last executing test programs:

3m59.637018067s ago: executing program 2 (id=61):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/99, 0x63)
ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000000c0)={0x1729, 0x3, 0x0, 0x0, 0x6, 0x2, 0x0, &(0x7f0000000080)=[{0x16, 0xfe, 0x40}, {0x11, 0x1ff, 0xc}]})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100))
socket$inet_udp(0x2, 0x2, 0x0)

3m59.557062016s ago: executing program 2 (id=63):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1=0xe0000300, @local}, 0x8)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000340)=""/215)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x7fff}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x2, 0x2000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x4, 0x81}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xd000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7c, 0x7, 0x2, 0xdb, 0x83}, {0x1000, 0x50000, 0xc, 0x70, 0xb1, 0x8, 0x21, 0xa0, 0x80, 0x3, 0x2, 0x10}, {0x41000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x4, 0x4, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x1000}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xaffe, 0x4, 0x400000080, 0xfff]})
write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x1, 0x0, @empty, 0x6}, 0x1c)
write$P9_RSTATu(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="8f6d0000"], 0x18f)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0)

3m59.27972636s ago: executing program 2 (id=67):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200120000000000000000004c001400636d61632861df0e35040f8a3d1caa4e128609590a65732900"/259], 0x13c}}, 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\xd8\x8b\x13\x9ff3/\xb8\xe5xC \x05~\vYJS\xf9FQn\xa8\xfe\xb4\xe0\x9d\x9fd\xe4\x92'}}]}})

3m59.279190531s ago: executing program 2 (id=68):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) (async, rerun: 64)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (rerun: 64)
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)
unlink(&(0x7f0000000340)='./file0\x00') (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0}, &(0x7f00000002c0)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r4, 0x25, 0x0, @void}, 0x10) (async)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0)

3m58.987774698s ago: executing program 2 (id=76):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100df4d00000000000000000200e6000000000000000000140011002261746164765f736c6176655f300000"], 0x30}}, 0x0)

3m58.478422621s ago: executing program 2 (id=82):
set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014080000b7030000000000008500000000000000040900000000000055090108000000009500000000000000bf910000000000e9b6020000000000008500000085000000b7000000000000004cc6c3643c460fd7de3c6e5480c67f95000000000000006e0e25a58ad4fbc899f79d27cabee7c857943cc6a44f2efdb12ec24249e7962452e0321eb52724e48d10c6c5d5e0eb7ae325c62e9a000a46d21bae33db888bb74b3559b2ee3aa76bb58890ad6b8608aaf56dad3386d97c51cde89ee9b15c2e0429354b416b054531fe7a6e5da688d295bedc129bdccd59f3749e2ff6f2"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5}, 0x94)

3m58.448323332s ago: executing program 32 (id=82):
set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014080000b7030000000000008500000000000000040900000000000055090108000000009500000000000000bf910000000000e9b6020000000000008500000085000000b7000000000000004cc6c3643c460fd7de3c6e5480c67f95000000000000006e0e25a58ad4fbc899f79d27cabee7c857943cc6a44f2efdb12ec24249e7962452e0321eb52724e48d10c6c5d5e0eb7ae325c62e9a000a46d21bae33db888bb74b3559b2ee3aa76bb58890ad6b8608aaf56dad3386d97c51cde89ee9b15c2e0429354b416b054531fe7a6e5da688d295bedc129bdccd59f3749e2ff6f2"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5}, 0x94)

3m27.898483673s ago: executing program 0 (id=497):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x11675110, 0x6, 0x1, 'queue0\x00', 0x9})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000016c0)={0x0, 0x9, 0x8, {0x1, 0x5}, 0x5, 0x2})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000013, 0x9, 0xfffffffd}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

3m27.849075468s ago: executing program 0 (id=499):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000100)={0xc, r1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0xffffffff, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6f919b77})

3m27.778460165s ago: executing program 0 (id=503):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x120, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0xb, 0x4, 0x1, 0x5, 0x112, 0x67, 0x0, 0x3, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, {[@ra={0x94, 0x4}, @end, @generic={0x83, 0xb, "34a56951fdcb7b1863"}, @ra={0x94, 0x4, 0x1}, @noop]}}, {0x1e, 0x8, 0x0, @rand_addr=0x64010101, "c4f4eac192c4c3c55e8ed52bea86e89a6c87bed382f716774916dd625b28d7a1a1d52dd6214a2720716552db6374d281ca7b53d3aa53a8613b50f65f16482ec864b97e37e923a7d457d028c786f04ec72622d5dbce9a59357d11ad944f7d891f0b7ec12352caea28634e10deaefd3db960bcf63a004c984a6ad6ce837ee7b33d71a8589aefd8d0fbcd7398a303a01c3f703d0215f3e38c4d6e79adde523806fdc422f0860a400f32120104c47b388218bac0effcc137ba64f7a0a8bedcdaa0839020234423790c421d69dbec9cb0adc026957d828a521ceba763fb903cfb"}}}}}, 0x0)
syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

3m27.729829074s ago: executing program 0 (id=505):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x7fff, 0x3d, 0x400, 0x5, 0x19c00b0})
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x4000004)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x100000)

3m27.645463167s ago: executing program 0 (id=507):
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
modify_ldt$write(0x1, &(0x7f00000001c0)={0xfa, 0xffffffffdfffe7ff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa})
r2 = semget$private(0x0, 0x3, 0x38)
semtimedop(r2, &(0x7f0000000140), 0x0, &(0x7f0000000180)={0x77359400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000001900)='./file0\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)

3m26.747634581s ago: executing program 0 (id=520):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0))
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000380)="6df68681688b909b16b5b46efe761143df1a7280f9ffc0ae934a336a58326ece6f8cc1d6747925c816e6d0d21bb2fc590072c37370b443b1cc8384b52cc7a8bb663ba19a2ca1965be029cc95d94c88a288700534fece055056bc481cd5c3f2ad7572ca5f382dfcb1df7f665d6ac97a9cfa316c4269a584a85756d0f1e86407d7f5c7cb157722eed44f6a9cfec3d3c1c8a5bab34f8c79e8749caedd907ca23c04b9c8a99e7b072cb44fcb4c44d224634932b8b95a5e44b20b8e74115a373504af9f37e92c26729e9e8505b1b844a4b52b1ca0c1b28c523c069c", 0xd9}, {&(0x7f0000000480)="e911c2cafdc7274760b7939515ecded49ff84dfbe15f0bd90709108ae67ab80d69bbe8bf90a8d398eee44d87ea", 0x2d}, {&(0x7f00000004c0)="4be2689ed54b7e8d9c63ee1e228e6c68134266ec056cfb8ebe7b460de693b875ad9f2a52a504ee251a6221cd887ead674c36f6bd51cd51218681bf0cd892a24949f0858a9c2d531ce3baca6973057c5ee011b409c33079cefcfe7cf55e4bb59b52411833769af524ce74a2dc09316dfe636f7c990399c2c2fb7fe79db367d25cac7269e9875bc50e61d9ad6432572c295e4f7890a788ad26793e1061c453954106b2904cf9145401a68f760284", 0xad}], 0x3)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x120, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0xec, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x95}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8a2c}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x6}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r1, &(0x7f0000000040), 0xc) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000380)="6df68681688b909b16b5b46efe761143df1a7280f9ffc0ae934a336a58326ece6f8cc1d6747925c816e6d0d21bb2fc590072c37370b443b1cc8384b52cc7a8bb663ba19a2ca1965be029cc95d94c88a288700534fece055056bc481cd5c3f2ad7572ca5f382dfcb1df7f665d6ac97a9cfa316c4269a584a85756d0f1e86407d7f5c7cb157722eed44f6a9cfec3d3c1c8a5bab34f8c79e8749caedd907ca23c04b9c8a99e7b072cb44fcb4c44d224634932b8b95a5e44b20b8e74115a373504af9f37e92c26729e9e8505b1b844a4b52b1ca0c1b28c523c069c", 0xd9}, {&(0x7f0000000480)="e911c2cafdc7274760b7939515ecded49ff84dfbe15f0bd90709108ae67ab80d69bbe8bf90a8d398eee44d87ea", 0x2d}, {&(0x7f00000004c0)="4be2689ed54b7e8d9c63ee1e228e6c68134266ec056cfb8ebe7b460de693b875ad9f2a52a504ee251a6221cd887ead674c36f6bd51cd51218681bf0cd892a24949f0858a9c2d531ce3baca6973057c5ee011b409c33079cefcfe7cf55e4bb59b52411833769af524ce74a2dc09316dfe636f7c990399c2c2fb7fe79db367d25cac7269e9875bc50e61d9ad6432572c295e4f7890a788ad26793e1061c453954106b2904cf9145401a68f760284", 0xad}], 0x3) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x120, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0xec, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x95}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8a2c}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x6}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

3m11.715727575s ago: executing program 33 (id=520):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0))
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000380)="6df68681688b909b16b5b46efe761143df1a7280f9ffc0ae934a336a58326ece6f8cc1d6747925c816e6d0d21bb2fc590072c37370b443b1cc8384b52cc7a8bb663ba19a2ca1965be029cc95d94c88a288700534fece055056bc481cd5c3f2ad7572ca5f382dfcb1df7f665d6ac97a9cfa316c4269a584a85756d0f1e86407d7f5c7cb157722eed44f6a9cfec3d3c1c8a5bab34f8c79e8749caedd907ca23c04b9c8a99e7b072cb44fcb4c44d224634932b8b95a5e44b20b8e74115a373504af9f37e92c26729e9e8505b1b844a4b52b1ca0c1b28c523c069c", 0xd9}, {&(0x7f0000000480)="e911c2cafdc7274760b7939515ecded49ff84dfbe15f0bd90709108ae67ab80d69bbe8bf90a8d398eee44d87ea", 0x2d}, {&(0x7f00000004c0)="4be2689ed54b7e8d9c63ee1e228e6c68134266ec056cfb8ebe7b460de693b875ad9f2a52a504ee251a6221cd887ead674c36f6bd51cd51218681bf0cd892a24949f0858a9c2d531ce3baca6973057c5ee011b409c33079cefcfe7cf55e4bb59b52411833769af524ce74a2dc09316dfe636f7c990399c2c2fb7fe79db367d25cac7269e9875bc50e61d9ad6432572c295e4f7890a788ad26793e1061c453954106b2904cf9145401a68f760284", 0xad}], 0x3)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x120, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0xec, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x95}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8a2c}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x6}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r1, &(0x7f0000000040), 0xc) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000380)="6df68681688b909b16b5b46efe761143df1a7280f9ffc0ae934a336a58326ece6f8cc1d6747925c816e6d0d21bb2fc590072c37370b443b1cc8384b52cc7a8bb663ba19a2ca1965be029cc95d94c88a288700534fece055056bc481cd5c3f2ad7572ca5f382dfcb1df7f665d6ac97a9cfa316c4269a584a85756d0f1e86407d7f5c7cb157722eed44f6a9cfec3d3c1c8a5bab34f8c79e8749caedd907ca23c04b9c8a99e7b072cb44fcb4c44d224634932b8b95a5e44b20b8e74115a373504af9f37e92c26729e9e8505b1b844a4b52b1ca0c1b28c523c069c", 0xd9}, {&(0x7f0000000480)="e911c2cafdc7274760b7939515ecded49ff84dfbe15f0bd90709108ae67ab80d69bbe8bf90a8d398eee44d87ea", 0x2d}, {&(0x7f00000004c0)="4be2689ed54b7e8d9c63ee1e228e6c68134266ec056cfb8ebe7b460de693b875ad9f2a52a504ee251a6221cd887ead674c36f6bd51cd51218681bf0cd892a24949f0858a9c2d531ce3baca6973057c5ee011b409c33079cefcfe7cf55e4bb59b52411833769af524ce74a2dc09316dfe636f7c990399c2c2fb7fe79db367d25cac7269e9875bc50e61d9ad6432572c295e4f7890a788ad26793e1061c453954106b2904cf9145401a68f760284", 0xad}], 0x3) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x120, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0xec, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x95}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8a2c}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x6}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

2m5.809064995s ago: executing program 4 (id=1496):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDMKTONE(r0, 0x4b30, 0x5e000)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m5.78744152s ago: executing program 4 (id=1499):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$CDROMEJECT(r3, 0x5309)
ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, 0x0)
write$sequencer(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="81040808f9ffffff940f32f0411976ec9402ff"], 0x20)

2m5.43903816s ago: executing program 4 (id=1503):
r0 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000100)=0xc)
mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x35, 0x2c]}}}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x70]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x65, 0x25, 0x2d, 0x38, 0x74]}}, {@gid={'gid', 0x3d, r0}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'grpquota_block_hardlimit'}}, {@fowner_lt={'fowner<', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x62, 0x35, 0x64, 0x38, 0x30, 0x36, 0x33], 0x2d, [0x65, 0x33, 0x35, 0x63], 0x2d, [0x32, 0x62, 0x63, 0x38], 0x2d, [0x35, 0x0, 0x34, 0x62], 0x2d, [0x36, 0x37, 0x35, 0x36, 0x34, 0x33, 0x62, 0x38]}}}, {@euid_eq={'euid', 0x3d, r1}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '\\$}!,\\/'}}]})

2m5.421256003s ago: executing program 4 (id=1505):
socket$inet6(0xa, 0xa, 0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r0, 0x5b02, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x45300, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0000000a000000080000000100000f0500000001000000000000000300000000000000000000002e00"], 0x0, 0x3a, 0x0, 0x6}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x98d046, 0x0)
r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x5, 0x0)
lstat(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d000000673a7ea7eb3d9420041647f04ba6323237ed73746169633a302c000a0b4265a46ada641446b8e1bfad5c12764f"])

2m5.228721065s ago: executing program 4 (id=1507):
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x18)
r1 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7})
fcntl$setlease(r0, 0x400, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m4.936779076s ago: executing program 4 (id=1510):
pselect6(0x0, 0x0, &(0x7f0000000080)={0x0, 0x107fffffff, 0x2, 0x52a3, 0xfd, 0x5, 0xf, 0x4}, 0x0, &(0x7f0000000180), 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2m4.893799799s ago: executing program 34 (id=1510):
pselect6(0x0, 0x0, &(0x7f0000000080)={0x0, 0x107fffffff, 0x2, 0x52a3, 0xfd, 0x5, 0xf, 0x4}, 0x0, &(0x7f0000000180), 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3.068740463s ago: executing program 5 (id=3487):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_INPUT2(r1, &(0x7f00000001c0)={0xc, {0x45, "cac4e25bf78bcaa646db51d8d5b05c1d0db4f1aafef4b7a9350ab41d290bc1cc9126a0463f7fba49a327c9b3c6738639c631b8afaaf0c0d871830332790f6c33e16b93a560"}}, 0x4b)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$LOOP_SET_DIRECT_IO(r2, 0xc0001502, 0x650a)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b14, 0x0)
r5 = socket(0x8000000010, 0x2, 0x0)
write(r5, &(0x7f0000000300)="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", 0xfc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r7, 0xb1d, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = syz_pidfd_open(r11, 0x0)
ioctl$EXT4_IOC_MIGRATE(r12, 0xff09)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000080)="2ec0c3fb66b9b508000066b80000000066ba000000000f3066b8060000000f23d80f21f86635c00000100f23f80f013c0fc77c003e660ff47b00baf80c66b874ac4c8366efbafc0cb80200ef0f20c40fa7c0660f005607", 0x57}], 0x1, 0x41, 0x0, 0x0)
r13 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r13, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r13, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2.585743811s ago: executing program 1 (id=3496):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x4010080)
r1 = gettid()
prctl$PR_SCHED_CORE(0x53564d41, 0x0, r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

2.418621488s ago: executing program 1 (id=3498):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
close(0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'macsec0\x00', {0x2, 0x4e25, @multicast1}})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async)
ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) (async)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f00000000c0)=r0, 0x4) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2)
readv(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1)
ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000300)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x100, 0x10000, {0x0, 0xea60}, {0x1, 0x1, 0xa, 0xb2, 0x0, 0x3, "62aa962a"}, 0x2, 0x1, {0x0}, 0x3})
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000820000/0x400000)=nil)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)

2.308687309s ago: executing program 1 (id=3499):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x20048880)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) (async)
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb2, 0x10, 0xe, 0x20002f7}) (async)
r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb2, 0x10, 0xe, 0x20002f7})
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0)
ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000001e"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
r8 = dup(r0)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd86)
ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, 0x0) (async)
ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2.138441913s ago: executing program 1 (id=3500):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x200200, 0x0, 0x32b7c5, 0x200000000000})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc59}, 0xfffffffffffffe0c)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000740)=""/219, 0xdb}], 0x2}, 0x100}], 0x1, 0x300, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000)

1.718159453s ago: executing program 1 (id=3503):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x80}, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=<r2=>0x0)
statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file4\x00', 0x2000, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='./file4\x00', &(0x7f0000000100), 0x4100000, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ttyS3\x00'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user}]}})
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20)
r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file4\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.638863086s ago: executing program 3 (id=3505):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x3})
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x6, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0x0, 0x20000000006}, {0x2, 0x5, 0x5, 0x1, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x5, 0x4, 0x3, 0x80000000000}], 0xf87})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x79, 0x59, ""/89}, &(0x7f00000000c0)=0x79, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r7, 0x12)
sched_setscheduler(r7, 0x0, &(0x7f00000001c0)=0x9b7)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000440))
inotify_init1(0x800)

1.48594205s ago: executing program 3 (id=3508):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)={0x28, 0x25, 0x1, 0x70bd29, 0x25dfdbfb, {0xb}, [@nested={0x14, 0x138, 0x0, 0x1, [@nested={0x10, 0x45, 0x0, 0x1, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x6}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400400d}, 0x20000044) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000840)=@caif=@rfm={0x25, 0x7, "1267f56de26f319c44246119c560838f"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="270502001a1114000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000021", 0x4c}, {&(0x7f0000001a40)="e969b9ca2a9a2732559840ec1ed4bfe607b21531c4e677ffe27da0a9157d62acd6f8707097e994ef79268390a8b1c8bec6d2edd3a30819156fd7b6cf8d02b3c128b0e38807c6c0dbeece245c58a6ece453ceeda1ed3d7e225991e9ce06cae9d4fc7ea2e87adc53e8c9e0d64ff86f856586470783cf57a008a283be0ca07aec9f7bd8063dd7b8121d0c00824cba8bc03683a6392ce744fe7ac78840631e5fd77a717af96e35076ee0987bfb82b62907185d36f8bb0d6e226fb0f927f5f6f59fb26c714b75e2bf7575e7a62e71a5b4292cee2f156834b50d9b6bb4c272fc03a904a13177541045210604c2a0177c84ebcfe6cd9f34936aa1c98bdbc9ebc5c08ce2b04051f73e71b7205895e2042f8f1aa7486393595db0d13e599d1dccce6fec21c3e03543a4a62d57d9a0312d9637370f1efe6d711d09eb11d8fd7e234110cb876dda29d57b80a2c6b185fee558bb46dac5a9d59ff2ac8b07346a280a05f150f1084566ae2b8057b433ceaa7ae566bf6627e9a82fc18bf82d45702353211325cd505185a5c19d9b9249a67e2d8ba34c9e05040bbdacf74a45b4d7fc0897893476b5e4fe88d652287b9c462d26c9553cda36fe1e2bc48c5833ba044423b40b451cbf7d2b0ff9772e1949887bfa0f4b016d13b2336e74d914efab02c98eb19f6d4d1a7bf03be4a02925e6b888109cb60645af050bf53a3425370d77420caa3581dd2a8f7e270c68d95a359e6eb97594ea1b6b24884ce0336630e3638ceaa272badff0fe4b7ca515725161f031d95e0460074d63b8708ff6dea2a1a31bd541468bbb8d770f131f9afbf73af9e0bb2326a52beab528e239762e8fd3626de064ed3b30447e73003a19dee1a0745746dfc5d757a41e762b94a27f3a32d377bff74812955e97593f19567b7153c900cc04e9d2ec9f3e2529aedab30a6900760b2f3f65744fe88d12836dd23813d83455af836d8845a286ebc55475820d861433f1b22a3958d9e799081874211390543c933a71cc64c700fb66997fd19d08941c74fbea7c4519f00a2787f621ef2e4f841971d5f1f453a7d87fe31af0ad271ba66f743077bfa97341fda914bdb208faf836b24ddf13234b8b952ed88a535d9465af1446578db7996b0c56a84ed712d5329fcc9ea80e05667f32b3b0dd0524632edc07090139c4b8c9b6b0fde26442ba97592d1572882caca27dc16387d203e5a57caf08556b3cac6654f1978624b5669d6f7e958394d7d8d0b00b57377ebd4025b6cbe69b38d9621ad1c1fa59da63010ef72e573194cc0977490467536fd1ed41dcd0713fc6c813a1a951a1648f68e5cec776192b1e24887fbe0f7506a33ce33a46007576cdab50b16c1d09a850b700fa9ab01951230108a8250045ba9237e47550b807c21eea6cc198022bc9781b3520c0c19af08150d79c0271cdabf9ec36e60d4ee88ad5f2dc7e2ba85eb637db4ee4fcac4e6776ded538cd55dccfc2f62cae047ccf0d5c3f324403c4482112cf57a3b0b0815a09c0250e4420455350a0a086d10c1ab823ff414b1f5cd997968e35ffe5e34db90645baf2fddbe70a5aa64e65ccdb0a40020754b90b571c982641bd5a3a66cb747af4888d9aba217be9b0a0080f295e8582e0547ee5235cb927af979e2a16d334fef04af110af639bfcf538435483e9e4a9a3df281245fca24d4f8d106881fb5cf4eeaa4c17d7e074c6fd484abc02a65daa9125c2999cf0157afb83c3ff1e57199543d6e454eb583c7cc877f742ad4678e97d4022ffa07299839203e85f23a4a70044131a9b4b0d95caee2665602536e9d80f635b09d4aae1842d41e66a7bd62d2d5bdea2d2a02b6b3c4c0f3f9726e5a7405d77dd504277f05f1733bfe8764833d45d3a99de8396e529a7eccb9f9b2dc674f9cb4d963b423581a024b9f8a7fe0e0ccbd8c12f3a4c87beb135a573155b0c627986b79c12999a13559f85181aba1e634d92eae7e3e170f6bba66c6e81be582c135f94e34208f98dbee33fd5aed16d8be95f8732960062dd8ade74a633170df8b7b900a10e92c8deb78d92716af5721056465cea75cccea533f509c071d76798a155ff3dae5d04292c9ab7c951863a358262d6cef0d46ed3bb20398fe6b990f3f75da8a64e45329f7dd66e2699dfdb44f2f4892667f4e16b70d4dfb9d0636b7013e5bc6b3cb09cfdafbdeddb7a51540e618e226a7edb4d1d676888e7dff2a3d87d0d4bc0dc497b233d46a9f0b07808a849069dde96fc0928448d8478f038671d411ed39b094c0e015fc8ac8d398bae174c96cdbe63e63b21b8873207e031d301e849036a8df084620c963151c27dd1ea37b2540d78e15c913f03a301e727175d959295af3005f43f4d5e571cefdbc7185122a3b52996599a2e45b44cef66f56dcc347fe30b2e97f0138ac358f3ec1d52b3aab7dc8918ed6f2d1d5a6e7caaf779650f51b4060ef310638d2f6f8be6515b202fefb95f2947b5ca35aae027d7081a8a0148f92baafc1e6a5a4b50621ab8803ee86e580aea4128d8c12af1107e897f231b06ce22094131f8813d61b42c575a1b60fc944cb1769a45fa79f082d8fbe5342327bf5b945648a02a67a63ef987e6af6261361818c5439a34895737286285e96b053e512f809c2b2ceca71d9838ab305bba1fa89e17fd27c528d2c32364bd7ba7a0a269446a69639ff1aedd0d5f2fe08a1ca495f92dd0714c2e583669bd2f6215029684694174c5ffec194a1afc74972e701945162f9b2b19fef249b650c1e49fb8dff75f17fabfe73d5b4afd72c0458e63b93093ed4925b8fed9b3004f97d86a46ca76232c420eb23575289a0d450c4ff735967604aeb7cffcb12de41265bab51332c259b70598090a58b29562f17a1133defa8d8886fcdf007f6870126f3a3f8a7cead2c8f9b56b3294e6828fdfc580067c9bf1af74270142ae381bc5f9b01a9eabf150dba335fdc4cb76bc0d7d470af11893c9671169dab94d60ceec7e435808b07c4ab7431a095b2236136c557a73926c32339af1710be6bc0a89094b90edc7f7cf459cc7ba15a1a2231732c54c9d121f7eb661d2d1ec86d1a081e6dc3d2b4af9ed101d6b161b3dded03f11063500f399928e9185014978dd51b1373d926ac97a6554178f63d8a6377ef8ce9c58b15d1bc53380d081f1ef1e8d1eff5b0a48f8f1aab4f5fadf5709c05684eb864a2c78bfacd3b56c46b2b31c9c3ff7a2d7a2fe283b8ab6510c0eecec8cf5fc64875e6a3cc81cf3e54b4d56fabfa7022f25faf53f0d917e9b11c037f46c86c2c619f21b1395d841f51610d9ae3fdefcf4ef17350c8a8e0112025771cd958a77e528a0d4fdd53805a5d9dfdeeca27ed7987f8f031cc38fe8d16bb42a1c67184f2a67b1b0139bbe73900545fa6ba1c09290708142b47574649372ae6d9be962e424ab8d8113a846dfe1c13306237a1efc66e9745c6db3d4ff02fd3892c5ca2767963f9f626211b254b79f9f72740633c5fb713b3e44c8122bbdb2edf095758a5c68994d8971187d513f548caa695ae3b54944f854c760309de46f739fcd2cec4ddfe527ed8debd88466460daf402913b44e9b4cc3fc28ee477a6b33cbfd3699b48fd048bb443f6a25e26b0b0135a3ddb6e003403d619ce016b2cd88a9a0f8316847bd89b325d3fadaa3530f99eaf4bb1d9a305fbc9237c11a50a84b8502494c230943e74dcb838f3cb8e1ff089eb2a7ef319b3bd296568c3e9dafe4389081046f52aab36efdaa4b16e4b06c34928c7a878a69f12d9be564b728fb37d9e1ee30a0571176fddda624e98c94b45da6b6ae5b943f4a39736384ea15df85ff7ce0889c4470da8def371ae669dcb786f293b7a6aaee474fdeadc9f66ec0fbc2a98773883f6e03a7717863049cc998aafa1f7ed6ed56614459b7b4440b55f52fce808ca802e65617d27dc2036ed0f645404e12c98a0b3020da9e08439b8283ec80803b1ae94e8fe6558bba7349c3e4101daf6ed747fa9ac2219857fa89bb11427f2e71790f92615c03951db097a4bda737bff78d7290b57b5edac8f4bafb5dcfef6fdf4167c7a81f6966ec2d61025b67224141eefbac420f88553ae149c7cdeb9594ae0c769005789bb34a7189ea06dff7388334954c9ff27b8f28e727a5e760a0184f40a17c8504c374275ace39d4e618c0ea248f6f4683886ca737ece30582f2302e94843513470eac6929c3f5bd71a1fbb7211bd474f7507f20ec521e07d4ed0be3e20e5c9f5aeb9c205afbb3bb6663691a04f8c0b0b81de5dcf6764b3633935d03a3827bd774ed9f9796063f5b19aaec7df3927643c4cba77dc401a763bb0f68b6a908296d93328df3c0e33bf4f8f3b345368c248cd4ae68b6782636b47986a80cd77094830cdb9eea964f16657b9d63e4bbbd07e728bc343201200b448ad3240cd7729a7d4366365f2f3bc7ab9ef903232dddb48aa54757ae669994ce599ebbf6d0bf4367864ef37b1c4c54c8038e724b8f0fb7cd67147bc9fc3e1293a7d729a0cbf11f00c5c67669cc3a373ed2555c36ea710139183b848e780219bed62f65e3f46876bc110617a86018ebeca434991f5f2fc008aa9e9aea07d9a82d4ef2a66a09cbce4372a19b95059cbe52996167936e4cff8a3b404f544955338d9d54930972156fbe8e5e42cf698b2ba8", 0xcdb}, {&(0x7f00000001c0)="c1c808426ef73f8116d544341049357a3af24e15b194e260c13069c9d60800d43002074038d84f5135e1e58f1b9f5161a7e813dd381636dd937c69a18544d896f64ae51ef9ca1b2300656c8dccab86ccc9064aac254f2ceec97295556372507ab526a9699f13ccd752c1ddef541cb4e120aab5a35f7630f0a9f6846576352469e8bdc19ca75b350e4ab2a93ec622c4622479f27d7c723367b32b14180758fb5e851c4a62f40979", 0xa7}, {&(0x7f0000000040)="29134b8f529ff1c67442ca045aedf2a87e841bc7b47a0be859e5b66880f9b537d0914f56b0808a04ce1cba572c93748d97b198ee5abbff7a83f1a1391404", 0x3e}, {&(0x7f00000003c0)="d3c321f23d0198a01671d29b9695290fd4da243465c6c454aefd6f20991d922cdf7d499347d8c634e3f38b9961bb5df998d0c9cf1891b8ad5209f70580bd11c1332890047b97bb583584de083ea3716da3a9eb05b7607bfd0002dc5897f4112d206b3e20928d335ae5f70f4f641f7882ffbdabe39e66f4aaa9d0754fe0813f19b837f8e1353e535d5ab625f5332d7676f563b7fc10607c6564c6262f703952b487c2d612403c27931a6bdb4ca1f0c65427e834468066202796a93c", 0xbb}, {&(0x7f0000000500)="2fb3c830901e38d84974df107482536243036f3d5da03be217b66bd1d21faa9db3a195ae93471e19c0c3301db33143f067b0d68886341c5e011bb301af9e225673d2626547affbf6147ff602482c92398125b543866908e362d82e3ae11c692d3fc2d5f1ae45d6d0c1b6e277e2a0c244d9b9b90ff6fee79dfd492ed78f36391bbd2835502bd6507f3fd28e4b861fd44d23cc4f063de864ffa9351cba306db340ff918830cc4ba11146d9013e2318be4913fefd6261726dc0324edc7b71e52d8de8a6c4896524c10d9f2ca525e0b832", 0xcf}, {&(0x7f0000000740)="f0adf3d55f8d03acd3499f4515f3d264f7358ce121bdd02b89717bf8ccf4", 0xffffffea}], 0x7}, 0x0) (rerun: 64)

1.407975289s ago: executing program 3 (id=3509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ec0)={'ip6gretap0\x00', <r1=>0x0}) (async)
r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000140)='0', 0x1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0)
ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f00000000c0)) (async, rerun: 64)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000140)) (rerun: 64)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10)

1.326192322s ago: executing program 3 (id=3513):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000840000000700ffffffffffffff65000012000000000000008400000006000400e403000000000000"], 0x30, 0x4}, 0x4040814)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r0, &(0x7f0000000600)="05d9", 0x2, 0x4000, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x1a)

1.188567476s ago: executing program 3 (id=3518):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x44, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20008850)

970.45024ms ago: executing program 5 (id=3522):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x41}, 0x24008080)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})

527.060841ms ago: executing program 5 (id=3526):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x2, 0x8, 0x10000, 0x2, 0x15, "3963cd4c23eaeba3eb9aa83b1ee2c6399daf5c"})
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000018c0)={0x0, "4397146ada3c1a625ed01717883e509c938229309b4f368c8300c49bed277a5d", 0x1, 0xde3, 0x7, 0x20, 0x4})
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000100))

436.670755ms ago: executing program 5 (id=3528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000000ddc9bd1e6d020db82820000000000000080200e2a26b81c54eee625e5f5297b56ea166c340e8dea33337b3096eb703cda44b639155618fc17aa6202d62de2db774aa11b8e95d4c1df5582fb5397a7010691b4f36ce95f0c63e569f3298a5bf01d82f21710ead6b341f55d6532dbe6c0fe4109c6248d998f1526127858b9e58a0e296ba9e94e0242d91b5840fcc79ad219f58cd42d3bdce1d141cab4ef90283e9684b", @ANYRES32=r1, @ANYBLOB="0c0001800800010024000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

372.652712ms ago: executing program 5 (id=3530):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x4)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027bd700000000000040000002400118031f9e05e2f"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

363.939526ms ago: executing program 1 (id=3531):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETMODE(r3, 0x5601, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x7, 0xc000, 0x1000, &(0x7f0000c5f000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x11, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x100000001}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1)
mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_GETMODE(r3, 0x5601, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x7, 0xc000, 0x1000, &(0x7f0000c5f000/0x1000)=nil}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x11, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x100000001}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) (async)
mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async)

297.659791ms ago: executing program 3 (id=3532):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0xfffd)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1411, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async, rerun: 64)
bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(michael_mic-generic)\x00'}, 0x58) (rerun: 64)

228.149424ms ago: executing program 6 (id=3533):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000140)) (async)
sendmsg$AUDIT_USER(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x3ed, 0x400, 0x70bd2b, 0x25dfdbfe, "10d27ba89d47624ce0d2297eb0f363e701ff549403ec7c55aa7658d40bfd883562ff20121b58658f82d11a8cddf0cd025235f1b3826f626a21897130ae16c2d07143eda9579e5d5bd3c42bbd3e1ccd39eaa7d0fc7c9569b6fbed522a82b8066a1bef3d6c3ed671d11b56f548f3489e58dacc9fd58c2284408f7143d6c1c97fe7e1f58f5e865c6a0f456d1e622faabe8af55897c31ac9844f71f9419dddffb9a8ad84e81d0f", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x662b85d17c8d328f}, 0x4005) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xd4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x8f, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x240, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x220}]}, 0x240}, 0x1, 0x0, 0x0, 0x4807}, 0xf3a3024b6e83e104)

119.046773ms ago: executing program 6 (id=3534):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r6, 0x2, 0x70bd2d, 0x25dfdc00, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)
pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c)

118.62236ms ago: executing program 5 (id=3535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8800000002db789f68b11a38849d6e36f4acad0787b0c05efaacf2cab5bfa0726968784533cdf605c9f42a97ca86fba60984b2b1f70971523f6471a8be72a0c9b7f5526b28c4fd1e98d5281e1a15df593e02c71863d6725b47aa65d39b44989e0120c9", @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100001400fe00f040cb046d82540f3e7343a036df9ca70a000600ffffffffffff00001400fe00b5d55363e05c319c9e9196b01dec97540a00060008021100000100000a000600ffffffffffff00001400fe00f42e22e8b2447fc7858f40fbd72e250d"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x2000001)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0xffffffffffffff78)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f00000001c0)=""/19, 0x13, 0x720, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xc8)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x12c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x80, 0x9, 0x0, 0x19, 0x6, 0x16, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084)
r10 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r11 = socket$key(0xf, 0x3, 0x2)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003000248035c3b610800000000000000cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad8cbc738a0dee2bd3f218a49ee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55c421ce6d4fe16707ebb5e141a70c", 0xd8}], 0x1}, 0x850)
sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="020200090a00000001000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000080200000000030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x51)

118.1041ms ago: executing program 6 (id=3536):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7ff, 0xc, 0x1, 0x1ff}, {0x5, 0x8, 0x1, 0x4}, {0x8, 0x10, 0x4}]}, 0x10)

8.845988ms ago: executing program 6 (id=3537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async)
unshare(0x22020600) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) (async)
chroot(0x0) (async)
chdir(0x0)
openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x494000, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="c421fc107500c4417877c7e1240039010000c74424028a000000ff1c2466420f3035040000000f4ecb66baa100b00cee028d3bea66450f3880213e41220a48b8610000000000000015450000000f21f84c3500000b000023f8f21e660f380a417766baf80cb8b428c987ef66bafc0cb843b50000ef", 0x75}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.629229ms ago: executing program 6 (id=3538):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x311e42, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x2a, 0x29, 0x2, 0x1b, 0x5, 0xcdb, 0x4, 0x69})
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='%\x00', 0x100, &(0x7f00000000c0)={@align=0x6, {0x3, 0x5, 0xffffffff, 0x4}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x2400})
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0))
ioctl$FIONCLEX(r1, 0x5450)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x80, 0x53a, 0x7})
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000240)={0x0, 0x4, @value=0x3ff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x11)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x362}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d82f6f83283a247e370cccbcd39ec94211487c2e7d86b9624c8db78df5e31f82bd1796fb"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008004)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000500)={0x2, 'veth1_macvtap\x00', {0x4}, 0x81})
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000540))
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x1c}}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r1, &(0x7f0000000700)={0x1d, r5, 0x1, {0x2, 0xf0}, 0xfe}, 0x18)
syz_open_pts(r1, 0x54d301)
read$watch_queue(r1, &(0x7f0000000740)=""/214, 0xd6)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x22)
sendmsg$kcm(r1, &(0x7f00000010c0)={&(0x7f0000000840)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000008c0)="3a5a162f0b41cb9226df3007422e3dcf502ad9af2c852f6e11350b9d65794761647f665ae85618510fa62c3dd7ad85306436febd353df9c695ddfd3d0e087edb3dc4a202a3ace6f6dc48af22f2a0a439bcd709f66b16364ac24f83ec7ee8af1c7189d876a1e93e44cd3930fbb5b95327b66c79309a02eff6e84720b4384ae7e196983e3b0dd984f5a49bed753a1f7b886b88c7efd2f93771ec128efc4fb18876cf9a2d1357fb0e0ca8c6d45d9b", 0xad}, {&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000a80)="9d6e4457d8e767dee1403ecb53a61f306a4e63604808d7fb9cd5f13688093f0149f2e241e4c3c8a52b13718dd36e2a6c226d6e4497d694d0748692b63661504e48a0ef6f0c3fcf709721b3cdf1f38d46cc920e5bac25b1fe9b9ca4dd39a24aabeafd59c64b0d3d0f68a956ef042b5171afa2687e034ecc7c681bf8f52a7a052059ca404cf1ca15d7e9329a40c091f346068f6f65ed1b350369ddbb954ae5a4e7ed0338e8e858c90bd6b96aa0087ea183", 0xb0}, {&(0x7f0000000b40)="39a833fb917c5669abb469b055a49b829d81199edcf17a166b1bfa531e950f47ed1d62a395a693f6f142f22568658fa8e8c0bc3c97ad47b871e2c03e01", 0x3d}, {&(0x7f0000000b80)="44ae85ccdef2caf5cc48f0dfa7a80c7be2b14cc44305f103d8f2db850dcc0ef81cce79d0a622af796ec60960735821badd91e20ac7f1851d11eac05327e2df8a207cf19c4d9acfaf5f030d8ea6f58df635336acfcb41619921b28612d9c4183a1c82633bde7c3fe7882a8c5e084210d327485551c806795a4739377ac2693ba7034e605b62c3fce808a58711c39ef45a0dcafd05bb9e61b60365cf59849a67a262afe3b342b018535417c20a51eb72b4e884ad5b28d6cb79bdc9c93179a14d708fe6f213c74ae80af2", 0xc9}], 0x5, &(0x7f0000000d00)=[{0x100, 0x107, 0x3, "84033f56daecaf40496d034fc3e6f83989b6b4b91ee04acb6831054fcf27fde5044a75c0438b7af4a83a9b5d9fe37aadc4bacf86f5a4aae44ddaf1fe756ffb686c771b4f61c52a006cde68fc5ecf2e25657098b1c90f30d553d172694ace54f5e8b494e6a93f8ae5422441dc2fc9bca16529ce476e10782c848c6c4074ec8afab6f5ad9e067cde4ace49d7e34025ff7f9667f5be1136b047086f1204ea421c1eba0b3b2f4abdc856a5711b2f2050ed9ef8afe2517838c4b54b7c8bc7160687753589bb76d0f433310c39f2e35fce7a423118ec65b51ea22489d7aea17f544a6363e64547a409d7e4facd610e36ac"}, {0x88, 0x108, 0x7, "fb13bb9c23017c70a0d80e1eaee3ebd2e48fb8452eede3c6e6792eba5bfb467a80955ece659bd02ad3ca7645ac65e6da3acd1e2085d290dba09a945b652a787d2c9023f427abb9331765c24e2878365122878324fa06eb52d1182b8500b669c6820a60829b3ac1a93bd08b9305e8a43f1c41efd40de0"}, {0x40, 0x1, 0xa6, "e5fd18c676035ad60b8f856f3bdaf6c93af10c52df54ef833e9e7dae24eac5b1fa24a8842bf0836e5ad043"}, {0x100, 0x305, 0x1000, "118302fd3ae74273bb099aa3a5a01ba4406cf87d6363a05624948cc90576e9c128426c5cb32a10dcdb52ca72788ee2ba5fa65a12dc5dd08a4bec11d1a6ad4be7b72116b65ffeb36f1fc2e1eadad7de561dfe611cf885c57859a97d95307281e02cf159b54bea8c457deadffe13e096ae1ce2454281a74be97d27e23850fe51598f2352cc7cada95b555d635e8cdecbc5edbb761508eff6a13d0ac2348a58f4460519e9f49fa5f47055116e0672b0f7b234865a236893734b5ff089aa744fb40c712290bffb0ac57931619a3b1286064d54298884e192743bbe295c0133305489b4e7c7b06008ba4bcb0a"}, {0xe8, 0x29, 0x3ff, "a991601c2024df73f4568fb28e885929854d802c107b841aa2580e535f32c6f789a79c895108b31dcda030acad6d6aed5d574cd2329345e3c0b70a0026ad82b2aaa644d011dba928d6eb2971aa4454f97b8b95871b5b8f6f03f058d25136064d9cab1f01145a239f8d2ad2a9c578227ffbfa0115204e8964a38e191fd5b984c62cbe5d694f951cb5051f85ca84c496cc0bafcfc26f874127e24b27f03188787272240408bd77d3a755c6d8a9589a17846097794c297018752bd8d5be5e18e2836cdbe984cbc901b82a77489354bfbf38bd4616d53636"}], 0x3b0}, 0x8000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r1)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x49}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x84)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000013c0)={0x1, 0x5, 0x3, 0x6, &(0x7f0000001280)=[{}, {}, {}, {}, {}]})
r7 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)="071028dcc724fe7064c6e0dd61216756579be09416348c0f9a6d3ea690872ce291e6e6f3984fb2fd73c53ac65020ddfcb940f7e159e3995658ca2f74aa026ec8e9c5c982deaa9767465a8dd5d6670a213b6ef80e863561b5b9112b5cbfc33be83ac3772448de3151f1ee548d269f263c049663b502dd6fb1878ffa2dab67abbbb09dd2fe02824e80a3b8f64d18dd0500dfd5eb962475c1902433283e82a52e4743d2", 0xa2, r7)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0], 0x2, 0x180000, 0x0, <r8=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f0000001680)={0x80})

0s ago: executing program 6 (id=3539):
r0 = userfaultfd(0x80001)
r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000006380)=ANY=[@ANYBLOB='se'], &(0x7f0000006440)=""/218, 0xda)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x8011}, 0x48850)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011)
r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2, 0xfaffff})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x6002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x3365c8a7, 0x800})

kernel console output (not intermixed with test programs):

3][T14726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.885657][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.901340][T14732] batadv_slave_1: entered promiscuous mode
[  241.904662][T14731] batadv_slave_1: left promiscuous mode
[  241.931879][T14728] Cannot find del_set index 4 as target
[  241.966015][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.014598][T14745] netlink: 555 bytes leftover after parsing attributes in process `syz.6.2465'.
[  242.070677][T14750] sctp: [Deprecated]: syz.6.2467 (pid 14750) Use of int in max_burst socket option deprecated.
[  242.070677][T14750] Use struct sctp_assoc_value instead
[  242.114959][T14759] syzkaller0: entered promiscuous mode
[  242.117342][T14759] syzkaller0: entered allmulticast mode
[  242.247190][T14769] bridge1: entered promiscuous mode
[  242.248937][T14769] bridge1: entered allmulticast mode
[  242.362517][   T40] audit: type=1400 audit(1775931986.948:1708): avc:  denied  { create } for  pid=14777 comm="syz.3.2476" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  242.373653][   T40] audit: type=1400 audit(1775931986.948:1709): avc:  denied  { read write } for  pid=14777 comm="syz.3.2476" name="file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  242.381207][   T40] audit: type=1400 audit(1775931986.948:1710): avc:  denied  { open } for  pid=14777 comm="syz.3.2476" path="/45/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  242.389031][   T40] audit: type=1400 audit(1775931986.948:1711): avc:  denied  { ioctl } for  pid=14777 comm="syz.3.2476" path="/45/file0" dev="tmpfs" ino=257 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  242.407711][T14785] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2477'.
[  242.697232][T14806] overlayfs: failed to clone upperpath
[  242.752468][T14814] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  242.765146][ T5946] Bluetooth: hci2: command 0x0406 tx timeout
[  242.774090][T14816] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  242.810838][T14818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.814443][T14818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.818207][T14818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.822520][T14818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.826918][T14818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.834437][T14818] kernel read not supported for file /file1 (pid: 14818 comm: syz.5.2489)
[  242.844992][   T40] audit: type=1800 audit(1775931987.428:1712): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2489" name="file1" dev="mqueue" ino=31881 res=0 errno=0
[  242.857711][T14817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.915135][ T6948] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  242.925483][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.001107][T14829] CIFS mount error: No usable UNC path provided in device string!
[  243.001107][T14829] 
[  243.009086][T14829] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  243.083837][ T6948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.089258][ T6948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.093268][ T6948] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  243.099169][ T6948] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  243.102938][ T6948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.113998][ T6948] usb 6-1: config 0 descriptor??
[  243.260220][T14837] xt_cluster: node mask cannot exceed total number of nodes
[  243.359001][T14841] /dev/nullb0: Can't lookup blockdev
[  243.532147][ T6948] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  243.596218][   T40] audit: type=1400 audit(1775931988.188:1713): avc:  denied  { setopt } for  pid=14851 comm="syz.5.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  243.829668][T14872] syzkaller0: entered promiscuous mode
[  243.881399][    C1] hpet: Lost 1 RTC interrupts
[  243.964295][T14872] syzkaller0: entered allmulticast mode
[  244.016569][T14883] __nla_validate_parse: 5 callbacks suppressed
[  244.016627][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2509'.
[  244.160433][T14892] rtc_cmos 00:05: Alarms can be up to one day in the future
[  244.203616][T14896] syz_tun: entered allmulticast mode
[  244.210332][ T6021] usb 6-1: USB disconnect, device number 27
[  244.295231][T14895] syz_tun: left allmulticast mode
[  244.796479][T14942] erspan0: entered promiscuous mode
[  244.802444][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'.
[  244.818487][T14944] nbd: socks must be embedded in a SOCK_ITEM attr
[  244.911273][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2535'.
[  244.916005][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2535'.
[  244.992012][   T40] audit: type=1400 audit(1775931989.578:1714): avc:  denied  { write } for  pid=14964 comm="syz.1.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  245.038523][T14972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=14972 comm=syz.5.2539
[  245.091981][T14980] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2541'.
[  245.092179][T14981] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2541'.
[  245.177945][T14986] netlink: 'syz.5.2543': attribute type 3 has an invalid length.
[  245.180788][T14986] netlink: 'syz.5.2543': attribute type 3 has an invalid length.
[  245.231313][T14988] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  245.447078][T15011] No source specified
[  245.463151][T15011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.553844][T15027] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2553'.
[  245.656811][T15034] netlink: 'syz.5.2556': attribute type 1 has an invalid length.
[  245.692001][T15034] 8021q: adding VLAN 0 to HW filter on device bond13
[  245.700470][T15034] bond12: (slave bond13): making interface the new active one
[  245.704054][T15034] bond12: (slave bond13): Enslaving as an active interface with an up link
[  245.720237][T15034] bond12: (slave gretap1): Enslaving as a backup interface with an up link
[  245.726060][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2556'.
[  245.737220][T15034] 8021q: adding VLAN 0 to HW filter on device bond12
[  245.763450][T15040] netlink: 750 bytes leftover after parsing attributes in process `syz.6.2558'.
[  245.794641][T15042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2559'.
[  245.810415][T15042] gtp1: entered promiscuous mode
[  245.818020][T15044] gretap0: entered promiscuous mode
[  245.821529][T15044] gretap0: left promiscuous mode
[  245.974395][T15051] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.103336][T15051] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.234788][T15051] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.240245][T15068] netlink: 'syz.6.2567': attribute type 1 has an invalid length.
[  246.273973][T15068] bond5: entered promiscuous mode
[  246.276755][T15068] 8021q: adding VLAN 0 to HW filter on device bond5
[  246.291425][T15068] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  246.302583][T15068] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  246.307146][T15068] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  246.336794][T15051] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.482796][   T88] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.498818][   T88] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.513934][   T88] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.529342][   T88] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.908825][T15090] net_ratelimit: 22 callbacks suppressed
[  246.908840][T15090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.218976][T15109] fuse: Unknown parameter 'rootm000008000000000100000'
[  247.373326][T15123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15123 comm=syz.5.2584
[  247.584031][T15126] sctp: [Deprecated]: syz.1.2585 (pid 15126) Use of int in max_burst socket option deprecated.
[  247.584031][T15126] Use struct sctp_assoc_value instead
[  247.645503][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.725845][  T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.937338][T15139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.087885][T15148] overlayfs: failed to resolve './file1': -2
[  248.368538][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.374390][ T1228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.435423][ T6948] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  248.532291][T15166] hsr_slave_1 (unregistering): left promiscuous mode
[  248.605874][ T6948] usb 8-1: Using ep0 maxpacket: 16
[  248.611069][ T6948] usb 8-1: config 128 has an invalid interface number: 83 but max is 1
[  248.614686][ T6948] usb 8-1: config 128 has an invalid interface number: 226 but max is 1
[  248.618755][ T6948] usb 8-1: config 128 has no interface number 0
[  248.621454][ T6948] usb 8-1: config 128 has no interface number 1
[  248.624199][ T6948] usb 8-1: config 128 interface 83 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  248.629040][ T6948] usb 8-1: config 128 interface 226 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  248.633670][ T6948] usb 8-1: config 128 interface 226 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  248.639245][ T6948] usb 8-1: config 128 interface 226 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  248.643938][ T6948] usb 8-1: config 128 interface 83 has no altsetting 0
[  248.647155][ T6948] usb 8-1: config 128 interface 226 has no altsetting 0
[  248.652973][ T6948] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  248.657190][ T6948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.660709][ T6948] usb 8-1: Product: 䍕ꍛﵑ哆⧗킁叩వ⿚꾽雴啡⸘ᢸ烶୹븒獩蓝萁౩Ďᠫ뛼㿁ꄮ桒廴
[  248.666090][ T6948] usb 8-1: Manufacturer: Ѝ
[  248.668315][ T6948] usb 8-1: SerialNumber: syz
[  248.685652][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.900340][ T6948] usb-storage 8-1:128.83: USB Mass Storage device detected
[  248.914564][ T6948] usb-storage 8-1:128.83: Quirks match for vid 1908 pid 1315: 20000
[  249.010552][ T6948] usb-storage 8-1:128.226: USB Mass Storage device detected
[  249.017953][ T6948] usb-storage 8-1:128.226: Quirks match for vid 1908 pid 1315: 20000
[  249.069705][T15212] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4
[  249.086107][ T6948] usb 8-1: USB disconnect, device number 51
[  249.116763][T15212] bond1 (unregistering): Released all slaves
[  249.429058][T15242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.459752][T15244] macsec1: entered promiscuous mode
[  249.462055][T15244] macsec1: entered allmulticast mode
[  249.502943][T15249] netlink: 'syz.6.2622': attribute type 1 has an invalid length.
[  249.534825][T15249] veth7: entered promiscuous mode
[  249.540986][T15252] binder: 15251:15252 ioctl c0306201 200000000ac0 returned -14
[  249.541203][T15249] bond6: (slave veth7): Enslaving as a backup interface with a down link
[  249.551124][T15249] __nla_validate_parse: 9 callbacks suppressed
[  249.551136][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2622'.
[  249.575571][  T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.854639][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2631'.
[  249.875855][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'.
[  249.908379][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  249.908397][   T40] audit: type=1400 audit(1775931994.498:1718): avc:  denied  { accept } for  pid=15279 comm="syz.5.2634" path="socket:[63131]" dev="sockfs" ino=63131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  249.970445][T15287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2636'.
[  249.993526][T15287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15287 comm=syz.5.2636
[  249.995704][ T6021] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  250.110773][T15305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.133671][T15306] fuse: Bad value for 'fd'
[  250.145754][   T40] audit: type=1400 audit(1775931994.738:1719): avc:  denied  { append } for  pid=15311 comm="syz.3.2641" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  251.520339][   T40] audit: type=1400 audit(1775931996.108:1720): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  252.685613][ T6948] net_ratelimit: 6 callbacks suppressed
[  252.685628][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.486053][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.496953][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.725644][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.766302][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.769273][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.806966][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.048877][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.535545][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.859688][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.895525][   T39] net_ratelimit: 1 callbacks suppressed
[  257.895546][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.606599][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.926888][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.245862][  T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.805702][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.059321][   T40] audit: type=1400 audit(1775932004.638:1721): avc:  denied  { relabelfrom } for  pid=15340 comm="syz.6.2644" name="" dev="pipefs" ino=61746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  260.060827][T15343] SELinux:  Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped).
[  260.077155][T15346] netlink: 'syz.5.2646': attribute type 1 has an invalid length.
[  260.086520][   T40] audit: type=1400 audit(1775932004.658:1722): avc:  denied  { relabelto } for  pid=15340 comm="syz.6.2644" name="" dev="pipefs" ino=61746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:setrans_exec_t:s0"
[  260.106391][T15336] [U] ^O
[  260.127586][T15346] bond14: entered promiscuous mode
[  260.130150][T15346] 8021q: adding VLAN 0 to HW filter on device bond14
[  260.178018][T15346] 8021q: adding VLAN 0 to HW filter on device bond14
[  260.181302][T15346] bond14: (slave xfrm1): The slave device specified does not support setting the MAC address
[  260.186444][T15346] bond14: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  260.194955][T15346] bond14: (slave xfrm1): making interface the new active one
[  260.198634][T15346] xfrm1: entered promiscuous mode
[  260.202362][T15346] bond14: (slave xfrm1): Enslaving as an active interface with an up link
[  260.258344][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'.
[  260.262136][T15342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2645'.
[  260.462802][   T40] audit: type=1400 audit(1775932006.054:1723): avc:  denied  { module_load } for  pid=15391 comm="syz.3.2658" path="/76/bus" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  260.463343][T15392] Invalid ELF header magic: != ELF
[  260.477932][T15392] CIFS mount error: No usable UNC path provided in device string!
[  260.477932][T15392] 
[  260.482274][T15392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  260.574835][   T40] audit: type=1400 audit(1775932006.154:1724): avc:  denied  { create } for  pid=15396 comm="syz.3.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  260.577359][T15397] binder: 15396:15397 ioctl 4018620d 0 returned -22
[  260.671026][T15403] netlink: 'syz.3.2663': attribute type 3 has an invalid length.
[  260.673698][T15403] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2663'.
[  260.688675][T15403] MINIX-fs: unable to read superblock
[  260.690941][T15403] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2663'.
[  260.724164][T15403] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2663'.
[  260.781338][T15411] "syz.6.2665" (15411) uses obsolete ecb(arc4) skcipher
[  260.799057][T15419] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  260.809332][T15419] VFS: Can't find a romfs filesystem on dev nullb0.
[  260.809332][T15419] 
[  260.836120][T15412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15412 comm=syz.6.2665
[  260.840509][T15412] netlink: 'syz.6.2665': attribute type 1 has an invalid length.
[  260.840566][T15421] netlink: 'syz.6.2665': attribute type 1 has an invalid length.
[  260.855821][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.860987][T15412] bond7: (slave bridge2): making interface the new active one
[  260.864925][T15412] bond7: (slave bridge2): Enslaving as an active interface with an up link
[  260.902017][T15428] usb usb9: check_ctrlrecip: process 15428 (syz.1.2669) requesting ep 01 but needs 81
[  260.909144][T15428] usb usb9: usbfs: process 15428 (syz.1.2669) did not claim interface 0 before use
[  260.967010][T15428] loop6: detected capacity change from 0 to 7
[  260.977362][    C3] blk_print_req_error: 10 callbacks suppressed
[  260.977380][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  260.983585][    C3] buffer_io_error: 372 callbacks suppressed
[  260.983599][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  260.990862][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  260.994596][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  260.998059][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.001215][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.003875][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.007038][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.009708][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.013445][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.016935][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.020741][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.024714][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.028531][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.032269][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.036077][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.041017][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.044723][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.048808][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  261.052903][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.056965][T15428] ldm_validate_partition_table(): Disk read failed.
[  261.064972][T15428] Dev loop6: unable to read RDB block 0
[  261.067945][T15428]  loop6: unable to read partition table
[  261.070442][T15428] loop6: partition table beyond EOD, truncated
[  261.075229][T15428] loop_reread_partitions: partition scan of loop6 (��[{Bѷ���Mܾ`*��Z��5��]�z(�Ť�4+hG�pX����gm
[  261.075229][T15428] ������.B�L_se�) failed (rc=-5)
[  261.101301][ T5343] ldm_validate_partition_table(): Disk read failed.
[  261.108806][ T5343] Dev loop6: unable to read RDB block 0
[  261.119107][ T5343]  loop6: unable to read partition table
[  261.126137][ T5343] loop6: partition table beyond EOD, truncated
[  261.230400][   T40] audit: type=1400 audit(1775932006.814:1725): avc:  denied  { mount } for  pid=15450 comm="syz.5.2676" name="/" dev="configfs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  261.245165][   T40] audit: type=1400 audit(1775932006.814:1726): avc:  denied  { search } for  pid=15450 comm="syz.5.2676" name="/" dev="configfs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  261.438038][T15453] openvswitch: netlink: Message has 4 unknown bytes.
[  261.440770][T15453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.895663][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.230627][   T40] audit: type=1400 audit(1775932007.814:1727): avc:  denied  { name_bind } for  pid=15463 comm="syz.1.2680" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  262.289644][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.587421][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2679'.
[  262.667328][T15479] netlink: 'syz.5.2683': attribute type 1 has an invalid length.
[  262.688138][T15479] 8021q: adding VLAN 0 to HW filter on device bond15
[  262.708684][T15479] 8021q: adding VLAN 0 to HW filter on device bond15
[  262.712022][T15479] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address
[  262.718579][T15479] bond15: (slave vxcan3): Error -95 calling set_mac_address
[  262.761619][T15487] macvlan2: entered promiscuous mode
[  262.764145][T15487] macvlan2: entered allmulticast mode
[  262.767617][T15487] bond15: entered promiscuous mode
[  262.768457][T15489] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  262.772040][T15487] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  262.789985][T15487] bond15: left promiscuous mode
[  262.819299][   T40] audit: type=1400 audit(1775932008.404:1728): avc:  denied  { validate_trans } for  pid=15491 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  262.884909][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2692'.
[  262.924435][T15507] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  262.934903][T15507] netlink: 'syz.1.2694': attribute type 1 has an invalid length.
[  262.936057][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.939207][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'.
[  262.944851][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'.
[  262.952797][T15507] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2694'.
[  263.007387][T15515] nbd: must specify a device to reconfigure
[  263.246023][T15531] tmpfs: Bad value for 'huge'
[  263.250504][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.252949][T15531] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.256431][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.258854][T15531] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.529886][T15554] overlay: Unknown parameter 'appraise'
[  263.744199][T15564] random: crng reseeded on system resumption
[  263.917786][T15572] netlink: 'syz.6.2718': attribute type 1 has an invalid length.
[  263.939110][T15572] bond8: entered promiscuous mode
[  263.941311][T15572] bond8: entered allmulticast mode
[  263.948338][T15572] 8021q: adding VLAN 0 to HW filter on device bond8
[  263.960814][T15572] erspan2: entered allmulticast mode
[  263.965472][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.966670][T15572] bond8: (slave erspan2): making interface the new active one
[  263.971317][T15572] erspan2: entered promiscuous mode
[  263.978144][T15572] bond8: (slave erspan2): Enslaving as an active interface with an up link
[  263.987458][T15569] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  264.038828][   T40] audit: type=1400 audit(1775932009.624:1729): avc:  denied  { listen } for  pid=15579 comm="syz.3.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  264.349154][T15602] fuse: Bad value for 'fd'
[  264.365576][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.370368][ T6536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.431483][T15609] trusted_key: encrypted_key: master key parameter 'trust0000000000000000203' is invalid
[  264.466781][T15610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.472345][T15610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.475742][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.478980][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.481808][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.484610][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.524739][T15614] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  264.534604][T15614] exFAT-fs (nullb0): invalid boot record signature
[  264.539156][T15614] exFAT-fs (nullb0): failed to read boot sector
[  264.541895][T15614] exFAT-fs (nullb0): failed to recognize exfat type
[  264.591971][T15619] xfrm1: entered allmulticast mode
[  264.777147][   T40] audit: type=1400 audit(1775932010.364:1730): avc:  denied  { lock } for  pid=15640 comm="syz.1.2740" path="socket:[61388]" dev="sockfs" ino=61388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  264.978361][T15661] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  265.182514][T15669] random: crng reseeded on system resumption
[  265.683242][T15691] __nla_validate_parse: 38 callbacks suppressed
[  265.683262][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2753'.
[  265.730155][T15697] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  265.730155][T15697] The task syz.5.2754 (15697) triggered the difference, watch for misbehavior.
[  265.801799][T15667] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  265.891001][T15706] netlink: 'syz.3.2758': attribute type 1 has an invalid length.
[  265.894113][T15706] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2758'.
[  265.908730][T15708] bond9: entered promiscuous mode
[  265.999938][   T40] audit: type=1400 audit(1775932011.584:1731): avc:  denied  { mounton } for  pid=15714 comm="syz.3.2760" path="/98/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  266.000011][T15728] 9p: Bad value for 'rfdno'
[  266.239252][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'.
[  266.337235][  T104] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.340130][  T104] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.343047][  T104] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.346451][  T104] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  266.353697][T15744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15744 comm=syz.1.2767
[  266.777687][T15782] fuse: Bad value for 'fd'
[  266.782169][T15782] sctp: [Deprecated]: syz.5.2778 (pid 15782) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.782169][T15782] Use struct sctp_sack_info instead
[  266.795892][T15784] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in;
[  266.795892][T15784]    program syz.1.2779 not setting count and/or reply_len properly
[  266.822051][T15789] virtio-fs: tag </dev/sg0> not found
[  266.880601][T15801] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2784'.
[  266.908486][T15792] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  266.972204][T15812] netlink: 'syz.3.2787': attribute type 5 has an invalid length.
[  267.103833][T15833] overlayfs: failed to clone upperpath
[  267.120238][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'.
[  267.123080][T15837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2797'.
[  267.152827][   T40] audit: type=1400 audit(1775932012.734:1732): avc:  denied  { mount } for  pid=15834 comm="syz.3.2796" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  267.170427][   T40] audit: type=1400 audit(1775932012.754:1733): avc:  denied  { unmount } for  pid=13812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  267.174030][T15842] overlayfs: failed to clone upperpath
[  267.180589][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'.
[  267.183532][T15844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2797'.
[  267.189238][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'.
[  267.192566][T15844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2797'.
[  267.237099][T15857] Cannot find del_set index 4 as target
[  267.240809][T15857] netlink: 'syz.1.2801': attribute type 3 has an invalid length.
[  267.243327][T15857] netlink: 'syz.1.2801': attribute type 1 has an invalid length.
[  267.250567][T15857] NCSI netlink: No device for ifindex 0
[  267.343058][   T40] audit: type=1800 audit(1775932012.924:1734): pid=15871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2807" name="bus" dev="overlay" ino=752 res=0 errno=0
[  267.362298][T15871] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[  267.452381][T15880] bridge_slave_1: left allmulticast mode
[  267.454831][T15880] bridge_slave_1: left promiscuous mode
[  267.458477][T15880] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.466217][T15880] bridge_slave_0: left allmulticast mode
[  267.468623][T15880] bridge_slave_0: left promiscuous mode
[  267.471267][T15880] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.746650][T15905] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  267.756549][   T40] audit: type=1400 audit(1775932013.334:1735): avc:  denied  { relabelto } for  pid=15904 comm="syz.6.2816" name="317" dev="tmpfs" ino=1702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  267.764337][T15907] tmpfs: Bad value for 'mpol'
[  267.771386][   T40] audit: type=1400 audit(1775932013.334:1736): avc:  denied  { associate } for  pid=15904 comm="syz.6.2816" name="317" dev="tmpfs" ino=1702 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[  267.816670][   T40] audit: type=1400 audit(1775932013.404:1737): avc:  denied  { add_name } for  pid=15904 comm="syz.6.2816" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  267.828438][   T40] audit: type=1400 audit(1775932013.404:1738): avc:  denied  { associate } for  pid=15904 comm="syz.6.2816" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  268.046419][    T9] net_ratelimit: 136 callbacks suppressed
[  268.046441][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.206119][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.373842][T15938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15938 comm=syz.5.2828
[  268.381917][T15938] netlink: 'syz.5.2828': attribute type 1 has an invalid length.
[  268.402069][T15938] 8021q: adding VLAN 0 to HW filter on device bond16
[  268.472855][T15943] netlink: 'syz.5.2830': attribute type 1 has an invalid length.
[  268.494186][T15943] 8021q: adding VLAN 0 to HW filter on device bond17
[  268.515666][T15943] bond17: (slave geneve2): making interface the new active one
[  268.520321][T15943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.526293][T15943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.529818][T15943] bond17: (slave geneve2): Enslaving as an active interface with an up link
[  268.559999][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.566629][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.594001][   T40] audit: type=1400 audit(1775932014.174:1739): avc:  denied  { remove_name } for  pid=11286 comm="syz-executor" name="file0" dev="tmpfs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  268.608355][   T40] audit: type=1400 audit(1775932014.174:1740): avc:  denied  { rmdir } for  pid=11286 comm="syz-executor" name="file0" dev="tmpfs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  268.620282][T15952] nbd: couldn't find device at index -2127233020
[  268.676941][T15955] pim6reg: entered allmulticast mode
[  268.681329][T15955] pim6reg: left allmulticast mode
[  268.906589][T15970] ip6gretap0: entered promiscuous mode
[  268.970274][T15978] affs: No valid root block on device nullb0
[  269.086034][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.235251][ T5989] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  269.245640][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.378234][T15990] netlink: 'syz.5.2845': attribute type 4 has an invalid length.
[  269.392714][ T5989] usb 8-1: Using ep0 maxpacket: 8
[  269.396376][ T5989] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  269.399030][ T5989] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.402101][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  269.407162][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.407414][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  269.413384][ T5989] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.417621][ T5989] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  269.420452][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.485602][   T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.613401][T16009] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.626832][T16009] ipvlan2: entered allmulticast mode
[  269.629581][T16009] bond1: entered allmulticast mode
[  269.632313][ T5989] usb 8-1: usb_control_msg returned -32
[  269.634128][ T5989] usbtmc 8-1:16.0: can't read capabilities
[  269.643508][T16009] bridge3: entered allmulticast mode
[  269.646979][T16009] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  269.716218][ T5949] Bluetooth: hci2: unexpected event 0x17 length: 3 < 6
[  269.770629][T16029] veth0: entered promiscuous mode
[  269.774772][T16026] veth0: left promiscuous mode
[  269.902738][T16039] netlink: 'syz.6.2860': attribute type 21 has an invalid length.
[  270.045271][ T5949] Bluetooth: hci2: command 0x0406 tx timeout
[  270.045368][ T5946] Bluetooth: hci2: Opcode 0x206a failed: -110
[  270.085531][T16049] kAFS: unparsable volume name
[  270.405271][T16062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  270.409280][T16062] block device autoloading is deprecated and will be removed.
[  270.449731][T16064] No source specified
[  270.457712][T16061] md: superblock version 12389 not known
[  270.459976][T16061] md: couldn't set array info. -22
[  270.465882][T16066] veth0: entered promiscuous mode
[  270.470369][T16065] veth0: left promiscuous mode
[  270.566335][T16081] geneve1: entered allmulticast mode
[  270.626285][T16085] qnx4: no qnx4 filesystem (no root dir).
[  270.661309][T16089] netlink: 'syz.5.2878': attribute type 1 has an invalid length.
[  270.672982][T16089] 8021q: adding VLAN 0 to HW filter on device bond18
[  270.696132][T16085] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  270.736610][T16092] bond18: (slave geneve3): making interface the new active one
[  270.743248][T16092] bond18: (slave geneve3): Enslaving as an active interface with an up link
[  270.814964][T16062] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned b0
[  271.471001][   T39] SELinux: failure in sel_netif_sid_slow(), invalid network interface (77)
[  271.498099][   T13] bond8 (unregistering): (slave ip6gretap1): Releasing active interface
[  271.532864][T16107] netlink: 'syz.6.2882': attribute type 1 has an invalid length.
[  271.593001][   T13] bond5 (unregistering): (slave erspan1): Releasing active interface
[  271.595486][   T13] erspan1 (unregistering): left promiscuous mode
[  271.610505][   T13] gretap0 (unregistering): left promiscuous mode
[  271.623600][   T13] bond1 (unregistering): (slave gretap1): Releasing active interface
[  271.641750][   T13] bond3 (unregistering): (slave gretap2): Releasing active interface
[  271.668116][   T13] bond10 (unregistering): (slave geneve2): Releasing active interface
[  271.811995][   T13] bond1 (unregistering): Released all slaves
[  271.820813][   T13] bond2 (unregistering): Released all slaves
[  271.830005][   T13] bond0 (unregistering): left promiscuous mode
[  271.832346][   T13] bond0 (unregistering): Released all slaves
[  271.841277][   T13] bond3 (unregistering): Released all slaves
[  271.851448][   T13] bond4 (unregistering): Released all slaves
[  271.860913][   T13] bond5 (unregistering): Released all slaves
[  271.873837][   T13] bond6 (unregistering): Released all slaves
[  271.885379][   T13] bond7 (unregistering): Released all slaves
[  271.895685][   T13] bond8 (unregistering): Released all slaves
[  271.915687][   T13] bond9 (unregistering): Released all slaves
[  271.926858][   T13] bond10 (unregistering): Released all slaves
[  271.935627][   T13] bond11 (unregistering): Released all slaves
[  271.945554][   T13] bond12 (unregistering): (slave macvlan0): Releasing backup interface
[  271.950993][   T13] bond12 (unregistering): Released all slaves
[  271.959531][   T13] bond13 (unregistering): Released all slaves
[  271.967497][   T13] bond14 (unregistering): Released all slaves
[  271.977761][   T13] bond15 (unregistering): Released all slaves
[  271.988116][T16108] veth0: entered promiscuous mode
[  272.001212][T16109] bond10: Unable to set up delay as MII monitoring is disabled
[  272.005074][T16109] bond10 (unregistering): Released all slaves
[  272.035336][T16107] 8021q: adding VLAN 0 to HW filter on device bond10
[  272.043269][T16123] bridge4: entered promiscuous mode
[  272.053076][  T831] usb 8-1: USB disconnect, device number 52
[  272.055473][T16123] bridge4: entered allmulticast mode
[  272.062003][T16123] team0: Port device bridge4 added
[  272.066630][T16106] veth0: left promiscuous mode
[  272.154197][   T13] tipc: Disabling bearer <udp:syz2>
[  272.156782][   T13] tipc: Left network mode
[  272.232619][T16142] tipc: Started in network mode
[  272.234228][T16142] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  272.246198][T16142] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  272.299011][T16159] __nla_validate_parse: 18 callbacks suppressed
[  272.299025][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2896'.
[  272.339756][T16161] usb usb8: usbfs: process 16161 (syz.1.2895) did not claim interface 0 before use
[  272.344741][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  272.344759][   T40] audit: type=1400 audit(1775932017.924:1745): avc:  denied  { setopt } for  pid=16156 comm="syz.1.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  272.347822][T16150] overlayfs: conflicting lowerdir path
[  272.367933][   T40] audit: type=1400 audit(1775932017.954:1746): avc:  denied  { write } for  pid=16156 comm="syz.1.2895" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  272.388992][T16156] delete_channel: no stack
[  272.492936][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'.
[  272.497534][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'.
[  272.649482][   T13] veth0_to_batadv: left promiscuous mode
[  272.659813][   T13] veth1_vlan: left promiscuous mode
[  272.661590][   T13] veth0_vlan: left promiscuous mode
[  272.780395][   T40] audit: type=1400 audit(1775932018.364:1747): avc:  denied  { write } for  pid=16209 comm="syz.3.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  272.781045][T16211] trusted_key: encrypted_key: insufficient parameters specified
[  272.802972][T16210] trusted_key: encrypted_key: insufficient parameters specified
[  272.820631][   T13] team0 (unregistering): Port device team_slave_1 removed
[  272.844933][   T13] team0 (unregistering): Port device team_slave_0 removed
[  272.845862][T16214] fuse: Bad value for 'group_id'
[  272.849617][T16214] fuse: Bad value for 'group_id'
[  272.894034][   T40] audit: type=1400 audit(1775932018.474:1748): avc:  denied  { map } for  pid=16217 comm="syz.3.2914" path="/dev/radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  272.946066][   T40] audit: type=1400 audit(1775932018.534:1749): avc:  denied  { setattr } for  pid=16219 comm="syz.1.2915" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.149803][T16233] netlink: 'syz.5.2919': attribute type 27 has an invalid length.
[  273.155672][ T6948] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[  273.188358][T16233] bridge3: port 1(erspan0) entered disabled state
[  273.237047][T16231] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  273.305113][ T6948] usb 8-1: device descriptor read/64, error -71
[  273.315939][T16233] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.335313][T16233] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.439100][T16233] gtp0: left promiscuous mode
[  273.447170][T16233] bond2: left promiscuous mode
[  273.457845][T16233] vlan2: left allmulticast mode
[  273.459461][T16233] bridge3: left allmulticast mode
[  273.472323][T16233] bond4: left promiscuous mode
[  273.478732][T16233] bond5: left promiscuous mode
[  273.528061][T16233] gtp1: left promiscuous mode
[  273.532833][T16233] bond14: left promiscuous mode
[  273.534861][T16233] xfrm1: left promiscuous mode
[  273.545236][ T6948] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[  273.588142][T16234] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.591923][T16234] 8021q: adding VLAN 0 to HW filter on device team0
[  273.597118][T16234] net_ratelimit: 27 callbacks suppressed
[  273.597127][T16234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.606176][T16254] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000
[  273.610427][   T40] audit: type=1400 audit(1775932019.194:1750): avc:  denied  { create } for  pid=16249 comm="syz.6.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  273.620455][ T1228] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.622636][   T40] audit: type=1400 audit(1775932019.204:1751): avc:  denied  { getopt } for  pid=16249 comm="syz.6.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  273.623312][ T1228] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.641908][ T1228] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.644644][ T1228] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.661717][   T13] IPVS: stop unused estimator thread 0...
[  273.665095][   T40] audit: type=1400 audit(1775932019.244:1752): avc:  denied  { execute } for  pid=16255 comm="syz.1.2924" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  273.675310][ T6948] usb 8-1: device descriptor read/64, error -71
[  273.706925][T16256] overlay: Unknown parameter ':c'
[  273.795988][ T6948] usb usb8-port1: attempt power cycle
[  274.100378][ T5946] Bluetooth: hci0: Malformed Event: 0x02
[  274.145374][ T6948] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[  274.165933][ T6948] usb 8-1: device descriptor read/8, error -71
[  274.295498][T16352] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  274.415168][ T6948] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  274.434256][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  274.443353][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  274.448728][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  274.453732][ T6948] usb 8-1: device descriptor read/8, error -71
[  274.456019][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  274.459488][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.573657][T16366] chnl_net:caif_netlink_parms(): no params data found
[  274.575746][ T6948] usb usb8-port1: unable to enumerate USB device
[  274.624938][T16366] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.627570][T16366] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.629886][T16366] bridge_slave_0: entered allmulticast mode
[  274.632646][T16366] bridge_slave_0: entered promiscuous mode
[  274.639570][T16366] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.641854][T16366] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.644243][T16366] bridge_slave_1: entered allmulticast mode
[  274.645349][   T34] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  274.647185][T16366] bridge_slave_1: entered promiscuous mode
[  274.678030][T16366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.682582][T16366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.699783][T16366] team0: Port device team_slave_0 added
[  274.703975][T16366] team0: Port device team_slave_1 added
[  274.719651][T16366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.722243][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.730365][T16366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.734810][T16366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.737104][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.745008][T16366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.767955][T16366] hsr_slave_0: entered promiscuous mode
[  274.770212][T16366] hsr_slave_1: entered promiscuous mode
[  274.772365][T16366] debugfs: 'hsr0' already exists in 'hsr'
[  274.774182][T16366] Cannot create hsr debugfs directory
[  274.796337][   T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  274.799783][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.803236][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.807610][   T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  274.812893][   T34] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  274.816632][   T34] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  274.819352][   T34] usb 6-1: Manufacturer: syz
[  274.822628][   T34] usb 6-1: config 0 descriptor??
[  274.884044][T16365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16365 comm=syz.6.2957
[  275.028394][   T34] appleir 0003:05AC:8243.002B: unknown main item tag 0x0
[  275.033849][   T34] appleir 0003:05AC:8243.002B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  275.893558][T16387] pimreg9: entered allmulticast mode
[  275.904878][T16387] Cache volume key already in use (9p,syz,)
[  276.064902][T16401] lo: entered promiscuous mode
[  276.072789][T16401] IPv6: NLM_F_REPLACE set, but no existing node found!
[  276.117562][ T1228] erspan0: left allmulticast mode
[  276.119308][ T1228] erspan0: left promiscuous mode
[  276.121026][ T1228] bridge3: port 1(erspan0) entered disabled state
[  276.126400][   T40] audit: type=1400 audit(1775932021.714:1753): avc:  denied  { mount } for  pid=16404 comm="syz.6.2967" name="/" dev="autofs" ino=67076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  276.229758][ T1228] bond14 (unregistering): (slave xfrm1): Releasing backup interface
[  276.287482][ T1228] bond12 (unregistering): (slave gretap1): Releasing backup interface
[  276.314540][ T1228] bond18 (unregistering): (slave geneve3): Releasing active interface
[  276.326436][ T1228] bond17 (unregistering): (slave geneve2): Releasing active interface
[  276.490182][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2972'.
[  276.525383][ T5946] Bluetooth: hci1: command tx timeout
[  276.869424][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.873117][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.876532][ T1228] bond0 (unregistering): Released all slaves
[  276.881084][ T1228] bond1 (unregistering): Released all slaves
[  276.888051][ T1228] bond2 (unregistering): Released all slaves
[  276.912197][ T1228] bond3 (unregistering): Released all slaves
[  276.920690][ T1228] bond4 (unregistering): Released all slaves
[  276.928571][ T1228] bond5 (unregistering): Released all slaves
[  276.940184][ T1228] bond6 (unregistering): Released all slaves
[  276.946778][ T1228] bond7 (unregistering): Released all slaves
[  276.953336][ T1228] bond8 (unregistering): Released all slaves
[  276.960404][ T1228] bond9 (unregistering): Released all slaves
[  276.968574][ T1228] bond10 (unregistering): Released all slaves
[  276.981307][ T1228] bond11 (unregistering): Released all slaves
[  276.988421][ T1228] bond12 (unregistering): (slave bond13): Releasing backup interface
[  276.991378][ T1228] bond12 (unregistering): Released all slaves
[  277.003858][ T1228] bond13 (unregistering): Released all slaves
[  277.010703][ T1228] bond14 (unregistering): Released all slaves
[  277.017765][ T1228] bond15 (unregistering): Released all slaves
[  277.024616][ T1228] bond16 (unregistering): Released all slaves
[  277.031546][ T1228] bond17 (unregistering): Released all slaves
[  277.038223][ T1228] bond18 (unregistering): Released all slaves
[  277.090349][T16443] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2971'.
[  277.311748][ T1228] tipc: Left network mode
[  277.330291][ T1228] IPVS: stopping master sync thread 10317 ...
[  277.424066][   T34] usb 6-1: USB disconnect, device number 28
[  277.509873][T16478] 9pnet_virtio: no channels available for device syz
[  277.514549][T16478] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2979'.
[  277.523137][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  277.527082][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'.
[  277.531113][T16478] netlink: 'syz.1.2979': attribute type 19 has an invalid length.
[  277.546745][T16480] netlink: 'syz.6.2980': attribute type 64 has an invalid length.
[  277.549321][T16480] netlink: 'syz.6.2980': attribute type 4 has an invalid length.
[  277.551827][T16480] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2980'.
[  277.611143][T16484] netlink: 'syz.1.2982': attribute type 7 has an invalid length.
[  277.614246][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'.
[  277.657445][   T40] audit: type=1400 audit(1775932023.244:1754): avc:  denied  { lock } for  pid=16490 comm="syz.6.2984" path="socket:[65390]" dev="sockfs" ino=65390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  277.670511][ T1228] hsr_slave_0: left promiscuous mode
[  277.672693][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.677829][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.713913][ T5946] Bluetooth: hci3: unexpected event for opcode 0x1408
[  277.886067][   T40] audit: type=1400 audit(1775932023.474:1755): avc:  denied  { create } for  pid=16512 comm="syz.3.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  277.893083][   T40] audit: type=1400 audit(1775932023.474:1756): avc:  denied  { setopt } for  pid=16512 comm="syz.3.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  277.893763][ T1228] team0 (unregistering): Port device team_slave_1 removed
[  277.900198][   T40] audit: type=1400 audit(1775932023.474:1757): avc:  denied  { write } for  pid=16512 comm="syz.3.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  278.110383][T16366] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  278.121627][T16366] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  278.128897][T16366] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  278.137470][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.140576][ T5946] Bluetooth: hci3: link tx timeout
[  278.142653][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.144860][ T5946] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  278.150268][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.157717][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.158482][T16366] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  278.166477][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.171383][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.185136][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.189774][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.194185][T16523] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0
[  278.291578][T16366] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.313970][T16366] 8021q: adding VLAN 0 to HW filter on device team0
[  278.323937][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.327146][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.342924][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.346100][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.443331][T16546] 9pnet_fd: p9_fd_create_tcp (16546): problem binding to privport
[  278.570894][T16366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.615407][ T5949] Bluetooth: hci1: command tx timeout
[  278.665302][T16567] XFS (nbd3): SB validate failed with error -5.
[  278.723556][ T1228] IPVS: stop unused estimator thread 0...
[  278.786050][T16366] veth0_vlan: entered promiscuous mode
[  278.790864][T16366] veth1_vlan: entered promiscuous mode
[  278.810585][T16366] veth0_macvtap: entered promiscuous mode
[  278.814455][T16366] veth1_macvtap: entered promiscuous mode
[  278.827581][T16366] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.834761][T16366] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.876151][  T781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.881752][T16586] xt_l2tp: missing protocol rule (udp|l2tpip)
[  278.883490][  T781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.892323][  T781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.909510][T16586] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  278.918759][  T781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.970832][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.974178][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.001668][T16593] syzkaller1: entered promiscuous mode
[  279.003462][T16593] syzkaller1: entered allmulticast mode
[  279.012453][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.014954][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.030637][   T40] audit: type=1400 audit(1775932024.614:1758): avc:  denied  { mounton } for  pid=16366 comm="syz-executor" path="/syzkaller.eeRI7p/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  279.121154][T16607] raw_sendmsg: syz.5.3009 forgot to set AF_INET. Fix it!
[  279.186998][T16617] Bluetooth: MGMT ver 1.23
[  279.259619][   T40] audit: type=1400 audit(1775932024.844:1759): avc:  denied  { getopt } for  pid=16626 comm="syz.5.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  279.360253][T16639] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  279.363365][T16639] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  279.384034][T16631] bond11: option xmit_hash_policy: invalid value (6)
[  279.388480][T16631] bond11 (unregistering): Released all slaves
[  279.394053][T16637] fuse: Invalid rootmode
[  280.073911][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3026'.
[  280.105007][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3028'.
[  280.139740][T16668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16668 comm=syz.1.3029
[  280.146033][T16668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=16668 comm=syz.1.3029
[  280.151334][T16668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=16668 comm=syz.1.3029
[  280.157023][T16668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=16668 comm=syz.1.3029
[  280.205334][ T5949] Bluetooth: hci3: command 0x0405 tx timeout
[  280.259723][T16678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3032'.
[  280.305085][   T40] audit: type=1400 audit(1775932025.884:1760): avc:  denied  { lock } for  pid=16671 comm="syz.3.3031" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  280.406240][   T40] audit: type=1400 audit(1775932025.994:1761): avc:  denied  { lock } for  pid=16689 comm="syz.1.3034" path="socket:[68800]" dev="sockfs" ino=68800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  280.532109][T16703] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  280.604480][   T40] audit: type=1400 audit(1775932026.184:1762): avc:  denied  { setattr } for  pid=16710 comm="syz.1.3038" name="BNEP" dev="sockfs" ino=65492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  280.685196][ T5946] Bluetooth: hci1: command tx timeout
[  280.801825][T16729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16729 comm=syz.1.3041
[  280.908478][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.
[  280.912227][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  280.916483][T16735] netlink: 'syz.1.3043': attribute type 12 has an invalid length.
[  281.111717][T16759] "syz.6.3049" (16759) uses obsolete ecb(arc4) skcipher
[  281.118213][T16760] "syz.6.3049" (16760) uses obsolete ecb(arc4) skcipher
[  281.173214][T16769] net_ratelimit: 246 callbacks suppressed
[  281.173229][T16769] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  281.178040][T16769] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  281.182125][   T40] audit: type=1400 audit(1775932026.764:1763): avc:  denied  { connect } for  pid=16767 comm="syz.6.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  281.275294][ T1338] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  281.445182][ T1338] usb 6-1: Using ep0 maxpacket: 8
[  281.448715][ T1338] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  281.452032][ T1338] usb 6-1: config 0 has no interface number 0
[  281.454531][ T1338] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  281.459931][ T1338] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  281.460988][T16791] lo speed is unknown, defaulting to 1000
[  281.464512][ T1338] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  281.464540][ T1338] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  281.464561][ T1338] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  281.469515][T16791] lo speed is unknown, defaulting to 1000
[  281.474537][ T1338] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  281.479568][T16791] lo speed is unknown, defaulting to 1000
[  281.480981][ T1338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.494246][ T1338] usb 6-1: config 0 descriptor??
[  281.521667][ T1338] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  281.607801][T16791] infiniband lyz2: set active
[  281.609811][ T1338] lo speed is unknown, defaulting to 1000
[  281.613512][T16791] infiniband lyz2: added lo
[  281.644349][T16791] RDS/IB: lyz2: added
[  281.646003][T16791] smc: adding ib device lyz2 with port count 1
[  281.648170][T16791] smc:    ib device lyz2 port 1 has no pnetid
[  281.652085][ T1338] lo speed is unknown, defaulting to 1000
[  281.654925][T16791] lo speed is unknown, defaulting to 1000
[  281.703734][T16748] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  281.718157][  T831] usb 6-1: USB disconnect, device number 29
[  281.733085][  T831] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  281.753537][T16791] lo speed is unknown, defaulting to 1000
[  281.836914][T16791] lo speed is unknown, defaulting to 1000
[  281.923151][T16791] lo speed is unknown, defaulting to 1000
[  282.005766][T16791] lo speed is unknown, defaulting to 1000
[  282.089757][T16797] PKCS7: Unknown OID: [4] 5.25.43183(bad)
[  282.092235][T16797] PKCS7: Only support pkcs7_signedData type
[  282.135294][T16794] lo speed is unknown, defaulting to 1000
[  282.138113][T16794] lo speed is unknown, defaulting to 1000
[  282.141322][T16794] lo speed is unknown, defaulting to 1000
[  282.156213][T16794] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  282.162893][T16794] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  282.176815][T16794] lo speed is unknown, defaulting to 1000
[  282.180200][T16794] lo speed is unknown, defaulting to 1000
[  282.182709][T16794] lo speed is unknown, defaulting to 1000
[  282.188717][T16794] lo speed is unknown, defaulting to 1000
[  282.191269][T16794] lo speed is unknown, defaulting to 1000
[  282.638100][T16843] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  282.640721][T16843] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  282.671106][T16841] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  282.674197][T16841] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  282.678860][T16840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.765134][ T5946] Bluetooth: hci1: command tx timeout
[  282.769359][T16849] __nla_validate_parse: 10 callbacks suppressed
[  282.769371][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3077'.
[  282.960696][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'.
[  282.999111][T16874] x_tables: ip6_tables: CT target: only valid in raw table, not syz1
[  283.002903][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'.
[  283.303890][T16886] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  283.539717][T16900] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3091'.
[  283.603935][T16900] erspan3: entered promiscuous mode
[  283.676547][ T1338] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[  283.751063][T16912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.836782][ T1338] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  283.839790][ T1338] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.843157][ T1338] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  283.846537][ T1338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.849947][ T1338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.854507][ T1338] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  283.860369][ T1338] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  283.862969][ T1338] usb 8-1: Product: syz
[  283.864567][ T1338] usb 8-1: Manufacturer: syz
[  283.875755][ T1338] cdc_wdm 8-1:1.0: skipping garbage
[  283.877468][ T1338] cdc_wdm 8-1:1.0: skipping garbage
[  283.883471][ T1338] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  283.885919][ T1338] cdc_wdm 8-1:1.0: Unknown control protocol
[  284.026065][T16914] cgroup: subsys name conflicts with all
[  284.031325][T16914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16914 comm=syz.6.3095
[  284.086667][T16892] cdc_wdm 8-1:1.0: Error submitting int urb - -90
[  284.098049][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.103002][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.126700][ T1338] usb 8-1: USB disconnect, device number 57
[  284.228392][T16946] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  284.232864][T16946] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  284.280906][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  284.280969][   T40] audit: type=1326 audit(1775932029.864:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16945 comm="syz.5.3101" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fde39c819 code=0x0
[  284.616253][T16250] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[  284.791520][T16250] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.796234][T16250] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.800283][T16250] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  284.815131][T16250] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  284.819060][T16250] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.835728][T16250] usb 8-1: config 0 descriptor??
[  284.905930][T16968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3106'.
[  285.246463][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.249794][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.253514][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.257251][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.260533][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.263622][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.266430][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.268670][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.271326][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.273445][T16250] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0
[  285.281248][T16250] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  285.445105][   T39] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  285.452934][   T40] audit: type=1400 audit(1775932031.034:1766): avc:  denied  { setattr } for  pid=16955 comm="syz.3.3103" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  285.467313][ T8540] usb 8-1: USB disconnect, device number 58
[  285.612704][   T39] usb 10-1: unable to read config index 0 descriptor/start: -71
[  285.615444][   T39] usb 10-1: can't read configurations, error -71
[  285.945261][T16250] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  286.107098][T16250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.111764][T16250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.116257][T16250] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  286.121768][T16250] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  286.127195][T16250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.133549][T16250] usb 6-1: config 0 descriptor??
[  286.262127][T17005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.286416][T16996] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  286.422772][T17019] xt_l2tp: v2 sid > 0xffff: 4294967294
[  286.431578][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3120'.
[  286.543120][T17038] openvswitch: netlink: Flow actions attr not present in new flow.
[  286.609295][   T40] audit: type=1400 audit(1775932032.194:1767): avc:  denied  { ioctl } for  pid=17047 comm="syz.3.3129" path="socket:[67487]" dev="sockfs" ino=67487 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  286.647696][T17054] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  286.761561][T16250] usbhid 6-1:0.0: can't add hid device: -71
[  286.768828][T16250] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  286.778068][T16250] usb 6-1: USB disconnect, device number 30
[  286.800223][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'.
[  287.225610][T17085] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3137'.
[  287.313484][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'.
[  287.313494][T17088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'.
[  287.359862][T17091] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  287.386303][T17087] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  287.541580][T17108] overlayfs: conflicting lowerdir path
[  287.694722][T17125] openvswitch: netlink: Key type 51 is out of range max 32
[  287.741855][T17131] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  287.780319][T17134] xt_TPROXY: Can be used only with -p tcp or -p udp
[  287.854983][T17146] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  288.027328][   T40] audit: type=1400 audit(1775932033.614:1768): avc:  denied  { listen } for  pid=17155 comm="syz.5.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  288.082573][T17160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  288.140176][T17166] netlink: 'syz.5.3162': attribute type 10 has an invalid length.
[  288.143056][T17166] veth1_macvtap: left promiscuous mode
[  288.148294][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3162'.
[  288.185659][ T1338] IPVS: starting estimator thread 0...
[  288.238560][T17176] overlayfs: failed to resolve './file2': -2
[  288.290147][T17171] IPVS: using max 45 ests per chain, 108000 per kthread
[  288.294655][T17195] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3169'.
[  288.300572][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3169'.
[  288.369423][   T40] audit: type=1400 audit(1775932033.954:1769): avc:  denied  { setattr } for  pid=17187 comm="syz.3.3168" name="[io_uring]" dev="anon_inodefs" ino=71732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  288.399558][T17206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3173'.
[  288.453384][T17209] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3174'.
[  288.461277][T17209] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  288.463803][T17209] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock
[  288.466543][T17209] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  288.469048][T17209] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock
[  288.477812][T17209] kernel read not supported for file /file1 (pid: 17209 comm: syz.1.3174)
[  288.477894][ T5946] Bluetooth: hci0: unexpected event for opcode 0x1804
[  288.481066][   T40] audit: type=1800 audit(1775932034.064:1770): pid=17209 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3174" name="file1" dev="mqueue" ino=70134 res=0 errno=0
[  288.495097][   T40] audit: type=1400 audit(1775932034.064:1771): avc:  denied  { shutdown } for  pid=17208 comm="syz.1.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  288.553580][T17214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.561332][T17214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.589999][   T40] audit: type=1400 audit(1775932034.174:1772): avc:  denied  { lock } for  pid=17218 comm="syz.3.3178" path="socket:[70833]" dev="sockfs" ino=70833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  288.590516][T17219] gfs2: gfs2 mount does not exist
[  288.722299][T17229] SELinux:  policydb magic number 0xfffd does not match expected magic number 0xf97cff8c
[  288.728570][T17229] SELinux: failed to load policy
[  288.767309][T17233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3183'.
[  288.770898][T17233] netlink: 'syz.1.3183': attribute type 7 has an invalid length.
[  288.773798][T17233] netlink: 'syz.1.3183': attribute type 8 has an invalid length.
[  288.777008][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3183'.
[  288.785171][T17233] erspan0: entered promiscuous mode
[  288.789029][T17233] gretap0: entered promiscuous mode
[  288.792039][T17233] erspan0: left promiscuous mode
[  288.799380][T17233] gretap0: left promiscuous mode
[  288.805156][   T39] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  288.898854][T17231] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  288.915364][ T1338] lo speed is unknown, defaulting to 1000
[  288.917294][ T1338] lyz2: Port: 1 Link DOWN
[  288.919965][ T1338] lo speed is unknown, defaulting to 1000
[  288.924764][T17231] netlink: 'syz.3.3182': attribute type 1 has an invalid length.
[  288.952508][   T40] audit: type=1400 audit(1775932034.534:1773): avc:  denied  { setopt } for  pid=17248 comm="syz.1.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  288.960788][   T40] audit: type=1400 audit(1775932034.534:1774): avc:  denied  { connect } for  pid=17248 comm="syz.1.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  288.966999][   T39] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.967053][   T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  288.977338][   T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  288.982282][   T39] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  288.988432][   T39] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  288.992618][   T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.997293][T17249] netlink: 'syz.1.3187': attribute type 2 has an invalid length.
[  289.000001][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3187'.
[  289.007405][   T39] usb 10-1: config 0 descriptor??
[  289.012905][T17213] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  289.037068][T17254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17254 comm=syz.6.3188
[  289.042420][T17254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  289.045873][T17248] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  289.110435][T17259] netlink: 'syz.3.3191': attribute type 1 has an invalid length.
[  289.134175][T17259] 8021q: adding VLAN 0 to HW filter on device bond1
[  289.149089][T17259] bond1: (slave geneve3): making interface the new active one
[  289.154966][T17259] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  289.155694][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3188'.
[  289.160817][T17265] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3192'.
[  289.170308][T17265] hugetlbfs: syz.1.3192 (17265): Using mlock ulimits for SHM_HUGETLB is obsolete
[  289.219160][   T39] usbhid 10-1:0.0: can't add hid device: -71
[  289.220415][T17263] 8021q: adding VLAN 0 to HW filter on device bond12
[  289.221161][   T39] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  289.226409][T17263] bond11: (slave bond12): Enslaving as an active interface with an up link
[  289.235985][   T39] usb 10-1: USB disconnect, device number 23
[  289.252497][T17275] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  289.371303][T17282] bond3: Removing last arp target with arp_interval on
[  289.387587][T17282] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  289.494233][   T40] audit: type=1326 audit(1775932035.074:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17288 comm="syz.1.3200" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdabb9c819 code=0x0
[  289.565147][T17296] kAFS: unable to lookup cell 'syz0'
[  289.758271][T17310] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  289.770611][T17310] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  289.818089][T17306] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  289.849942][T17317] netlink: 'syz.6.3207': attribute type 1 has an invalid length.
[  289.853861][T17318] netlink: 'syz.6.3207': attribute type 1 has an invalid length.
[  289.867471][T17317] 8021q: adding VLAN 0 to HW filter on device bond13
[  289.881948][T17317] bond13: (slave geneve2): making interface the new active one
[  289.887359][T17317] bond13: (slave geneve2): Enslaving as an active interface with an up link
[  289.891165][   T86] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  289.893712][   T40] audit: type=1400 audit(1775932035.474:1776): avc:  denied  { listen } for  pid=17323 comm="syz.5.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  289.903677][   T40] audit: type=1400 audit(1775932035.484:1777): avc:  denied  { ioctl } for  pid=17323 comm="syz.5.3209" path="socket:[72897]" dev="sockfs" ino=72897 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  289.909200][   T86] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  289.919558][   T86] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  289.923070][   T86] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  289.949597][T17328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  289.993990][T17338] tmpfs: Bad value for 'mpol'
[  290.231629][T17351] xt_hashlimit: size too large, truncated to 1048576
[  290.380548][T17358] openvswitch: netlink: Flow actions attr not present in new flow.
[  290.481827][T17366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.509452][T17373] overlayfs: overlapping lowerdir path
[  290.539886][T17380] x_tables: duplicate underflow at hook 1
[  290.554961][   T40] audit: type=1400 audit(1775932036.134:1778): avc:  denied  { getopt } for  pid=17383 comm="syz.3.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  290.568296][   T40] audit: type=1400 audit(1775932036.154:1779): avc:  denied  { connect } for  pid=17386 comm="syz.6.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  290.696558][   T40] audit: type=1400 audit(1775932036.284:1780): avc:  denied  { accept } for  pid=17392 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1
[  290.704736][T17393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17393 comm=syz.6.3232
[  290.704766][T17401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17401 comm=syz.6.3232
[  290.875215][T16250] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  290.906034][T17408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64512 sclass=netlink_route_socket pid=17408 comm=syz.6.3234
[  290.913411][T17407] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  290.914290][   T40] audit: type=1400 audit(1775932036.494:1781): avc:  denied  { mounton } for  pid=17406 comm="syz.5.3235" path="/44/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  290.920961][T17407] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  290.931670][   T40] audit: type=1400 audit(1775932036.514:1782): avc:  denied  { read } for  pid=17406 comm="syz.5.3235" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  290.941024][   T40] audit: type=1400 audit(1775932036.514:1783): avc:  denied  { read } for  pid=17406 comm="syz.5.3235" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  290.951198][   T40] audit: type=1400 audit(1775932036.514:1784): avc:  denied  { read } for  pid=17406 comm="syz.5.3235" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  290.954425][T17407] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  290.964529][T17407] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  290.968260][T17407] overlayfs: d_ino too big (44, ino=9223372036854776074, xinobits=3)
[  290.971553][T17407] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  290.974495][T17407] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  290.977815][T17407] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  290.980641][T17407] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  290.983703][T17407] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  290.987390][T17407] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[  290.991587][T17407] overlayfs: d_ino too big (instances, ino=4611686018427391138, xinobits=3)
[  291.055134][T16250] usb 6-1: Using ep0 maxpacket: 8
[  291.058904][T16250] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  291.061641][T16250] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  291.065800][T16250] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  291.068976][T16250] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  291.072917][T16250] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  291.077849][T16250] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  291.083296][T16250] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  291.090281][T16250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.120745][T17414] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  291.300672][T17397] loop5: detected capacity change from 0 to 7
[  291.357541][   T25] blk_print_req_error: 151 callbacks suppressed
[  291.357561][   T25] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.366662][   T25] buffer_io_error: 150 callbacks suppressed
[  291.366677][   T25] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.375539][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.375588][T16250] usb 6-1: usb_control_msg returned -32
[  291.375614][T16250] usbtmc 6-1:16.0: can't read capabilities
[  291.380550][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.398425][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.401606][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.404230][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.407546][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.411261][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.414386][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.419673][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.422767][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.425781][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.428969][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.431544][T17397] ldm_validate_partition_table(): Disk read failed.
[  291.433696][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.436888][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.439515][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.442512][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.445166][T17397] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  291.448316][T17397] Buffer I/O error on dev loop5, logical block 0, async page read
[  291.450927][T17397] Dev loop5: unable to read RDB block 0
[  291.452802][T17397]  loop5: unable to read partition table
[  291.454704][T17397] loop5: partition table beyond EOD, truncated
[  291.461031][T17397] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  291.732265][T17461] veth0_to_bond: entered allmulticast mode
[  291.741103][T17461] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  291.782700][T17466] sock: sock_timestamping_bind_phc: sock not bind to device
[  291.906674][T17471] netlink: 'syz.6.3255': attribute type 1 has an invalid length.
[  291.925959][T17471] bond14: entered promiscuous mode
[  291.926633][T17477] ubi31: attaching mtd0
[  291.928520][T17471] 8021q: adding VLAN 0 to HW filter on device bond14
[  291.936098][T17477] ubi31: scanning is finished
[  291.938156][T17477] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  292.064433][T17479] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71
[  292.068327][T17479] usbtmc 6-1:16.0: usb_control_msg returned -32
[  292.072316][T17440] comedi comedi3: comedi_config --init_data is deprecated
[  292.229857][T17477] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  292.260989][T17486] binder: 17485:17486 ioctl c0306201 200000000080 returned -14
[  292.264309][T17486] binder: 17485:17486 ioctl c0306201 2000000003c0 returned -14
[  292.755189][T16250] usb 10-1: new low-speed USB device number 24 using dummy_hcd
[  292.916879][T16250] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.921135][T16250] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  292.924816][T16250] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  292.929360][T16250] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  292.933129][T16250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.939419][T17495] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  292.944367][T16250] hub 10-1:1.0: bad descriptor, ignoring hub
[  292.951910][T16250] hub 10-1:1.0: probe with driver hub failed with error -5
[  292.960719][T16250] cdc_wdm 10-1:1.0: skipping garbage
[  292.962897][T16250] cdc_wdm 10-1:1.0: skipping garbage
[  292.970038][T16250] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device
[  292.972541][T16250] cdc_wdm 10-1:1.0: Unknown control protocol
[  293.006853][T17505] ISOFS: Unable to identify CD-ROM format.
[  293.365422][T17525] snd_dummy snd_dummy.0: control 1:9:195:�� :53367 is already present
[  293.433426][T17531] netlink: 'syz.3.3279': attribute type 1 has an invalid length.
[  293.453248][T17531] bond3: entered promiscuous mode
[  293.455852][T17531] 8021q: adding VLAN 0 to HW filter on device bond3
[  293.466461][ T8540] usb 10-1: USB disconnect, device number 24
[  293.626899][ T1338] usb 6-1: USB disconnect, device number 31
[  293.631159][T17539] netlink: 'syz.3.3282': attribute type 5 has an invalid length.
[  293.692756][T17546] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  293.704724][T17549] netlink: 'syz.3.3286': attribute type 1 has an invalid length.
[  293.721344][T17549] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.788967][T17561] vlan2: entered allmulticast mode
[  293.791253][T17561] bond4: entered allmulticast mode
[  293.837890][T17562] __nla_validate_parse: 10 callbacks suppressed
[  293.837903][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3289'.
[  293.922003][T17578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3294'.
[  293.931777][T17580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  293.980086][T17584] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3297'.
[  293.980661][T17585] f2fs: Unknown parameter 'grpquota'
[  293.986773][T17585] f2fs: Unknown parameter 'grpquota'
[  293.989462][T17585] f2fs: Unknown parameter 'grpquota'
[  293.996841][T17585] f2fs: Unknown parameter 'grpquota'
[  293.999494][T17585] f2fs: Unknown parameter 'grpquota'
[  294.002131][T17585] f2fs: Unknown parameter 'grpquota'
[  294.004767][T17585] f2fs: Unknown parameter 'grpquota'
[  294.011929][T17585] f2fs: Unknown parameter 'grpquota'
[  294.016232][T17585] f2fs: Unknown parameter 'grpquota'
[  294.018869][T17585] f2fs: Unknown parameter 'grpquota'
[  294.021459][T17585] f2fs: Unknown parameter 'grpquota'
[  294.024477][T17585] f2fs: Unknown parameter 'grpquota'
[  294.028310][T17585] f2fs: Unknown parameter 'grpquota'
[  294.030842][T17585] f2fs: Unknown parameter 'grpquota'
[  294.033366][T17585] f2fs: Unknown parameter 'grpquota'
[  294.036378][T17585] f2fs: Unknown parameter 'grpquota'
[  294.038873][T17585] f2fs: Unknown parameter 'grpquota'
[  294.041447][T17585] f2fs: Unknown parameter 'grpquota'
[  294.044011][T17585] f2fs: Unknown parameter 'grpquota'
[  294.047423][T17585] f2fs: Unknown parameter 'grpquota'
[  294.050934][T17585] f2fs: Unknown parameter 'grpquota'
[  294.053447][T17585] f2fs: Unknown parameter 'grpquota'
[  294.056244][T17585] f2fs: Unknown parameter 'grpquota'
[  294.058583][T17585] f2fs: Unknown parameter 'grpquota'
[  294.060925][T17585] f2fs: Unknown parameter 'grpquota'
[  294.063398][T17585] f2fs: Unknown parameter 'grpquota'
[  294.064356][T17596] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  294.066374][T17585] f2fs: Unknown parameter 'grpquota'
[  294.071201][T17596] nfs4: Unknown parameter '
'
[  294.071386][T17585] f2fs: Unknown parameter 'grpquota'
[  294.076372][T17585] f2fs: Unknown parameter 'grpquota'
[  294.078893][T17585] f2fs: Unknown parameter 'grpquota'
[  294.081387][T17585] f2fs: Unknown parameter 'grpquota'
[  294.083911][T17585] f2fs: Unknown parameter 'grpquota'
[  294.086446][T17585] f2fs: Unknown parameter 'grpquota'
[  294.089557][T17585] f2fs: Unknown parameter 'grpquota'
[  294.092042][T17585] f2fs: Unknown parameter 'grpquota'
[  294.094510][T17585] f2fs: Unknown parameter 'grpquota'
[  294.097174][T17585] f2fs: Unknown parameter 'grpquota'
[  294.099842][T17585] f2fs: Unknown parameter 'grpquota'
[  294.102280][T17585] f2fs: Unknown parameter 'grpquota'
[  294.104742][T17585] f2fs: Unknown parameter 'grpquota'
[  294.108083][T17585] f2fs: Unknown parameter 'grpquota'
[  294.112092][T17585] f2fs: Unknown parameter 'grpquota'
[  294.114648][T17585] f2fs: Unknown parameter 'grpquota'
[  294.117376][T17585] f2fs: Unknown parameter 'grpquota'
[  294.119866][T17585] f2fs: Unknown parameter 'grpquota'
[  294.122323][T17585] f2fs: Unknown parameter 'grpquota'
[  294.124815][T17585] f2fs: Unknown parameter 'grpquota'
[  294.127584][T17585] f2fs: Unknown parameter 'grpquota'
[  294.130087][T17585] f2fs: Unknown parameter 'grpquota'
[  294.132599][T17585] f2fs: Unknown parameter 'grpquota'
[  294.135241][T17585] f2fs: Unknown parameter 'grpquota'
[  294.137722][T17585] f2fs: Unknown parameter 'grpquota'
[  294.140220][T17585] f2fs: Unknown parameter 'grpquota'
[  294.142706][T17585] f2fs: Unknown parameter 'grpquota'
[  294.145364][T17585] f2fs: Unknown parameter 'grpquota'
[  294.147924][T17585] f2fs: Unknown parameter 'grpquota'
[  294.150447][T17585] f2fs: Unknown parameter 'grpquota'
[  294.152941][T17585] f2fs: Unknown parameter 'grpquota'
[  294.155898][T17585] f2fs: Unknown parameter 'grpquota'
[  294.158435][T17585] f2fs: Unknown parameter 'grpquota'
[  294.160954][T17585] f2fs: Unknown parameter 'grpquota'
[  294.163465][T17585] f2fs: Unknown parameter 'grpquota'
[  294.165765][T17585] f2fs: Unknown parameter 'grpquota'
[  294.168005][T17585] f2fs: Unknown parameter 'grpquota'
[  294.170582][T17585] f2fs: Unknown parameter 'grpquota'
[  294.177476][   T34] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[  294.245107][T17599] Invalid logical block size (6)
[  294.345236][   T34] usb 8-1: Using ep0 maxpacket: 8
[  294.351044][   T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  294.354516][   T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.355149][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  294.359326][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.362329][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'.
[  294.366801][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  294.370422][T17606] netlink: 'syz.1.3302': attribute type 18 has an invalid length.
[  294.374859][   T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.377964][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  294.389193][   T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  294.392019][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.602132][   T34] usb 8-1: usb_control_msg returned -32
[  294.604080][   T34] usbtmc 8-1:16.0: can't read capabilities
[  294.704654][T17612] lo speed is unknown, defaulting to 1000
[  294.797676][T17612] lo speed is unknown, defaulting to 1000
[  294.960642][ T5343] ldm_validate_partition_table(): Disk read failed.
[  294.968370][ T5343] Dev loop6: unable to read RDB block 0
[  294.976772][ T5343]  loop6: unable to read partition table
[  294.979284][ T5343] loop6: partition table beyond EOD, truncated
[  295.048599][   T34] hid_parser_main: 5 callbacks suppressed
[  295.048615][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.053941][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.058502][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.061534][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.064603][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.068124][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.071070][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.074072][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.077407][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.080430][   T34] hid-generic 0005:000B:0009.002D: unknown main item tag 0x0
[  295.114583][   T34] hid-generic 0005:000B:0009.002D: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on syz1
[  295.307865][T17638] usbtmc 8-1:16.0: usb_control_msg returned -71
[  295.316400][   T40] kauditd_printk_skb: 19 callbacks suppressed
[  295.316412][   T40] audit: type=1400 audit(1775932040.904:1804): avc:  denied  { name_bind } for  pid=17577 comm="syz.3.3294" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  295.452945][T17645] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3312'.
[  295.456613][T17645] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3312'.
[  295.459718][T17647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3312'.
[  295.463216][T17647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3312'.
[  295.519812][ T1338] usb 8-1: USB disconnect, device number 59
[  295.978474][T17676] sp0: Synchronizing with TNC
[  295.984171][T17675] [U] �
[  296.099609][T17688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.379669][T17728] netlink: 'syz.5.3341': attribute type 1 has an invalid length.
[  296.403942][T17728] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.434144][T17728] bond1: (slave veth3): Enslaving as an active interface with a down link
[  296.447959][   T40] audit: type=1400 audit(1775932042.034:1805): avc:  denied  { map } for  pid=17738 comm="syz.6.3344" path="socket:[73736]" dev="sockfs" ino=73736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  296.504031][T17736] syzkaller0: entered promiscuous mode
[  296.508136][T17736] syzkaller0: entered allmulticast mode
[  296.615932][T17749] gfs2: error -5 reading superblock
[  296.638199][   T34] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  296.775176][   T34] usb 6-1: device descriptor read/64, error -71
[  296.777947][   T40] audit: type=1400 audit(1775932042.364:1806): avc:  denied  { write } for  pid=17750 comm="syz.5.3348" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  297.030079][   T34] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  297.185299][   T34] usb 6-1: device descriptor read/64, error -71
[  297.296394][   T34] usb usb6-port1: attempt power cycle
[  297.402450][T17755] netlink: zone id is out of range
[  297.404170][T17755] netlink: zone id is out of range
[  297.406680][T17755] netlink: zone id is out of range
[  297.408592][T17755] netlink: set zone limit has 8 unknown bytes
[  297.613366][T17763] IPVS: persistence engine module ip_vs_pe_s not found
[  297.645594][   T34] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  297.665493][   T34] usb 6-1: device descriptor read/8, error -71
[  297.915148][   T34] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  297.950866][   T34] usb 6-1: device descriptor read/8, error -71
[  298.048768][   T40] audit: type=1400 audit(1775932043.634:1807): avc:  denied  { read } for  pid=17770 comm="syz.6.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  298.058338][   T34] usb usb6-port1: unable to enumerate USB device
[  298.120372][T17771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.230782][T17785] openvswitch: netlink: Missing key (keys=40, expected=80)
[  298.548644][T17793] ip6erspan0: entered promiscuous mode
[  298.750254][   T40] audit: type=1400 audit(1775932044.334:1808): avc:  denied  { map } for  pid=17812 comm="syz.5.3367" path="socket:[71606]" dev="sockfs" ino=71606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  298.792712][T17808] bridge5: port 1(veth9) entered blocking state
[  298.795896][T17808] bridge5: port 1(veth9) entered disabled state
[  298.799391][T17808] veth9: entered allmulticast mode
[  298.800925][T17815] netlink: 'syz.5.3368': attribute type 1 has an invalid length.
[  298.803725][T17808] veth9: entered promiscuous mode
[  298.815695][T17815] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  298.831259][T17808] bridge5: port 2(veth0_to_bond) entered blocking state
[  298.838427][T17808] bridge5: port 2(veth0_to_bond) entered disabled state
[  298.841786][T17808] veth0_to_bond: entered allmulticast mode
[  298.846350][T17808] veth0_to_bond: entered promiscuous mode
[  298.961098][T17835] netlink: 'syz.5.3374': attribute type 1 has an invalid length.
[  298.973790][T17835] bond3: entered promiscuous mode
[  298.976143][T17835] 8021q: adding VLAN 0 to HW filter on device bond3
[  298.982574][T17835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17835 comm=syz.5.3374
[  299.263547][T17850] overlayfs: missing 'workdir'
[  299.515142][ T5989] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  299.675223][ T5989] usb 10-1: Using ep0 maxpacket: 8
[  299.679161][ T5989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  299.683503][ T5989] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  299.687978][ T5989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.694701][ T5989] usb 10-1: config 0 descriptor??
[  299.807904][T17870] veth1_to_batadv: entered promiscuous mode
[  299.831963][T17874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  299.888638][T17878] tmpfs: Unknown parameter 'nr_inodesU��E�Zcl��'
[  299.892442][T17878] binder: 17877:17878 ioctl 9361 5 returned -22
[  299.897190][T17878] __nla_validate_parse: 6 callbacks suppressed
[  299.897204][T17878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3390'.
[  299.909164][ T5989] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  300.010037][   T40] audit: type=1400 audit(1775932045.594:1809): avc:  denied  { search } for  pid=17879 comm="syz.3.3391" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  300.018666][   T40] audit: type=1400 audit(1775932045.604:1810): avc:  denied  { search } for  pid=17879 comm="syz.3.3391" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  300.027424][   T40] audit: type=1400 audit(1775932045.604:1811): avc:  denied  { read open } for  pid=17879 comm="syz.3.3391" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  300.037056][   T40] audit: type=1400 audit(1775932045.614:1812): avc:  denied  { search } for  pid=17879 comm="syz.3.3391" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  300.045257][   T40] audit: type=1400 audit(1775932045.614:1813): avc:  denied  { search } for  pid=17879 comm="syz.3.3391" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  300.095465][T17883] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  300.152897][T17885] binder: BINDER_SET_CONTEXT_MGR already set
[  300.155513][T17885] binder: 17884:17885 ioctl 4018620d 200000000100 returned -16
[  300.158633][T17885] binder: BINDER_SET_CONTEXT_MGR already set
[  300.162451][T17885] binder: 17884:17885 ioctl 4018620d 200000000100 returned -16
[  300.164154][ T1338] usb 10-1: USB disconnect, device number 25
[  300.164288][    C1] iowarrior 10-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  300.265173][ T8540] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[  300.311327][T17894] CIFS mount error: No usable UNC path provided in device string!
[  300.311327][T17894] 
[  300.315821][T17894] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  300.319377][T17893] mac80211_hwsim hwsim24 �����;: renamed from wlan0
[  300.395225][ T8540] usb 8-1: device descriptor read/64, error -71
[  300.635335][ T8540] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[  300.708723][   T86] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.711574][   T86] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.714313][   T86] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  300.775201][ T8540] usb 8-1: device descriptor read/64, error -71
[  300.803177][T17916] gfs2: error -5 reading superblock
[  300.859992][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  300.860011][   T40] audit: type=1400 audit(1775932046.444:1816): avc:  denied  { accept } for  pid=17911 comm="syz.5.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  300.905898][ T8540] usb usb8-port1: attempt power cycle
[  300.945798][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3408'.
[  300.948576][   T40] audit: type=1400 audit(1775932046.534:1817): avc:  denied  { getopt } for  pid=17928 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  300.971412][T17932] "syz.6.3409" (17932) uses obsolete ecb(arc4) skcipher
[  301.039829][T17939] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3412'.
[  301.072219][ T5946] Bluetooth: hci3: Unable to find connection with handle 0x007f
[  301.110585][   T40] audit: type=1400 audit(1775932302.689:1818): avc:  denied  { transfer } for  pid=17951 comm="syz.1.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  301.139175][T17957] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3418'.
[  301.203644][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3418'.
[  301.255142][ T8540] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  301.267459][T17967] netlink: 'syz.6.3420': attribute type 13 has an invalid length.
[  301.269766][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'.
[  301.285624][ T8540] usb 8-1: device descriptor read/8, error -71
[  301.290035][T17970] netlink: 'syz.1.3421': attribute type 1 has an invalid length.
[  301.306007][T17970] 8021q: adding VLAN 0 to HW filter on device bond4
[  301.335743][T17967] netlink: 'syz.6.3420': attribute type 13 has an invalid length.
[  301.338223][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'.
[  301.489628][T17982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.492361][T17982] IPv6: NLM_F_CREATE should be set when creating new route
[  301.495152][T17982] IPv6: NLM_F_CREATE should be set when creating new route
[  301.528145][ T8540] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[  301.545886][ T8540] usb 8-1: device descriptor read/8, error -71
[  301.667010][ T8540] usb usb8-port1: unable to enumerate USB device
[  301.765278][T17995] macvtap1: entered allmulticast mode
[  301.768124][T17995] vlan0: entered allmulticast mode
[  301.769975][T17995] veth0_vlan: entered allmulticast mode
[  301.773135][T17995] team0: Device macvtap1 failed to register rx_handler
[  301.780477][T17995] vlan0: left allmulticast mode
[  301.782893][T17995] veth0_vlan: left allmulticast mode
[  302.356081][T18033] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  302.360516][T18033] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3442'.
[  302.546360][T18044] netlink: 'syz.6.3446': attribute type 10 has an invalid length.
[  302.744700][T18059] netlink: 'syz.6.3451': attribute type 1 has an invalid length.
[  302.749244][T18059] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3451'.
[  302.798133][T18059] futex_wake_op: syz.6.3451 tries to shift op by 32; fix this program
[  302.907351][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3453'.
[  302.964702][T18068] nbd: device at index 64 is going down
[  303.064462][T15349] udevd[15349]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  303.508564][   T40] audit: type=1400 audit(1775932305.090:1819): avc:  denied  { read } for  pid=18113 comm="syz.1.3466" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  303.516697][   T40] audit: type=1400 audit(1775932305.090:1820): avc:  denied  { open } for  pid=18113 comm="syz.1.3466" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  303.869495][T18121] tun0: tun_chr_ioctl cmd 1074025675
[  303.871263][T18121] tun0: persist disabled
[  304.173358][T18152] netlink: 'syz.6.3473': attribute type 1 has an invalid length.
[  304.288523][T18155] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.291912][T18155] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.393203][T18155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.400068][T18155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.435992][T18155] veth0_macvtap: left allmulticast mode
[  304.513281][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.519034][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.522874][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.529626][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.536323][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.539568][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.543308][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.547971][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.798284][T18127] Process accounting resumed
[  304.834709][T18199] veth1_macvtap: entered promiscuous mode
[  304.838416][T18200] set match dimension is over the limit!
[  304.838529][T18199] macsec0: entered promiscuous mode
[  304.842071][T18199] macsec0: entered allmulticast mode
[  304.843782][T18199] veth1_macvtap: entered allmulticast mode
[  304.967608][T18204] veth3: entered allmulticast mode
[  304.976416][T18204] bond5: (slave veth3): Enslaving as an active interface with an up link
[  305.238221][T18215] syz.3.3485 (18215): /proc/18212/oom_adj is deprecated, please use /proc/18212/oom_score_adj instead.
[  305.251048][   T40] audit: type=1400 audit(1775932306.830:1821): avc:  denied  { connect } for  pid=18212 comm="syz.3.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  305.360116][T18224] openvswitch: netlink: IP tunnel dst address not specified
[  305.457832][T18229] befs: (nbd3): unable to read superblock
[  305.505099][T16250] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  305.508255][T18232] xt_time: unknown flags 0xf4
[  305.544183][T18236] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  305.665126][T16250] usb 10-1: Using ep0 maxpacket: 8
[  305.669585][T16250] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  305.672993][T16250] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  305.677543][T16250] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  305.681472][T16250] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  305.685580][T16250] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  305.690868][T16250] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  305.694503][T16250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.836507][ T6536] usb 8-1: new full-speed USB device number 64 using dummy_hcd
[  306.009061][ T6536] usb 8-1: unable to read config index 0 descriptor/start: -71
[  306.011491][ T6536] usb 8-1: can't read configurations, error -71
[  306.345781][T18266] overlayfs: failed to resolve '/XL�&I�-�C�i�
[  306.345781][T18266] �Q�.DQ�}z��E�($%}������
[  306.345781][T18266] #BM��V�7Taʪ/�^i��	o��': -2
[  306.468944][T18268] usbtmc 10-1:16.0: simple usb_control_msg returned 0
[  306.472149][T18268] __nla_validate_parse: 5 callbacks suppressed
[  306.472163][T18268] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3487'.
[  306.571674][   T40] audit: type=1400 audit(1775932308.150:1822): avc:  denied  { write } for  pid=18272 comm="syz.3.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  306.609969][   T40] audit: type=1800 audit(1775932308.190:1823): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3504" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  306.642877][T18273] sd 0:0:0:0: PR command failed: 1026
[  306.645319][T18273] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  306.648029][T18273] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  306.804825][T16248] usb 10-1: USB disconnect, device number 26
[  306.875587][T18291] syz_tun: entered allmulticast mode
[  306.931804][T18297] ip6gretap0: entered promiscuous mode
[  306.960222][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3511'.
[  306.985836][T18296] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  307.039053][T18308] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3514'.
[  307.226320][T18324] netlink: 'syz.3.3518': attribute type 2 has an invalid length.
[  307.227165][T18327] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3519'.
[  307.228832][T18324] netlink: 'syz.3.3518': attribute type 1 has an invalid length.
[  307.234537][T18327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55830 sclass=netlink_route_socket pid=18327 comm=syz.6.3519
[  307.352447][ T5946] Bluetooth: hci3: unexpected event for opcode 0x080f
[  307.487981][ T5946] Bluetooth: hci4: command 0x0406 tx timeout
[  307.591244][   T12] bond1 (unregistering): Released all slaves
[  307.607672][   T12] bond2 (unregistering): Released all slaves
[  307.619905][   T12] bond3 (unregistering): Released all slaves
[  307.629735][   T12] smc: removing net device bond0 with user defined pnetid SYZ2
[  307.635566][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing active interface
[  307.639709][   T12] bond0 (unregistering): Released all slaves
[  307.646813][   T12] bond4 (unregistering): Released all slaves
[  307.653400][   T12] bond5 (unregistering): Released all slaves
[  307.673279][   T40] audit: type=1400 audit(1775932309.250:1824): avc:  denied  { relabelfrom } for  pid=18334 comm="syz.5.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  307.683676][   T40] audit: type=1400 audit(1775932309.250:1825): avc:  denied  { relabelto } for  pid=18334 comm="syz.5.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  307.927765][T18365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18365 comm=syz.5.3528
[  308.073473][T18376] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!'
[  308.083908][T18376] CPU: 0 UID: 0 PID: 18376 Comm: syz.5.3530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  308.083938][T18376] Tainted: [L]=SOFTLOCKUP
[  308.083945][T18376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  308.083997][T18376] Call Trace:
[  308.084058][T18376]  <TASK>
[  308.084067][T18376]  dump_stack_lvl+0x100/0x190
[  308.084693][T18376]  sysfs_warn_dup.cold+0x1c/0x28
[  308.084798][T18376]  sysfs_do_create_link_sd+0x113/0x140
[  308.085007][T18376]  sysfs_create_link+0x61/0xc0
[  308.085029][T18376]  device_add+0x675/0x1950
[  308.085334][T18376]  ? __pfx_device_add+0x10/0x10
[  308.085358][T18376]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  308.085541][T18376]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  308.085901][T18376]  wiphy_register+0x1e5b/0x2d30
[  308.085922][T18376]  ? __rtnl_unlock+0xb9/0xf0
[  308.086121][T18376]  ? netdev_run_todo+0x830/0x12c0
[  308.086199][T18376]  ? __pfx_wiphy_register+0x10/0x10
[  308.086223][T18376]  ? __asan_memset+0x23/0x50
[  308.086363][T18376]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  308.086467][T18376]  ieee80211_register_hw+0x2cfd/0x4140
[  308.086551][T18376]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  308.086573][T18376]  ? __pfx___debug_object_init+0x10/0x10
[  308.086739][T18376]  ? find_held_lock+0x2b/0x80
[  308.086813][T18376]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  308.086846][T18376]  ? __hrtimer_setup+0x178/0x280
[  308.086913][T18376]  mac80211_hwsim_new_radio+0x2847/0x57d0
[  308.087159][T18376]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  308.087193][T18376]  ? __asan_memcpy+0x3c/0x60
[  308.087221][T18376]  hwsim_new_radio_nl+0xc1f/0x1340
[  308.087257][T18376]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  308.087292][T18376]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  308.087357][T18376]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  308.087385][T18376]  genl_family_rcv_msg_doit+0x214/0x300
[  308.087413][T18376]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  308.087444][T18376]  ? bpf_lsm_capable+0x9/0x10
[  308.087544][T18376]  ? security_capable+0x80/0x260
[  308.087672][T18376]  ? ns_capable+0xd2/0xf0
[  308.087741][T18376]  genl_rcv_msg+0x560/0x800
[  308.087767][T18376]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.087792][T18376]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  308.087836][T18376]  netlink_rcv_skb+0x159/0x420
[  308.087856][T18376]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.087881][T18376]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.087911][T18376]  ? netlink_deliver_tap+0x1ae/0xcc0
[  308.087945][T18376]  genl_rcv+0x28/0x40
[  308.087966][T18376]  netlink_unicast+0x5aa/0x870
[  308.087990][T18376]  ? __pfx_netlink_unicast+0x10/0x10
[  308.088021][T18376]  netlink_sendmsg+0x8b0/0xda0
[  308.088047][T18376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.088067][T18376]  ? __might_fault+0x50/0x140
[  308.088156][T18376]  ____sys_sendmsg+0x9e1/0xb70
[  308.088180][T18376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.088204][T18376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.088230][T18376]  ? try_to_wake_up+0x644/0x1a80
[  308.088307][T18376]  ___sys_sendmsg+0x190/0x1e0
[  308.088334][T18376]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.088358][T18376]  ? futex_private_hash_put+0x107/0x1c0
[  308.088466][T18376]  __sys_sendmsg+0x170/0x220
[  308.088496][T18376]  ? __pfx___sys_sendmsg+0x10/0x10
[  308.088522][T18376]  ? __x64_sys_futex+0x34f/0x4d0
[  308.088564][T18376]  do_syscall_64+0x106/0xf80
[  308.088732][T18376]  ? clear_bhb_loop+0x40/0x90
[  308.088761][T18376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.088783][T18376] RIP: 0033:0x7f6fde39c819
[  308.088803][T18376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.088820][T18376] RSP: 002b:00007f6fdc5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.088882][T18376] RAX: ffffffffffffffda RBX: 00007f6fde616090 RCX: 00007f6fde39c819
[  308.088896][T18376] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003
[  308.088908][T18376] RBP: 00007f6fde432c91 R08: 0000000000000000 R09: 0000000000000000
[  308.088919][T18376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.088932][T18376] R13: 00007f6fde616128 R14: 00007f6fde616090 R15: 00007ffea6d59838
[  308.088959][T18376]  </TASK>
[  308.130447][T18384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.346291][T18412] netlink: 'syz.5.3535': attribute type 4 has an invalid length.
[  308.371277][T18414] kAFS: unable to lookup cell '/,c��L'
[  308.444492][   T12] hsr_slave_0: left promiscuous mode
[  308.452671][   T12] veth1_macvtap: left promiscuous mode
[  308.454457][   T12] veth0_macvtap: left promiscuous mode
[  308.462880][   T12] veth1_vlan: left promiscuous mode
[  308.464632][   T12] veth0_vlan: left promiscuous mode
[  308.528778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.529749][ T5293] Bluetooth: hci0: hardware error 0x45
[  308.567438][ T6002] ==================================================================
[  308.570880][ T6002] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1861/0x1b90
[  308.574007][ T6002] Read of size 8 at addr ffff88802bb81ae8 by task kworker/1:3/6002
[  308.578709][ T6002] 
[  308.579548][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  308.579565][ T6002] Tainted: [L]=SOFTLOCKUP
[  308.579569][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  308.579624][ T6002] Workqueue: events l2cap_chan_timeout
[  308.579822][ T6002] Call Trace:
[  308.579827][ T6002]  <TASK>
[  308.579831][ T6002]  dump_stack_lvl+0x100/0x190
[  308.579853][ T6002]  print_report+0x156/0x4c9
[  308.579870][ T6002]  ? __virt_addr_valid+0x239/0x430
[  308.579931][ T6002]  ? __mutex_lock+0x1861/0x1b90
[  308.579944][ T6002]  kasan_report+0xdf/0x1e0
[  308.579957][ T6002]  ? __mutex_lock+0x1861/0x1b90
[  308.579969][ T6002]  __mutex_lock+0x1861/0x1b90
[  308.579980][ T6002]  ? l2cap_chan_timeout+0x6d/0x330
[  308.579995][ T6002]  ? lockdep_hardirqs_on+0x78/0x100
[  308.580007][ T6002]  ? __pfx___mutex_lock+0x10/0x10
[  308.580021][ T6002]  ? lock_acquire+0x5e/0x380
[  308.580034][ T6002]  ? l2cap_chan_timeout+0x6d/0x330
[  308.580048][ T6002]  l2cap_chan_timeout+0x6d/0x330
[  308.580064][ T6002]  process_one_work+0xa23/0x19a0
[  308.580080][ T6002]  ? __pfx_process_one_work+0x10/0x10
[  308.580094][ T6002]  ? __pfx_l2cap_chan_timeout+0x10/0x10
[  308.580110][ T6002]  worker_thread+0x5ef/0xe50
[  308.580124][ T6002]  ? kthread+0x13a/0x450
[  308.580135][ T6002]  ? __pfx_worker_thread+0x10/0x10
[  308.580146][ T6002]  kthread+0x370/0x450
[  308.580159][ T6002]  ? __pfx_kthread+0x10/0x10
[  308.580174][ T6002]  ret_from_fork+0x754/0xd80
[  308.580238][ T6002]  ? __pfx_ret_from_fork+0x10/0x10
[  308.580255][ T6002]  ? __switch_to+0x7b4/0x1120
[  308.580321][ T6002]  ? __pfx_kthread+0x10/0x10
[  308.580338][ T6002]  ret_from_fork_asm+0x1a/0x30
[  308.580363][ T6002]  </TASK>
[  308.580369][ T6002] 
[  308.647897][ T6002] Allocated by task 15926:
[  308.649774][ T6002]  kasan_save_stack+0x30/0x50
[  308.651801][ T6002]  kasan_save_track+0x14/0x30
[  308.653747][ T6002]  __kasan_kmalloc+0xaa/0xb0
[  308.655710][ T6002]  l2cap_conn_add.part.0+0x60/0xb00
[  308.657815][ T6002]  l2cap_chan_connect+0x1435/0x1f90
[  308.659613][ T6002]  l2cap_sock_connect+0x37a/0x770
[  308.661674][ T6002]  kernel_connect+0x107/0x160
[  308.663633][ T6002]  rfcomm_dlc_open+0x838/0xac0
[  308.665642][ T6002]  rfcomm_sock_connect+0x42c/0x690
[  308.667750][ T6002]  __sys_connect_file+0x141/0x1a0
[  308.669827][ T6002]  __sys_connect+0x141/0x170
[  308.671753][ T6002]  __x64_sys_connect+0x72/0xb0
[  308.673738][ T6002]  do_syscall_64+0x106/0xf80
[  308.675469][ T6002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.677716][ T6002] 
[  308.678722][ T6002] Freed by task 5293:
[  308.680381][ T6002]  kasan_save_stack+0x30/0x50
[  308.682363][ T6002]  kasan_save_track+0x14/0x30
[  308.683932][ T6002]  kasan_save_free_info+0x3b/0x70
[  308.686045][ T6002]  __kasan_slab_free+0x5f/0x80
[  308.688031][ T6002]  kfree+0x1f6/0x6b0
[  308.689654][ T6002]  l2cap_conn_del+0x57f/0x710
[  308.691195][ T6002]  l2cap_disconn_cfm+0x9f/0x100
[  308.693201][ T6002]  hci_conn_hash_flush+0x10e/0x280
[  308.695315][ T6002]  hci_dev_close_sync+0x5a7/0x1240
[  308.697368][ T6002]  hci_dev_do_close+0x2e/0xb0
[  308.698959][ T6002]  hci_error_reset+0xbf/0x380
[  308.700901][ T6002]  process_one_work+0xa23/0x19a0
[  308.702939][ T6002]  worker_thread+0x5ef/0xe50
[  308.704834][ T6002]  kthread+0x370/0x450
[  308.706204][ T6002]  ret_from_fork+0x754/0xd80
[  308.708032][ T6002]  ret_from_fork_asm+0x1a/0x30
[  308.709984][ T6002] 
[  308.710990][ T6002] The buggy address belongs to the object at ffff88802bb81800
[  308.710990][ T6002]  which belongs to the cache kmalloc-1k of size 1024
[  308.716145][ T6002] The buggy address is located 744 bytes inside of
[  308.716145][ T6002]  freed 1024-byte region [ffff88802bb81800, ffff88802bb81c00)
[  308.721524][ T6002] 
[  308.722310][ T6002] The buggy address belongs to the physical page:
[  308.724820][ T6002] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bb83000 pfn:0x2bb80
[  308.728891][ T6002] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  308.731884][ T6002] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  308.735315][ T6002] page_type: f5(slab)
[  308.736996][ T6002] raw: 00fff00000000240 ffff88801b842dc0 ffffea0001029c10 ffffea0001788c10
[  308.740518][ T6002] raw: ffff88802bb83000 000000080010000c 00000000f5000000 0000000000000000
[  308.743845][ T6002] head: 00fff00000000240 ffff88801b842dc0 ffffea0001029c10 ffffea0001788c10
[  308.747037][ T6002] head: ffff88802bb83000 000000080010000c 00000000f5000000 0000000000000000
[  308.750539][ T6002] head: 00fff00000000003 ffffea0000aee001 00000000ffffffff 00000000ffffffff
[  308.754048][ T6002] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  308.757141][ T6002] page dumped because: kasan: bad access detected
[  308.759703][ T6002] page_owner tracks the page as allocated
[  308.762010][ T6002] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 88, tgid 88 (kworker/u32:5), ts 64153992148, free_ts 32742040671
[  308.769960][ T6002]  post_alloc_hook+0x153/0x170
[  308.771762][ T6002]  get_page_from_freelist+0x111d/0x3140
[  308.774032][ T6002]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  308.776479][ T6002]  new_slab+0xa6/0x6b0
[  308.778171][ T6002]  refill_objects+0x26b/0x400
[  308.780021][ T6002]  __pcs_replace_empty_main+0x1ab/0x660
[  308.781990][ T6002]  __kmalloc_noprof+0x688/0x850
[  308.784018][ T6002]  ___neigh_create+0x155d/0x2970
[  308.786066][ T6002]  ip6_finish_output2+0xffa/0x1ce0
[  308.788231][ T6002]  __ip6_finish_output+0x357/0xdf0
[  308.789921][ T6002]  ip6_output+0x2aa/0xa60
[  308.791706][ T6002]  ndisc_send_skb+0xa85/0x1bf0
[  308.793802][ T6002]  ndisc_send_ns+0xc6/0x140
[  308.795743][ T6002]  addrconf_dad_work+0xca1/0x1360
[  308.797370][ T6002]  process_one_work+0xa23/0x19a0
[  308.799405][ T6002]  worker_thread+0x5ef/0xe50
[  308.801321][ T6002] page last free pid 5657 tgid 5657 stack trace:
[  308.803913][ T6002]  __free_frozen_pages+0x7e1/0x10d0
[  308.806045][ T6002]  qlist_free_all+0x47/0xe0
[  308.807965][ T6002]  kasan_quarantine_reduce+0x1a0/0x1f0
[  308.809785][ T6002]  __kasan_slab_alloc+0x69/0x90
[  308.811805][ T6002]  kmem_cache_alloc_noprof+0x241/0x6e0
[  308.814051][ T6002]  do_getname+0x35/0x390
[  308.815901][ T6002]  do_sys_openat2+0xc5/0x1e0
[  308.817844][ T6002]  __x64_sys_openat+0x12d/0x210
[  308.819876][ T6002]  do_syscall_64+0x106/0xf80
[  308.821784][ T6002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.824001][ T6002] 
[  308.824829][ T6002] Memory state around the buggy address:
[  308.827108][ T6002]  ffff88802bb81980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  308.830337][ T6002]  ffff88802bb81a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  308.833003][ T6002] >ffff88802bb81a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  308.835560][ T6002]                                                           ^
[  308.837905][ T6002]  ffff88802bb81b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  308.840434][ T6002]  ffff88802bb81b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  308.842966][ T6002] ==================================================================
[  308.846212][ T6002] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  308.848538][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  308.851979][ T6002] Tainted: [L]=SOFTLOCKUP
[  308.853368][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  308.856633][ T6002] Workqueue: events l2cap_chan_timeout
[  308.858382][ T6002] Call Trace:
[  308.859479][ T6002]  <TASK>
[  308.860442][ T6002]  dump_stack_lvl+0x100/0x190
[  308.861967][ T6002]  vpanic+0x552/0x970
[  308.863280][ T6002]  ? __pfx_vpanic+0x10/0x10
[  308.864747][ T6002]  ? mark_held_locks+0x40/0x70
[  308.866313][ T6002]  ? __mutex_lock+0x1861/0x1b90
[  308.867897][ T6002]  panic+0xd1/0xe0
[  308.869118][ T6002]  ? __pfx_panic+0x10/0x10
[  308.870566][ T6002]  ? check_panic_on_warn+0x1f/0x90
[  308.872218][ T6002]  check_panic_on_warn.cold+0x19/0x34
[  308.873947][ T6002]  end_report.part.0+0x3a/0x90
[  308.875547][ T6002]  kasan_report.cold+0xe/0x18
[  308.877073][ T6002]  ? __mutex_lock+0x1861/0x1b90
[  308.878651][ T6002]  __mutex_lock+0x1861/0x1b90
[  308.880180][ T6002]  ? l2cap_chan_timeout+0x6d/0x330
[  308.881838][ T6002]  ? lockdep_hardirqs_on+0x78/0x100
[  308.883516][ T6002]  ? __pfx___mutex_lock+0x10/0x10
[  308.885142][ T6002]  ? lock_acquire+0x5e/0x380
[  308.886646][ T6002]  ? l2cap_chan_timeout+0x6d/0x330
[  308.888305][ T6002]  l2cap_chan_timeout+0x6d/0x330
[  308.889904][ T6002]  process_one_work+0xa23/0x19a0
[  308.891507][ T6002]  ? __pfx_process_one_work+0x10/0x10
[  308.893232][ T6002]  ? __pfx_l2cap_chan_timeout+0x10/0x10
[  308.895021][ T6002]  worker_thread+0x5ef/0xe50
[  308.896533][ T6002]  ? kthread+0x13a/0x450
[  308.897935][ T6002]  ? __pfx_worker_thread+0x10/0x10
[  308.899594][ T6002]  kthread+0x370/0x450
[  308.900919][ T6002]  ? __pfx_kthread+0x10/0x10
[  308.902408][ T6002]  ret_from_fork+0x754/0xd80
[  308.903916][ T6002]  ? __pfx_ret_from_fork+0x10/0x10
[  308.905590][ T6002]  ? __switch_to+0x7b4/0x1120
[  308.907121][ T6002]  ? __pfx_kthread+0x10/0x10
[  308.908619][ T6002]  ret_from_fork_asm+0x1a/0x30
[  308.910161][ T6002]  </TASK>
[  308.911989][ T6002] Kernel Offset: disabled
[  308.913400][ T6002] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:23:17  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=ffff88802b4a8138 RCX=1ffff11005695020 RDX=1ffff110065a780b
RSI=ffff88802b4a8080 RDI=ffff88802b4a8100 RBP=ffff88802b4a8080 RSP=ffffc900042579e0
R8 =1ffff110065a7812 R9 =1ffff1100d48777e R10=ffff88802b4a8080 R11=000000000000003c
R12=ffff888032d3c000 R13=0000000000000001 R14=0000000000000000 R15=000000000000001b
RIP=ffffffff81db4828 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555688b3500 ffffffff 00c00000
GS =0000 ffff8880d6338000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f9a976a8e9c CR3=000000005adde000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=00000000ff02fefc Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bc54d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff411539f6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff411539f6 00007fff411539fc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bb833274
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bb8332b4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bb833418
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bb8332a6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bb9ec600 00007f61bb9ec5e0 00007f61bb9ec5e8 00007f61bb9ec618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bc54d020 00007f61bb9ec5c0 00007f61bb9ec5d0 00007f61bb9ec610
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61bb9ec5f8 00007f61bb9ec5c8 00007f61bb9ec600 00007f61bb9ec5e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 000000000000078c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff857aafb5 RDI=ffffffff9b4ae040 RBP=ffffffff9b4ae000 RSP=ffffc90003f2f498
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666
R12=0000000000000000 R13=0000000000000061 R14=0000000000000010 R15=ffffffff857aaf50
RIP=ffffffff857aafdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6438000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f9a976db000 CR3=0000000039226000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fdf14d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea6d59d26
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea6d59d26 00007ffea6d59d2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde433274
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde4332b4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde433418
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde4332a6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000050003 0000000002080000 0000000000010002 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00090000e0000000 02000e0000000600 0300000000000000 010000000a090002
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ca741e1b5eb0767 e14f6dce21c4557b 8b6cf28a00000000 f923079203970e37
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434b95922a45933d efede4d60dd4cce6 5dee498a213fbde2 dea038c7cbd89abb
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e35c211f9563dfdc 06e06756d9713a5d 832698b70d36009e cacc254ee25a3f68
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4160d7375879f7c fe22d3d9e1df30d9 d6141bcee45e3a64 91b71f00000009e4
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffc900000f7554 RDX=0000000000000006
RSI=ffffffff8de55096 RDI=ffffffff8c1b1ea0 RBP=ffff88801caf6800 RSP=ffffc900000f7590
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000001 R13=0000000000000002 R14=ffff888057c3b000 R15=0000000000000001
RIP=ffffffff82b8df63 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6538000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f063707a6b0 CR3=0000000039226000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fdf14d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea6d59d26
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea6d59d26 00007ffea6d59d2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde433274
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde4332b4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde433418
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde4332a6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000050003 0000000002080000 0000000000010002 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00090000e0000000 02000e0000000600 0300000000000000 010000000a090002
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ca741e1b5eb0767 e14f6dce21c4557b 8b6cf28a00000000 f923079203970e37
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434b95922a45933d efede4d60dd4cce6 5dee498a213fbde2 dea038c7cbd89abb
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e35c211f9563dfdc 06e06756d9713a5d 832698b70d36009e cacc254ee25a3f68
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4160d7375879f7c fe22d3d9e1df30d9 d6141bcee45e3a64 91b71f00000009e4
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88806a73c3c0 RCX=ffffffff81fcaf0e RDX=0000000000000001
RSI=0000000000000000 RDI=ffff88801ea80000 RBP=ffffc90000157cd8 RSP=ffffc90000157b78
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633ce0
R12=1ffff9200002af78 R13=ffffed100d4e7879 R14=0000000000000003 R15=0000000000000001
RIP=ffffffff8208f7a0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6638000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6e11f2a1d4 CR3=000000002c034000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea6d59d26
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea6d59d26 00007ffea6d59d2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde433274
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde4332b4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde433418
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6fde4332a6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000