbacks suppressed
[  118.496614][   T39] audit: type=1400 audit(1739734125.153:662): avc:  denied  { write } for  pid=7701 comm="syz.1.518" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  118.539224][ T7698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.517'.
[  118.571414][ T7704] 9pnet_fd: p9_fd_create_tcp (7704): problem connecting socket to 127.0.0.1
[  118.669330][ T7706] bond0: left allmulticast mode
[  118.670903][ T7706] bond0: left promiscuous mode
[  118.681378][   T39] audit: type=1400 audit(1739734125.343:663): avc:  denied  { getopt } for  pid=7703 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  118.708492][ T7702] netlink: 44 bytes leftover after parsing attributes in process `syz.1.518'.
[  119.178271][ T5948] Bluetooth: hci2: command tx timeout
[  119.599975][ T7706] vlan2 (unregistering): left promiscuous mode
[  119.601988][ T7706] bridge0: port 1(vlan2) entered disabled state
[  119.606444][ T7706] bond0 (unregistering): Released all slaves
[  119.729541][ T7716] netlink: 'syz.4.521': attribute type 13 has an invalid length.
[  119.830939][ T7717] debugfs: Directory 'ptm0' with parent 'caif_serial' already present!
[  119.870213][ T7716] gretap0: refused to change device tx_queue_len
[  119.872381][ T7716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  119.915658][   T39] audit: type=1400 audit(1739734126.573:664): avc:  denied  { accept } for  pid=7721 comm="syz.1.524" path="socket:[20484]" dev="sockfs" ino=20484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  119.948395][ T7725] xt_CT: No such helper "pptp"
[  119.950635][ T1139] hsr_slave_0: left promiscuous mode
[  119.953424][ T1139] hsr_slave_1: left promiscuous mode
[  119.957067][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.960397][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.964939][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.966825][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.972163][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'.
[  119.990788][ T1139] veth1_macvtap: left promiscuous mode
[  119.992290][ T1139] veth0_macvtap: left promiscuous mode
[  119.993709][ T1139] veth1_vlan: left promiscuous mode
[  119.995049][ T1139] veth0_vlan: left promiscuous mode
[  121.258200][ T5948] Bluetooth: hci2: command tx timeout
[  121.818444][ T5948] Bluetooth: hci1: command tx timeout
[  123.348227][ T5948] Bluetooth: hci2: command tx timeout
[  127.119641][ T1139] team0 (unregistering): Port device team_slave_1 removed
[  127.863469][ T1139] team0 (unregistering): Port device team_slave_0 removed
[  132.941137][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  134.519607][ T7740] fuse: Bad value for 'user_id'
[  134.519738][   T39] audit: type=1400 audit(1739734141.183:665): avc:  denied  { mounton } for  pid=7739 comm="syz.1.529" path="/117/file0" dev="hugetlbfs" ino=18014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[  134.521629][ T7740] fuse: Bad value for 'user_id'
[  134.585932][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.602965][   T39] audit: type=1400 audit(1739734141.263:666): avc:  denied  { write } for  pid=7746 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  134.611132][ T7599] 8021q: adding VLAN 0 to HW filter on device team0
[  134.616715][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.619540][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.630271][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.632416][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.720890][   T39] audit: type=1400 audit(1739734141.383:667): avc:  denied  { ioctl } for  pid=7750 comm="syz.1.534" path="socket:[20216]" dev="sockfs" ino=20216 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  134.732081][ T7758] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.737202][ T7758] bond0: (slave rose0): Enslaving as an active interface with an up link
[  134.750419][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.831246][   T39] audit: type=1400 audit(1739734141.493:668): avc:  denied  { write } for  pid=7768 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  134.877142][ T7769] netlink: 'syz.4.536': attribute type 1 has an invalid length.
[  134.962594][ T7599] veth0_vlan: entered promiscuous mode
[  134.966859][ T7599] veth1_vlan: entered promiscuous mode
[  134.979807][ T7599] veth0_macvtap: entered promiscuous mode
[  134.991257][ T7599] veth1_macvtap: entered promiscuous mode
[  134.999197][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.002128][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.004819][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.007698][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.012580][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.021823][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.024758][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.030664][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.034999][ T7599] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.037638][ T7599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.041663][ T7599] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.044061][ T7599] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.119434][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.121921][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.143229][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.146208][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.263467][ T7796] netlink: 'syz.4.543': attribute type 2 has an invalid length.
[  135.440864][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'.
[  135.446444][   T39] audit: type=1400 audit(1739734142.103:669): avc:  denied  { write } for  pid=7809 comm="syz.4.546" laddr=127.0.0.1 lport=50680 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  135.577086][   T39] audit: type=1400 audit(1739734142.233:670): avc:  denied  { write } for  pid=7818 comm="syz.5.548" name="file0" dev="9p" ino=36186140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  135.597068][   T39] audit: type=1400 audit(1739734142.253:671): avc:  denied  { bind } for  pid=7820 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  135.827803][ T7832] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  135.846816][   T39] audit: type=1400 audit(1739734142.503:672): avc:  denied  { connect } for  pid=7831 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  135.913362][   T39] audit: type=1400 audit(1739734142.573:673): avc:  denied  { ioctl } for  pid=7835 comm="syz.5.552" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  135.974987][ T7840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.555'.
[  136.010574][ T7840] Illegal XDP return value 4294967294 on prog  (id 70) dev N/A, expect packet loss!
[  136.028123][   T39] audit: type=1400 audit(1739734142.683:674): avc:  denied  { create } for  pid=7843 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  136.134208][ T7859] netlink: 'syz.5.563': attribute type 9 has an invalid length.
[  136.137055][ T7859] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.563'.
[  136.173252][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'.
[  136.205774][ T7867] tmpfs: Group quota inode hardlimit too large.
[  136.401584][ T7873] netlink: 'syz.0.568': attribute type 9 has an invalid length.
[  136.404220][ T7873] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.568'.
[  136.448715][ T7876] sctp: [Deprecated]: syz.4.566 (pid 7876) Use of int in max_burst socket option deprecated.
[  136.448715][ T7876] Use struct sctp_assoc_value instead
[  136.791377][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'.
[  136.819310][ T7897] block nbd0: NBD_DISCONNECT
[  136.821995][ T7897] block nbd0: Disconnected due to user request.
[  136.824042][ T7897] block nbd0: shutting down sockets
[  136.830658][ T7895] IPv6: sit1: Disabled Multicast RS
[  136.906500][ T7902] random: crng reseeded on system resumption
[  137.166494][ T7911] netlink: 830 bytes leftover after parsing attributes in process `syz.4.580'.
[  137.328112][ T1340] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  137.498859][ T1340] usb 10-1: Using ep0 maxpacket: 8
[  137.506581][ T7924] overlayfs: conflicting lowerdir path
[  137.510947][ T1340] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.514715][ T1340] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  137.517819][ T1340] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.527938][ T1340] usb 10-1: config 0 descriptor??
[  137.634352][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'.
[  137.639222][ T7928] netlink: 'syz.4.585': attribute type 2 has an invalid length.
[  137.647800][ T7928] CIFS mount error: No usable UNC path provided in device string!
[  137.647800][ T7928] 
[  137.651910][ T7928] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  137.739939][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'.
[  137.933164][ T7949] ------------[ cut here ]------------
[  137.936179][ T7949] kernel BUG at mm/hugetlb.c:2333!
[  137.938309][ T1340] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  137.938268][ T7949] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  137.938335][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.4.591 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0
[  137.949754][ T1340] usb 10-1: USB disconnect, device number 2
[  137.950422][ T7949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  137.956683][ T7949] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0
[  137.959547][ T7949] Code: a3 d0 00 00 00 e8 44 41 a2 ff 48 c7 c7 40 56 e1 8d e8 18 ff 41 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 25 41 a2 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[  137.966189][ T7949] RSP: 0018:ffffc900055e7900 EFLAGS: 00010093
[  137.968590][ T7949] RAX: 0000000000000000 RBX: ffffffff9a8d8758 RCX: ffffffff821795c2
[  137.970868][ T7949] RDX: ffff88802b154880 RSI: ffffffff821795fb RDI: 0000000000000007
[  137.973566][ T7949] RBP: ffffea0004340000 R08: 0000000000000007 R09: 0000000000000000
[  137.976796][ T7949] R10: 0000000000000000 R11: 00000000000000a4 R12: 0000000000000000
[  137.979394][ T7949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015
[  137.981815][ T7949] FS:  00007ff991d086c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
[  137.985245][ T7949] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.987823][ T7949] CR2: 00007ff991d07f98 CR3: 0000000024156000 CR4: 0000000000352ef0
[  137.990778][ T7949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  137.993795][ T7949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  137.996208][ T7949] Call Trace:
[  137.997172][ T7949]  <TASK>
[  137.998120][ T7949]  ? die+0x31/0x80
[  137.999785][ T7949]  ? do_trap+0x232/0x430
[  138.001538][ T7949]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  138.003836][ T7949]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  138.006172][ T7949]  ? do_error_trap+0xf4/0x230
[  138.008044][ T7949]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  138.010333][ T7949]  ? handle_invalid_op+0x34/0x40
[  138.012312][ T7949]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  138.014301][ T7949]  ? exc_invalid_op+0x2e/0x50
[  138.016028][ T7949]  ? asm_exc_invalid_op+0x1a/0x20
[  138.017464][ T7949]  ? alloc_hugetlb_folio_reserve+0x72/0xc0
[  138.019592][ T7949]  ? alloc_hugetlb_folio_reserve+0xab/0xc0
[  138.021844][ T7949]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  138.024183][ T7949]  memfd_alloc_folio+0x16c/0x3b0
[  138.026304][ T7949]  memfd_pin_folios+0xe8c/0x1150
[  138.028310][ T7949]  ? __pfx_memfd_pin_folios+0x10/0x10
[  138.029943][ T7949]  ? __pfx___lock_acquire+0x10/0x10
[  138.031493][ T7949]  ? __pfx_down_read+0x10/0x10
[  138.032864][ T7949]  ? __fget_files+0x206/0x3a0
[  138.034310][ T7949]  udmabuf_create+0x641/0x11e0
[  138.035856][ T7949]  ? __pfx_udmabuf_create+0x10/0x10
[  138.037754][ T7949]  ? lock_acquire+0x2f/0xb0
[  138.039569][ T7949]  ? __might_fault+0xe3/0x190
[  138.041405][ T7949]  ? __might_fault+0xe3/0x190
[  138.043312][ T7949]  udmabuf_ioctl+0x193/0x310
[  138.045181][ T7949]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  138.047188][ T7949]  ? selinux_file_ioctl+0xb4/0x270
[  138.049376][ T7949]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  138.051419][ T7949]  __x64_sys_ioctl+0x190/0x200
[  138.053389][ T7949]  do_syscall_64+0xcd/0x250
[  138.055250][ T7949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.057576][ T7949] RIP: 0033:0x7ff990f8cde9
[  138.059348][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.066668][ T7949] RSP: 002b:00007ff991d08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.069841][ T7949] RAX: ffffffffffffffda RBX: 00007ff9911a6160 RCX: 00007ff990f8cde9
[  138.072789][ T7949] RDX: 0000400000000040 RSI: 0000000040187542 RDI: 0000000000000087
[  138.075778][ T7949] RBP: 00007ff99100e2a0 R08: 0000000000000000 R09: 0000000000000000
[  138.078826][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.081893][ T7949] R13: 0000000000000000 R14: 00007ff9911a6160 R15: 00007ffd094782b8
[  138.084688][ T7949]  </TASK>
[  138.085578][ T7949] Modules linked in:
[  138.086750][ T7949] ---[ end trace 0000000000000000 ]---
[  138.088505][ T7949] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0
[  138.090322][ T7949] Code: a3 d0 00 00 00 e8 44 41 a2 ff 48 c7 c7 40 56 e1 8d e8 18 ff 41 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 25 41 a2 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[  138.095799][ T7949] RSP: 0018:ffffc900055e7900 EFLAGS: 00010093
[  138.097540][ T7949] RAX: 0000000000000000 RBX: ffffffff9a8d8758 RCX: ffffffff821795c2
[  138.100033][ T7949] RDX: ffff88802b154880 RSI: ffffffff821795fb RDI: 0000000000000007
[  138.102263][ T7949] RBP: ffffea0004340000 R08: 0000000000000007 R09: 0000000000000000
[  138.104544][ T7949] R10: 0000000000000000 R11: 00000000000000a4 R12: 0000000000000000
[  138.106818][ T7949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015
[  138.109117][ T7949] FS:  00007ff991d086c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
[  138.111746][ T7949] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.113600][ T7949] CR2: 00007ff991d07f98 CR3: 0000000024156000 CR4: 0000000000352ef0
[  138.116512][ T7949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  138.119368][ T7949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  138.122475][ T7949] Kernel panic - not syncing: Fatal exception
[  138.125482][ T7949] Kernel Offset: disabled
[  138.127255][ T7949] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:29:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88806a744a80 RCX=ffffffff81add06a RDX=ffff8880249c8000
RSI=ffffffff81add044 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900287cf838
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100d4e8951 R13=0000000000000001 R14=ffff88806a63fe80 R15=ffff88806a744a88
RIP=ffffffff81add046 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0fa8737280 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055558d49d808 CR3=0000000023bce000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a440f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a440f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a440f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a440f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a440f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20a440f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000636972
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000063697265 6e65672d6c6c756e
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a8
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=000000000000005f RCX=ffffffff8199a95a RDX=ffff88802b154880
RSI=ffffffff8199a946 RDI=0000000000000001 RBP=1ffff92000abcead RSP=ffffc900055e7558
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002
R12=0000000000000001 R13=0000000000000000 R14=ffff888027bb2440 R15=ffffc900055e7620
RIP=ffffffff8199a950 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff991d086c0 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff991d07f98 CR3=0000000024156000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99117c488 00007ff99117c480 00007ff99117c478 00007ff99117c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff991cdd100 00007ff99117c440 00007ff99117c458 00007ff99117c4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99117c498 00007ff99117c490 00007ff99117c488 00007ff99117c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c341598b7926475c 9c50c6761eaac54e 6e95e7be7606248f cedd93416cf1e274
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c5e8f144f4f69af 823403282b5e13e7 c82d3945f1594fdf 6d1948588ee99573
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bceae881cb25900f f3b25b86d97dc341 598b7926475c9c50 c6761eaac54e6e95
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7be7606248fcedd 93416cf1e2740b0e c8692ee8aaa0a5c1 16d275205c840a64
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45e79f532466face ec5e5315759df2b8 582d8e8b32881549 74f865583da95346
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85406025 RDI=ffffffff9ab7d740 RBP=ffffffff9ab7d700 RSP=ffffc900064aea30
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6f69727261776f69
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab7d700 R15=0000000000000000
RIP=ffffffff8540604f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff8e2d01000 CR3=00000000257a2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 00000000ff000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000009458c RBX=0000000000000003 RCX=ffffffff8b571469 RDX=ffffed100d526f86
RSI=ffffffff8bd353c0 RDI=ffffffff81907269 RBP=ffffed1003b55488 RSP=ffffc900001a7e08
R8 =0000000000000000 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000
R12=0000000000000003 R13=ffff88801daaa440 R14=ffffffff90624510 R15=0000000000000000
RIP=ffffffff8b57284f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff991d08d58 CR3=000000004ca00000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99100f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99117c488 00007ff99117c480 00007ff99117c478 00007ff99117c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff991cdd100 00007ff99117c440 00007ff99117c458 00007ff99117c4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff99117c498 00007ff99117c490 00007ff99117c488 00007ff99117c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c341598b7926475c 9c50c6761eaac54e 6e95e7be7606248f cedd93416cf1e274
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c5e8f144f4f69af 823403282b5e13e7 c82d3945f1594fdf 6d1948588ee99573
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bceae881cb25900f f3b25b86d97dc341 598b7926475c9c50 c6761eaac54e6e95
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7be7606248fcedd 93416cf1e2740b0e c8692ee8aaa0a5c1 16d275205c840a64
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45e79f532466face ec5e5315759df2b8 582d8e8b32881549 74f865583da95346
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000