last executing test programs:

13.2065566s ago: executing program 3 (id=751):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000)
r3 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r3, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
gettid()
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0xd, 0xa}, {0xffff, 0x4}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44084)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80015}, 0x4000)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@loopback, <r9=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000020601030000000000000000000000000900020073797a3000000000100003006269746d61703a706f72740005000500000000000500040000000000240007800800114000000000080009400000000908000a400000000205000700616300000000"], 0x74}}, 0x4000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)

13.0973004s ago: executing program 3 (id=752):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
lchown(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = semget$private(0x0, 0x0, 0x400)
semctl$GETALL(r3, 0x0, 0xd, 0x0)
semctl$SETVAL(r3, 0x4, 0x10, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4)
sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}], 0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x2b)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10)
close(r2)

12.285472677s ago: executing program 3 (id=761):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x70bd26, 0x200, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4d0500", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0)

12.226337077s ago: executing program 3 (id=764):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "37603e8ab5b2df181dd76670ef68d2ffefa7702a8d056de94b66b1930f246e0e491a3874a0e0bb7a537453723e814ed567d9e6b6971156a33ee3625af1993f5338e6b14f3d2de7f634236bda51ebba8a67bc636ef1924c2670a7c826836ffbc8068200e9b52d2c8bd5b1339d2a3630c349d705781234ca6c06d184fa480850b11be2fd2df89360ee65314c20e31a25d15593d766ec508f88456462486b97b3aba3c64d8bd616afab984b3f04128f0d477ba4ac1b2b0bdf4f806fda8d24cef3f21757b44939cf6f9fde95809dfdffffff146ad316b949fc000000000000000000754cdca21c5b9fb53f34cf0873b8be73e5b7bb996a758787099353575d96256bca91bd165bf628201b2bdc54945265268c40304b5bc9ce25ad545dbdaf9f195bbaf0d9c07eec2500"/308}, 0x13f)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000000c0)={0x5, 0x1, 0x5, 0x200})
setpgid(r1, r1)
setpgid(0x0, r1)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000140))
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1)
fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x1, 0x2, 0x80000001, 0xfffffffffffffffa, r1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "37603e8ab5b2df181dd76670ef68d2ffefa7702a8d056de94b66b1930f246e0e491a3874a0e0bb7a537453723e814ed567d9e6b6971156a33ee3625af1993f5338e6b14f3d2de7f634236bda51ebba8a67bc636ef1924c2670a7c826836ffbc8068200e9b52d2c8bd5b1339d2a3630c349d705781234ca6c06d184fa480850b11be2fd2df89360ee65314c20e31a25d15593d766ec508f88456462486b97b3aba3c64d8bd616afab984b3f04128f0d477ba4ac1b2b0bdf4f806fda8d24cef3f21757b44939cf6f9fde95809dfdffffff146ad316b949fc000000000000000000754cdca21c5b9fb53f34cf0873b8be73e5b7bb996a758787099353575d96256bca91bd165bf628201b2bdc54945265268c40304b5bc9ce25ad545dbdaf9f195bbaf0d9c07eec2500"/308}, 0x13f) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000000c0)={0x5, 0x1, 0x5, 0x200}) (async)
setpgid(r1, r1) (async)
setpgid(0x0, r1) (async)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000140)) (async)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) (async)
fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x1, 0x2, 0x80000001, 0xfffffffffffffffa, r1}) (async)

12.144939907s ago: executing program 3 (id=766):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r1)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)

11.792975325s ago: executing program 3 (id=773):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000004480)="d2", 0x1}], 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x7ffffffffffff})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000003)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@weak_binder={0x77622a85, 0x5, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/200, 0xc8, 0x1, 0x40000000000001f}, @fda={0x66646185, 0x6, 0x1, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast2}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x81, 0xcc1, 0x5, 0x0, 0x2816, 0x7, 0x8000, 0xe50, r7}, &(0x7f0000000100)=0x20)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe)

11.717571501s ago: executing program 32 (id=773):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000004480)="d2", 0x1}], 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x7ffffffffffff})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000003)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@weak_binder={0x77622a85, 0x5, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/200, 0xc8, 0x1, 0x40000000000001f}, @fda={0x66646185, 0x6, 0x1, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast2}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x81, 0xcc1, 0x5, 0x0, 0x2816, 0x7, 0x8000, 0xe50, r7}, &(0x7f0000000100)=0x20)
bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe)

3.772573803s ago: executing program 0 (id=887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
sendmmsg$inet(r2, 0x0, 0x0, 0x480e0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000140)=[{0x106, 0xf, 0x85, 0x7fff8000}, {0x6, 0x2, 0x6, 0x6}, {0x183, 0x2, 0x0, 0x40}, {0xf6, 0xc, 0x2, 0x47}, {0x1, 0x7, 0xf, 0xfffffffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/12, 0xc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40040d4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r4=>0x0, 0xb29b4ff188e328f9, 0xff06, 0xffff3bb9, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x8, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x34}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r5=>0x0, @multicast1, @dev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c0200001e00220e2cbd7000fddbdf2507000000", @ANYRES32=r4, @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="08001b0002000000880004e886630170e9d5f22dc0676cb8d04239f6068b34d0a35916", @ANYRES32=r5, @ANYRES32=r4], 0x28c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000002)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
shutdown(r1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r9=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r9}}, 0x18)

3.607119572s ago: executing program 0 (id=894):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_SMBUS(r2, 0x720, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x0, 0x3, 0x2, &(0x7f0000000540)={0xb, "bc4315b8124cb2fc9d9dc85cefd89503e20f7004484d2b00991da335ec18d97bac"}})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r4}}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}}}})
r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd22, 0x1a1802)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x6, 0xbf8b, 0x4f6})
r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x20001)
ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f00000001c0)=""/250)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x3, 0x8})

1.996339955s ago: executing program 0 (id=905):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000009d575062795574d73f1386f9e2c671c488a80c5eb316338d224bdcf6e9a488679b3fdd57353b3d4a7f8287c06f66dbcb59c23df9eb6372ec1b74892ea03167a1e5dc170f72e69b351c9c50c32b831ee7dfa437215f862870bbaff97a27f94e19578ce6035afdc74587f76a382d12cc54d9f7f31a883fb8ad3eb90675eabc4d27c11998a130fb00c4180348057d7efa8b5472357ff8f9d324578184822fd3922a8f5836d64e475355b251a4f9a74c9769ad4a4e3f8fc61676221aaf5eeb", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf25650000000c0099007f000000460000000800020000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc001)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYRES64=r2], 0x48}}, 0x8880)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000033613f702d924f9f61b614565aabc180cac9"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002dc0)=@delchain={0x11e8, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffe0}, {0xc, 0x1b}}, [@filter_kind_options=@f_basic={{0xa}, {0x11b8, 0x2, [@TCA_BASIC_POLICE={0x8c0, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x3, 0x9, 0x8, {0x3, 0x0, 0x5, 0x7f, 0x6}, {0xc7, 0x2, 0x7, 0x5, 0x9, 0x1000}, 0x1, 0x262, 0xfffffe9e}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x69e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x3, 0x6, 0x4, 0x1, 0x0, 0x4, 0x1, 0x2, 0x3ff, 0x6, 0xfffffffd, 0xc, 0x2, 0x2, 0x0, 0x540, 0x8, 0x1ff, 0x3ff, 0x81, 0xa5e, 0xf269, 0xe, 0xff, 0x400, 0xf98, 0x2, 0x5, 0x0, 0x73e977e7, 0x15, 0x80000000, 0x9, 0xb, 0x2, 0x6, 0xe, 0x800, 0x0, 0x7ff, 0x6, 0x966c, 0x2, 0x1, 0x40, 0x3, 0x59ee, 0x9, 0xfc, 0x5, 0x10001, 0xffff, 0x4, 0x0, 0x8, 0x7, 0xc, 0x8, 0x5, 0x3, 0x6, 0x9, 0xe, 0x5, 0xfffffff4, 0x2, 0x1, 0x1ff, 0x0, 0x19d4, 0x7, 0x5, 0x7, 0x81, 0x4, 0x430, 0x6, 0x1, 0x5f, 0x0, 0x9a32, 0x6, 0x2, 0x0, 0x1, 0x10000, 0x7, 0x4, 0xfffffff8, 0x9, 0xd6, 0x807, 0x5, 0x5, 0x4, 0x5f, 0x0, 0x10, 0xfffffffc, 0x5, 0xfc000000, 0xe1, 0x8, 0x10001, 0x9, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x6, 0x81, 0x8001, 0x9, 0x100, 0x3, 0x2, 0x10001, 0x1, 0x1, 0x34ea5a1c, 0x319, 0x8, 0xc5, 0x0, 0x1e, 0x9, 0xffff, 0x2, 0x2, 0x3, 0x30a933f2, 0x9, 0x7fffffff, 0x401, 0x2, 0x101, 0x9, 0x2, 0x4, 0x3, 0x10, 0x2, 0x5, 0x9, 0x6, 0x7, 0x3, 0x40, 0x40, 0x7fff, 0x5926, 0x2, 0x3ff, 0x780, 0x0, 0x8, 0xf, 0x7fff, 0x2, 0x3, 0x40, 0x96e3, 0x5, 0x0, 0xffffffff, 0x7, 0x4, 0x9, 0x8001, 0x1c75, 0x6216, 0x8, 0x80000000, 0x8001, 0x5, 0x80000000, 0x6, 0x7, 0x7, 0x8, 0x3, 0x0, 0x7ff, 0x2d6, 0xfffffffe, 0x3, 0x9, 0x4, 0x5, 0x5, 0x8, 0x7, 0x7fffffff, 0x1, 0x10, 0x33, 0x0, 0x9, 0x4, 0xd, 0x401, 0x8, 0x5, 0x2, 0x8, 0x3, 0x587c942c, 0x10, 0x575, 0x1, 0xf, 0x7, 0x60225ba2, 0x8, 0x6, 0x6, 0x6, 0x6d7, 0x3, 0x2, 0x800, 0x4, 0x7, 0x2, 0x9, 0x6, 0x8, 0xe0000000, 0x0, 0x10000, 0x8, 0x87, 0x9, 0x9, 0x3, 0x2, 0x7aeb15c8, 0xfffffffc, 0x101, 0xb, 0x86, 0x1, 0x9, 0x8000, 0x6, 0x1, 0xa2d, 0x8001, 0x5, 0x0, 0x8, 0x9, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd0, 0xf, 0x8000, 0xfd, 0x7, 0x6, 0x9, 0x1, 0xd41, 0x2, 0x1, 0x9, 0x5, 0x1, 0x8000, 0x7, 0x8001, 0x2, 0x8, 0x10001, 0x6, 0x25, 0x10, 0x8, 0xe, 0x6, 0x9, 0x2, 0x53, 0xfffffd48, 0x1, 0x401, 0x4, 0x10, 0x0, 0x7fff, 0x2f, 0x0, 0x1, 0x6, 0x0, 0x1, 0x0, 0x9, 0x3, 0x18e6, 0xfffffff8, 0x2, 0x7, 0x4, 0x9, 0x53a2, 0x1, 0x2, 0x1, 0x186, 0x4, 0x1, 0x400, 0x8, 0x7, 0xc0000000, 0x200, 0xe, 0x200, 0x5, 0x1188, 0x1, 0xe, 0x400, 0x0, 0x8, 0x7, 0x7, 0x69, 0x411, 0x3ff, 0x3984c921, 0x6, 0x8001, 0x5, 0x2, 0x0, 0x6, 0x200, 0x6, 0x3, 0x5, 0x7, 0xfffffff7, 0x9, 0x2, 0x8, 0x1000, 0x8, 0x1, 0x7, 0x4, 0x0, 0x9, 0x1, 0x1, 0x7fffffff, 0x8, 0x7, 0x9, 0xff, 0x5, 0x1, 0x3, 0x2ed, 0x7, 0xa9ed, 0x9, 0x30e, 0x891, 0x9, 0x401, 0xfd, 0x0, 0xdb7, 0x1, 0x7, 0x1, 0x80, 0xe77, 0x3, 0x6, 0xc11, 0x1, 0xffff, 0xf, 0xffffff1d, 0x9, 0x5, 0xd4cb5c51, 0x100, 0xfffffffb, 0x6, 0x5, 0x1, 0x7, 0x3, 0x5, 0x0, 0x3, 0x8, 0x9, 0xac5, 0x1, 0xffff, 0x6, 0x8, 0x7, 0x2, 0x2, 0x1, 0x1, 0x5, 0x8, 0x0, 0xfffffffd, 0x9, 0x3, 0x2, 0x80, 0x10001, 0x7, 0x4, 0xffff28f5, 0x6, 0x6, 0x4cab, 0xefc, 0x5256, 0xfffffa9b, 0x7, 0x6, 0x8, 0x1ff, 0x9, 0x8, 0xd850, 0x4, 0x60c, 0xf1e4, 0x5d, 0x0, 0xf0, 0xffffffc0, 0x0, 0x864f, 0x26, 0x1000, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x67e, 0x4, 0x7f6, 0x9, 0xfffff801, 0x5, 0x8, 0x2, 0x8, 0x8, 0x401, 0x1, 0x8, 0x4d6a64be, 0x5, 0x5, 0x444, 0x5, 0x12, 0x3, 0xb, 0x7, 0x7699, 0x5, 0x8000, 0x4, 0xfffffffa, 0xb, 0x16, 0x2, 0x1ff, 0x50, 0x8, 0x3ff, 0x6, 0x10000, 0x101, 0xfffffff8, 0xffffffff, 0x1, 0x7fffffff, 0x6, 0x6, 0x7, 0x8, 0x5, 0x4, 0x9, 0x689e, 0x400, 0x401, 0x10001, 0x8e, 0x0, 0x9, 0x5, 0x10001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb46, 0x4, 0xfffffffa, 0x1daf, 0x2, {0xf8, 0x1, 0xa, 0x3ff, 0xfff, 0x2}, {0xa, 0x0, 0xd, 0xa, 0x8, 0x6}, 0x9, 0x3ff, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcd9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BASIC_POLICE={0x90, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x5, 0x8, 0x9e9, 0xfffff847, {0x2, 0x1, 0xfffc, 0x1, 0xf001, 0x4}, {0x68, 0x0, 0x3, 0x2, 0x9}, 0x92b, 0xfffffffa, 0x3ff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1f2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x20000000, 0x5, 0x4, 0x7, {0xd, 0x1, 0x0, 0x0, 0xedb3, 0xc}, {0x70, 0x0, 0x7ff, 0x101, 0x6, 0x7f}, 0x2, 0x0, 0x100}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x51f}]}, @TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7fff, 0x5, 0x100, 0x5, 0x2, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0x1d, 0x10000, 0x9, 0xe898, 0x9, 0x8, 0x800000, 0x5, 0x400000, 0x8, 0x3, 0x3, 0x4, 0xfffffffa, 0x3ff, 0x5, 0x0, 0xffffffff, 0x5, 0x2, 0xfff, 0xffffffff, 0x7a, 0x2, 0x10000, 0x30b5, 0x6, 0x8, 0x6, 0x3, 0x0, 0x0, 0x3f, 0x80, 0x4, 0x6b94, 0x4, 0x2, 0x8f2, 0x8, 0xf, 0x2, 0x40, 0x8, 0x4, 0x4, 0xffffffff, 0x2, 0xc729, 0xfffffff7, 0x4, 0x80, 0x9, 0x0, 0x2, 0x4, 0x6, 0x3, 0x3ff, 0xf5, 0x68fbbfde, 0x0, 0x9, 0x5d72, 0x63c, 0x3, 0x3, 0xfab2, 0xd, 0x2c51, 0x7000000, 0x2, 0xa, 0xa, 0x8, 0x8001, 0x6, 0x3, 0x2, 0x9, 0x7, 0x4, 0xb, 0x1, 0x6, 0xfffffdf3, 0x4, 0x0, 0xe67, 0xfffffff8, 0x0, 0x8, 0xd2e7, 0x9, 0xffff8001, 0x7, 0x3, 0x2, 0x4, 0x9, 0x9, 0x7, 0x744, 0x3, 0x1, 0x6, 0x7, 0x8000, 0x1bc, 0x8001, 0x100, 0x8, 0x2, 0x4d, 0x7, 0x1aa, 0x1, 0x8, 0x8001, 0x800, 0x1ff, 0x0, 0x1, 0x4, 0x7fff, 0x2, 0x4, 0x1, 0x4, 0x5, 0x34, 0xffe, 0xd29ac05e, 0xfffffffb, 0x1, 0x4, 0x0, 0xa, 0x0, 0xac80, 0xfff, 0x9, 0x757, 0x80, 0x3, 0xfffffe00, 0x6, 0x40, 0x1c0, 0x80, 0x4, 0x200, 0xffe00000, 0x4, 0xb25, 0x5, 0x9, 0xb, 0x4, 0x400, 0x6, 0x10, 0x8, 0xb, 0xe, 0x6, 0x200, 0x3, 0x5, 0x2, 0x7, 0x400, 0x4, 0x800, 0x401, 0x8, 0x7b7, 0x8, 0x7fff, 0xfffffff9, 0xf30, 0x4, 0xaf, 0x9, 0x3, 0x1, 0x0, 0x80, 0xc, 0x3, 0x7fff, 0x6, 0x7ff, 0x8, 0xf29, 0xfb, 0x8, 0x4, 0x80000001, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0xf, 0x7, 0xcb81, 0xd, 0x81, 0x3ff, 0x8, 0x401, 0x9, 0x0, 0x8, 0x6, 0x3c, 0x0, 0x41930104, 0x8, 0x1, 0x5, 0x6, 0x7, 0x4, 0xd94e, 0x8, 0x7, 0xfffffffc, 0x6, 0x8, 0x10000, 0x400, 0x2, 0xffffffff, 0x100, 0x7, 0x4, 0x40, 0x0, 0x3, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3c1b45d}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0xffff, 0x8, 0x1, 0x5, 0x5, 0x5, 0x8e1, 0x3, 0xa2, 0x9, 0x10000, 0x7, 0x18000000, 0x4, 0x9, 0x7, 0x6, 0xfff, 0x1, 0x15a400, 0x3, 0x2, 0x3, 0x6, 0x7, 0x3ff, 0x9, 0x6, 0x8, 0x7, 0x8, 0x0, 0x100, 0x8, 0x904, 0x3, 0x5, 0x7, 0xc31, 0x40, 0xffffffff, 0x7, 0x1, 0x7, 0x64c0, 0xc5c, 0x0, 0x9, 0x29fe, 0x2a6acf84, 0x0, 0x200, 0xff, 0xc1, 0x0, 0x8, 0x4, 0x2, 0x1, 0x9, 0xfff, 0x7fff, 0xfffffff9, 0x800, 0x9, 0xbe, 0x8, 0x8, 0x2, 0x799, 0x80000, 0x2, 0x56468b18, 0x6, 0x2, 0x1800, 0x10, 0x0, 0xe, 0x7, 0x10001, 0x9, 0x93, 0x6, 0x7, 0x6, 0x100, 0xc, 0x3, 0x20, 0xfffffffe, 0x4, 0x3, 0x78, 0x101, 0x8, 0x0, 0xf913, 0x33d, 0x78f, 0x9, 0xfffffffa, 0x1, 0x2, 0xfffffffb, 0xfffffff3, 0x8, 0x9, 0x61, 0x2, 0x7fffffff, 0x400, 0x80, 0x4, 0x3, 0x1ff, 0x7, 0x80000001, 0x8001, 0x1, 0x0, 0x0, 0x2, 0x8, 0x191d, 0xfffffffb, 0xa, 0x47, 0x101, 0x7, 0x2, 0x9, 0xffffffff, 0x2, 0x4, 0x1, 0xd3b2, 0x1, 0xa05, 0x10001, 0x3, 0xfffffffe, 0xc, 0x5, 0x7, 0x1000, 0x5, 0x10, 0x6a1, 0x0, 0x1, 0x2996, 0x0, 0x9, 0x14d, 0x0, 0x5, 0x5, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0x7ff, 0x7fff, 0x401, 0x3, 0x68e711a0, 0xff, 0x7d, 0x6, 0x1, 0x7, 0x6, 0x7, 0x9a70, 0x5b19, 0x8bb8, 0x3, 0xfffffffb, 0x78, 0x1, 0x6, 0x5, 0x2, 0x8, 0x2, 0x1, 0xb, 0x0, 0x400, 0x30, 0xa, 0x0, 0x400, 0x7, 0x5, 0xda, 0xe3, 0x80000001, 0xecd1, 0xfff, 0x5, 0x6, 0x0, 0x7fff, 0xe4bb, 0x5, 0xfffff000, 0x9, 0x7fff, 0xf, 0x2e, 0x9, 0x9, 0x9, 0x0, 0x5, 0xd4, 0x9, 0x0, 0x5d, 0x7, 0x80000, 0x23f, 0x7, 0x26d, 0xb, 0x9ed, 0xffffff95, 0xfffffff9, 0x2, 0x2, 0x81, 0x8, 0x7, 0x3, 0xffffffff, 0x6, 0xd, 0xfffffffc, 0xe, 0x800, 0xa8d, 0xff, 0x3, 0x3ff, 0x3, 0x200, 0x0, 0xfffffffd, 0x3, 0x7, 0x1000]}]}]}}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r10, 0x0, 0x0)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000100ff"])
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r13, 0x0, 0x0)
sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

1.776967232s ago: executing program 2 (id=907):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '$'}, {0x20, ';-'}], 0xa, "0e5ab2e1089a72deaffe60619f3e6b728d938b653877ba9fa2c173388fda2ccf66fce0ceb954a4509587f2a5134feb5981f47dd7d39847f1657e267149c52644d34f9079a446d4c0d8d8abf0bccd1ac122159e83496a5b393267355ce554398b126f272c47cac985e1ad1d68bdb507f48da7d7ed8cf6bc48b509f45d0caee24b8c9105f250e06c2a2568747e2ac7a5c50d26fdd0bc7dd44089c71a0a9249a97607a91846818cfad5aad52c987996b3df3a92020bca6b9f18f403b916b4675e1a2456273f3a118f43a9d6649f26bfe3"}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0xf, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.516474727s ago: executing program 2 (id=911):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
pipe2(&(0x7f0000000200)={<r4=>0x0, <r5=>0x0}, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) (async)
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000a00)) (async)
r6 = fanotify_init(0x200, 0x0) (async)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460002f9bbff7f000000000000020003"], 0x189)
r9 = creat(&(0x7f00000002c0)='./file0\x00', 0xab) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb0af22b85f6c12ff0bff", "0000efffffffffffbfff00"]}) (async)
write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[], 0x13) (async)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @void}, 0x10)
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r11, 0x80044d0d, 0x200000000005)
syz_clone3(&(0x7f0000000ac0)={0x10000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x3c}, &(0x7f00000007c0)=""/144, 0x90, &(0x7f0000000880)=""/98, &(0x7f0000000900)=[r7], 0x1, {r11}}, 0x58)
openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async)
fanotify_mark(r6, 0x2, 0x40001043, r4, 0x0) (async)
dup3(r10, r3, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000060000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r12}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r12, &(0x7f0000000300), 0x0}, 0x20) (async)
execveat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000400)=']:\xed\x84p\xa5oj\xbb^\xe13T\xe5\x7fqU\xa26\x02\xd9\x0f\x01\r\xc7\xcd0\"\xc9s\x9f\x81\x80\x92lm\x83\xda$:\x01\xcb\xeb\x943\xce&\xa5\xb3\x95\x91]\xc7\xe1\x91\xe0cg\x04\x8a \x82\xcf\xcfQ\xaa\xe0\x8dNo\xb6\xdd\x8c<\xa2\n\x99V\xa8\x99\x82.\x15\x8f\xcaX\xb3S\xbf\xd5\x8c\"\v\xf5\xb7s\x9a\xcfH\xb1v\x830k\xe0%\x14\xed\xc0\x98\x1e2l\xe0y\xce\xdb\x9f\x8c\xdbe\xdd\xbb&\xd6\x19U\x00']}, &(0x7f0000000b40)={[&(0x7f0000000280)='\x00', &(0x7f0000000300)='\\-', &(0x7f0000000540)='bridge0\x00', &(0x7f00000004c0)='\x95^@P^\x00', &(0x7f0000000500)='#\x00', &(0x7f0000000940)='s^n\fO\xae\x12nP\xa3\x02\xc1jE\x15\xa2\xaa\xa0\x1a\x01!=S\xb4\x15\x0f\xcf)\xb9\xfc\vV\xce\x92\xda\xbai\xbf\xb7\x12\x12\xcfneM\x9a9\nC\x99\x01d\x95}\x12\x1e\xe3\x89U1/\xb3\xd1\xe7\xed\xa0\xa1M\xf0\xf3[4\x03bJY)ou\xccy\x95\xc5@QU\x8d\xb3\xff\xed\x18\xd2\xf4\xc1R2\x17\xa3\'L\xdd\xaeQz\\\xd1\x91F\x93\xc0\x81\xa5\xd8O\xea\xce\xfa\xd0', &(0x7f0000000480)='*\x00', &(0x7f0000000580)='#&+\x00']}, 0x1000) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000000125995a4edf356a6360efa642894553529b627e64af6d459380b44185707b3c6f33cedf93e72dbf56062456ba3aba296344603320ebe923fd5f32637452415b28208757bf2b50514fbeed04000c2218e6d22cc6bd45edd44b1b79abb5ec9423dfb3b4fd4998959978b6aaaeef2684020f7ee6f0166a2e9bed2aeecb573bd4794ed13eebf574091405400"/157, @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006d616373656300000c00028005000d000200000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x44)

1.461657194s ago: executing program 2 (id=913):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0xfd}}}, 0x5)
getsockname(r0, 0x0, &(0x7f0000000080))
syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0)

1.460994439s ago: executing program 2 (id=914):
r0 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x20280)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r3 = socket$inet6(0xa, 0x3, 0x5)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
dup2(r4, r3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4840)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2)

815.331306ms ago: executing program 2 (id=920):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r5=>0x0, 0x8, 0x10, 0x5, 0x401, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x8, 0x0, 0x40, 0x2f, 0x0, @local, @broadcast, {[@generic={0x94, 0xa, "20992a815b71e7b9"}, @timestamp_addr={0x44, 0xc, 0x94, 0x1, 0x0, [{@loopback}]}, @end, @rr={0x7, 0x27, 0x51, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast1]}]}}}}})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
pipe2(&(0x7f0000000580), 0x40000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r10, r7, 0x25, 0x0, @void}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200400e0}, 0x1)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000d"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
r14 = socket$inet_sctp(0x2, 0x1, 0x84)
r15 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r15, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r16=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r16, 0x4}, 0x8)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r17)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r17, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xac259954b5078efa}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r13, 0x0, 0x70bd26, 0x3, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x50}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000004}, 0x4084)

767.075392ms ago: executing program 2 (id=922):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x401, 0x80000001, 0x5ba0acdd, 0x32, 0x0, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x400, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd701e4845e9256c090000000000000000000008050000000000000000a1000100c658"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0xa, 0x8de8, 0x954, @local, 0x2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="d429d379c1", 0x5}], 0x1}}], 0x1, 0x40080)

766.555814ms ago: executing program 0 (id=924):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0xfd}}}, 0x5)

706.260744ms ago: executing program 0 (id=926):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
r1 = userfaultfd(0x80801)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f)
getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000cc0))
r5 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000180)='-{#%-%%-\x00', 0x0, r1)
ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000080))
ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3})
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) (async)
userfaultfd(0x80801) (async)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async)
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) (async)
getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) (async)
fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000180)='-{#%-%%-\x00', 0x0, r1) (async)
ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000080)) (async)
ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3}) (async)

705.952537ms ago: executing program 1 (id=927):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x1, {0x0, 0x9, 0x4000000, 0x20000000}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}, 0x1, 0x0, 0x0, 0x20008002}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r9, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8805}, 0x4000001)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x81, 0x74}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ef3090efc0638f2340f4aabc4a368907"}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="e87e06dabd07b8bd775e91621562374678cfff49cff5286fb2"}]}, 0x5c}}, 0x48000)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

616.884027ms ago: executing program 1 (id=928):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r12, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x9}, 0x8)
close(r0)
r13 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x20)
rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000))
ftruncate(r13, 0x3292e291)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r14)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r15, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"})

457.170637ms ago: executing program 0 (id=929):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1a32c3, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66b843008ee066bad004ec0f01c966ba4100b0a50f01c8c42130c6a816eb71e235b8010004000f01d9410f0742394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)

456.770964ms ago: executing program 1 (id=930):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
preadv2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x7, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2000000000000048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000400)={0x24e, "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"})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

357.076018ms ago: executing program 4 (id=932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x14040, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x39, &(0x7f00000001c0)=""/57, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xd, 0x7, 0xcd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0xd, 0x7}, {0x3, 0x5, 0x1, 0xc}, {0x2, 0x4, 0x7}], 0x10, 0x4}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r1, r2, 0x4, r3}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0)

342.568746ms ago: executing program 4 (id=933):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r0=>0x0})
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x50, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x800}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x80}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x310840}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newtclass={0x2c, 0x28, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xfff1, 0xfff6}, {0xd, 0xf}, {0xc, 0x8}}, [@tclass_kind_options=@c_sfq={0x8}]}, 0x2c}}, 0x200000c4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @private}, &(0x7f0000000380)=0xc)

206.926896ms ago: executing program 4 (id=934):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0bc53fc2", @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf25010000000000000008410000004c00180000000273797a3000"/98], 0x68}}, 0x4008000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

206.720396ms ago: executing program 4 (id=935):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0xfd}}}, 0x5)

145.685999ms ago: executing program 4 (id=936):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bind$netlink(r3, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xeb01}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x7, 0xf6, &(0x7f0000000000)="369dd693485ad7fd4af0019302a8c5f4b2b44c2bf4cdaca6c8ee1df206cfb70334a0e5d31954c997626063679d51c68a73d8fe68dcaad4a9bd28137aa0fe279e104e9a84f8e415da613bac3fe4762be0c90333d6a8f88b8ff3205d2342564a38cf355e6e8a8cf907238a9a4448be85cd645685b5b147a886b53521b5df8d825fd49e6f105d78c3751649b380e4c3ca5580672de269672b20ecaff5ad8364070c5ed8f933f0372cde6bc3bbd5d038fb09d53055779bb6d6311a05d07af349d490f86b916041c56ea19980a729e366638ccc7d299fde8dcffcb5312d0eca5069e8f5793c18bcc195e1bc4c82e9b046bfbce46413b3711a", 0x0, 0x1}]})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f00000001c0)={0x11, 0x11, r7, 0x1, 0xf, 0x6, @broadcast}, 0x14)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r9, 0x80044944, &(0x7f0000000380)={0x2})
getsockopt(r8, 0x1, 0x9, 0x0, &(0x7f0000000100))
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f00000002c0)=0xfff, &(0x7f0000000300)=0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/rt_acct\x00')
sendto$packet(r6, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r7}, 0x14)

66.122826ms ago: executing program 1 (id=937):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_register_op={0x0, 0x1e}, @ioring_restriction_sqe_op={0x1, 0x13}, @ioring_restriction_sqe_flags_allowed={0x2, 0x12}], 0x5)

4.473424ms ago: executing program 1 (id=938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

3.431207ms ago: executing program 4 (id=939):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000005000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x72)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r6}, 0x18)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000000c0)=0x2ba4, 0x4)
sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39019403178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000000)="5d3466631c63ce211d317c4fff5e878b96350a1be3cf9122aef86cdabe8a42ece5ff1c21baaba930aa420412a8756ab42bd395608aa82dd1a4d07234be21ec5588c106f4f9f576a892a67b3fc122db4f41ab8800a234d0b5ee534e19ac1f8161c3472e49f023ae2db064375e5883ab02", &(0x7f00000002c0)=@tcp6=r1}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

0s ago: executing program 1 (id=940):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x9, 0x2, r3})
r4 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r4})
r5 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="ac792e72a7a3eaa36045e2d5a8cae2ef9a929111f18fbd4c12243dfdf678d9108773c2df814f4ee00d002c77e6c609244c6d5193869f8d5822340a4fa6224385727387988f5f3f0c058bdfc405b0fc5926876000a7b0905f193848105003f34de2ef15173be3d553e7c2c6b1c4f6b9df02044a5f0bc84a8868ff43e4c412d1dcaa7edeef148a31085b1d1ba6a61b498857a55c08206ba862850b16e3f9bc0166ea0f306a97443189a0daf74e9c9407def97c1f98688c0ae315e584af763a6af6d95b18115c9fa91f1b8fe4a474c01449dc552a57a72fc6e9f32012bfc55898037639ff4418dbdd9eeb16f98879", @ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES16=r3, @ANYRESDEC=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x880)
write$binfmt_misc(r6, &(0x7f0000000000)="180c4552", 0x4)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e060c00c9c588433d23e70454c6705053c93b903561653e474d274ca098ecfd8bdd6028c87ea568b41bbe16d71f74b129021e5fe44ab05661d270712a4ed5d2bdc5e27a9283c17636dc3fe8a2d605d0e748543097642864e5f62bc91fa9a49757bf61eea746d3b57aaf8e3ab0918d796a762d05f5e95303a507eb20d6ff9fff2b8e23cf5ae5c46fc95d07383570a40c5edc6c29026abd0bc2c624475257ef91c15a4104f4e207b04c5f9e4ca251ef8525"], 0x9)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000050d002, 0x0)
r8 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r8, 0x2000)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r9, 0x5501)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
dup(r10)
madvise(&(0x7f0000621000/0x3000)=nil, 0x3000, 0x14)
r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

kernel console output (not intermixed with test programs):

bject_r:root_t tclass=dir permissive=1
[   41.328137][ T5842] cgroup: Unknown subsys name 'net'
[   41.510131][ T5842] cgroup: Unknown subsys name 'cpuset'
[   41.516448][ T5842] cgroup: Unknown subsys name 'rlimit'
[   41.769947][ T5873] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   42.465599][ T5842] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.712045][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   45.712059][   T40] audit: type=1400 audit(1761317371.497:80): avc:  denied  { execmem } for  pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   45.914147][   T40] audit: type=1400 audit(1761317371.697:81): avc:  denied  { create } for  pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.920450][   T40] audit: type=1400 audit(1761317371.697:82): avc:  denied  { read write } for  pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.927577][   T40] audit: type=1400 audit(1761317371.697:83): avc:  denied  { open } for  pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   45.935314][   T40] audit: type=1400 audit(1761317371.717:84): avc:  denied  { ioctl } for  pid=5927 comm="syz-executor" path="socket:[1788]" dev="sockfs" ino=1788 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.977973][ T5290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.981745][ T5290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.982892][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.984843][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.985407][ T5290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.986125][ T5290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.986380][ T5290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.987476][ T5290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.988149][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.988415][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.988874][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.989142][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.991339][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.994205][ T5290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.995053][   T40] audit: type=1400 audit(1761317371.777:85): avc:  denied  { read } for  pid=5927 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   45.995654][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.996354][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.996781][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.004926][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.009817][   T40] audit: type=1400 audit(1761317371.787:86): avc:  denied  { open } for  pid=5928 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   46.011999][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   46.020575][   T40] audit: type=1400 audit(1761317371.787:87): avc:  denied  { mounton } for  pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   46.022835][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   46.232528][   T40] audit: type=1400 audit(1761317372.017:88): avc:  denied  { module_request } for  pid=5928 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   46.274055][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   46.279308][ T5926] chnl_net:caif_netlink_parms(): no params data found
[   46.371012][ T5927] chnl_net:caif_netlink_parms(): no params data found
[   46.442734][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   46.478303][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.482214][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.485631][ T5926] bridge_slave_0: entered allmulticast mode
[   46.492449][ T5926] bridge_slave_0: entered promiscuous mode
[   46.520386][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.523079][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.525795][ T5926] bridge_slave_1: entered allmulticast mode
[   46.528822][ T5926] bridge_slave_1: entered promiscuous mode
[   46.583124][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.585373][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.587930][ T5928] bridge_slave_0: entered allmulticast mode
[   46.590562][ T5928] bridge_slave_0: entered promiscuous mode
[   46.608961][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.627248][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.629714][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.631980][ T5927] bridge_slave_0: entered allmulticast mode
[   46.634636][ T5927] bridge_slave_0: entered promiscuous mode
[   46.637969][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.640278][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.642531][ T5928] bridge_slave_1: entered allmulticast mode
[   46.645126][ T5928] bridge_slave_1: entered promiscuous mode
[   46.669146][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.689850][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.692111][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.694373][ T5927] bridge_slave_1: entered allmulticast mode
[   46.697970][ T5927] bridge_slave_1: entered promiscuous mode
[   46.730063][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.764709][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.770549][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.773716][ T5933] bridge_slave_0: entered allmulticast mode
[   46.777358][ T5933] bridge_slave_0: entered promiscuous mode
[   46.797651][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.803403][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.847920][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.850244][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.852536][ T5933] bridge_slave_1: entered allmulticast mode
[   46.855126][ T5933] bridge_slave_1: entered promiscuous mode
[   46.873126][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.891647][ T5926] team0: Port device team_slave_0 added
[   46.925515][ T5928] team0: Port device team_slave_0 added
[   46.928454][ T5926] team0: Port device team_slave_1 added
[   46.931880][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.950163][ T5928] team0: Port device team_slave_1 added
[   46.969019][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.972912][ T5927] team0: Port device team_slave_0 added
[   47.015999][ T5927] team0: Port device team_slave_1 added
[   47.032870][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.035082][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.043088][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.079340][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.081541][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.089910][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.094942][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.097971][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.106179][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.111595][ T5933] team0: Port device team_slave_0 added
[   47.133781][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.137145][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.145201][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.153682][ T5933] team0: Port device team_slave_1 added
[   47.156251][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.158664][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.169750][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.180398][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.183373][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.193954][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.244204][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.246409][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.254225][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.259230][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.261462][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.269299][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.333878][ T5926] hsr_slave_0: entered promiscuous mode
[   47.337204][ T5926] hsr_slave_1: entered promiscuous mode
[   47.421111][ T5927] hsr_slave_0: entered promiscuous mode
[   47.423954][ T5927] hsr_slave_1: entered promiscuous mode
[   47.426913][ T5927] debugfs: 'hsr0' already exists in 'hsr'
[   47.429374][ T5927] Cannot create hsr debugfs directory
[   47.488992][ T5928] hsr_slave_0: entered promiscuous mode
[   47.491732][ T5928] hsr_slave_1: entered promiscuous mode
[   47.493981][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[   47.495990][ T5928] Cannot create hsr debugfs directory
[   47.519174][ T5933] hsr_slave_0: entered promiscuous mode
[   47.521579][ T5933] hsr_slave_1: entered promiscuous mode
[   47.524057][ T5933] debugfs: 'hsr0' already exists in 'hsr'
[   47.526054][ T5933] Cannot create hsr debugfs directory
[   47.865333][ T5926] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.871669][ T5926] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.875611][ T5926] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.887299][ T5926] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.930199][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.939227][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.945308][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.950086][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.006522][ T5934] Bluetooth: hci2: command tx timeout
[   48.006531][ T5942] Bluetooth: hci1: command tx timeout
[   48.006849][ T5938] Bluetooth: hci0: command tx timeout
[   48.021646][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.028004][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.032759][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.040667][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.042867][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.090916][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.095318][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.095959][ T5938] Bluetooth: hci3: command tx timeout
[   48.110188][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[   48.114873][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.121472][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.138738][  T226] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.141790][  T226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.153127][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.155439][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.166649][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.196769][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[   48.220243][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.222965][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.226993][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.229977][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.241238][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.263906][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   48.278401][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.281489][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.285737][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.288133][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.330726][   T40] audit: type=1400 audit(1761317374.117:89): avc:  denied  { sys_module } for  pid=5926 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   48.368758][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.380974][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   48.390277][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.392545][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.400493][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.402741][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.428313][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.460609][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.489129][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.491758][ T5926] veth0_vlan: entered promiscuous mode
[   48.505355][ T5926] veth1_vlan: entered promiscuous mode
[   48.519891][ T5927] veth0_vlan: entered promiscuous mode
[   48.535348][ T5927] veth1_vlan: entered promiscuous mode
[   48.548418][ T5933] veth0_vlan: entered promiscuous mode
[   48.554522][ T5926] veth0_macvtap: entered promiscuous mode
[   48.560338][ T5933] veth1_vlan: entered promiscuous mode
[   48.565840][ T5926] veth1_macvtap: entered promiscuous mode
[   48.581970][ T5927] veth0_macvtap: entered promiscuous mode
[   48.588563][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.591131][ T5927] veth1_macvtap: entered promiscuous mode
[   48.601934][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.610861][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.615177][ T5933] veth0_macvtap: entered promiscuous mode
[   48.624389][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.627665][ T5933] veth1_macvtap: entered promiscuous mode
[   48.636532][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.639451][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.646924][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.651697][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.654530][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.669202][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.673977][  T226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.680379][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.686031][  T226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.690713][  T226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.702101][  T226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.707015][  T226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.717137][  T226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.721001][  T226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.726788][ T5928] veth0_vlan: entered promiscuous mode
[   48.739093][  T226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.754868][  T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.758594][  T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.761757][ T5928] veth1_vlan: entered promiscuous mode
[   48.782303][  T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.784877][  T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.795510][  T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.798418][  T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.807366][ T5928] veth0_macvtap: entered promiscuous mode
[   48.816102][ T5928] veth1_macvtap: entered promiscuous mode
[   48.819449][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.821945][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.833101][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.833498][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.840213][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.852321][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.862311][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.869478][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.872074][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.875497][  T226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.879457][  T226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.886874][  T226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.898305][  T226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.914093][ T6020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.961502][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.965429][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.981359][ T6020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.998773][ T6017] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   49.007947][ T6017] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   49.012858][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.016320][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.049825][ T6020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.171447][ T6020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.248703][ T6049] overlayfs: missing 'lowerdir'
[   49.379432][ T6055] =======================================================
[   49.379432][ T6055] WARNING: The mand mount option has been deprecated and
[   49.379432][ T6055]          and is ignored by this kernel. Remove the mand
[   49.379432][ T6055]          option from the mount to silence this warning.
[   49.379432][ T6055] =======================================================
[   49.388764][ T6053] netlink: 'syz.2.14': attribute type 10 has an invalid length.
[   49.400659][ T6053] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   49.455334][ T6065] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use)
[   49.467312][ T6066] overlayfs: failed to resolve './file1': -2
[   49.671192][ T6089] program syz.3.23 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   49.715400][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'.
[   49.874250][ T6096] binder: 6094:6096 ioctl c0306201 200000000640 returned -22
[   50.086074][ T5938] Bluetooth: hci2: command tx timeout
[   50.086189][ T5934] Bluetooth: hci0: command tx timeout
[   50.087864][ T5942] Bluetooth: hci1: command tx timeout
[   50.166595][ T5942] Bluetooth: hci3: command tx timeout
[   50.567871][ T6110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.679304][ T6123] netlink: 36 bytes leftover after parsing attributes in process `syz.3.35'.
[   50.682380][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'.
[   50.711514][ T6132] Zero length message leads to an empty skb
[   50.729163][   T40] kauditd_printk_skb: 141 callbacks suppressed
[   50.729174][   T40] audit: type=1400 audit(1761317376.517:231): avc:  denied  { mounton } for  pid=6129 comm="syz.3.37" path="/10/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.729927][ T6137] --map-set only usable from mangle table
[   50.731243][   T40] audit: type=1400 audit(1761317376.517:232): avc:  denied  { getattr } for  pid=6129 comm="syz.3.37" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   50.731266][   T40] audit: type=1400 audit(1761317376.517:233): avc:  denied  { mounton } for  pid=6129 comm="syz.3.37" path="/10/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.742045][   T40] audit: type=1400 audit(1761317376.537:234): avc:  denied  { ioctl } for  pid=6138 comm="syz.2.40" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10537 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   50.750378][ T6137] netlink: 'syz.1.39': attribute type 21 has an invalid length.
[   50.807053][   T40] audit: type=1400 audit(1761317376.587:235): avc:  denied  { append } for  pid=6145 comm="syz.2.44" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   50.959224][   T40] audit: type=1400 audit(1761317376.747:236): avc:  denied  { search } for  pid=5642 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.966699][   T40] audit: type=1400 audit(1761317376.747:237): avc:  denied  { search } for  pid=5642 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.973352][   T40] audit: type=1400 audit(1761317376.747:238): avc:  denied  { search } for  pid=5642 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.981490][   T40] audit: type=1400 audit(1761317376.747:239): avc:  denied  { read } for  pid=5642 comm="dhcpcd" name="n103" dev="tmpfs" ino=2169 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   50.988735][   T40] audit: type=1400 audit(1761317376.747:240): avc:  denied  { open } for  pid=5642 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2169 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   51.006379][ T6155] netlink: 84 bytes leftover after parsing attributes in process `syz.1.47'.
[   51.033604][ T6153] netlink: 'syz.2.46': attribute type 3 has an invalid length.
[   51.039482][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'.
[   51.277960][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'.
[   51.308737][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   51.313831][ T6182] smc: net device bond0 applied user defined pnetid SYZ2
[   51.316972][ T6182] netlink: 14 bytes leftover after parsing attributes in process `syz.2.52'.
[   52.165971][ T5942] Bluetooth: hci2: command tx timeout
[   52.175786][ T5942] Bluetooth: hci1: command tx timeout
[   52.176741][ T5934] Bluetooth: hci0: command tx timeout
[   52.255802][ T5934] Bluetooth: hci3: command tx timeout
[   52.693942][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.699443][ T6182] smc: removing net device bond0 with user defined pnetid SYZ2
[   52.703556][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.709850][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.716572][ T6182] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   52.721720][ T6182] bond0 (unregistering): Released all slaves
[   52.745788][   T46] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.759909][  T226] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.768466][   T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.775626][   T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.813011][ T6214] overlayfs: missing 'lowerdir'
[   52.827214][ T6219] qnx6: unable to read the first superblock
[   52.829539][ T6219] qnx6: unable to read the first superblock
[   52.831427][ T6219] qnx6: unable to read the first superblock
[   52.835370][ T6214] veth1_macvtap: left promiscuous mode
[   52.837223][ T6214] macsec0: entered promiscuous mode
[   52.887759][ T6236] Invalid source name
[   52.889163][ T6236] UBIFS error (pid: 6236): cannot open "./file0", error -22
[   52.910583][ T6240] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.67'.
[   52.915909][ T6240] ksmbd: Unknown IPC event: 3, ignore.
[   52.928294][ T6229] cdrom: dropping to single frame dma
[   52.934770][ T6241] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   52.950763][ T6241] program syz.0.63 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.954916][ T6247] binder: BINDER_SET_CONTEXT_MGR already set
[   52.954966][ T6247] binder: 6226:6247 ioctl 4018620d 200000000100 returned -16
[   53.013902][ T6258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.133739][ T6258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.194016][ T6271] futex_wake_op: syz.2.74 tries to shift op by -1; fix this program
[   53.219504][ T6258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.269217][ T6273] CUSE: unknown device info ""
[   53.271111][ T6273] CUSE: zero length info key specified
[   53.273818][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   53.289325][ T6283] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   53.320574][ T6258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.474410][   T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.484685][   T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.498673][   T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.513227][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.540199][ T6301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   53.591758][ T6310] sit0: entered promiscuous mode
[   53.598203][ T6310] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[   53.699510][ T6318] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   53.705038][ T6318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=6318 comm=syz.2.91
[   53.905854][ T6340] ALSA: seq fatal error: cannot create timer (-19)
[   53.938405][ T6353] capability: warning: `syz.1.101' uses deprecated v2 capabilities in a way that may be insecure
[   54.014446][ T6371] xt_hashlimit: overflow, rate too high: 0
[   54.246539][ T5934] Bluetooth: hci0: command tx timeout
[   54.255858][ T5934] Bluetooth: hci1: command tx timeout
[   54.257033][ T5942] Bluetooth: hci2: command tx timeout
[   54.310947][ T6409] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.326219][ T5942] Bluetooth: hci3: command tx timeout
[   54.483918][ T6425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   54.486793][ T6425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   54.491559][ T6425] vhci_hcd vhci_hcd.0: Device attached
[   54.496879][ T6426] vhci_hcd: unknown pdu 2
[   54.500688][   T46] vhci_hcd: stop threads
[   54.502884][   T46] vhci_hcd: release socket
[   54.504745][   T46] vhci_hcd: disconnect device
[   54.921974][ T6450] xt_bpf: check failed: parse error
[   54.971163][ T6451] kvm: pic: non byte write
[   54.973477][ T6451] kvm: pic: non byte read
[   54.975541][ T6451] kvm: pic: non byte write
[   54.980736][ T6451] kvm: pic: non byte read
[   54.982796][ T6451] kvm: pic: non byte write
[   54.985516][ T6451] kvm: pic: non byte read
[   54.987646][ T6451] kvm: pic: non byte write
[   54.990209][ T6451] kvm: pic: non byte write
[   54.991851][ T6451] kvm: pic: non byte read
[   55.225715][ T6471] __nla_validate_parse: 4 callbacks suppressed
[   55.225727][ T6471] netlink: 76 bytes leftover after parsing attributes in process `syz.3.134'.
[   55.400297][ T6487] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   55.874070][   T40] kauditd_printk_skb: 108 callbacks suppressed
[   55.874097][   T40] audit: type=1400 audit(1761317381.657:349): avc:  denied  { write } for  pid=6502 comm="syz.0.144" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.874856][ T6503] binder: binder_mmap: 6502 200000ffc000-200001000000 bad vm_flags failed -1
[   55.885834][   T40] audit: type=1400 audit(1761317381.667:350): avc:  denied  { bind } for  pid=6504 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   55.892795][   T40] audit: type=1400 audit(1761317381.677:351): avc:  denied  { setopt } for  pid=6504 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   55.899750][   T40] audit: type=1400 audit(1761317381.677:352): avc:  denied  { mount } for  pid=6502 comm="syz.0.144" name="/" dev="ramfs" ino=11962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   55.909435][ T6506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.911888][ T6506] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.914814][ T6506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.918200][ T6506] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.045740][ T6015] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[   56.218205][ T6015] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 48569, setting to 8
[   56.221773][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0
[   56.223974][ T6015] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   56.228928][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.236892][ T6015] usb 7-1: config 0 descriptor??
[   56.240781][ T6500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   56.265071][   T40] audit: type=1400 audit(1761317382.047:353): avc:  denied  { add_name } for  pid=6514 comm="syz.3.148" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.274371][   T40] audit: type=1400 audit(1761317382.047:354): avc:  denied  { create } for  pid=6514 comm="syz.3.148" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   56.282184][   T40] audit: type=1400 audit(1761317382.047:355): avc:  denied  { associate } for  pid=6514 comm="syz.3.148" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   56.296121][   T40] audit: type=1400 audit(1761317382.067:356): avc:  denied  { read write open } for  pid=6514 comm="syz.3.148" path="/42/file0/bus" dev="9p" ino=71827933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.307257][   T40] audit: type=1800 audit(1761317382.067:357): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.148" name="bus" dev="9p" ino=71827933 res=0 errno=0
[   56.328060][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[   56.437466][   T40] audit: type=1400 audit(1761317382.227:358): avc:  denied  { read write } for  pid=6523 comm="syz.1.152" name="swradio2" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   56.491987][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'.
[   56.499310][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.621242][ T6543] x_tables: duplicate underflow at hook 1
[   56.656564][ T6015] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   56.658901][ T6015] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   56.661092][ T6015] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   56.663274][ T6015] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   56.666691][ T6015] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   56.670852][ T6015] mcp2221 0003:04D8:00DD.0002: USB HID vff.fd Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   56.681054][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   56.683129][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   56.685592][ T6548] vhci_hcd vhci_hcd.0: Device attached
[   56.691691][ T6549] vhci_hcd: unknown pdu 1
[   56.693490][  T226] vhci_hcd: stop threads
[   56.694874][  T226] vhci_hcd: release socket
[   56.696814][  T226] vhci_hcd: disconnect device
[   57.581398][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'.
[   57.847859][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.854640][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.886532][ T6595] netlink: 'syz.1.169': attribute type 9 has an invalid length.
[   57.925799][ T5934] Bluetooth: hci4: command 0x1003 tx timeout
[   57.925839][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   58.041396][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'.
[   58.045571][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   58.050954][ T6612] misc userio: No port type given on /dev/userio
[   58.070688][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   58.081394][ T6610] FAT-fs (nullb0): bogus number of reserved sectors
[   58.085316][ T6610] FAT-fs (nullb0): Can't find a valid FAT filesystem
[   58.088596][ T5996] usb 7-1: reset low-speed USB device number 2 using dummy_hcd
[   58.099210][ T6610] macsec0: entered allmulticast mode
[   58.447969][ T6622] Invalid source name
[   58.449283][ T6622] UBIFS error (pid: 6622): cannot open "/dev/sg0", error -22
[   58.500162][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.179'.
[   58.601049][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'.
[   58.688241][ T6500] kvm: kvm [6499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000
[   58.881345][ T6657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6657 comm=syz.1.189
[   58.886903][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[   58.940687][ T6669] xt_hashlimit: size too large, truncated to 1048576
[   59.061914][ T6681] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[   59.076395][ T6669] bond1 (unregistering): Released all slaves
[   59.261048][ T6690] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.318741][ T6690] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.362107][ T6690] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.419662][ T6690] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.569981][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.577875][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.597098][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.599741][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.658078][ T6015] usb 7-1: USB disconnect, device number 2
[   59.895702][ T6716] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[   60.235801][ T6015] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   60.405787][ T6015] usb 7-1: Using ep0 maxpacket: 8
[   60.408648][ T6015] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[   60.411213][ T6015] usb 7-1: config 0 has no interface number 0
[   60.413222][ T6015] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   60.416715][ T6015] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   60.420468][ T6015] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   60.423843][ T6015] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   60.428039][ T6015] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   60.430842][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.434823][ T6015] usb 7-1: config 0 descriptor??
[   60.442453][ T6015] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   60.455800][ T6014] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   60.606238][ T6014] usb 6-1: too many configurations: 9, using maximum allowed: 8
[   60.609671][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.613251][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.616980][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.619966][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.623742][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.628236][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.632191][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.635968][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.639326][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.643312][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.643418][ T6015] usb 7-1: USB disconnect, device number 3
[   60.646494][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.650069][ T6015] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[   60.651500][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.656600][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.659436][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.662727][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.666936][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.669824][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.673288][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.676235][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.678933][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.682227][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.684961][ T6014] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   60.688025][ T6014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   60.691968][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0
[   60.696856][ T6014] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   60.699700][ T6014] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   60.702239][ T6014] usb 6-1: Product: syz
[   60.703560][ T6014] usb 6-1: Manufacturer: syz
[   60.705032][ T6014] usb 6-1: SerialNumber: syz
[   60.708239][ T6014] usb 6-1: config 0 descriptor??
[   60.714645][ T6014] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[   60.913364][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.914904][ T6015] usb 6-1: USB disconnect, device number 2
[   60.918045][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.921762][ T6015] yurex 6-1:0.0: USB YUREX #0 now disconnected
[   61.357698][   T40] kauditd_printk_skb: 40 callbacks suppressed
[   61.357711][   T40] audit: type=1400 audit(1761317387.147:399): avc:  denied  { ioctl } for  pid=6760 comm="syz.1.217" path="socket:[13921]" dev="sockfs" ino=13921 ioctlcmd=0x8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   61.542175][   T40] audit: type=1400 audit(1761317387.327:400): avc:  denied  { read } for  pid=6773 comm="syz.1.220" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   61.550241][   T40] audit: type=1400 audit(1761317387.327:401): avc:  denied  { open } for  pid=6773 comm="syz.1.220" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   61.558292][   T40] audit: type=1400 audit(1761317387.327:402): avc:  denied  { ioctl } for  pid=6773 comm="syz.1.220" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   61.588475][ T6776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=6776 comm=syz.1.222
[   61.599830][   T40] audit: type=1400 audit(1761317387.387:403): avc:  denied  { write } for  pid=6777 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   61.659452][   T40] audit: type=1400 audit(1761317387.447:404): avc:  denied  { read } for  pid=6784 comm="syz.1.226" path="socket:[13169]" dev="sockfs" ino=13169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.683618][ T6786] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   61.687918][ T6786] __nla_validate_parse: 2 callbacks suppressed
[   61.687931][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   61.694305][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'.
[   61.707394][ T6786] geneve2: entered promiscuous mode
[   61.709892][ T6786] geneve2: entered allmulticast mode
[   61.750499][ T6791] vlan2: entered allmulticast mode
[   61.752251][ T6791] bond0: entered allmulticast mode
[   61.753873][ T6791] bond_slave_0: entered allmulticast mode
[   61.755828][ T6791] bond_slave_1: entered allmulticast mode
[   61.805785][   T40] audit: type=1400 audit(1761317387.587:405): avc:  denied  { map } for  pid=6792 comm="syz.0.228" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   61.905776][ T6351] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   61.945018][ T6793] Can't find a SQUASHFS superblock on nullb0
[   62.076252][ T6351] usb 7-1: Using ep0 maxpacket: 8
[   62.079408][ T6351] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[   62.081955][ T6351] usb 7-1: config 0 has no interface number 0
[   62.083848][ T6351] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.087307][ T6351] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   62.091004][ T6351] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   62.091150][   T40] audit: type=1400 audit(1761317387.877:406): avc:  denied  { create } for  pid=6803 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   62.094345][ T6351] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   62.105871][ T6351] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   62.108649][ T6351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.112440][ T6351] usb 7-1: config 0 descriptor??
[   62.118138][ T6351] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   62.151898][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'.
[   62.421541][ T6826] process 'syz.1.235' launched '/dev/fd/4' with NULL argv: empty string added
[   62.425190][   T40] audit: type=1400 audit(1761317388.207:407): avc:  denied  { execute_no_trans } for  pid=6824 comm="syz.1.235" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   62.613121][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'.
[   62.617332][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.237'.
[   63.157345][   T40] audit: type=1400 audit(1761317388.947:408): avc:  denied  { create } for  pid=6860 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   63.852150][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'.
[   63.855647][ T6874] program syz.0.246 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.858560][ T6874] ata1.00: invalid service action 31
[   64.063287][ T6876] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[   64.063368][ T6877] kAFS: Can only specify source 'none' with -o dyn
[   64.269958][ T6886] comedi comedi3: comedi_config --init_data is deprecated
[   64.316547][ T6889] netlink: 76 bytes leftover after parsing attributes in process `syz.1.251'.
[   64.407937][ T6015] usb 7-1: USB disconnect, device number 4
[   64.412981][ T6015] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[   64.649062][ T6906] netlink: 80 bytes leftover after parsing attributes in process `syz.0.255'.
[   64.675754][ T5996] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   64.830680][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   64.834810][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   64.839944][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   64.843339][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   64.849419][ T5996] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   64.852305][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.860918][ T5996] usb 6-1: config 0 descriptor??
[   64.938193][ T6935] netlink: 'syz.2.262': attribute type 29 has an invalid length.
[   65.067912][ T5996] plantronics 0003:047F:FFFF.0003: unexpected long global item
[   65.072460][ T5996] plantronics 0003:047F:FFFF.0003: parse failed
[   65.075056][ T5996] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22
[   65.330769][   T10] usb 6-1: USB disconnect, device number 3
[   65.946654][ T6968] block device autoloading is deprecated and will be removed.
[   66.014864][ T6955] overlayfs: statfs failed on './file0'
[   66.175514][ T6991] overlayfs: failed lookup in lower (newroot/63, name='file1', err=-40): overlapping layers
[   66.184936][ T6991] overlayfs: failed lookup in lower (newroot/63, name='file1', err=-40): overlapping layers
[   66.188738][ T6991] overlayfs: failed lookup in lower (newroot/63, name='file1', err=-40): overlapping layers
[   66.192895][ T6991] evm: overlay not supported
[   66.216122][ T5843] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[   66.238591][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'.
[   66.241572][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'.
[   66.252200][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.254958][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.258842][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.261595][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.377795][ T5843] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   66.381623][ T5843] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.384647][ T5843] usb 7-1: config 0 interface 0 has no altsetting 0
[   66.387357][ T5843] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[   66.390217][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.394421][ T5843] usb 7-1: config 0 descriptor??
[   66.449195][   T40] kauditd_printk_skb: 25 callbacks suppressed
[   66.449207][   T40] audit: type=1400 audit(1761317392.237:434): avc:  denied  { unmount } for  pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   66.467997][   T40] audit: type=1400 audit(1761317392.257:435): avc:  denied  { read } for  pid=7017 comm="syz.1.290" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.581824][   T40] audit: type=1326 audit(1761317392.367:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.3.292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8b38efc9 code=0x0
[   66.668341][ T5942] block nbd0: Receive control failed (result -32)
[   66.695020][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7038 comm=syz.1.297
[   66.728531][ T7043] __nla_validate_parse: 2 callbacks suppressed
[   66.728548][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'.
[   66.754731][ T7041] kvm: kvm [7040]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   66.761383][ T7041] kvm: kvm [7040]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   66.776277][   T40] audit: type=1326 audit(1761317392.567:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.296" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f439f58efc9 code=0x0
[   66.806182][ T5843] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0
[   66.809185][ T5843] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0
[   66.812197][ T5843] hid-steam 0003:28DE:1102.0004: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[   66.875934][ T5843] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected
[   66.880659][ T5843] input: Steam Controller as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:28DE:1102.0004/input/input6
[   66.888141][   T40] audit: type=1400 audit(1761317392.677:438): avc:  denied  { read } for  pid=5325 comm="acpid" name="js0" dev="devtmpfs" ino=2882 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.896278][   T40] audit: type=1400 audit(1761317392.677:439): avc:  denied  { open } for  pid=5325 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2882 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.904546][   T40] audit: type=1400 audit(1761317392.677:440): avc:  denied  { ioctl } for  pid=5325 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2882 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.913706][ T5843] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0
[   66.917379][ T5843] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0
[   66.928989][ T5843] hid-steam 0003:28DE:1102.0005: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[   67.002499][   T10] usb 7-1: USB disconnect, device number 5
[   67.018774][   T10] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected
[   67.486107][ T7056] block nbd1: server does not support multiple connections per device.
[   67.489978][ T7056] block nbd1: shutting down sockets
[   67.568492][   T40] audit: type=1400 audit(1761317393.357:441): avc:  denied  { read } for  pid=7066 comm="syz.2.305" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   67.575938][   T40] audit: type=1400 audit(1761317393.357:442): avc:  denied  { open } for  pid=7066 comm="syz.2.305" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   67.583965][   T40] audit: type=1400 audit(1761317393.357:443): avc:  denied  { ioctl } for  pid=7066 comm="syz.2.305" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   67.611160][ T7067] kvm: kvm [7066]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   67.614558][ T7067] kvm: kvm [7066]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   67.773875][ T7089] netlink: 'syz.1.310': attribute type 64 has an invalid length.
[   67.777133][ T7089] netlink: 'syz.1.310': attribute type 4 has an invalid length.
[   67.779565][ T7089] netlink: 152 bytes leftover after parsing attributes in process `syz.1.310'.
[   67.885747][ T6865] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   67.971687][ T7107] smc: adding net device bond0 with user defined pnetid SYZ2
[   67.975096][ T7107] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   67.980304][ T7107] smc: removing net device bond0 with user defined pnetid SYZ2
[   67.982834][ T7107] bond0 (unregistering): Released all slaves
[   67.986603][ T7110] netlink: 44 bytes leftover after parsing attributes in process `syz.3.317'.
[   67.997262][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'.
[   68.017537][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.316'.
[   68.036143][ T6865] usb 5-1: Using ep0 maxpacket: 16
[   68.047674][ T6865] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[   68.050795][ T6865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.053515][ T6865] usb 5-1: Product: syz
[   68.056311][ T6865] usb 5-1: Manufacturer: syz
[   68.057788][ T6865] usb 5-1: SerialNumber: syz
[   68.060880][ T6865] usb 5-1: config 0 descriptor??
[   68.064447][ T6865] omninet 5-1:0.0: required endpoints missing
[   68.067910][   T56] hid-generic 0005:16C0:5505.0006: item fetching failed at offset 0/1
[   68.071092][   T56] hid-generic 0005:16C0:5505.0006: probe with driver hid-generic failed with error -22
[   68.140799][ T7115] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[   68.143487][ T7115] [U] J"—e:ÀÆ"


[   68.146051][ T7114] [U] 
[   68.311537][ T7134] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   68.331311][ T6865] usb 5-1: USB disconnect, device number 2
[   68.404388][ T7143] IPVS: Unknown mcast interface: syzkaller1
[   68.699266][ T7151] syz.3.330 uses obsolete (PF_INET,SOCK_PACKET)
[   68.703651][ T7151] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   68.745495][ T7153] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   68.922501][ T7158] usb 1-1: reset high-speed USB device number 2 using ehci-pci
[   68.951552][ T7169] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   68.956348][ T7169] bond2 (unregistering): Released all slaves
[   69.220459][ T7193] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.228517][ T7182] mmap: syz.1.342 (7182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   69.375903][ T7193] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.458578][ T7193] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.529590][ T7193] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.623537][ T1147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.631225][ T1147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.639644][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.647194][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.668748][   T56] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   69.763090][ T7241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'.
[   69.817216][   T56] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   69.820991][   T56] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   69.825174][   T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   69.829740][   T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   69.834289][   T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   69.840438][   T56] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   69.844188][   T56] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   69.844205][   T56] usb 6-1: Product: syz
[   69.844217][   T56] usb 6-1: Manufacturer: syz
[   69.852333][   T56] cdc_wdm 6-1:1.0: skipping garbage
[   69.852354][   T56] cdc_wdm 6-1:1.0: skipping garbage
[   69.855191][   T56] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   69.861178][   T56] cdc_wdm 6-1:1.0: Unknown control protocol
[   70.057339][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   70.058327][ T5843] usb 6-1: USB disconnect, device number 4
[   70.060153][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   70.065023][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   70.091970][ T7259] netlink: 100 bytes leftover after parsing attributes in process `syz.2.364'.
[   70.194155][ T7261] netlink: 'syz.2.365': attribute type 21 has an invalid length.
[   70.196903][ T7261] netlink: 'syz.2.365': attribute type 6 has an invalid length.
[   70.199669][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.365'.
[   70.362037][ T7264] binder: 7263:7264 ioctl c018620b 0 returned -14
[   70.401436][ T7266] binder: 7265:7266 unknown command 0
[   70.403810][ T7266] binder: 7265:7266 ioctl c0306201 200000000080 returned -22
[   70.666241][ T7277] xt_hashlimit: size too large, truncated to 1048576
[   70.753927][ T7277] sit0: entered promiscuous mode
[   70.758455][ T7277] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[   70.760920][ T7277] netlink: 1 bytes leftover after parsing attributes in process `syz.0.370'.
[   70.823070][ T7293] zonefs (nbd1) ERROR: Not a zoned block device
[   70.831514][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'.
[   70.971884][ T7302] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   70.974753][ T7303] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   71.130798][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.132996][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.143174][ T7333] input: syz0 as /devices/virtual/input/input7
[   71.426285][   T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   71.577825][   T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   71.581910][   T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.585865][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[   71.588377][   T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[   71.591720][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.596678][   T24] usb 5-1: config 0 descriptor??
[   71.914761][   T40] kauditd_printk_skb: 42 callbacks suppressed
[   71.914779][   T40] audit: type=1400 audit(1761317397.697:486): avc:  denied  { execute } for  pid=7343 comm="syz.1.388" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   72.017183][   T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[   72.019715][   T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[   72.022435][   T24] hid-steam 0003:28DE:1102.0007: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[   72.086912][   T24] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected
[   72.092088][   T24] input: Steam Controller as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:28DE:1102.0007/input/input8
[   72.103424][   T24] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0
[   72.106469][   T24] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0
[   72.110280][   T24] hid-steam 0003:28DE:1102.0008: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[   72.212442][ T5843] usb 5-1: USB disconnect, device number 3
[   72.225627][ T5843] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected
[   72.740366][   T40] audit: type=1400 audit(1761317398.527:487): avc:  denied  { module_request } for  pid=7366 comm="syz.0.395" kmod="nft-expr-7-dup" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   72.870397][ T7373] __nla_validate_parse: 1 callbacks suppressed
[   72.870408][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'.
[   72.875798][ T7373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.396'.
[   72.881968][ T7373] dns_resolver: Unsupported content type (234)
[   72.890307][ T7378] Bluetooth: MGMT ver 1.23
[   72.901723][ T7377] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   72.906837][ T7377] bond2 (unregistering): Released all slaves
[   72.920645][ T7386] netlink: 'syz.0.399': attribute type 1 has an invalid length.
[   72.923060][ T7386] netlink: 224 bytes leftover after parsing attributes in process `syz.0.399'.
[   72.969029][   T40] audit: type=1400 audit(1761317398.757:488): avc:  denied  { setopt } for  pid=7397 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   73.104849][ T7412] netlink: 'syz.1.407': attribute type 10 has an invalid length.
[   73.149209][   T40] audit: type=1400 audit(1761317398.937:489): avc:  denied  { read } for  pid=7423 comm="syz.1.410" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   73.156348][   T40] audit: type=1400 audit(1761317398.937:490): avc:  denied  { open } for  pid=7423 comm="syz.1.410" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   73.231852][   T40] audit: type=1400 audit(1761317399.017:491): avc:  denied  { mounton } for  pid=7402 comm="syz.0.403" path="/proc/308/task" dev="proc" ino=17904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   73.385802][ T6865] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   73.547870][ T6865] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[   73.551523][ T6865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.556586][ T6865] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   73.560532][ T6865] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   73.563952][ T6865] usb 6-1: Manufacturer: syz
[   73.573373][ T6865] usb 6-1: config 0 descriptor??
[   73.586592][ T7439] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   73.625883][ T6865] rc_core: IR keymap rc-hauppauge not found
[   73.628537][ T6865] Registered IR keymap rc-empty
[   73.632491][ T6865] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   73.637573][ T6865] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9
[   73.780345][ T7424] binder: 7423:7424 ioctl c0306201 200000000540 returned -22
[   73.784480][  T841] usb 6-1: USB disconnect, device number 5
[   73.788312][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'.
[   73.816846][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'.
[   74.117097][ T7457] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   74.205763][    C2] vkms_vblank_simulate: vblank timer overrun
[   74.421632][   T40] audit: type=1400 audit(1761317400.207:492): avc:  denied  { execute } for  pid=7476 comm="syz.1.425" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.470289][ T7485] IPv6: Can't replace route, no match found
[   74.535405][   T40] audit: type=1400 audit(1761317400.317:493): avc:  denied  { create } for  pid=7481 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   74.552668][   T40] audit: type=1400 audit(1761317400.337:494): avc:  denied  { sys_admin } for  pid=7481 comm="syz.2.426" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   74.588413][ T7495] netlink: 108 bytes leftover after parsing attributes in process `syz.1.429'.
[   74.592069][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[   74.598801][ T7495] tipc: Started in network mode
[   74.600853][ T7495] tipc: Node identity 7f000001, cluster identity 4711
[   74.603692][ T7495] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.700376][ T7503] sock: sock_set_timeout: `syz.1.432' (pid 7503) tries to set negative timeout
[   74.758478][   T40] audit: type=1400 audit(1761317400.547:495): avc:  denied  { setopt } for  pid=7515 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   75.080864][ T7549] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   75.177934][ T6865] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   75.186089][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   75.194974][ T7553] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.244288][ T7553] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.298580][ T7562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.448'.
[   75.310468][ T7553] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.335755][ T6865] usb 5-1: Using ep0 maxpacket: 8
[   75.338630][ T6865] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[   75.341163][ T6865] usb 5-1: config 0 has no interface number 0
[   75.343048][ T6865] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   75.347277][ T6865] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   75.349215][ T7564] pim6reg: entered allmulticast mode
[   75.351386][ T6865] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   75.357472][ T6865] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   75.359663][ T7563] pim6reg: left allmulticast mode
[   75.361899][ T6865] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   75.368256][ T6865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.375953][ T6865] usb 5-1: config 0 descriptor??
[   75.380603][ T6865] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   75.388508][ T7553] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.483268][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.491354][ T1195] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.499059][ T1195] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.506547][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.544749][ T7570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   75.546843][ T7570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   75.550073][ T7570] vhci_hcd vhci_hcd.0: Device attached
[   75.597231][ T6015] tipc: Node number set to 2130706433
[   75.669809][ T7574] xt_cgroup: path and classid specified
[   75.785837][   T56] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[   75.785996][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   75.849009][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'.
[   75.937643][   T24] usb 6-1: config 0 has no interfaces?
[   75.939442][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[   75.942272][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.947027][   T24] usb 6-1: config 0 descriptor??
[   76.150279][ T7571] usbip_core: unknown command
[   76.151981][ T7571] vhci_hcd: unknown pdu 302055424
[   76.153738][ T7571] usbip_core: unknown command
[   76.156054][ T1147] vhci_hcd: stop threads
[   76.157556][ T1147] vhci_hcd: release socket
[   76.160570][ T1147] vhci_hcd: disconnect device
[   76.979468][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   76.979479][   T40] audit: type=1400 audit(1761317402.767:505): avc:  denied  { ioctl } for  pid=7597 comm="syz.2.457" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   76.981575][ T7598] 9pnet_virtio: no channels available for device /dev/nullb0
[   77.059369][ T7600] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1752392040 (3504784080 ns) > initial count (4 ns). Using initial count to start timer.
[   77.158129][   T40] audit: type=1400 audit(1761317402.947:506): avc:  denied  { ioctl } for  pid=7602 comm="syz.2.459" path="socket:[19902]" dev="sockfs" ino=19902 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   77.171135][ T7603] IPv6: sit1: Disabled Multicast RS
[   77.173400][ T7603] sit1: entered allmulticast mode
[   77.686823][   T24] usb 5-1: USB disconnect, device number 4
[   77.694658][   T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[   77.752856][ T7618] netlink: 'syz.2.464': attribute type 1 has an invalid length.
[   77.756443][ T7618] netlink: 'syz.2.464': attribute type 3 has an invalid length.
[   78.008373][   T40] audit: type=1326 audit(1761317403.797:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.0.473" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f439f58efc9 code=0x0
[   78.033187][   T40] audit: type=1400 audit(1761317403.817:508): avc:  denied  { write } for  pid=7642 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   78.099063][   T40] audit: type=1400 audit(1761317403.887:509): avc:  denied  { view } for  pid=7650 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   78.104915][ T7651] pimreg: entered allmulticast mode
[   78.117765][ T7650] pimreg: left allmulticast mode
[   78.173794][   T40] audit: type=1400 audit(1761317403.957:510): avc:  denied  { getopt } for  pid=7640 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   78.255224][ T7660] overlayfs: cannot append lower layer
[   78.281172][ T7660] smc: adding net device bond0 with user defined pnetid SYZ2
[   78.283782][ T7660] bond0: Removing last ns target with arp_interval on
[   78.347357][ T7670] __nla_validate_parse: 2 callbacks suppressed
[   78.347367][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'.
[   78.554449][ T5843] usb 6-1: USB disconnect, device number 6
[   79.198405][   T40] audit: type=1400 audit(1761317404.987:511): avc:  denied  { listen } for  pid=7697 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   79.220448][ T7701] xt_ecn: cannot match TCP bits for non-tcp packets
[   79.250565][   T40] audit: type=1400 audit(1761317405.037:512): avc:  denied  { create } for  pid=7706 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   79.257422][   T40] audit: type=1400 audit(1761317405.037:513): avc:  denied  { ioctl } for  pid=7706 comm="syz.3.493" path="socket:[18353]" dev="sockfs" ino=18353 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   79.260827][ T7705] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   79.281655][  T841] libceph: connect (1)[c::]:6789 error -101
[   79.283848][  T841] libceph: mon0 (1)[c::]:6789 connect error
[   79.312385][ T7717] netlink: 'syz.1.496': attribute type 2 has an invalid length.
[   79.316689][ T7717] ipt_REJECT: TCP_RESET invalid for non-tcp
[   79.374053][ T7725] sg_read: process 469 (syz.1.498) changed security contexts after opening file descriptor, this is not allowed.
[   79.423300][ T7728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   79.428799][ T7727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   79.557057][  T841] libceph: connect (1)[c::]:6789 error -101
[   79.559661][  T841] libceph: mon0 (1)[c::]:6789 connect error
[   79.563561][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'.
[   79.667634][ T7756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.506'.
[   79.671185][ T7756] netlink: 180 bytes leftover after parsing attributes in process `syz.0.506'.
[   79.807147][   T40] audit: type=1400 audit(1761317405.597:514): avc:  denied  { read write } for  pid=7758 comm="syz.0.507" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   79.809428][ T7760] loop4: detected capacity change from 0 to 2560
[   79.821127][ T7759] Buffer I/O error on dev loop4, logical block 0, lost async page write
[   79.825962][ T5944] Buffer I/O error on dev loop4, logical block 3, async page read
[   79.866256][  T841] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   80.025750][  T841] usb 6-1: Using ep0 maxpacket: 16
[   80.028901][  T841] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[   80.031750][  T841] usb 6-1: config 0 has no interface number 0
[   80.034166][  T841] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   80.038088][  T841] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   80.043560][  T841] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   80.046926][  T841] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   80.049854][  T841] usb 6-1: Product: syz
[   80.051503][  T841] usb 6-1: SerialNumber: syz
[   80.055339][  T841] usb 6-1: config 0 descriptor??
[   80.060747][  T841] cm109 6-1:0.8: invalid payload size 0, expected 4
[   80.064780][  T841] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input10
[   80.075457][ T6351] libceph: connect (1)[c::]:6789 error -101
[   80.082198][ T6351] libceph: mon0 (1)[c::]:6789 connect error
[   80.124505][ T7770] netlink: 'syz.0.510': attribute type 2 has an invalid length.
[   80.137732][ T7705] ceph: No mds server is up or the cluster is laggy
[   80.176164][ T7778] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   80.181366][ T7778] IPv6: sit1: Disabled Multicast RS
[   80.183629][ T7778] sit1: entered allmulticast mode
[   80.262611][ T7749] binder: 7748:7749 ioctl c0306201 200000000040 returned -22
[   80.266139][ T7749] loop5: detected capacity change from 0 to 7
[   80.282688][ T5944]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[   80.284718][ T5944] loop5: partition table partially beyond EOD, truncated
[   80.287269][ T5944] loop5: p1 size 2989602745 extends beyond EOD, truncated
[   80.304177][ T7796] bridge_slave_0: left allmulticast mode
[   80.307424][ T7796] bridge_slave_0: left promiscuous mode
[   80.309978][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.316888][ T7796] bridge_slave_1: left allmulticast mode
[   80.318731][ T7796] bridge_slave_1: left promiscuous mode
[   80.320427][ T7800] loop2: detected capacity change from 0 to 7
[   80.323229][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.331467][ T7800] Dev loop2: unable to read RDB block 7
[   80.333859][ T7800]  loop2: AHDI p1 p2
[   80.335545][ T7800] loop2: partition table partially beyond EOD, truncated
[   80.336661][ T7749]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[   80.344227][ T7800] loop2: p1 start 1835360114 is beyond EOD, truncated
[   80.344751][ T7749] loop5: partition table partially beyond EOD, 
[   80.352010][ T7796] team0: Port device team_slave_0 removed
[   80.352048][ T7749] truncated
[   80.362891][ T7749] loop5: p1 size 2989602745 extends beyond EOD, truncated
[   80.369171][ T7796] team0: Port device team_slave_1 removed
[   80.371458][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.373788][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.376678][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.380795][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.383207][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.385457][  T841] usb 6-1: USB disconnect, device number 7
[   80.387813][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.388043][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.391038][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.393761][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   80.401955][ T7796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.420493][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   80.428547][  T841] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   80.428779][ T7806] team0: Mode changed to "loadbalance"
[   80.441339][ T7796] vlan0: entered promiscuous mode
[   80.453904][ T7796] team0: Port device vlan0 added
[   80.461896][ T7796] tipc: Started in network mode
[   80.464040][ T7796] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   80.467913][ T7796] tipc: Enabled bearer <eth:team0>, priority 0
[   80.549098][ T7832] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   80.559424][ T7833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'.
[   80.886127][   T56] vhci_hcd: vhci_device speed not set
[   81.076687][ T7856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'.
[   81.090010][ T7858] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[   81.092466][ T7858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'.
[   81.095472][ T7857] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[   81.098667][ T7857] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'.
[   81.300245][ T7867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'.
[   81.320227][ T7869] devpts: Unknown parameter 'nf²s'
[   81.329558][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   81.332799][ T7875] netlink: 'syz.2.534': attribute type 21 has an invalid length.
[   81.378502][ T1027] cfg80211: failed to load regulatory.db
[   81.477338][ T6351] tipc: Node number set to 11578026
[   81.674470][ T7910] bpf: Bad value for 'mode'
[   82.043345][ T7917] sch_fq: defrate 4294967292 ignored.
[   82.979324][ T7942] xt_hashlimit: size too large, truncated to 1048576
[   83.125896][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   83.126120][ T5934] Bluetooth: hci4: command 0x1003 tx timeout
[   83.239406][ T7942] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value
[   83.244845][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   83.244859][   T40] audit: type=1400 audit(1761317409.027:528): avc:  denied  { write } for  pid=7941 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   83.343677][   T40] audit: type=1400 audit(1761317409.127:529): avc:  denied  { write } for  pid=7952 comm="syz.2.559" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   83.409855][   T40] audit: type=1400 audit(1761317409.197:530): avc:  denied  { create } for  pid=7955 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.416801][   T40] audit: type=1400 audit(1761317409.197:531): avc:  denied  { write } for  pid=7955 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.424886][   T40] audit: type=1400 audit(1761317409.197:532): avc:  denied  { nlmsg_write } for  pid=7955 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.492331][   T40] audit: type=1400 audit(1761317409.277:533): avc:  denied  { remount } for  pid=7959 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   83.492752][ T7962] SELinux: ebitmap: empty map
[   83.501764][ T7962] SELinux: failed to load policy
[   83.604365][ T7974] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0)
[   83.687350][ T7978] __nla_validate_parse: 2 callbacks suppressed
[   83.687361][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'.
[   83.790404][ T7980] netlink: 9 bytes leftover after parsing attributes in process `syz.1.569'.
[   83.806306][ T1027] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   83.811706][ T7982] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off.
[   83.820755][   T40] audit: type=1400 audit(1761317409.607:534): avc:  denied  { mounton } for  pid=7981 comm="syz.0.570" path="/136/file0" dev="9p" ino=71827767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   83.861257][ T1195] tipc: Subscription rejected, illegal request
[   83.900575][ T7987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=658 sclass=netlink_route_socket pid=7987 comm=syz.1.572
[   83.945595][   T40] audit: type=1400 audit(1761317409.727:535): avc:  denied  { accept } for  pid=7988 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   83.952699][   T40] audit: type=1400 audit(1761317409.737:536): avc:  denied  { accept } for  pid=7988 comm="syz.1.573" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.985740][ T1027] usb 7-1: Using ep0 maxpacket: 32
[   83.988678][ T1027] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   83.994295][ T1027] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   83.997783][ T1027] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   83.998629][ T7997] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   84.000408][ T1027] usb 7-1: Product: syz
[   84.004987][ T1027] usb 7-1: Manufacturer: syz
[   84.006639][ T1027] usb 7-1: SerialNumber: syz
[   84.011588][ T1027] usb 7-1: config 0 descriptor??
[   84.013715][ T7968] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   84.013722][   T40] audit: type=1400 audit(1761317409.797:537): avc:  denied  { shutdown } for  pid=7998 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   84.079040][ T8004] netlink: 37 bytes leftover after parsing attributes in process `syz.1.577'.
[   84.082039][ T8004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.084474][ T8004] IPv6: NLM_F_CREATE should be set when creating new route
[   84.086985][ T8004] IPv6: NLM_F_CREATE should be set when creating new route
[   84.091118][ T8005] netlink: 37 bytes leftover after parsing attributes in process `syz.1.577'.
[   84.094397][ T8005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.942543][ T8020] loop3: detected capacity change from 0 to 7
[   84.943093][ T8022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.581'.
[   84.994999][ T8025] overlayfs: statfs failed on './file0'
[   85.002336][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'.
[   85.007623][ T8028] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   85.298751][ T5942] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[   85.903808][ T8056] pimreg: entered allmulticast mode
[   85.934512][ T8061] delete_channel: no stack
[   86.186889][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.603'.
[   86.190428][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'.
[   86.530029][ T8113] netlink: 'syz.3.610': attribute type 1 has an invalid length.
[   86.542528][ T8113] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.546553][   T56] usb 7-1: USB disconnect, device number 6
[   86.558982][ T8113] bond1: (slave ip6erspan0): making interface the new active one
[   86.562118][ T8113] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   86.640260][ T8126] netlink: 212924 bytes leftover after parsing attributes in process `syz.3.615'.
[   86.764283][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'.
[   86.773464][ T8133] netlink: 'syz.3.617': attribute type 1 has an invalid length.
[   86.777418][ T8133] netlink: 'syz.3.617': attribute type 2 has an invalid length.
[   87.083969][ T8151] kvm: kvm [8149]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   87.088209][ T8151] kvm: kvm [8149]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   87.187366][ T8170] tmpfs: Bad value for 'mpol'
[   87.242248][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.284388][ T8190] loop1: detected capacity change from 0 to 524255232
[   87.354954][ T8204] fuse: Unknown parameter '00000000000000000004'
[   87.369118][ T8206] overlayfs: statfs failed on './file0'
[   87.605150][ T8230] trusted_key: encrypted_key: insufficient parameters specified
[   87.614641][ T8231] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   87.624085][ T8231] SELinux: security_context_str_to_sid (ramfsD·s§»Ô{I¯?¬eÂ^Ã{…Ã~F=ùCxˆ?-d$Ô5ÓuE�~›ÊEéñ7ÕÏoXˆ¡o) failed with errno=-22
[   87.646749][ T8234] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   87.703581][ T8247] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   87.706715][ T8247] SELinux: failed to load policy
[   87.707623][ T8249] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   87.711317][ T8249] overlayfs: missing 'lowerdir'
[   87.719739][ T8247] syz_tun: refused to change device tx_queue_len
[   87.724525][ T8249] gretap0: entered promiscuous mode
[   87.769727][ T8261] overlayfs: missing 'lowerdir'
[   88.628039][ T8294] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[   88.656583][ T8302] /dev/sg0: Can't lookup blockdev
[   88.687136][ T8306] Can't find a SQUASHFS superblock on nullb0
[   88.693303][ T8306] Can't find a SQUASHFS superblock on nullb0
[   88.723688][ T8310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.724745][ T8314] netlink: 'syz.0.675': attribute type 1 has an invalid length.
[   88.724858][ T8312] overlayfs: upper fs does not support file handles, falling back to index=off.
[   88.727474][ T8310] syzkaller0: entered promiscuous mode
[   88.733193][ T8310] syzkaller0: entered allmulticast mode
[   88.754696][ T8310] tipc: Resetting bearer <eth:syzkaller0>
[   88.758344][ T8317] __nla_validate_parse: 39 callbacks suppressed
[   88.758353][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'.
[   88.761010][ T8310] netlink: 576 bytes leftover after parsing attributes in process `syz.1.673'.
[   88.763751][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'.
[   88.767092][ T8310] netlink: 2052 bytes leftover after parsing attributes in process `syz.1.673'.
[   88.772574][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'.
[   88.778692][ T8319] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   88.782873][ T8319] loop3: detected capacity change from 0 to 7
[   88.786384][ T5944] Dev loop3: unable to read RDB block 7
[   88.788494][ T5944]  loop3: unable to read partition table
[   88.791027][ T5944] loop3: partition table beyond EOD, truncated
[   88.796447][ T8319] Dev loop3: unable to read RDB block 7
[   88.798266][ T8319]  loop3: unable to read partition table
[   88.800167][ T8319] loop3: partition table beyond EOD, truncated
[   88.802213][ T8319] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[   88.805487][ T8309] tipc: Resetting bearer <eth:syzkaller0>
[   88.809099][ T8319] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   88.822551][ T8309] tipc: Disabling bearer <eth:syzkaller0>
[   88.842420][ T8327] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[   88.852684][   T40] kauditd_printk_skb: 28 callbacks suppressed
[   88.852698][   T40] audit: type=1400 audit(1761317414.637:566): avc:  denied  { append } for  pid=8329 comm="syz.3.680" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   88.875589][ T8330] blktrace: Concurrent blktraces are not allowed on sg0
[   88.947831][ T8341] netlink: 100 bytes leftover after parsing attributes in process `syz.0.679'.
[   88.967268][ T8344] netlink: 328 bytes leftover after parsing attributes in process `syz.1.684'.
[   89.013039][ T8344] "syz.1.684" (8344) uses obsolete ecb(arc4) skcipher
[   89.233613][ T8356] gfs2: not a GFS2 filesystem
[   89.367973][ T5942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   89.372542][ T5942] Bluetooth: hci1: Injecting HCI hardware error event
[   89.377468][ T5934] Bluetooth: hci1: hardware error 0x00
[   89.399563][   T40] audit: type=1400 audit(1761317415.187:567): avc:  denied  { nlmsg_read } for  pid=8357 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   89.408170][ T8358] hfsplus: unable to find HFS+ superblock
[   89.668584][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[   89.717582][ T8371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8371 comm=syz.1.693
[   89.717788][ T8372] netlink: 'syz.1.693': attribute type 1 has an invalid length.
[   89.757016][   T40] audit: type=1400 audit(1761317415.537:568): avc:  denied  { read append open } for  pid=8368 comm="syz.0.694" path="/159/file0/cpu.stat" dev="9p" ino=71827929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.916792][ T8387] GUP no longer grows the stack in syz.1.700 (8387): 200000007000-20000000a000 (200000004000)
[   89.921535][ T8387] CPU: 1 UID: 0 PID: 8387 Comm: syz.1.700 Not tainted syzkaller #0 PREEMPT(full) 
[   89.921558][ T8387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.921566][ T8387] Call Trace:
[   89.921586][ T8387]  <TASK>
[   89.921594][ T8387]  dump_stack_lvl+0x16c/0x1f0
[   89.921639][ T8387]  gup_vma_lookup+0x1d2/0x220
[   89.921662][ T8387]  __get_user_pages+0x241/0x3530
[   89.921691][ T8387]  ? do_sock_setsockopt+0xf3/0x1d0
[   89.921715][ T8387]  ? __sys_setsockopt+0x1a0/0x230
[   89.921734][ T8387]  ? __x64_sys_setsockopt+0xbd/0x160
[   89.921754][ T8387]  ? do_syscall_64+0xcd/0xfa0
[   89.921778][ T8387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.921797][ T8387]  ? __pfx___get_user_pages+0x10/0x10
[   89.921825][ T8387]  __gup_longterm_locked+0x2dd/0x17e0
[   89.921847][ T8387]  ? __lock_acquire+0xb8a/0x1c90
[   89.921880][ T8387]  ? __pfx___gup_longterm_locked+0x10/0x10
[   89.921914][ T8387]  pin_user_pages+0x13c/0x160
[   89.921938][ T8387]  ? __pfx_pin_user_pages+0x10/0x10
[   89.921957][ T8387]  ? __kvmalloc_node_noprof+0x3c0/0x9c0
[   89.921976][ T8387]  ? xdp_umem_create+0x657/0x1270
[   89.922005][ T8387]  xdp_umem_create+0x741/0x1270
[   89.922036][ T8387]  xsk_setsockopt+0x6db/0x9a0
[   89.922062][ T8387]  ? __pfx_xsk_setsockopt+0x10/0x10
[   89.922082][ T8387]  ? find_held_lock+0x2b/0x80
[   89.922105][ T8387]  ? selinux_socket_setsockopt+0x6a/0x80
[   89.922141][ T8387]  ? __pfx_xsk_setsockopt+0x10/0x10
[   89.922162][ T8387]  do_sock_setsockopt+0xf3/0x1d0
[   89.922190][ T8387]  __sys_setsockopt+0x1a0/0x230
[   89.922217][ T8387]  __x64_sys_setsockopt+0xbd/0x160
[   89.922236][ T8387]  ? do_syscall_64+0x91/0xfa0
[   89.922261][ T8387]  ? lockdep_hardirqs_on+0x7c/0x110
[   89.922286][ T8387]  do_syscall_64+0xcd/0xfa0
[   89.922314][ T8387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.922331][ T8387] RIP: 0033:0x7fd2b4f8efc9
[   89.922347][ T8387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.922364][ T8387] RSP: 002b:00007fd2b5e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   89.922382][ T8387] RAX: ffffffffffffffda RBX: 00007fd2b51e6180 RCX: 00007fd2b4f8efc9
[   89.922394][ T8387] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005
[   89.922405][ T8387] RBP: 00007fd2b5011f91 R08: 0000000000000020 R09: 0000000000000000
[   89.922417][ T8387] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[   89.922428][ T8387] R13: 00007fd2b51e6218 R14: 00007fd2b51e6180 R15: 00007fff17d8ad38
[   89.922454][ T8387]  </TASK>
[   90.057479][ T8397] ip6gretap1: entered promiscuous mode
[   90.074501][ T8395] macsec1: entered promiscuous mode
[   90.076799][ T8395] macsec1: entered allmulticast mode
[   90.081298][ T8395] netlink: 96 bytes leftover after parsing attributes in process `syz.0.701'.
[   90.123483][ T8411] netlink: 830 bytes leftover after parsing attributes in process `syz.3.706'.
[   90.130796][ T8401] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   90.130885][ T8412] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   90.137716][   T40] audit: type=1400 audit(1761317415.927:569): avc:  denied  { listen } for  pid=8400 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   90.143600][   T40] audit: type=1400 audit(1761317415.927:570): avc:  denied  { connect } for  pid=8400 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   90.983303][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.129768][   T40] audit: type=1400 audit(1761317416.917:571): avc:  denied  { getopt } for  pid=8451 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   91.193167][ T8450] hsr_slave_1 (unregistering): left promiscuous mode
[   91.198037][ T8446] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   91.372151][   T40] audit: type=1400 audit(1761317417.157:572): avc:  denied  { mount } for  pid=8465 comm="syz.0.722" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   91.378637][   T40] audit: type=1400 audit(1761317417.157:573): avc:  denied  { mount } for  pid=8465 comm="syz.0.722" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   91.385092][   T40] audit: type=1400 audit(1761317417.167:574): avc:  denied  { mounton } for  pid=8465 comm="syz.0.722" path="/170/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[   91.391731][   T40] audit: type=1400 audit(1761317417.177:575): avc:  denied  { write } for  pid=8465 comm="syz.0.722" name="memory.events" dev="9p" ino=71827939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   91.445905][ T5934] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   91.520251][ T8470] tmpfs: Bad value for 'mpol'
[   91.631574][ T8485] openvswitch: netlink: nsh attr 253 is out of range max 3
[   91.633929][ T8485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.872094][ T8445] 9pnet_fd: p9_fd_create_tcp (8445): problem connecting socket to 127.0.0.1
[   91.904556][ T8504] netlink: 'syz.1.733': attribute type 4 has an invalid length.
[   91.957181][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   92.105862][   T24] usb 7-1: Using ep0 maxpacket: 16
[   92.109758][   T24] usb 7-1: unable to read config index 0 descriptor/start: -61
[   92.112271][   T24] usb 7-1: can't read configurations, error -61
[   92.248783][ T8517] tmpfs: Unknown parameter 'usrquota…'
[   92.278244][   T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   92.314080][ T8520] tmpfs: Cannot enable quota on remount
[   92.436955][   T24] usb 7-1: Using ep0 maxpacket: 16
[   92.440288][   T24] usb 7-1: unable to read config index 0 descriptor/start: -61
[   92.442664][   T24] usb 7-1: can't read configurations, error -61
[   92.444893][   T24] usb usb7-port1: attempt power cycle
[   92.670734][ T8553] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached
[   92.774969][ T8564] overlayfs: failed to clone upperpath
[   92.795931][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   92.818573][   T24] usb 7-1: Using ep0 maxpacket: 16
[   92.822670][   T24] usb 7-1: unable to read config index 0 descriptor/start: -61
[   92.825449][   T24] usb 7-1: can't read configurations, error -61
[   92.966162][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   92.987221][   T24] usb 7-1: Using ep0 maxpacket: 16
[   92.992748][   T24] usb 7-1: unable to read config index 0 descriptor/start: -61
[   92.995071][   T24] usb 7-1: can't read configurations, error -61
[   92.997931][   T24] usb usb7-port1: unable to enumerate USB device
[   93.773718][ T8607] fuse: Bad value for 'fd'
[   93.800733][ T8611] openvswitch: netlink: Duplicate or invalid key (type 0).
[   93.801428][ T8612] openvswitch: netlink: Duplicate or invalid key (type 0).
[   93.802968][ T8611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.805606][ T8612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.898733][ T8619] raw_sendmsg: syz.1.762 forgot to set AF_INET. Fix it!
[   93.906525][ T8617] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   93.958445][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   93.958461][   T40] audit: type=1400 audit(1761317419.747:585): avc:  denied  { mounton } for  pid=8625 comm="syz.3.764" path="/188/file0/file0" dev="9p" ino=71827767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.958467][ T8628] 9pnet_virtio: no channels available for device syz
[   94.010577][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.014874][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.019614][ T8634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.066420][ T8636] __nla_validate_parse: 7 callbacks suppressed
[   94.066432][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'.
[   94.073599][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'.
[   94.436829][   T40] audit: type=1400 audit(1761317420.227:586): avc:  denied  { execute } for  pid=8656 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   94.445393][   T40] audit: type=1400 audit(1761317420.227:587): avc:  denied  { execute_no_trans } for  pid=8656 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   94.550540][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.554597][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.558825][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.562650][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.565241][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.677691][ T8659] chnl_net:caif_netlink_parms(): no params data found
[   94.747553][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.749906][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.752179][ T8659] bridge_slave_0: entered allmulticast mode
[   94.754768][ T8659] bridge_slave_0: entered promiscuous mode
[   94.759533][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.761851][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.764120][ T8659] bridge_slave_1: entered allmulticast mode
[   94.766797][ T8659] bridge_slave_1: entered promiscuous mode
[   94.808062][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.813425][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.848526][ T8659] team0: Port device team_slave_0 added
[   94.851937][ T8659] team0: Port device team_slave_1 added
[   94.855330][ T8671] netlink: 108 bytes leftover after parsing attributes in process `syz.2.777'.
[   94.858897][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[   94.881520][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.883782][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.892179][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.896682][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.898986][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.908425][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.946825][ T8659] hsr_slave_0: entered promiscuous mode
[   94.949366][ T8659] hsr_slave_1: entered promiscuous mode
[   94.951475][ T8659] debugfs: 'hsr0' already exists in 'hsr'
[   94.953299][ T8659] Cannot create hsr debugfs directory
[   95.060894][ T8679] veth1_to_bond: entered allmulticast mode
[   95.080192][ T8659] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.085817][ T8659] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.089853][ T8681] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 !
[   95.092808][ T8659] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.097055][ T8659] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.112842][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.115199][ T8659] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.117750][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.120087][ T8659] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.167808][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.171689][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.186937][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.197595][ T8659] 8021q: adding VLAN 0 to HW filter on device team0
[   95.204184][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.206890][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.214220][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.216671][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.243011][ T8692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.326191][ T8692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.353464][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.399920][ T8692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.467182][ T8692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.493673][ T8659] veth0_vlan: entered promiscuous mode
[   95.498564][ T8659] veth1_vlan: entered promiscuous mode
[   95.513416][ T8659] veth0_macvtap: entered promiscuous mode
[   95.519666][ T8659] veth1_macvtap: entered promiscuous mode
[   95.533476][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.542568][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.549078][ T1195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.551919][ T1195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.560627][ T1195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.563854][ T1195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.575358][ T1195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.578366][   T72] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.594634][   T72] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.604656][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.643806][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.647959][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.663862][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.667076][ T8705] netlink: 9 bytes leftover after parsing attributes in process `syz.2.783'.
[   95.670318][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.673763][ T8705] gretap0: entered promiscuous mode
[   95.681183][ T8705] netlink: 5 bytes leftover after parsing attributes in process `syz.2.783'.
[   95.685327][ T8705] 0ªî{X¹¦: renamed from gretap0
[   95.686382][   T40] audit: type=1400 audit(1761317421.467:588): avc:  denied  { mounton } for  pid=8659 comm="syz-executor" path="/syzkaller.4hhTK0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   95.697353][   T40] audit: type=1400 audit(1761317421.487:589): avc:  denied  { mounton } for  pid=8659 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   95.698329][ T8705] 0ªî{X¹¦: left promiscuous mode
[   95.707067][ T8705] 0ªî{X¹¦: entered allmulticast mode
[   95.773502][ T8714] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   95.830472][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'.
[   95.880909][   T40] audit: type=1400 audit(1761317421.667:590): avc:  denied  { lock } for  pid=8726 comm="syz.2.790" path="socket:[26178]" dev="sockfs" ino=26178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   95.896226][ T8678] veth1_to_bond: left allmulticast mode
[   95.964969][ T8738] : entered promiscuous mode
[   95.994192][   T40] audit: type=1400 audit(1761317421.777:591): avc:  denied  { bind } for  pid=8742 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.000426][   T40] audit: type=1400 audit(1761317421.777:592): avc:  denied  { node_bind } for  pid=8742 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   96.002494][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'.
[   96.008516][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'.
[   96.172492][   T40] audit: type=1400 audit(1761317421.957:593): avc:  denied  { listen } for  pid=8758 comm="syz.4.800" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   96.457437][   T53] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   96.605837][   T53] usb 9-1: device descriptor read/64, error -71
[   96.656131][ T5942] Bluetooth: hci0: command tx timeout
[   96.843499][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'.
[   96.855754][   T53] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   96.968240][ T8804] net_ratelimit: 1 callbacks suppressed
[   96.968252][ T8804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.979374][ T8804] team0: No ports can be present during mode change
[   96.985222][ T1195] tipc: Resetting bearer <eth:team0>
[   96.998204][   T53] usb 9-1: device descriptor read/64, error -71
[   97.004503][   T40] audit: type=1400 audit(1761317422.787:594): avc:  denied  { execheap } for  pid=8807 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   97.032683][ T8810] QAT: Device 2 not found
[   97.089703][ T8819] overlay: ./file1 is not a directory
[   97.106025][   T53] usb usb9-port1: attempt power cycle
[   97.232377][ T8826] netlink: 'syz.1.825': attribute type 33 has an invalid length.
[   97.465868][   T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   97.487644][   T53] usb 9-1: device descriptor read/8, error -71
[   97.726122][   T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   97.746560][   T53] usb 9-1: device descriptor read/8, error -71
[   97.856193][   T53] usb usb9-port1: unable to enumerate USB device
[   98.071276][ T8837] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   98.121453][ T8843] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512
[   98.251211][ T8858] Mount JFS Failure: -5
[   98.252777][ T8858] jfs_mount failed w/return code = -5
[   98.270414][ T8858] syzkaller0: entered promiscuous mode
[   98.272241][ T8858] syzkaller0: entered allmulticast mode
[   98.725857][ T5942] Bluetooth: hci0: command tx timeout
[   99.031291][ T8903] netlink: 'syz.1.840': attribute type 2 has an invalid length.
[   99.033997][ T8903] netlink: 'syz.1.840': attribute type 2 has an invalid length.
[   99.250550][ T8925] __nla_validate_parse: 6 callbacks suppressed
[   99.250562][ T8925] netlink: 5 bytes leftover after parsing attributes in process `syz.1.845'.
[   99.255923][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'.
[   99.389241][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[   99.457762][   T40] kauditd_printk_skb: 2 callbacks suppressed
[   99.457774][   T40] audit: type=1400 audit(1761317425.237:597): avc:  denied  { ioctl } for  pid=8943 comm="syz.0.853" path="socket:[27040]" dev="sockfs" ino=27040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   99.528470][   T40] audit: type=1400 audit(1761317425.317:598): avc:  denied  { append } for  pid=8949 comm="syz.0.854" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   99.566630][ T8952] autofs: Bad value for 'fd'
[  100.246645][   T40] audit: type=1400 audit(1761317426.037:599): avc:  denied  { append } for  pid=8976 comm="syz.4.865" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  100.410417][ T8996] batman_adv: batadv0: Adding interface: gretap1
[  100.412374][ T8996] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.421188][ T8996] batman_adv: batadv0: Interface activated: gretap1
[  100.746375][ T9011] befs: (nullb0): No write support. Marking filesystem read-only
[  100.752643][ T9011] befs: (nullb0): invalid magic header
[  100.815877][ T5942] Bluetooth: hci0: command tx timeout
[  100.816058][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.893972][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.215810][   T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  101.385762][   T53] usb 7-1: Using ep0 maxpacket: 16
[  101.389598][   T53] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  101.393582][   T53] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  101.398520][   T53] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  101.403274][   T53] usb 7-1: config 0 interface 0 has no altsetting 0
[  101.408329][   T53] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  101.412021][   T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.415252][   T53] usb 7-1: Product: syz
[  101.416895][   T53] usb 7-1: Manufacturer: syz
[  101.418858][   T53] usb 7-1: SerialNumber: syz
[  101.428383][   T53] usb 7-1: config 0 descriptor??
[  101.512555][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'.
[  101.564939][ T9032] IPVS: set_ctl: invalid protocol: 94 172.30.0.1:20002
[  101.636692][   T53] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12
[  101.835415][   T40] audit: type=1400 audit(1761317427.617:600): avc:  denied  { write } for  pid=9026 comm="syz.2.876" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  101.894231][    T9] usb 7-1: USB disconnect, device number 11
[  101.982509][ T9035] input: syz0 as /devices/virtual/input/input13
[  102.238290][ T9054] IPVS: nq: FWM 3 0x00000003 - no destination available
[  102.240904][   T56] IPVS: starting estimator thread 0...
[  102.350249][ T9055] IPVS: using max 45 ests per chain, 108000 per kthread
[  102.455968][ T9088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.891'.
[  102.458785][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'.
[  102.482543][ T9080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.887'.
[  102.682640][   T40] audit: type=1400 audit(1761317428.467:601): avc:  denied  { ioctl } for  pid=9096 comm="syz.2.893" path="socket:[28998]" dev="sockfs" ino=28998 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  102.765777][ T6015] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  102.915783][ T6015] usb 5-1: Using ep0 maxpacket: 8
[  102.919897][ T6015] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.924515][ T6015] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.928631][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.931346][ T6015] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  102.935155][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.941193][ T6015] usb 5-1: config 0 descriptor??
[  103.350341][ T6015] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  103.352514][ T6015] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  103.354676][ T6015] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  103.356938][ T6015] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  103.359152][ T6015] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  103.361611][ T6015] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  103.474920][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.897'.
[  103.547308][ T9100] netlink: 'syz.0.894': attribute type 6 has an invalid length.
[  103.550971][   T40] audit: type=1400 audit(1761317429.337:602): avc:  denied  { write } for  pid=9123 comm="syz.2.899" path="socket:[26609]" dev="sockfs" ino=26609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  103.614694][ T9091] usb 5-1: USB disconnect, device number 5
[  104.038024][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'.
[  104.085851][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout
[  104.085921][   T54] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  104.090589][   T54] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  104.172937][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.905'.
[  104.366855][ T9146] bond1: Unable to set up delay as MII monitoring is disabled
[  104.370893][ T9146] bond1 (unregistering): Released all slaves
[  104.415858][ T9091] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  104.545575][ T9156] trusted_key: encrypted_key: insufficient parameters specified
[  104.550140][ T9156] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  104.555355][ T9156] netlink: 'syz.4.909': attribute type 4 has an invalid length.
[  104.566013][ T9091] usb 5-1: Using ep0 maxpacket: 32
[  104.570989][ T9157] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[  104.571191][ T9091] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  104.580039][ T9091] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  104.583193][ T9091] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  104.586898][ T9091] usb 5-1: Product: syz
[  104.588671][ T9091] usb 5-1: Manufacturer: syz
[  104.590558][ T9091] usb 5-1: SerialNumber: syz
[  104.597115][ T9091] usb 5-1: config 0 descriptor??
[  104.599211][ T9142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.717493][ T9177] vlan2: entered promiscuous mode
[  104.719863][ T9177] vlan2: entered allmulticast mode
[  104.721542][ T9177] hsr_slave_1: entered allmulticast mode
[  104.729679][ T9176] batadv_slave_1: entered promiscuous mode
[  104.733476][ T9176] batman_adv: batadv0: Adding interface: macsec1
[  104.735791][ T9176] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.744457][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.750093][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.753645][ T9176] batman_adv: batadv0: Interface activated: macsec1
[  104.789735][   T40] audit: type=1400 audit(1761317430.577:603): avc:  denied  { write } for  pid=9180 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  104.809741][ T9091] usb 5-1: USB disconnect, device number 6
[  105.309811][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  105.313996][ T9189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.920'.
[  105.318179][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'.
[  105.327687][ T9189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9189 comm=syz.2.920
[  105.337716][ T9191] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  105.458057][ T9203] netlink: 56 bytes leftover after parsing attributes in process `syz.1.927'.
[  105.684441][ T9219] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.730222][ T9223] netlink: 'syz.4.931': attribute type 4 has an invalid length.
[  105.732852][ T9223] netlink: 17 bytes leftover after parsing attributes in process `syz.4.931'.
[  105.751860][ T9219] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.784530][ T9217] kvm: MWAIT instruction emulated as NOP!
[  105.812250][ T9219] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.899567][ T9219] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.992178][ T1195] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.997666][   T40] audit: type=1400 audit(1761317431.787:604): avc:  denied  { bind } for  pid=9236 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  106.011468][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.014045][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.027929][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.162206][ T9243] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  106.165047][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  106.166141][   T54] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  106.168610][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.939'.
[  106.170204][   T54] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  106.175819][    C0] ------------[ cut here ]------------
[  106.175900][ T5942] Bluetooth: hci0: command tx timeout
[  106.176866][ T9243] geneve2: entered promiscuous mode
[  106.176893][ T9243] geneve2: entered allmulticast mode
[  106.178324][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci3
[  106.187100][    C0] WARNING: CPU: 0 PID: 5928 at kernel/workqueue.c:2257 __queue_work+0xd03/0x1160
[  106.190768][    C0] Modules linked in:
[  106.193988][    C0] CPU: 0 UID: 0 PID: 5928 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  106.197791][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  106.202009][    C0] RIP: 0010:__queue_work+0xd03/0x1160
[  106.204128][    C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 0f e2 38 00 90 0f 0b 90 e9 b4 f5 ff
[  106.210611][    C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082
[  106.212890][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8
[  106.215496][    C0] RDX: ffff88802b894900 RSI: ffffffff817b3ef5 RDI: 0000000000000001
[  106.218571][    C0] RBP: ffff888029868978 R08: 0000000000000001 R09: 0000000000000000
[  106.221085][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f
[  106.223649][    C0] R13: 0000000000000101 R14: ffffffff81843990 R15: ffff8880261e4978
[  106.226889][    C0] FS:  0000555585871500(0000) GS:ffff8880d6a0a000(0000) knlGS:0000000000000000
[  106.230579][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.233225][    C0] CR2: 0000000000000000 CR3: 0000000051684000 CR4: 0000000000352ef0
[  106.236468][    C0] Call Trace:
[  106.237865][    C0]  <IRQ>
[  106.239075][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  106.241447][    C0]  call_timer_fn+0x19a/0x620
[  106.243327][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  106.245414][    C0]  ? __run_timers+0x559/0x960
[  106.247308][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  106.249757][    C0]  __run_timers+0x569/0x960
[  106.251634][    C0]  ? __pfx___run_timers+0x10/0x10
[  106.253717][    C0]  run_timer_base+0x114/0x190
[  106.255630][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  106.257816][    C0]  ? rcu_is_watching+0x12/0xc0
[  106.259834][    C0]  run_timer_softirq+0x1a/0x40
[  106.261852][    C0]  handle_softirqs+0x219/0x8e0
[  106.263869][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  106.266043][    C0]  __irq_exit_rcu+0x109/0x170
[  106.267981][    C0]  irq_exit_rcu+0x9/0x30
[  106.269794][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  106.272097][    C0]  </IRQ>
[  106.273352][    C0]  <TASK>
[  106.274592][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.277056][    C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50
[  106.279582][    C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 1a e1 35 f6 48 89 df e8 22 3f 36 f6 e8 6d 09 62 f6 fb bf 01 00 00 00 <e8> 52 3e 26 f6 65 8b 05 8b 5d 3e 08 85 c0 74 06 5b c3 cc cc cc cc
[  106.286635][    C0] RSP: 0018:ffffc90003b17970 EFLAGS: 00000206
[  106.288613][    C0] RAX: 00000000001515b1 RBX: ffffffff8e00c080 RCX: ffffffff81c50aff
[  106.291081][    C0] RDX: 0000000000000000 RSI: ffffffff8da2a268 RDI: 0000000000000001
[  106.293558][    C0] RBP: 1ffff92000762f3f R08: 0000000000000001 R09: 0000000000000001
[  106.295964][    C0] R10: ffffffff9081f4d7 R11: 0000000000000001 R12: ffff88803060c890
[  106.298418][    C0] R13: ffff88802cdd0000 R14: ffff88802cdd0000 R15: dffffc0000000000
[  106.300841][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  106.302699][    C0]  release_task+0xe0d/0x1ca0
[  106.304140][    C0]  ? __pfx_release_task+0x10/0x10
[  106.305696][    C0]  ? lock_acquire+0x179/0x350
[  106.307180][    C0]  ? rcu_is_watching+0x12/0xc0
[  106.308641][    C0]  wait_consider_task+0x1756/0x3eb0
[  106.310252][    C0]  ? __pfx_wait_consider_task+0x10/0x10
[  106.311965][    C0]  __do_wait+0x1e2/0x890
[  106.313282][    C0]  ? do_wait+0x1e3/0x590
[  106.314564][    C0]  do_wait+0x21d/0x590
[  106.315825][    C0]  kernel_wait4+0x16b/0x280
[  106.317184][    C0]  ? __pfx_kernel_wait4+0x10/0x10
[  106.318725][    C0]  ? __pfx_child_wait_callback+0x10/0x10
[  106.320499][    C0]  __do_sys_wait4+0x15d/0x170
[  106.321912][    C0]  ? __pfx___do_sys_wait4+0x10/0x10
[  106.323513][    C0]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[  106.325310][    C0]  do_syscall_64+0xcd/0xfa0
[  106.326697][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.328516][    C0] RIP: 0033:0x7fd2b4f85117
[  106.329824][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44
[  106.335530][    C0] RSP: 002b:00007fff17d8b090 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  106.338036][    C0] RAX: ffffffffffffffda RBX: 000000000000035c RCX: 00007fd2b4f85117
[  106.340466][    C0] RDX: 0000000040000001 RSI: 00007fff17d8b0fc RDI: 00000000ffffffff
[  106.342833][    C0] RBP: 00007fff17d8b0fc R08: 0000000000000000 R09: 0000000000000000
[  106.345176][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  106.347505][    C0] R13: 00000000000927c0 R14: 0000000000019e4a R15: 00007fff17d8b150
[  106.350005][    C0]  </TASK>
[  106.351000][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  106.353276][    C0] CPU: 0 UID: 0 PID: 5928 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  106.356199][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  106.359559][    C0] Call Trace:
[  106.360634][    C0]  <IRQ>
[  106.361556][    C0]  dump_stack_lvl+0x3d/0x1f0
[  106.363018][    C0]  vpanic+0x640/0x6f0
[  106.364304][    C0]  ? __queue_work+0xd03/0x1160
[  106.365807][    C0]  panic+0xca/0xd0
[  106.366967][    C0]  ? __pfx_panic+0x10/0x10
[  106.368362][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  106.370004][    C0]  check_panic_on_warn+0xab/0xb0
[  106.371799][    C0]  __warn+0xf6/0x3c0
[  106.373187][    C0]  ? __queue_work+0xd03/0x1160
[  106.374871][    C0]  report_bug+0x3c3/0x580
[  106.376396][    C0]  ? __queue_work+0xd03/0x1160
[  106.378033][    C0]  handle_bug+0x184/0x210
[  106.379581][    C0]  exc_invalid_op+0x17/0x50
[  106.381260][    C0]  asm_exc_invalid_op+0x1a/0x20
[  106.382982][    C0] RIP: 0010:__queue_work+0xd03/0x1160
[  106.384824][    C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 0f e2 38 00 90 0f 0b 90 e9 b4 f5 ff
[  106.391294][    C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082
[  106.393294][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8
[  106.396146][    C0] RDX: ffff88802b894900 RSI: ffffffff817b3ef5 RDI: 0000000000000001
[  106.399099][    C0] RBP: ffff888029868978 R08: 0000000000000001 R09: 0000000000000000
[  106.401771][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f
[  106.404574][    C0] R13: 0000000000000101 R14: ffffffff81843990 R15: ffff8880261e4978
[  106.407389][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  106.409373][    C0]  ? __warn_printk+0x198/0x350
[  106.411138][    C0]  ? __warn_printk+0x1a5/0x350
[  106.412882][    C0]  ? __queue_work+0xd02/0x1160
[  106.414487][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  106.416589][    C0]  call_timer_fn+0x19a/0x620
[  106.418219][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  106.420001][    C0]  ? __run_timers+0x559/0x960
[  106.421604][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  106.423457][    C0]  __run_timers+0x569/0x960
[  106.424916][    C0]  ? __pfx___run_timers+0x10/0x10
[  106.426519][    C0]  run_timer_base+0x114/0x190
[  106.428020][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  106.429687][    C0]  ? rcu_is_watching+0x12/0xc0
[  106.431211][    C0]  run_timer_softirq+0x1a/0x40
[  106.432733][    C0]  handle_softirqs+0x219/0x8e0
[  106.434255][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  106.435934][    C0]  __irq_exit_rcu+0x109/0x170
[  106.437425][    C0]  irq_exit_rcu+0x9/0x30
[  106.438983][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  106.441041][    C0]  </IRQ>
[  106.442010][    C0]  <TASK>
[  106.443056][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.445086][    C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50
[  106.447114][    C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 1a e1 35 f6 48 89 df e8 22 3f 36 f6 e8 6d 09 62 f6 fb bf 01 00 00 00 <e8> 52 3e 26 f6 65 8b 05 8b 5d 3e 08 85 c0 74 06 5b c3 cc cc cc cc
[  106.454023][    C0] RSP: 0018:ffffc90003b17970 EFLAGS: 00000206
[  106.456042][    C0] RAX: 00000000001515b1 RBX: ffffffff8e00c080 RCX: ffffffff81c50aff
[  106.458825][    C0] RDX: 0000000000000000 RSI: ffffffff8da2a268 RDI: 0000000000000001
[  106.461772][    C0] RBP: 1ffff92000762f3f R08: 0000000000000001 R09: 0000000000000001
[  106.464558][    C0] R10: ffffffff9081f4d7 R11: 0000000000000001 R12: ffff88803060c890
[  106.467324][    C0] R13: ffff88802cdd0000 R14: ffff88802cdd0000 R15: dffffc0000000000
[  106.470090][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  106.472185][    C0]  release_task+0xe0d/0x1ca0
[  106.474015][    C0]  ? __pfx_release_task+0x10/0x10
[  106.475819][    C0]  ? lock_acquire+0x179/0x350
[  106.477443][    C0]  ? rcu_is_watching+0x12/0xc0
[  106.479180][    C0]  wait_consider_task+0x1756/0x3eb0
[  106.481143][    C0]  ? __pfx_wait_consider_task+0x10/0x10
[  106.482973][    C0]  __do_wait+0x1e2/0x890
[  106.484442][    C0]  ? do_wait+0x1e3/0x590
[  106.486080][    C0]  do_wait+0x21d/0x590
[  106.487485][    C0]  kernel_wait4+0x16b/0x280
[  106.489088][    C0]  ? __pfx_kernel_wait4+0x10/0x10
[  106.490886][    C0]  ? __pfx_child_wait_callback+0x10/0x10
[  106.492985][    C0]  __do_sys_wait4+0x15d/0x170
[  106.494590][    C0]  ? __pfx___do_sys_wait4+0x10/0x10
[  106.496299][    C0]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[  106.498188][    C0]  do_syscall_64+0xcd/0xfa0
[  106.499645][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.501523][    C0] RIP: 0033:0x7fd2b4f85117
[  106.502947][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44
[  106.509008][    C0] RSP: 002b:00007fff17d8b090 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  106.511600][    C0] RAX: ffffffffffffffda RBX: 000000000000035c RCX: 00007fd2b4f85117
[  106.514003][    C0] RDX: 0000000040000001 RSI: 00007fff17d8b0fc RDI: 00000000ffffffff
[  106.516423][    C0] RBP: 00007fff17d8b0fc R08: 0000000000000000 R09: 0000000000000000
[  106.518803][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  106.521191][    C0] R13: 00000000000927c0 R14: 0000000000019e4a R15: 00007fff17d8b150
[  106.523620][    C0]  </TASK>
[  106.525259][    C0] Kernel Offset: disabled
[  106.526592][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:50:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85294ea5 RDI=ffffffff9add6700 RBP=ffffffff9add66c0 RSP=ffffc90000007540
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000065 R14=ffffffff9add66c0 R15=ffffffff85294e40
RIP=ffffffff85294ecf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555585871500 ffffffff 00c00000
GS =0000 ffff8880d6a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000051684000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff17d8b0c0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2b5012fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2b5012fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2b5012fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2b5012ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2b501307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2b501315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88806a4426e0 RCX=ffffffff81b0fd91 RDX=ffff8880246a0000
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900033874e8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=dffffc0000000000 R13=ffffed100d4884dd R14=0000000000000001 R15=0000000000000000
RIP=ffffffff81bd0412 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6b0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa224d17d60 CR3=0000000024b16000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2241b76c3 00007fa2241b76c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdccebe90 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593e0cc1b 0000555593e08410
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593df9849 0000555593df8fd0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16498828100001c0 8010000690c08004 060140be01000014 0806020104ca0004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 012a100006808080 10000004060140be 0010000fffffffff ffff040100001608
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606017cc607fe04 0001820800001000 01c7100008164988 28100001c0801000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0690c08004060140 be01000014080602 0104ca0004000208 0001800401c71000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0814498c00726574 73696765722f6373 696d5f746d666e69 622f73662f737973
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88806a4426c0 RCX=ffffffff81b0fd91 RDX=ffff888024452480
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000779f990
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=dffffc0000000000 R13=ffffed100d4884d9 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff81bd0a50 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b906500 ffffffff 00c00000
GS =0000 ffff8880d6c0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b321ebff8 CR3=000000005d8e1000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bf613 ffffffff812bf613
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bf613 ffffffff812bf613
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff812bf613
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ccd812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ccd812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ccd812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ccd812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ccd81307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ccd81315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f00080100000000 0000000500000000 0000000007001400 0000010001000880
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88806a73b580 RCX=ffffffff81b114e3 RDX=ffff88801da84900
RSI=ffffffff81b114bd RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157ba0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e5e
R12=1ffff9200002af7c R13=0000000000000001 R14=0000000000000001 R15=ffffed100d4e76b1
RIP=ffffffff81b114bf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555585871808 CR3=00000000576f2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f612fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f612fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f612fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f612ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f61307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f61315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f7b74a8 00007f439f7b74a0 00007f439f7b7498 00007f439f7b7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43a031d100 00007f439f7b7460 00007f439f7b0004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f439f7b74b8 00007f439f7b74b0 00007f439f7b74a8 00007f439f7b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000