last executing test programs:

5.696539736s ago: executing program 2 (id=716):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2000002, 0x25dfdbfc}, 0x18}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) (async)
write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2000002, 0x25dfdbfc}, 0x18}}, 0x0) (async)

5.696436616s ago: executing program 2 (id=717):
pipe(&(0x7f00000001c0))
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x13, 0x0)

5.62006535s ago: executing program 2 (id=719):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0xb85f0458, 0x4) (async)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write(r0, &(0x7f0000000080)="a34b1cc7f4a2910b3a124f652833", 0xe) (async, rerun: 32)
r1 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) (rerun: 32)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'gre0\x00', 0x1}, 0x18) (async)
ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000180)={0xff, 0x9, 0x8}) (async)
r2 = openat$incfs(r0, &(0x7f00000001c0)='.log\x00', 0x800, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000200), 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x47c, 0x14, 0x10, 0x70bd26, 0x25dfdbfe, {0x23, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "608bbc4e67a32670fa3a147523a4a577293c4ae710f7cb9912c2e11c2bc4b193ded30cba9262c057ffaf2c7155142580f581aa5b7807238a4a04b88c3edbab7850dce74e1e2a6a"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "e47adba69635619c59e057b23cacdd9a7ba830391bc2f5f58b548c473253648ebaf9acebfb8bb6da33db3776e872ec15"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "3647b7c0b4ddb87c447be7e128cb5738fdba139bac934da54d3769be90f550d78d47f6690e9a78b6b6e702391eef82d5ab388fca5f3675c7d48267b68acad2975b303e16486216d9a31e34f62fa16f02045831a5a026b3b842f96ea311336639478b46a40273d46996023efce568e64239c78c7cf5abcf9f73c109"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "45ffdc0fcee8e0a8203d19316c055696b0a16332cec0e1881aa186f06959744537fe69ac4f297d335ba4a2c4a7c80083ad4d43558d86bdac47eff2e7f66a19d205b3992da5c86b88d462fff011762cbd7472c1ad4989f00f5e2ede995515319e4201de2903dc15267410531fdba7a2add81335be003be18d173c8dc0effb7794cc189dadc5865a68c962f63f90f277cdbdc439d561447126168fcf57eefb329453d740d9a2f996845abd0db7a51b57261ef99a16345e784096df6f4fceea14c88858281d31dbd19619789e21996e1db42225e1a8549d28280946"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "5a563c839613ab9844e1ab8e8f34b80cd455f9b3979a89fdd586768edb1c48f4d2287e8a8a11dbdfb9be0c950f4e37e6bbe854214cef6cee4f3027dcd62f0f48939613ab60b82950c91c950621d026bed3450f48d5b993f3064f30b986a6015d4a09063d0c33f2b16d367713222b18a0dbbb63b2eb53e8fa1dada95f7bcdc594609be2bbe75efe14b303a508d6a0fc41950e9af1ece4f840eb26a431f2e861350f986b346e2cac36a13cbc83419a57ef9bf0a2e7b27e13994375db471c774096f828872b7dfe3fa10b916b76ee235dcfed342ef3154fd6300002ed47d267114db17386e14988c307fb8f8b5a4b59a0ef"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "c7e640223dd16b15a4656be2d9be60d1e1a310ea6f342386928903f603d0d03b61e2020271a1df67c2ff023d63942b4e5071ff0fa56510b0c880839d87b50052e55e467048d767a7a96824d131b63725938a224560c84cd83467793837395f19fa22bf6d2ec96d5a17b2057847821d3e509531023498a0c9dfc8e9c6ffb10caba6b4bbd821a18224065da0b8cb319bccfc093837de1665d2637635c4cdb17bc8e619b6"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "3440ffbaea1a691753e48dea4cfaf36b0f8353edf8bb2bd9f3269424b2ed5b6c5da2351e47b01d06e7fc4366ecbe4834b408b9d5d0b46e0d9dd0e92bc08b1fc19fd0cc5d31cf2a764b405421c9ee7414e961e732871c2a15da4389507b56c2ed6d0799125525600c90493762cdc3e3e2622aa4b83a03d1f7f833df425d30561ae66044cfa5ca66c0bc9f0fb917bd368de1f89c5498f3a48fe6506e5e734f257951d9acbab890d1e9ffd6e491e245855bcb8d06798553604e9cd18b11ae5d1bc98ebdb6bbcd4d0ab13f046afcbefd2567ec08fe2bdf1ca63c251ba7900fb5e8beb2f168508a"}]}, 0x47c}, 0x1, 0x0, 0x0, 0xc810}, 0x4000000) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x11c, r3, 0x500, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='tcp_probe\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffa}, 0x18) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r4)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r6, 0xa, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1bf17e1d3158e081}, 0x8000) (async, rerun: 32)
sendmsg$AUDIT_USER(r2, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc8, 0x3ed, 0x8, 0x70bd28, 0x25dfdbfc, "5ee150422df6d578c107106bedd715e056450093b7e52686059bc83691ef14c6561f6cbb5e1c0fc8be712068e8026184e179e0da4c156b65a1c7ac4e2d373eca9ef08a50d50611556651f2c96a8cc3fc8dc911b3a11c077d0486fbbd5368aa93345dc739ce42ee0931ad22c5a81db6629de55a3364af360cfcfe728a516469a249857b57099a49ea11cfdaf8a4cb43192212d3d8e3430e5da1ef0b0a195e37b2e661cff984b6a2cca2ff862f32d5608d7d2ee477a6", ["", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x5000) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000011c0)={'gre0\x00', &(0x7f00000010c0)={'gretap0\x00', <r7=>0x0, 0x8, 0x1, 0x9, 0xfffffff9, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x66, 0x0, 0xc, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x7, 0x27, [@local]}, @lsrr={0x83, 0xb, 0x7c, [@local, @broadcast]}, @cipso={0x86, 0x2f, 0x1, [{0x2, 0x3, "05"}, {0x0, 0x10, "545bbbd1fcc11032701190428b04"}, {0x1, 0x8, "3caff18653aa"}, {0x1, 0xe, "6c903a1368a09c1b08d72c66"}]}, @ssrr={0x89, 0x1b, 0x7, [@broadcast, @private=0xa010102, @broadcast, @rand_addr=0x64010100, @empty, @private=0xa010102]}, @timestamp={0x44, 0x18, 0x8b, 0x0, 0x8, [0x3, 0xfff, 0x40, 0x2a6, 0x2]}, @noop, @lsrr={0x83, 0x1b, 0xe6, [@private=0xa010101, @local, @multicast2, @private=0xa010102, @local, @multicast2]}]}}}}})
sendmsg$inet(r1, &(0x7f0000001240)={&(0x7f0000000e40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000e80)="5ba6868dcbfbfeb69b364ecbc1a30f086d091db136270881b9ddb6bf69b09adb6193c2d7", 0x24}, {&(0x7f0000000ec0)="5fbd9af50894abb839b14227ba6429eda8f021586cce1e44bcc6918d92ab1ab8ef27e102277c59b5d6c63a9bdb0a1f51b7d694fb1f7eaf58f095493a5cf2898a291919880c9895f2f59b851b253ca748c943733d014edcae84ab39ca8d05dbefca316c5f95cf45f91116fbe7533376e9d8a529d67e7520248e5bd0761b7dc7ace7414ff447d2f7420cafa1b4d05c23454e1f4454a6df393bd42ec01d7fa8cd010291ff6255c707a839203bed390d1d6d7377dacfb77d5862424adc99916c5d78e26599ea1b5a176430f8c303c6", 0xcd}, {&(0x7f0000000fc0)="6e96101e0af841934d90f3a80ec3e841f333651eed786385cb0993295c256e4c5a2b583e02e8bab568250afaa2c6026003163e3102042651f144b66b7506ebcbbcbcef1bfd25f4d930a9761af34721b139e3a41b45eed9740338b8c36f6ccc0f4b5b381ec9a135dc4a3649bf4022ea633d6c34764b61aca52e6856504bc8df619f0a705e899f4f7b187ca121e35bce965c8f9a93a9bcacf8be4d69aaeaf6edde", 0xa0}], 0x3, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8e6f866b}}], 0x38}, 0x4)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x0, 0x80000)
sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@ipv6_getmulticast={0x14, 0x3a, 0x10, 0x70bd25, 0x3, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000041) (async, rerun: 32)
shutdown(r2, 0x1) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r4)
sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000) (async)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001540), r8)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x54, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001900)={&(0x7f0000001680), 0xc, &(0x7f00000018c0)={&(0x7f0000001700)={0x1c0, r11, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcb, 0xd}}}}, [@NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x7, 0x47d, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x5, 0x77fb, 0x7, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffb, 0x0, 0x7, 0x3ff, 0x7, 0xa, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xad6d, 0x401, 0x0, 0x99, 0x4a6, 0x4, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0xa}, {0x7}, {0x3, 0x8}, {0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x1}, {0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x6}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x3}, {0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x6}, {0x7, 0xa}, {0x6, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x1, 0xc, 0x1b, 0x9, 0x18, 0xc, 0x3, 0x2, 0xc, 0x1, 0x4, 0x3, 0x6, 0x9, 0xc, 0x24, 0x4, 0x6, 0x48, 0x0, 0x18, 0x18]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x4, 0x56, 0x2, 0x24, 0x16, 0x6, 0x18, 0x48, 0x3, 0x36, 0x18, 0xb, 0x7a, 0x4, 0xb, 0x30, 0xc, 0x1, 0x1b, 0x24, 0x6, 0x6c, 0x9, 0x4, 0x4, 0x1b]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x774, 0x0, 0x7, 0x1, 0x13, 0x9, 0x2, 0xb]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x37, 0x60, 0x24, 0x1, 0x48, 0x16, 0x9, 0x36, 0xb, 0x6, 0x12, 0x65d85ed09c63b420, 0x60, 0x5, 0x30, 0x30, 0x9, 0xb, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd7dd, 0xffe0, 0x81, 0x4, 0x8, 0xe4, 0x0, 0x3]}}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x5c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004011}, 0x40)

5.619152856s ago: executing program 2 (id=720):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
sendfile(r2, r3, 0x0, 0x7ffff000)

2.244175362s ago: executing program 2 (id=755):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000005b7369434d2bb77d3f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x8c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/970], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x80000000})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x0, @vbi={0x22, 0x4, 0x6, 0x32314752, [0x0, 0x800], [0xfffff6b4, 0xfffffffb], 0x108}})
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100480)
pread64(r3, &(0x7f00000000c0)=""/47, 0x2f, 0x79)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x58595556, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}})

2.147883578s ago: executing program 2 (id=758):
r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC=0x0], 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0x21, 0x15, {0x15, 0xc, "672e1d3abefa9db99ec535ee803fe43b8c7f36"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000500)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xdf, 0x4, 0x80, 0xc, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x6, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "521ae805bb5a81aafd1ebbef19b8543d"}, @wireless={0xb, 0x10, 0x1, 0x14, 0x45, 0x9, 0x6, 0x6}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x4, 0x80, 'eD\"R', "fdfba5c2"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x9, 0x7, 0x9, 0x6, 0xff01}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x40, 0x11, 0xcd, "4cd28461e45832ff6e8240f2612980ab03a62818cf28abb5080bfca9b73396b10bafd3aad08d14291983db820e5745b49bbb917ce87f9cccd936da8d3cb0c9ecc9948e1b39114d4922b639870e6e34e6340cc7703fc209df195227c52ecdf364f1d149f4b8fd00f3b733480bfb13b14a4f56ae93e6ced4787ad8ffb4e8c5ed6f2a8c4b48c962e7c3ebfd6a23e43716beb55271c38fc0f6a46e0ca0b0f13e02afd95c3f55116d89df2f571bcb245dc1ee010b6f49dee614a862774481134a97852aaf4ac1b94521b60cd21d850c"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x0, 0x40, [0xf0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x958}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000880)={0x40, 0xb, 0x2, "9054"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x19, 0x2, "a5d5"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x4a}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x3}})
syz_usb_disconnect(r1)
syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0xa, 0xbd, {0xbd, 0xe, "f27b6aba1bfe1f6982b5b0ff7aa6bd2ad4d3bd35106a7a458a1cfa0b3ade3559debf7139c3a6b15c422484aab261b461715d0b666ea15298a72389373eb43f43ac411b9fbd7956ca01f13ef6a4104a97169a674716c3e2ae95f663a6baa0c3f6af79e107907bbf26c67b26a5fcfd330726b861e18187298c49a0dff349d20bfffda703f4e6ba4627ebfcfefb757f4f6fc46dc5d253e5a39a8191ea216e3a08c50a9df136e0f392d4010b0c7073a9d9115d5a14c3e22d4f9b6159ce"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x20, 0x13, 0x1d, "11ed49d0963976b777900e5a1c3949b704e6f1e1a769c43167a20be7cb"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x81, 0x1, "18"}, &(0x7f0000000300)={0x20, 0x82, 0x2, 'Tk'}, &(0x7f0000000340)={0x20, 0x83, 0x1, "94"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "9715"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "73c8b8"}})
setfsuid(0xee01)
setfsuid(0xee00)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

822.881251ms ago: executing program 3 (id=774):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x8001, 0x12)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10, 0x800)
listen(r1, 0x8000)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r2=>0x0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r3=>0x0)
kcmp(r2, r3, 0x4, r1, r0)
pipe2(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x880)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000180)={{0x4ee54406026efa28, 0x1, 0x2, 0x2, 0x7}, 0x2, 0x6})
ioctl$TCFLSH(r4, 0x540b, 0x1)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000200)={<r6=>0x0, 0x7, 0x101, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={r6, 0x1, 0x2})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r7, &(0x7f0000000a00)="091085af7b470db5a00058fa1cdbfd2feceff596811c6fd0c9932884f62c7f8e3baa2f6c520876d2069f64638b1c1cb632faa27c44160069ce88956a778bf95a0b4c4b257f5aae5ba3e6029f928e42563e3580e47695c1d75b9a952783fcafe02875ab0a8332502743e062bbf738b0a5cc6dbbc443a387efa5ec6601e3a320f80be55a28b3499b7d", 0x88, 0x8055, &(0x7f0000000ac0)={0xa, 0x7ff, 0x200, @remote, 0xff}, 0x1c)
listen(r7, 0x6)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), r4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0xb6, 0xe6, 0x7, 0x62, @dev={0xfe, 0x80, '\x00', 0x31}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0x78d9, 0x1, 0x7fff}})
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r8, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0xa0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r4)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000dc0)={<r11=>0x0, @multicast2, @multicast1}, &(0x7f0000000e00)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl1\x00', <r12=>r9, 0x2f, 0xc, 0x1, 0x8, 0x68, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x80, 0xecd7, 0x7ff}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000001180)={&(0x7f0000000d40), 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x214, r10, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x214}}, 0x811)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000011c0))
ioctl$TIOCNOTTY(r5, 0x5422)
fcntl$getflags(r1, 0x401)
r13 = socket$packet(0x11, 0x2, 0x300)
recvmmsg(r13, &(0x7f00000065c0)=[{{&(0x7f0000001240)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000012c0)=""/95, 0x5f}, {&(0x7f0000001340)=""/54, 0x36}, {&(0x7f0000001380)=""/173, 0xad}, {&(0x7f0000001440)=""/126, 0x7e}, {&(0x7f00000014c0)=""/169, 0xa9}, {&(0x7f0000001580)=""/242, 0xf2}, {&(0x7f0000001680)=""/10, 0xa}], 0x7, &(0x7f0000001740)=""/39, 0x27}, 0x1}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001780)=""/216, 0xd8}, {&(0x7f0000001880)=""/1, 0x1}, {&(0x7f00000018c0)=""/140, 0x8c}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/187, 0xbb}, {&(0x7f0000002a40)=""/206, 0xce}, {&(0x7f0000002b40)=""/1, 0x1}], 0x7, &(0x7f0000002c00)=""/159, 0x9f}, 0xfffffff5}, {{&(0x7f0000002cc0)=@x25={0x9, @remote}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002d40)=""/240, 0xf0}, {&(0x7f0000002e40)=""/160, 0xa0}, {&(0x7f0000002f00)=""/72, 0x48}, {&(0x7f0000002f80)=""/254, 0xfe}, {&(0x7f0000003080)=""/205, 0xcd}, {&(0x7f0000003180)=""/200, 0xc8}, {&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/64, 0x40}], 0x8}, 0xff}, {{&(0x7f0000003440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000057c0)=[{&(0x7f00000034c0)=""/168, 0xa8}, {&(0x7f0000003580)=""/24, 0x18}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/252, 0xfc}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/128, 0x80}, {&(0x7f0000005740)=""/109, 0x6d}], 0x7, &(0x7f0000005840)=""/200, 0xc8}, 0x7f}, {{&(0x7f0000005940)=@pppol2tp={0x18, 0x1, {0x0, <r14=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f00000059c0)=""/218, 0xda}, {&(0x7f0000005ac0)=""/79, 0x4f}, {&(0x7f0000005b40)=""/59, 0x3b}, {&(0x7f0000005b80)=""/243, 0xf3}, {&(0x7f0000005c80)=""/222, 0xde}, {&(0x7f0000005d80)=""/245, 0xf5}, {&(0x7f0000005e80)=""/78, 0x4e}, {&(0x7f0000005f00)=""/57, 0x39}], 0x8}, 0xc33}, {{&(0x7f0000005fc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000006200)=[{&(0x7f0000006040)=""/164, 0xa4}, {&(0x7f0000006100)=""/190, 0xbe}, {&(0x7f00000061c0)=""/24, 0x18}], 0x3, &(0x7f0000006240)=""/22, 0x16}, 0x1}, {{&(0x7f0000006280)=@qipcrtr, 0x80, &(0x7f0000006500)=[{&(0x7f0000006300)=""/196, 0xc4}, {&(0x7f0000006400)=""/233, 0xe9}], 0x2, &(0x7f0000006540)=""/69, 0x45}, 0x3ff}], 0x7, 0x2, &(0x7f0000006780)={0x0, 0x989680})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000067c0)={'rose0\x00'})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000006a40)={&(0x7f0000006800)="d05f44eac18c61ce48c66c1f38f346ded9f7abb6affde430278ddbce34150078c92dde259b4d79ed6bc5826b3b14ec75a5fc9519b87ec884ad975edba18479e8ef67150105bbf24015eaf693bea292f3cfbed0cd803612dcd7f30de8", &(0x7f0000006880)=""/196, &(0x7f0000006980)="777bee49d3eb296b14671e025ca2329a469439d46e91baf6f0de8b66b7b9b69142a6b2a5ce368ba83415ac804eb6c4179fb62bf8d423adb11b302feded399b37a5877202c9bb48", &(0x7f0000006a00)="509c277d4a46f74044304b1ba7897b1570903a39d76e64ce190a364a42", 0x1, r5, 0x4}, 0x38)
setsockopt$XDP_UMEM_COMPLETION_RING(r14, 0x11b, 0x6, &(0x7f0000006a80)=0x2020, 0x4)

491.206691ms ago: executing program 1 (id=776):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
shmdt(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="150000001000000008000000000023a2854b417c67000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r7=>0x0})
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r6}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, r8, 0x0, 0x7, &(0x7f0000000000)='C\xffroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090890000"], 0x0)

415.453129ms ago: executing program 1 (id=777):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDDELIO(r0, 0x4b35, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd, 0x0, 0x5}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x4, 0x6, 0x590, 0x298, 0x298, 0x298, 0xd0, 0x1c8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'geneve1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'wg2\x00', 'veth1_to_bond\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x3}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'vlan1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@local}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
futex_waitv(&(0x7f00000001c0)=[{0xfff, 0x0, 0x74841cb4bbd72a51}], 0x1, 0x0, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032abd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x50)

413.288233ms ago: executing program 3 (id=778):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=<r2=>r1, @ANYRES32, @ANYBLOB=','], 0x20)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
syz_open_dev$MSR(0x0, 0xa, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r7, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x3}}, @addba_req={0x3, 0x0, {0x8, {0x0, 0x1, 0xf, 0x5}, 0x3, {0x8, 0x8}}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4841}, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0884123, &(0x7f0000000000))
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400cc000a001800030303030303000008006b00f70300003400238006000a000004000006001800ff0700000600100006000000080015008b00000005000e"], 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x40010)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000080)=ANY=[@ANYRES16=r2])

412.982107ms ago: executing program 1 (id=779):
syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) (async)
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @pix={0x5, 0xfffff800, 0x32315241, 0x8, 0xfffffffb, 0x1, 0xa, 0xfc0, 0x1, 0x1, 0x1, 0x3}})

352.822984ms ago: executing program 1 (id=780):
socket$kcm(0x10, 0x7, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r6}}, 0x48)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r8}}, 0xfffffe10)
syz_emit_ethernet(0x42, &(0x7f0000000640)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r10 = accept4(r9, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
recvmmsg(r10, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}], 0x1}, 0x7e0}], 0x2, 0x60002000, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0xfeb, 0x4)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffeab)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0)

352.608921ms ago: executing program 3 (id=781):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0)
socket$packet(0x11, 0x2, 0x300)

267.343364ms ago: executing program 0 (id=783):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
write$tun(r3, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x3, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"7f816cbbc7131ec803767b5bad27c3a404b5370b4504cdbfae21b7d2bc"}}}}}, 0x53)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x50}}, 0x20000000)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680))
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000040)={0xa, 0x4661, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

266.93623ms ago: executing program 1 (id=784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
io_uring_setup(0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, 0x0, 0x0)
r4 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xffffffffffffff6e, 0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x806, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r6, 0x7001) (async)
ioctl$RTC_UIE_ON(r6, 0x7003)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x3, 0x4, 0x1}}) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000440)={0x7, 'vlan1\x00', {0x8}, 0x401}) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f0000000040)={0x1, "5afcf8f5a92fbd60885b3e07389454579dda7ba2b552916493e5090a86961e55", 0x3, 0x4, 0xc45, 0x80008, 0x8}) (async)
r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)

181.527681ms ago: executing program 1 (id=785):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1e, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x0, 0x2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r4, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5df}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="24000000891822c94aca1746a8a4bc006d5c3496c4cbc3fdefc178d3bfff24affee2b90aecbc57eb657c0091e47948ff0b3bf53a39a405d06fe01d00", @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000080031000000000008000300", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x2, 0x3, 0x0, 0x8, 0x1, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2ea120c72ff38a30}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x9a, &(0x7f0000000580)=""/154, 0x40f00, 0x56, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x1, 0x1, 0x5, 0xc}, {0x5, 0x2, 0x8, 0x7}, {0x5, 0x2, 0x3, 0x9}, {0x3, 0x2, 0x5, 0x6}, {0x5, 0x1, 0x0, 0x5}, {0x5, 0x3, 0xb, 0x3}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x1, @void, @value}, 0x94)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000480))
sendmsg$nl_route(r9, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=@ipmr_newroute={0x4c, 0x18, 0x300, 0x70bd29, 0x25dfdbfb, {0x80, 0x30, 0x10, 0xd, 0x0, 0x2, 0xc8, 0xb, 0x600}, [@RTA_DST={0x8, 0x1, @broadcast}, @RTA_IIF={0x8, 0x3, r8}, @RTA_DST={0x8, 0x1, @local}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r10}}}, @RTA_IIF={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8002)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)
r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3ff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r11, 0xc0045516, &(0x7f0000000140)=0xf4c)

181.22328ms ago: executing program 3 (id=786):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x200)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

117.27157ms ago: executing program 3 (id=787):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x800, 0x108)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x4, 0x9, 0xf08b, 0x2, 0x8]}, &(0x7f0000000140)=0x54)
write$eventfd(r1, &(0x7f0000000180)=0x6, 0x8)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000001c0)={<r2=>0x0, 0x0, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000200)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000240)={<r4=>0x0, 0x1, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000280)={<r5=>0x0, 0x1, r1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000300)={<r7=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340)=[r2, 0x0, r3, r4, r5, r6, r7], 0x5fc, 0x7, 0x1})
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x480, 0x0) (async)
r9 = accept4$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000440)=0xc)
r10 = syz_open_dev$midi(&(0x7f0000000480), 0x7, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[<r11=>0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, <r14=>0x0, <r15=>0x0], 0x8, 0x2, 0x9, 0x5})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000840)={&(0x7f00000004c0)=[0x0, 0x0, <r16=>0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x5, 0x8, 0x4, 0x0, r11})
futimesat(r8, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={{0x77359400}, {0x77359400}}) (async)
ioctl$SIOCRSACCEPT(r8, 0x89e3) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000980)={&(0x7f0000000940)=[r14, r16, r12, r13], 0x4, 0x800, 0x0, <r17=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r17, 0xc02064b2, &(0x7f00000009c0)={0x6, 0x8, 0xf}) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r10, 0x80049367, &(0x7f0000000a00)=0xff) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r9, 0xc0109414, &(0x7f0000000a40)={0x4d, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
r18 = syz_open_dev$evdev(&(0x7f00000011c0), 0x35, 0x28000)
ioctl$EVIOCGVERSION(r18, 0x80044501, &(0x7f0000001200)=""/84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000001340)={r15, 0x7, &(0x7f0000001280)=[0x1, 0xa, 0x9396, 0x4f19, 0x81, 0x9, 0x6], &(0x7f00000012c0)=[0x7ff, 0x1000, 0xba1, 0x6], &(0x7f0000001300)=[0x0, 0x8, 0x7f, 0x4, 0x10, 0x800]})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001380)={@local}) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r18, 0xca289435, &(0x7f0000001800)={0x0, 0x101, @start={0x0, 0x0, "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", "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"}, [0xa17, 0x456, 0xa, 0x2, 0x65, 0xa, 0xe085, 0x4, 0x8000000000000001, 0x0, 0x3, 0x5, 0x10000, 0x7fff, 0xfffffffffffff507, 0x2, 0x6f, 0x8, 0x6, 0x7ff, 0x2, 0x81, 0x7, 0x6c0ac5e0, 0xffff, 0x3, 0x7, 0x0, 0x9, 0x1441, 0x1ff, 0xfb6a, 0x6, 0x3b40000000, 0x81, 0x1, 0x6, 0x1, 0x4, 0x6, 0x2fb, 0x5, 0x9, 0xfffffffffffffffb, 0xffff, 0xdb34, 0x0, 0x6, 0x8, 0x7fffffffffffffff, 0x6, 0x7fffffff, 0x8000, 0x7ff, 0xff, 0x2, 0x8, 0x1, 0xf, 0xf, 0x1, 0x3ff, 0x8, 0xb]})

116.979782ms ago: executing program 0 (id=788):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000150a01"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbf7, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8e391ed848b64c33}, 0xc044800)

116.771083ms ago: executing program 3 (id=789):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x0, 0xffff}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x967]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
readv(r2, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69)

64.176032ms ago: executing program 0 (id=790):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f00000000c0)=@canfd={{0x3}, 0x20, 0x0, 0x0, 0x0, "4f6d3f019909c0251496dd57104a933167c8f6b77933fe1305405858ae2bd8f190bc7f1642fa37c896da9119a8bd52f35e7ac6b09bb3fcc50f7daf7c47401852"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x200000a3) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0xc, 0x0, &(0x7f00000007c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) (async, rerun: 64)
ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)="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") (rerun: 64)

61.877174ms ago: executing program 0 (id=791):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f0000000140)="01100000020000000000006bb55a2a630b00c145f94cd977afcbcc70805798c81907c965a058f439a64659b83044b2ce73f372ee4dc29d06923533b8dfbd62dfdce3299a43848413b5acd04acbbdab28c043869cd4c6decfc8f9be4669140e4388c2", 0x62, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async)
add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f0000000140)="01100000020000000000006bb55a2a630b00c145f94cd977afcbcc70805798c81907c965a058f439a64659b83044b2ce73f372ee4dc29d06923533b8dfbd62dfdce3299a43848413b5acd04acbbdab28c043869cd4c6decfc8f9be4669140e4388c2", 0x62, r0) (async)

215.33µs ago: executing program 0 (id=792):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}]})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4b]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0xc040004)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

0s ago: executing program 0 (id=793):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r0 = eventfd2(0x10c, 0x180001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r0, 0x15, 0x0, r0})
close_range(r1, r1, 0x0)

kernel console output (not intermixed with test programs):

v0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.343185][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.349027][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.351244][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.358673][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.362788][ T5944] team0: Port device team_slave_1 added
[   45.375964][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.378008][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.385437][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.401982][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.404018][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.411699][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.442647][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.444664][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.452206][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.466822][ T5941] hsr_slave_0: entered promiscuous mode
[   45.468994][ T5941] hsr_slave_1: entered promiscuous mode
[   45.471591][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.473945][ T5941] Cannot create hsr debugfs directory
[   45.493996][ T5934] hsr_slave_0: entered promiscuous mode
[   45.500151][ T5934] hsr_slave_1: entered promiscuous mode
[   45.502265][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.505321][ T5934] Cannot create hsr debugfs directory
[   45.579472][ T5944] hsr_slave_0: entered promiscuous mode
[   45.582534][ T5944] hsr_slave_1: entered promiscuous mode
[   45.585570][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.588550][ T5944] Cannot create hsr debugfs directory
[   45.662038][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.669294][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.675809][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.682696][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.777011][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.783921][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.788121][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.793014][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.816154][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   45.820054][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   45.827166][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   45.832691][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   45.873422][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.881983][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.885394][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.894463][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.909410][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.929439][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   45.943395][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.946422][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.955954][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.958841][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.986433][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.000474][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   46.008782][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.010868][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.023656][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.026374][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.038370][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.044399][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.059493][ T5944] 8021q: adding VLAN 0 to HW filter on device team0
[   46.063452][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   46.072153][   T39] audit: type=1400 audit(1737224354.402:114): avc:  denied  { sys_module } for  pid=5937 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   46.080294][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.083253][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.089622][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.092573][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.101772][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.104705][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.124112][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.126982][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.160084][ T5941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.163815][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.176028][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.206435][ T5937] veth0_vlan: entered promiscuous mode
[   46.211897][ T5937] veth1_vlan: entered promiscuous mode
[   46.226936][ T5937] veth0_macvtap: entered promiscuous mode
[   46.230108][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.236438][ T5937] veth1_macvtap: entered promiscuous mode
[   46.255414][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.263156][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.270018][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.274851][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.277309][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.279640][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.282280][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.291651][ T5934] veth0_vlan: entered promiscuous mode
[   46.296096][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.304247][ T5934] veth1_vlan: entered promiscuous mode
[   46.336874][ T5941] veth0_vlan: entered promiscuous mode
[   46.344245][ T5941] veth1_vlan: entered promiscuous mode
[   46.348259][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.351365][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.355172][ T5934] veth0_macvtap: entered promiscuous mode
[   46.359547][ T5934] veth1_macvtap: entered promiscuous mode
[   46.375924][ T5944] veth0_vlan: entered promiscuous mode
[   46.383433][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.384713][ T5944] veth1_vlan: entered promiscuous mode
[   46.386369][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.392597][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.395681][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.399010][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.407094][ T5941] veth0_macvtap: entered promiscuous mode
[   46.413169][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.416164][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.419724][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.424000][ T5941] veth1_macvtap: entered promiscuous mode
[   46.429425][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.431894][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.437172][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.439957][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.443229][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.446804][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.449883][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.452555][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.454940][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.457444][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.470700][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.471904][ T5945] Bluetooth: hci1: command tx timeout
[   46.475898][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.478827][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.482130][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.485436][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.494988][ T5944] veth0_macvtap: entered promiscuous mode
[   46.502486][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.505084][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.507563][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.510059][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.513939][ T5944] veth1_macvtap: entered promiscuous mode
[   46.550974][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.551061][ T5945] Bluetooth: hci2: command tx timeout
[   46.552891][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.552902][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.552906][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.552913][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.552917][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.552923][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.553372][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.553581][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.555792][ T5945] Bluetooth: hci0: command tx timeout
[   46.555800][ T5936] Bluetooth: hci3: command tx timeout
[   46.559643][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.586903][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.589744][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.592792][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.595909][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.599123][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.604145][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.613568][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.617109][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.620225][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.623850][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.632143][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.634475][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.654719][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.657025][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.667369][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.672076][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.694445][  T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.697517][  T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.724799][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.727761][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.741317][   T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   46.757914][ T6000] Zero length message leads to an empty skb
[   46.798555][ T6004] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET)
[   46.803291][ T6006] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   46.911255][   T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   46.914877][   T58] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   46.918924][   T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   46.921876][   T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   46.925158][   T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   46.934983][   T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   46.938136][   T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   46.941265][   T58] usb 5-1: Product: syz
[   46.942482][   T58] usb 5-1: Manufacturer: syz
[   46.954032][   T58] cdc_wdm 5-1:1.0: skipping garbage
[   46.955638][   T58] cdc_wdm 5-1:1.0: skipping garbage
[   46.974204][   T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   46.976068][   T58] cdc_wdm 5-1:1.0: Unknown control protocol
[   47.239660][    C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   47.242386][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   47.245080][    C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   47.247638][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   47.250221][    C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   47.252821][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   47.255719][    C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   47.256249][ T5978] usb 5-1: USB disconnect, device number 2
[   47.258234][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   47.260542][ T6012] x_tables: duplicate underflow at hook 1
[   47.262747][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   47.276014][ T6012] loop7: detected capacity change from 0 to 524287999
[   47.285094][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.287993][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.292883][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.295602][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.298056][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.300520][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.302687][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.305341][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.307761][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.311361][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.314703][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.317364][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.319816][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.322488][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.324912][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.327322][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   47.329415][ T6012] ldm_validate_partition_table(): Disk read failed.
[   47.339338][   T74] loop: Write error at byte offset 1, length 4096.
[   47.341559][    C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   47.344286][    C1] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   47.346813][    C1] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   47.347422][   T74] loop: Write error at byte offset 1, length 4096.
[   47.349383][    C1] Buffer I/O error on dev loop7, logical block 1, async page read
[   47.354329][ T6012] Dev loop7: unable to read RDB block 8
[   47.356858][ T1145] loop: Write error at byte offset 1, length 4096.
[   47.361416][ T6012]  loop7: unable to read partition table
[   47.363800][ T6012] loop_reread_partitions: partition scan of loop7 (3Ÿ¾‚³˜) failed (rc=-5)
[   47.605013][ T6015] netlink: 'syz.3.8': attribute type 27 has an invalid length.
[   47.624069][ T6015] cgroup: none used incorrectly
[   47.659147][ T6019] sp0: Synchronizing with TNC
[   47.824542][ T6023] kvm: emulating exchange as write
[   47.905903][ T6037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.923863][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   47.975912][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   48.034391][ T6043] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   48.065516][ T6026] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   48.082319][ T6045] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   48.551030][ T5945] Bluetooth: hci1: command tx timeout
[   48.589665][ T6043] overlayfs: statfs failed on './file0'
[   48.634991][ T5945] Bluetooth: hci0: command tx timeout
[   48.641788][ T5945] Bluetooth: hci3: command tx timeout
[   48.641812][ T5940] Bluetooth: hci2: command tx timeout
[   49.056741][ T6066] 9pnet: Could not find request transport: `m㸛ôJtcp
[   49.079785][ T6071] 9pnet: Could not find request transport: `m㸛ôJtcp
[   49.170108][   T35] hid-generic 0001:0007:0004.0002: item fetching failed at offset 0/3
[   49.174120][   T35] hid-generic 0001:0007:0004.0002: probe with driver hid-generic failed with error -22
[   49.320972][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   49.503169][    T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   49.505917][    T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   49.508809][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   49.511491][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   49.514640][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   49.518846][    T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   49.521556][    T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   49.523834][    T9] usb 7-1: Product: syz
[   49.525045][    T9] usb 7-1: Manufacturer: syz
[   49.528956][    T9] cdc_wdm 7-1:1.0: skipping garbage
[   49.530521][    T9] cdc_wdm 7-1:1.0: skipping garbage
[   49.534038][    T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   49.535787][    T9] cdc_wdm 7-1:1.0: Unknown control protocol
[   49.647580][   T39] kauditd_printk_skb: 89 callbacks suppressed
[   49.647591][   T39] audit: type=1400 audit(1737224357.972:204): avc:  denied  { bind } for  pid=6081 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   49.655162][   T39] audit: type=1400 audit(1737224357.972:205): avc:  denied  { name_bind } for  pid=6081 comm="syz.3.29" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[   49.661646][   T39] audit: type=1400 audit(1737224357.972:206): avc:  denied  { node_bind } for  pid=6081 comm="syz.3.29" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[   49.670840][   T39] audit: type=1400 audit(1737224357.972:207): avc:  denied  { listen } for  pid=6081 comm="syz.3.29" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   49.681049][   T39] audit: type=1400 audit(1737224357.972:208): avc:  denied  { connect } for  pid=6081 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   49.687259][   T39] audit: type=1400 audit(1737224357.972:209): avc:  denied  { name_connect } for  pid=6081 comm="syz.3.29" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[   49.697351][   T39] audit: type=1400 audit(1737224357.982:210): avc:  denied  { accept } for  pid=6081 comm="syz.3.29" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   49.704689][   T39] audit: type=1400 audit(1737224357.982:211): avc:  denied  { read } for  pid=6081 comm="syz.3.29" laddr=127.0.0.1 lport=49850 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   49.726867][ T6085] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   49.729596][ T6085] UDF-fs: Scanning with blocksize 2048 failed
[   49.732441][ T6085] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   49.734597][ T6085] UDF-fs: Scanning with blocksize 4096 failed
[   49.771396][   T39] audit: type=1400 audit(1737224358.102:212): avc:  denied  { create } for  pid=6088 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   49.777142][   T39] audit: type=1400 audit(1737224358.102:213): avc:  denied  { ioctl } for  pid=6088 comm="syz.3.32" path="socket:[8768]" dev="sockfs" ino=8768 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   49.784809][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   49.784974][   T35] usb 7-1: USB disconnect, device number 2
[   49.789618][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   49.791358][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   49.796732][ T6090] x_tables: duplicate underflow at hook 1
[   49.807740][ T6070] loop7: detected capacity change from 0 to 524287999
[   49.812811][ T6070] ldm_validate_partition_table(): Disk read failed.
[   49.815035][ T6070] Dev loop7: unable to read RDB block 0
[   49.817082][ T6070]  loop7: unable to read partition table
[   49.818827][ T6070] loop_reread_partitions: partition scan of loop7 (3Ÿ¾‚³˜) failed (rc=-5)
[   49.826272][  T105] loop: Write error at byte offset 1, length 4096.
[   49.828581][  T105] loop: Write error at byte offset 1, length 4096.
[   49.831603][  T105] loop: Write error at byte offset 1, length 4096.
[   50.070758][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.35'.
[   50.075721][ T6100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=6100 comm=syz.1.35
[   50.221813][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   50.230476][ T6117] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[   50.380916][    T9] usb 8-1: Using ep0 maxpacket: 8
[   50.384159][    T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[   50.386760][    T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   50.389558][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   50.392816][    T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49696, setting to 1024
[   50.396343][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   50.399360][    T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   50.403200][    T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   50.406060][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.480067][ T6128] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   50.614816][    T9] usb 8-1: usb_control_msg returned -32
[   50.616797][    T9] usbtmc 8-1:16.0: can't read capabilities
[   50.630997][ T5940] Bluetooth: hci1: command tx timeout
[   50.713282][ T5940] Bluetooth: hci3: command tx timeout
[   50.713358][ T5945] Bluetooth: hci2: command tx timeout
[   50.713367][ T5936] Bluetooth: hci0: command tx timeout
[   51.310608][ T6136] SELinux:  Context system_u:object_r:audisp_remote_exec_t:s0 is not valid (left unmapped).
[   51.315610][ T6141] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[   51.324222][ T6141] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   51.329212][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.335192][ T6136] syzkaller1: entered promiscuous mode
[   51.336823][ T6136] syzkaller1: entered allmulticast mode
[   51.379379][ T5945] block nbd2: Receive control failed (result -107)
[   51.482787][ T6141] block nbd2: shutting down sockets
[   51.515819][ T6149] /dev/sg0: Can't lookup blockdev
[   51.520099][ T6149] process 'syz.2.47' launched '/dev/fd/7' with NULL argv: empty string added
[   52.424199][ T6177] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   52.426992][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'.
[   52.440918][    T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   52.603506][    T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   52.607171][    T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   52.611492][    T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   52.615158][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   52.619545][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   52.626578][    T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   52.629627][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.60'.
[   52.630196][    T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   52.636167][    T8] usb 6-1: Product: syz
[   52.637778][    T8] usb 6-1: Manufacturer: syz
[   52.638053][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.59'.
[   52.645490][    T8] cdc_wdm 6-1:1.0: skipping garbage
[   52.647631][    T8] cdc_wdm 6-1:1.0: skipping garbage
[   52.651466][    T8] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device
[   52.654018][    T8] cdc_wdm 6-1:1.0: Unknown control protocol
[   52.711591][ T5945] Bluetooth: hci1: command tx timeout
[   52.728724][ T6200] ata1.00: invalid cdb length 6
[   52.753054][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'.
[   52.756963][ T6204] netem: incorrect ge model size
[   52.759194][ T6204] netem: change failed
[   52.800930][ T5945] Bluetooth: hci0: command tx timeout
[   52.800992][ T5940] Bluetooth: hci2: command tx timeout
[   52.801026][ T5936] Bluetooth: hci3: command tx timeout
[   52.862113][ T6213] input: syz1 as /devices/virtual/input/input5
[   52.862905][ T6155] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90
[   52.870776][  T834] usb 6-1: USB disconnect, device number 2
[   52.872165][ T6155] x_tables: duplicate underflow at hook 1
[   52.879955][ T6155] loop7: detected capacity change from 0 to 524287999
[   52.889247][    C1] blk_print_req_error: 23 callbacks suppressed
[   52.889256][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.893709][    C1] buffer_io_error: 23 callbacks suppressed
[   52.893716][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.897122][    T9] usb 8-1: USB disconnect, device number 2
[   52.898548][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.902631][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.905192][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.908248][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.915191][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.918642][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.922705][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.926135][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.929224][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.932104][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.934816][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.938312][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.942875][ T6155] ldm_validate_partition_table(): Disk read failed.
[   52.945726][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.949164][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.952316][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.955995][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.959305][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.962048][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   52.970274][ T6155] Dev loop7: unable to read RDB block 0
[   52.975667][ T6155]  loop7: unable to read partition table
[   52.990769][ T6155] loop_reread_partitions: partition scan of loop7 (3Ÿ¾‚³˜) failed (rc=-5)
[   53.018641][ T6230] capability: warning: `syz.2.72' uses 32-bit capabilities (legacy support in use)
[   53.125941][ T6244] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   53.128678][ T6244] /dev/nullb0: Can't open blockdev
[   53.310889][   T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   53.409916][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   53.445786][ T6294] netlink: 14 bytes leftover after parsing attributes in process `syz.3.86'.
[   53.481050][   T58] usb 5-1: Using ep0 maxpacket: 8
[   53.484713][   T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   53.488523][   T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   53.492533][   T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   53.495561][   T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   53.500364][   T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   53.505528][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.567840][   T74] tipc: Subscription rejected, illegal request
[   53.570731][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'.
[   53.630680][ T6306] erspan1: entered promiscuous mode
[   53.717641][   T58] usb 5-1: GET_CAPABILITIES returned 0
[   53.719293][   T58] usbtmc 5-1:16.0: can't read capabilities
[   53.925301][ T6304] syz.1.90 (6304): drop_caches: 2
[   53.975325][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'.
[   54.026772][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'.
[   54.189541][ T6332] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in;
[   54.189541][ T6332]    program syz.1.99 not setting count and/or reply_len properly
[   54.361466][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   54.439405][    T8] usb 5-1: USB disconnect, device number 3
[   54.459715][ T6348] dccp_invalid_packet: invalid packet type
[   54.506925][ T6354] random: crng reseeded on system resumption
[   54.567559][ T6359] fuse: Bad value for 'fd'
[   54.609436][ T6360] dccp_invalid_packet: pskb_may_pull failed
[   54.694389][ T6365] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.701082][   T39] kauditd_printk_skb: 107 callbacks suppressed
[   54.701091][   T39] audit: type=1400 audit(1737224363.022:321): avc:  denied  { write } for  pid=6364 comm="syz.1.107" name="fd" dev="proc" ino=10927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   54.708947][   T39] audit: type=1400 audit(1737224363.032:322): avc:  denied  { add_name } for  pid=6364 comm="syz.1.107" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   54.715038][   T39] audit: type=1400 audit(1737224363.032:323): avc:  denied  { create } for  pid=6364 comm="syz.1.107" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[   54.726184][   T39] audit: type=1400 audit(1737224363.032:324): avc:  denied  { associate } for  pid=6364 comm="syz.1.107" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   54.789646][   T39] audit: type=1400 audit(1737224363.112:325): avc:  denied  { create } for  pid=6370 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   54.795486][   T39] audit: type=1400 audit(1737224363.112:326): avc:  denied  { getopt } for  pid=6370 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   54.804892][   T39] audit: type=1400 audit(1737224363.132:327): avc:  denied  { mounton } for  pid=6373 comm="syz.1.111" path="/27/file0/file0" dev="9p" ino=37618190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.817621][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.827184][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.835402][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.844008][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.851040][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.862673][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.871870][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.878625][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.885273][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.899947][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.907360][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.914687][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.928662][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.937744][   T39] audit: type=1400 audit(1737224363.262:328): avc:  denied  { mount } for  pid=6378 comm="syz.2.112" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   54.944110][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.956111][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.963849][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.975013][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.976548][   T39] audit: type=1400 audit(1737224363.302:329): avc:  denied  { mount } for  pid=6380 comm="syz.2.113" name="/" dev="mqueue" ino=3414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   54.986681][   T39] audit: type=1400 audit(1737224363.302:330): avc:  denied  { setcheckreqprot } for  pid=6380 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   54.991844][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   54.999714][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.006208][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.013392][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.022096][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.027761][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.037318][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.044954][ T6385] binder: 6384:6385 ioctl c0306201 20000580 returned -14
[   55.047310][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.054940][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.061681][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.072361][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.079195][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.092375][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.099089][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.108537][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.118035][ T6374] erofs (device erofs): cannot find valid erofs superblock
[   55.217010][ T6399] loop6: detected capacity change from 0 to 262144
[   55.296116][ T6396] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   55.453438][ T6412] =======================================================
[   55.453438][ T6412] WARNING: The mand mount option has been deprecated and
[   55.453438][ T6412]          and is ignored by this kernel. Remove the mand
[   55.453438][ T6412]          option from the mount to silence this warning.
[   55.453438][ T6412] =======================================================
[   55.469478][ T6412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   55.926618][ T6425] netlink: 244 bytes leftover after parsing attributes in process `syz.1.130'.
[   56.025308][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.132'.
[   56.027880][ T6432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.132'.
[   56.300399][ T6450] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   56.301251][   T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   56.451600][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   56.456743][ T6465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6465 comm=syz.0.141
[   56.480867][   T57] usb 7-1: Using ep0 maxpacket: 16
[   56.483646][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.487123][   T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   56.492414][   T57] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   56.495964][   T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.499937][   T57] usb 7-1: config 0 descriptor??
[   56.528858][   T57] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6
[   56.723027][ T5973] usb 7-1: USB disconnect, device number 3
[   56.847412][ T6474] openvswitch: netlink: Flow key attr not present in new flow.
[   57.459190][ T6494] bond0: option ad_select: unable to set because the bond device is up
[   57.880893][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   57.960389][ T6521] capability: warning: `syz.3.157' uses deprecated v2 capabilities in a way that may be insecure
[   58.061196][    T8] usb 6-1: Using ep0 maxpacket: 32
[   58.070421][    T8] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[   58.074055][    T8] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   58.077350][    T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[   58.080945][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   58.084752][    T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   58.085943][ T6527] mkiss: ax0: crc mode is auto.
[   58.088481][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   58.088524][    T8] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   58.098541][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.109452][    T8] usb 6-1: config 0 descriptor??
[   58.318858][    T8] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   58.331878][    T8] usb 6-1: USB disconnect, device number 3
[   58.341772][    T8] usblp0: removed
[   58.360193][ T6533] bridge0: port 3(netdevsim0) entered blocking state
[   58.362983][ T6533] bridge0: port 3(netdevsim0) entered disabled state
[   58.365233][ T6533] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   58.368776][ T6533] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   58.446808][ T6540] syz_tun: entered allmulticast mode
[   58.476369][ T6543] syz_tun: left allmulticast mode
[   58.501332][ T5978] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   58.655654][ T5945] Bluetooth: hci4: sending frame failed (-49)
[   58.658606][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -49
[   58.683640][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.686789][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.689847][ T5978] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   58.695355][ T5978] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   58.697963][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.707085][ T5978] usb 8-1: config 0 descriptor??
[   58.863319][ T6577] __nla_validate_parse: 3 callbacks suppressed
[   58.863331][ T6577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'.
[   58.946365][ T6530] tmpfs: User quota block hardlimit too large.
[   58.950682][ T5978] usbhid 8-1:0.0: can't add hid device: -71
[   58.952519][ T5978] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   58.956846][ T5978] usb 8-1: USB disconnect, device number 3
[   59.252366][ T6589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.176'.
[   59.411285][ T6595] delete_channel: no stack
[   59.426017][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.493537][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.589428][ T6612] openvswitch: netlink: IPv4 frag type 224 is out of range max 2
[   60.092360][ T6624] binder_alloc: binder_alloc_mmap_handler: 6623 20ffd000-21000000 already mapped failed -16
[   60.101863][ T6624] binder_alloc: 6623: binder_alloc_buf, no vma
[   60.513323][ T6633] overlayfs: conflicting options: userxattr,redirect_dir=on
[   60.553076][   T39] kauditd_printk_skb: 63 callbacks suppressed
[   60.553086][   T39] audit: type=1400 audit(1737224368.755:394): avc:  denied  { append } for  pid=6634 comm="syz.3.190" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   60.567117][   T39] audit: type=1400 audit(1737224368.764:395): avc:  denied  { mount } for  pid=6636 comm="syz.0.191" name="/" dev="autofs" ino=13591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   60.582373][   T39] audit: type=1400 audit(1737224368.792:396): avc:  denied  { unmount } for  pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   60.594244][ T6640] futex_wake_op: syz.1.187 tries to shift op by -1; fix this program
[   60.600912][   T39] audit: type=1400 audit(1737224368.801:397): avc:  denied  { ioctl } for  pid=6641 comm="syz.2.194" path="socket:[14462]" dev="sockfs" ino=14462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   60.690842][   T39] audit: type=1400 audit(1737224368.885:398): avc:  denied  { ioctl } for  pid=6641 comm="syz.2.194" path="socket:[13664]" dev="sockfs" ino=13664 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   60.813585][ T6653] openvswitch: netlink: Actions may not be safe on all matching packets
[   60.832948][   T39] audit: type=1400 audit(1737224369.016:399): avc:  denied  { setattr } for  pid=6652 comm="syz.0.195" name="NETLINK" dev="sockfs" ino=12744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   60.860741][    T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   60.863549][   T39] audit: type=1400 audit(1737224369.045:400): avc:  denied  { create } for  pid=6655 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   60.865164][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'.
[   60.869037][   T39] audit: type=1400 audit(1737224369.045:401): avc:  denied  { bind } for  pid=6655 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   60.877359][   T39] audit: type=1400 audit(1737224369.063:402): avc:  denied  { create } for  pid=6655 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   60.882926][   T39] audit: type=1400 audit(1737224369.063:403): avc:  denied  { getopt } for  pid=6655 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   60.940231][ T6661] ISOFS: Unable to identify CD-ROM format.
[   61.030815][    T8] usb 6-1: Using ep0 maxpacket: 8
[   61.033568][    T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   61.035951][    T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   61.038963][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   61.042891][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   61.046431][    T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   61.050331][    T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   61.050367][ T6670] ALSA: mixer_oss: invalid OSS volume '@'
[   61.053182][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.205329][ T6689] Bluetooth: MGMT ver 1.23
[   61.274688][    T8] usb 6-1: usb_control_msg returned -32
[   61.276866][    T8] usbtmc 6-1:16.0: can't read capabilities
[   61.377182][ T6700] openvswitch: netlink: Multiple metadata blocks provided
[   61.412292][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'.
[   61.561559][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'.
[   61.565416][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'.
[   61.569013][ T6724] netlink: 'syz.0.215': attribute type 6 has an invalid length.
[   61.699733][ T6722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.214'.
[   61.910601][ T6757] bridee_slave_0: renamed from lo (while UP)
[   62.133660][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'.
[   62.285807][ T6786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   62.289444][ T6786] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   62.418448][ T6790] VFS: could not find a valid V7 on nullb0.
[   62.560951][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'.
[   62.622695][ T6800] dccp_invalid_packet: invalid packet type
[   62.661450][ T6803] syz.3.237: attempt to access beyond end of device
[   62.661450][ T6803] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[   62.665183][ T6803] befs: (nbd3): unable to read superblock
[   62.775168][ T6803] netlink: zone id is out of range
[   62.776916][ T6803] netlink: zone id is out of range
[   62.778544][ T6803] netlink: zone id is out of range
[   62.780150][ T6803] netlink: zone id is out of range
[   62.781995][ T6803] netlink: zone id is out of range
[   62.783707][ T6803] netlink: zone id is out of range
[   63.209066][ T6837] warning: `syz.0.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.574014][ T1019] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   63.700047][    T8] usb 6-1: USB disconnect, device number 4
[   63.745297][ T1019] usb 7-1: Using ep0 maxpacket: 8
[   63.750732][ T1019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   63.757602][ T1019] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   63.761762][ T1019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.767397][ T1019] usb 7-1: config 0 descriptor??
[   63.818667][ T6865] netlink: 'syz.1.249': attribute type 9 has an invalid length.
[   63.888339][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'.
[   63.986788][ T1019] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   64.035181][ T6868] syz.1.250 (6868) used greatest stack depth: 20512 bytes left
[   64.104005][ T6897] xt_time: unknown flags 0xc
[   64.133621][ T6905] ubi0: attaching mtd0
[   64.136089][ T6905] ubi0: scanning is finished
[   64.137489][ T6905] ubi0: empty MTD device detected
[   64.159655][ T6903] mmap: syz.0.258 (6903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   64.191541][ T6911] nfs: Unknown parameter 'sourcend/timer'
[   64.238201][   T64] usb 7-1: USB disconnect, device number 4
[   64.252042][ T6905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   64.254311][ T6905] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   64.258336][ T6905] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   64.260409][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.260775][ T6905] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   64.263277][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.266079][ T6905] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   64.270726][ T6905] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   64.273258][ T6905] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2710930272
[   64.276215][ T6905] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   64.280526][ T6915] ubi0: background thread "ubi_bgt0d" started, PID 6915
[   64.280686][ T5936] Bluetooth: hci0: ISO packet for unknown connection handle 0
[   64.446142][ T6932] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   64.578991][   T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   64.771399][   T64] usb 7-1: Using ep0 maxpacket: 8
[   64.774186][   T64] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[   64.776813][   T64] usb 7-1: config 0 has no interface number 0
[   64.778674][   T64] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   64.781866][   T64] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   64.786250][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.792399][   T64] usb 7-1: config 0 descriptor??
[   64.799494][   T64] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   64.929207][ T5936] Bluetooth: hci3: Unknown advertising packet type: 0x76
[   64.929243][ T5936] Bluetooth: hci3: Malformed LE Event: 0x0d
[   65.015867][ T1019] usb 7-1: USB disconnect, device number 5
[   65.096113][ T6987] CIFS: iocharset name too long
[   65.469254][ T6995] evm: overlay not supported
[   65.607887][ T7004] netlink: 'syz.1.277': attribute type 13 has an invalid length.
[   65.614525][ T7004] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   65.618828][ T7004] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   65.621132][ T7004] gretap1: entered promiscuous mode
[   65.622669][ T7004] gretap1: entered allmulticast mode
[   65.701806][ T7021] xt_hashlimit: size too large, truncated to 1048576
[   66.079675][ T7037] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82
[   66.133979][ T5978] IPVS: starting estimator thread 0...
[   66.225724][ T7040] IPVS: using max 22 ests per chain, 52800 per kthread
[   66.254097][   T39] kauditd_printk_skb: 44 callbacks suppressed
[   66.254108][   T39] audit: type=1400 audit(1737224374.086:448): avc:  denied  { map } for  pid=7051 comm="syz.2.290" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   66.283683][   T39] audit: type=1400 audit(1737224374.114:449): avc:  denied  { mount } for  pid=7055 comm="syz.1.292" name="/" dev="ramfs" ino=14100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   66.291502][   T39] audit: type=1400 audit(1737224374.124:450): avc:  denied  { unmount } for  pid=7055 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   66.304875][ T7060] net_ratelimit: 4 callbacks suppressed
[   66.304884][ T7060] IPv6: addrconf: prefix option has invalid lifetime
[   66.324206][ T7063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7063 comm=syz.1.295
[   66.363850][   T39] audit: type=1400 audit(1737224374.189:451): avc:  denied  { nlmsg_write } for  pid=7066 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   66.404418][   T39] audit: type=1400 audit(1737224374.227:452): avc:  denied  { setopt } for  pid=7057 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   66.481913][    T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   66.489421][ T7079] netlink: 76 bytes leftover after parsing attributes in process `syz.1.298'.
[   66.532983][ T7082] ptrace attach of "/syz-executor exec"[5934] was attempted by "/syz-executor exec"[7082]
[   66.642389][    T8] usb 8-1: Using ep0 maxpacket: 16
[   66.648756][    T8] usb 8-1: config 6 has an invalid interface number: 211 but max is 1
[   66.651275][    T8] usb 8-1: config 6 has an invalid interface number: 8 but max is 1
[   66.654277][    T8] usb 8-1: config 6 has no interface number 0
[   66.657297][    T8] usb 8-1: config 6 has no interface number 1
[   66.657810][   T39] audit: type=1400 audit(1737224374.470:453): avc:  denied  { watch watch_reads } for  pid=7098 comm="syz.2.302" path="/71/file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.659954][    T8] usb 8-1: config 6 interface 211 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   66.670191][    T8] usb 8-1: config 6 interface 211 altsetting 9 has an endpoint descriptor with address 0x93, changing to 0x83
[   66.674283][    T8] usb 8-1: config 6 interface 211 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   66.677965][    T8] usb 8-1: config 6 interface 211 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[   66.681725][    T8] usb 8-1: config 6 interface 211 altsetting 9 bulk endpoint 0x6 has invalid maxpacket 1024
[   66.685292][    T8] usb 8-1: config 6 interface 8 altsetting 41 has an invalid descriptor for endpoint zero, skipping
[   66.688969][    T8] usb 8-1: config 6 interface 8 altsetting 41 has an endpoint descriptor with address 0x12, changing to 0x2
[   66.692465][    T8] usb 8-1: config 6 interface 8 altsetting 41 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[   66.696169][    T8] usb 8-1: config 6 interface 8 altsetting 41 endpoint 0xA has invalid maxpacket 1503, setting to 64
[   66.699892][    T8] usb 8-1: config 6 interface 8 altsetting 41 has a duplicate endpoint with address 0x2, skipping
[   66.703525][    T8] usb 8-1: config 6 interface 8 altsetting 41 has a duplicate endpoint with address 0x2, skipping
[   66.707321][    T8] usb 8-1: config 6 interface 8 altsetting 41 has an invalid descriptor for endpoint zero, skipping
[   66.711014][    T8] usb 8-1: config 6 interface 8 altsetting 41 bulk endpoint 0x8 has invalid maxpacket 16
[   66.714450][    T8] usb 8-1: config 6 interface 8 altsetting 41 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   66.718265][    T8] usb 8-1: config 6 interface 8 altsetting 41 has an invalid descriptor for endpoint zero, skipping
[   66.721665][    T8] usb 8-1: config 6 interface 8 altsetting 41 has a duplicate endpoint with address 0xB, skipping
[   66.725395][    T8] usb 8-1: config 6 interface 8 altsetting 41 has a duplicate endpoint with address 0x4, skipping
[   66.728914][    T8] usb 8-1: config 6 interface 8 altsetting 41 has an endpoint descriptor with address 0x58, changing to 0x8
[   66.732701][    T8] usb 8-1: config 6 interface 8 altsetting 41 has a duplicate endpoint with address 0x8, skipping
[   66.736315][    T8] usb 8-1: config 6 interface 211 has no altsetting 0
[   66.738756][    T8] usb 8-1: config 6 interface 8 has no altsetting 0
[   66.743064][    T8] usb 8-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice=47.5b
[   66.746551][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.749470][    T8] usb 8-1: Product: syz
[   66.750846][    T8] usb 8-1: Manufacturer: ࡃ
[   66.752558][    T8] usb 8-1: SerialNumber: syz
[   66.758250][ T7050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   66.803474][ T7106] bad cache= option: none

[   66.803474][ T7106] 
[   66.806682][ T7106] CIFS: VFS: bad cache= option: none

[   66.851068][ T7109] netlink: 'syz.2.305': attribute type 21 has an invalid length.
[   66.853852][ T7109] netlink: 156 bytes leftover after parsing attributes in process `syz.2.305'.
[   66.980707][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.984886][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.988968][   T39] audit: type=1400 audit(1737224374.779:454): avc:  denied  { append } for  pid=7049 comm="syz.3.289" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   67.003054][    T8] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:6.211/input/input8
[   67.008889][ T5336] bcm5974 8-1:6.211: could not read from device
[   67.014277][ T5336] bcm5974 8-1:6.211: could not read from device
[   67.020419][ T5336] bcm5974 8-1:6.211: could not read from device
[   67.022576][    T8] usb 8-1: USB disconnect, device number 4
[   67.134185][   T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   67.271105][ T7115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.283852][   T58] usb 7-1: device descriptor read/64, error -71
[   67.349786][ T5940] Bluetooth: hci3: command 0x0405 tx timeout
[   67.541862][   T58] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   67.617829][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'.
[   67.617835][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'.
[   67.689949][   T58] usb 7-1: device descriptor read/64, error -71
[   67.809273][   T58] usb usb7-port1: attempt power cycle
[   67.934693][   T39] audit: type=1400 audit(1737224375.658:455): avc:  denied  { getopt } for  pid=7129 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   67.934935][ T7135] trusted_key: syz.3.312 sent an empty control message without MSG_MORE.
[   68.136007][   T39] audit: type=1400 audit(1737224375.845:456): avc:  denied  { bind } for  pid=7138 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.171046][   T58] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   68.177619][   T39] audit: type=1400 audit(1737224375.892:457): avc:  denied  { remount } for  pid=7141 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   68.193050][   T58] usb 7-1: device descriptor read/8, error -71
[   68.456901][   T58] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   68.470818][   T58] usb 7-1: device descriptor read/8, error -71
[   68.588513][   T58] usb usb7-port1: unable to enumerate USB device
[   68.803408][ T7160] openvswitch: netlink: IP tunnel dst address not specified
[   68.913120][ T7170] "syz.0.322" (7170) uses obsolete ecb(arc4) skcipher
[   69.068603][ T7142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.133240][    T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   69.133662][ T7184] PKCS8: Unsupported PKCS#8 version
[   69.165006][ T7189] netlink: 'syz.3.328': attribute type 4 has an invalid length.
[   69.172242][ T7189] netlink: 'syz.3.328': attribute type 4 has an invalid length.
[   69.200436][ T7192] xfs: Unknown parameter 'usrquotaio#'
[   69.201437][ T7191] xfs: Unknown parameter 'usrquotaio#'
[   69.235497][ T7198] sch_tbf: burst 824 is lower than device lo mtu (65550) !
[   69.270741][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[   69.304227][    T8] usb 6-1: Using ep0 maxpacket: 8
[   69.307663][    T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   69.314939][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   69.322192][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   69.326477][    T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   69.332380][    T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   69.336079][    T8] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0
[   69.339031][    T8] usb 6-1: Product: syz
[   69.400684][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'.
[   69.404429][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'.
[   69.445303][ T7211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5662 sclass=netlink_route_socket pid=7211 comm=syz.0.336
[   69.449997][ T7211] netlink: 632 bytes leftover after parsing attributes in process `syz.0.336'.
[   69.547946][ T7221] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[   69.571955][ T7165] xt_ecn: cannot match TCP bits for non-tcp packets
[   69.630337][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'.
[   69.639475][    T8] usb 6-1: GET_CAPABILITIES returned 0
[   69.641098][    T8] usbtmc 6-1:16.0: can't read capabilities
[   69.795958][  T834] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   69.956351][  T834] usb 8-1: Using ep0 maxpacket: 32
[   69.959633][  T834] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[   69.962712][  T834] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   69.965193][  T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[   69.968682][  T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   69.972197][  T834] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   69.975753][  T834] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   69.980955][  T834] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   69.984583][  T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.988161][  T834] usb 8-1: config 0 descriptor??
[   70.210346][  T834] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   70.258395][ T7236] overlayfs: failed to resolve './file0': -2
[   70.637470][  T834] usb 8-1: USB disconnect, device number 5
[   70.651393][  T834] usblp1: removed
[   70.679658][ T7247] netlink: 596 bytes leftover after parsing attributes in process `syz.0.346'.
[   71.078884][  T834] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   71.112265][ T7268] netlink: 'syz.2.353': attribute type 2 has an invalid length.
[   71.260580][  T834] usb 8-1: Using ep0 maxpacket: 8
[   71.263547][  T834] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[   71.266053][  T834] usb 8-1: config 179 has no interface number 0
[   71.267936][  T834] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   71.271149][  T834] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   71.274500][  T834] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   71.277702][  T834] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   71.281067][  T834] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   71.285145][  T834] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   71.288234][  T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.292189][ T7254] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   71.400557][ T7278] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[   71.518081][  T834] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input9
[   71.726448][ T5978] usb 8-1: USB disconnect, device number 6
[   71.726586][    C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   71.730976][    C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[   71.731213][ T5978] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   71.970777][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[   71.973389][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[   72.086490][   T58] usb 6-1: USB disconnect, device number 5
[   72.138656][ T7295] dccp_invalid_packet: invalid packet type
[   72.200605][   T39] kauditd_printk_skb: 27 callbacks suppressed
[   72.200620][   T39] audit: type=1400 audit(1737224379.652:485): avc:  denied  { read } for  pid=7293 comm="syz.1.360" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   72.211475][   T39] audit: type=1400 audit(1737224379.652:486): avc:  denied  { open } for  pid=7293 comm="syz.1.360" path="/92/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   72.266011][   T39] audit: type=1400 audit(1737224379.717:487): avc:  denied  { getopt } for  pid=7299 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   72.302502][   T39] audit: type=1400 audit(1737224379.745:488): avc:  denied  { accept } for  pid=7301 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   72.346196][   T39] audit: type=1400 audit(1737224379.792:489): avc:  denied  { read } for  pid=7301 comm="syz.1.362" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   72.361819][   T39] audit: type=1400 audit(1737224379.792:490): avc:  denied  { open } for  pid=7301 comm="syz.1.362" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   72.371332][   T39] audit: type=1400 audit(1737224379.792:491): avc:  denied  { ioctl } for  pid=7301 comm="syz.1.362" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   72.390353][   T39] audit: type=1400 audit(1737224379.830:492): avc:  denied  { read } for  pid=7306 comm="syz.3.364" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   72.399107][   T39] audit: type=1400 audit(1737224379.830:493): avc:  denied  { open } for  pid=7306 comm="syz.3.364" path="/79/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   72.399160][ T7310] __nla_validate_parse: 3 callbacks suppressed
[   72.399173][ T7310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.365'.
[   72.409602][ T7315] block device autoloading is deprecated and will be removed.
[   72.417661][   T39] audit: type=1400 audit(1737224379.858:494): avc:  denied  { ioctl } for  pid=7306 comm="syz.3.364" path="/79/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   72.477332][ T7320] ieee802154 phy0 wpan0: encryption failed: -22
[   72.537470][ T7322] program syz.0.368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.628106][ T5936] Bluetooth: hci3: unexpected event for opcode 0x0419
[   72.865290][ T7352] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   72.993577][ T7366] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280
[   73.062480][ T5936] Bluetooth: hci3: Malformed LE Event: 0x0d
[   73.192251][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'.
[   73.266137][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[   73.371695][ T7421] Cannot find add_set index 0 as target
[   73.414065][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'.
[   73.576857][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'.
[   73.613073][ T7449] team0: Port device team_slave_1 removed
[   73.677761][ T5973] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   73.837067][ T5973] usb 8-1: Using ep0 maxpacket: 8
[   73.840104][ T5973] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   73.842815][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   73.846503][ T5973] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   73.852795][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   73.856278][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   73.861536][ T5973] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   73.864045][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   73.867914][ T5973] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   73.872456][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   73.876465][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   73.881059][ T5973] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   73.883322][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   73.887265][ T5973] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   73.891414][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   73.895385][ T5973] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   73.900332][ T7459] trusted_key: encrypted_key: insufficient parameters specified
[   73.906565][ T7459] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   73.910085][ T5973] usb 8-1: string descriptor 0 read error: -22
[   73.912654][ T5973] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   73.916302][ T5973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.925241][ T5973] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   74.254894][   T35] usb 8-1: USB disconnect, device number 7
[   74.255385][ T7487] usb 8-1: Couldn't submit interrupt_out_urb -19
[   74.482047][ T7431] bridge_slave_1: left allmulticast mode
[   74.484049][ T7431] bridge_slave_1: left promiscuous mode
[   74.486138][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.172871][ T7431] bridge1: port 1(bridge_slave_1) entered blocking state
[   75.175048][ T7431] bridge1: port 1(bridge_slave_1) entered disabled state
[   75.177051][ T7431] bridge_slave_1: entered allmulticast mode
[   75.179713][ T7431] bridge_slave_1: entered promiscuous mode
[   75.251647][ T5936] Bluetooth: Unknown BR/EDR signaling command 0x0e
[   75.253719][ T5936] Bluetooth: Wrong link type (-22)
[   75.255302][ T5936] Bluetooth: Unknown BR/EDR signaling command 0x0f
[   75.257312][ T5936] Bluetooth: Wrong link type (-22)
[   75.285074][ T7518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'.
[   75.369618][ T7531] netlink: 'syz.0.435': attribute type 29 has an invalid length.
[   75.374993][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'.
[   75.429722][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'.
[   75.434683][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'.
[   75.448716][ T7534] hsr_slave_1 (unregistering): left promiscuous mode
[   75.598260][ T7538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.437'.
[   75.663632][ T7544] overlay: Unknown parameter ''
[   75.779234][ T7551] nvme_fabrics: missing parameter 'transport=%s'
[   75.781269][ T7551] nvme_fabrics: missing parameter 'nqn=%s'
[   75.915128][ T7567] Option 'Í'M•O§±' to dns_resolver key: bad/missing value
[   76.010041][ T7569] cgroup: fork rejected by pids controller in /syz3
[   76.020536][ T7607] nbd: must specify an index to disconnect
[   76.246916][ T7826] xt_recent: Unsupported userspace flags (00000042)
[   76.324412][   T57] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1
[   76.326937][   T57] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22
[   76.409499][ T7854] 9pnet: Could not find request transport: 0xffffffffffffffff
[   76.486839][ T7850] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   76.523496][ T7866] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   76.527368][ T7866] tmpfs: Invalid uid '0x00000000ffffffff'
[   76.556596][ T7864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   76.662359][ T7875] netlink: 'syz.3.467': attribute type 2 has an invalid length.
[   76.787630][   T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   76.821581][ T7879] bond3: entered promiscuous mode
[   76.823145][ T7879] bond3: entered allmulticast mode
[   76.824843][ T7879] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.838514][ T7879] bond4: entered promiscuous mode
[   76.840632][ T7879] bond4: entered allmulticast mode
[   76.844202][ T7879] 8021q: adding VLAN 0 to HW filter on device bond4
[   76.904302][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.912515][ T7885] overlay: ./file0 is not a directory
[   76.917689][ T7885] bad cache= option: none

[   76.917689][ T7885] 
[   76.920153][ T7885] CIFS: VFS: bad cache= option: none

[   76.926686][   T35] usb 6-1: device descriptor read/64, error -71
[   77.037545][ T7893] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.195255][   T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   77.332814][   T35] usb 6-1: device descriptor read/64, error -71
[   77.452453][   T35] usb usb6-port1: attempt power cycle
[   77.554684][   T30] cfg80211: failed to load regulatory.db
[   77.824903][   T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   77.846376][   T35] usb 6-1: device descriptor read/8, error -71
[   77.856177][   T39] kauditd_printk_skb: 38 callbacks suppressed
[   77.856188][   T39] audit: type=1400 audit(1737224384.937:533): avc:  denied  { setopt } for  pid=7943 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   77.888778][ T7089] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   78.051134][ T7089] usb 8-1: Using ep0 maxpacket: 8
[   78.054516][ T7089] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   78.057867][ T7089] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   78.060765][ T7089] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.064294][ T7089] usb 8-1: config 0 descriptor??
[   78.123984][   T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   78.145788][   T35] usb 6-1: device descriptor read/8, error -71
[   78.263228][   T35] usb usb6-port1: unable to enumerate USB device
[   78.285702][ T7089] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   78.637853][ T5940] Bluetooth: hci4: command 0x1003 tx timeout
[   78.638072][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   78.707692][ T7947] __nla_validate_parse: 6 callbacks suppressed
[   78.707702][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'.
[   78.716432][   T39] audit: type=1400 audit(1737224385.751:534): avc:  denied  { bind } for  pid=7935 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   78.723645][   T39] audit: type=1400 audit(1737224385.751:535): avc:  denied  { mount } for  pid=7935 comm="syz.3.484" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   78.734211][ T5973] usb 8-1: USB disconnect, device number 8
[   78.837985][   T39] audit: type=1400 audit(1737224385.854:536): avc:  denied  { map } for  pid=7954 comm="syz.2.491" path="socket:[20618]" dev="sockfs" ino=20618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   78.844619][   T39] audit: type=1400 audit(1737224385.854:537): avc:  denied  { read } for  pid=7954 comm="syz.2.491" path="socket:[20618]" dev="sockfs" ino=20618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   78.854508][   T39] audit: type=1400 audit(1737224385.882:538): avc:  denied  { map } for  pid=7954 comm="syz.2.491" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1
[   78.868468][ T7957] overlayfs: missing 'lowerdir'
[   78.927427][ T7955] cdrom: dropping to single frame dma
[   79.025112][ T7960] netlink: 'syz.2.493': attribute type 28 has an invalid length.
[   79.027726][ T7960] netlink: 'syz.2.493': attribute type 3 has an invalid length.
[   79.030612][ T7960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.493'.
[   79.034907][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'.
[   79.034922][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'.
[   79.157716][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   79.160760][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'.
[   79.163709][ T7968] netlink: 'syz.2.495': attribute type 13 has an invalid length.
[   79.206839][ T7971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7971 comm=syz.0.494
[   79.397894][ T7981] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   79.556037][ T7998] sctp: [Deprecated]: syz.2.503 (pid 7998) Use of int in max_burst socket option deprecated.
[   79.556037][ T7998] Use struct sctp_assoc_value instead
[   79.587502][    C0] vkms_vblank_simulate: vblank timer overrun
[   79.636399][ T8003] xt_CT: You must specify a L4 protocol and not use inversions on it
[   79.640265][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'.
[   79.647717][ T8001] netlink: 'syz.2.504': attribute type 11 has an invalid length.
[   79.665686][ T8001] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[   79.676286][ T8001] Error validating options; rc = [-22]
[   79.892639][ T8013] tmpfs: Bad value for 'mpol'
[   79.912296][   T39] audit: type=1400 audit(1737224386.864:539): avc:  denied  { ioctl } for  pid=8024 comm="syz.1.511" path="socket:[20713]" dev="sockfs" ino=20713 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   80.058550][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[   80.178936][   T39] audit: type=1400 audit(1737224387.116:540): avc:  denied  { map } for  pid=8056 comm="syz.1.517" path="socket:[20191]" dev="sockfs" ino=20191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   80.186338][   T39] audit: type=1400 audit(1737224387.116:541): avc:  denied  { accept } for  pid=8056 comm="syz.1.517" path="socket:[20191]" dev="sockfs" ino=20191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   80.250161][ T8063] A: renamed from bond_slave_0 (while UP)
[   80.289770][   T39] audit: type=1400 audit(1737224387.219:542): avc:  denied  { map } for  pid=8067 comm="syz.2.520" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   80.381963][    C0] blk_print_req_error: 11 callbacks suppressed
[   80.381975][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0
[   80.387902][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.391279][    C0] buffer_io_error: 9 callbacks suppressed
[   80.391286][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   80.407739][ T8076] dccp_invalid_packet: pskb_may_pull failed
[   80.451758][    C3] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   80.455046][    C2] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.456978][ T8085] netlink: 'syz.1.526': attribute type 10 has an invalid length.
[   80.457840][    C2] Buffer I/O error on dev loop6, logical block 32752, async page read
[   80.483467][ T8085] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   80.503670][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'.
[   80.677101][ T8096] xt_hashlimit: size too large, truncated to 1048576
[   80.689794][ T7089] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   80.895117][ T7089] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   80.898685][ T7089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.901833][ T7089] usb 7-1: Product: syz
[   80.903703][ T7089] usb 7-1: Manufacturer: syz
[   80.905652][ T7089] usb 7-1: SerialNumber: syz
[   80.923488][ T7089] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   80.947206][   T35] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   81.173319][ T7942] usb 7-1: USB disconnect, device number 10
[   81.192246][   T57] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   81.352629][   T57] usb 8-1: Using ep0 maxpacket: 8
[   81.361140][   T57] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[   81.364861][   T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.368593][   T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.375120][   T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.378876][   T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.390528][   T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.393885][   T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.397408][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.400906][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.627244][   T57] usb 8-1: GET_CAPABILITIES returned 0
[   81.628946][   T57] usbtmc 8-1:16.0: can't read capabilities
[   81.834367][ T8150] binder: 8149:8150 ioctl 1279 20000000 returned -22
[   81.843500][   T57] usb 8-1: USB disconnect, device number 9
[   82.058510][   T35] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[   82.060784][   T35] ath9k_htc: Failed to initialize the device
[   82.065446][ T7942] usb 7-1: ath9k_htc: USB layer deinitialized
[   82.065717][ T8128] cgroup: name respecified
[   82.188478][ T8128] /dev/sr0: Can't open blockdev
[   82.227111][ T8167] binder: 8166:8167 ioctl c018937b 20000240 returned -22
[   82.229588][ T8167] $Hÿ: renamed from bond0 (while UP)
[   82.234715][ T8167] $Hÿ: entered promiscuous mode
[   82.236530][ T8167] bond_slave_0: entered promiscuous mode
[   82.238588][ T8167] bond_slave_1: entered promiscuous mode
[   82.325477][ T8176] netlink: 76 bytes leftover after parsing attributes in process `syz.3.544'.
[   82.421572][ T7942] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   82.581906][ T5973] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   82.606669][ T7942] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   82.609941][ T7942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.612819][ T7942] usb 7-1: Product: syz
[   82.614585][ T7942] usb 7-1: Manufacturer: syz
[   82.616145][ T7942] usb 7-1: SerialNumber: syz
[   82.621150][ T7942] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   82.742349][   T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   82.755691][ T5973] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   82.758266][ T5973] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   82.761109][ T5973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   82.763556][ T5973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   82.766597][ T5973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   82.771306][ T5973] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   82.774426][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   82.777067][ T5973] usb 6-1: Product: syz
[   82.778463][ T5973] usb 6-1: Manufacturer: syz
[   82.782813][ T5973] cdc_wdm 6-1:1.0: skipping garbage
[   82.784366][ T5973] cdc_wdm 6-1:1.0: skipping garbage
[   82.787573][ T5973] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   82.789465][ T5973] cdc_wdm 6-1:1.0: Unknown control protocol
[   82.836345][ T7942] usb 7-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[   82.836489][   T57] usb 7-1: USB disconnect, device number 11
[   82.844739][   T57] usb 7-1: ath9k_htc: USB layer deinitialized
[   82.914718][   T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[   82.917192][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.924435][   T30] usb 5-1: config 0 descriptor??
[   82.929469][   T30] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input10
[   82.999872][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.003007][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.006419][   T35] usb 6-1: USB disconnect, device number 10
[   83.142585][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.146010][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.229774][   T35] usb 5-1: USB disconnect, device number 4
[   83.407927][   T39] kauditd_printk_skb: 11 callbacks suppressed
[   83.407941][   T39] audit: type=1400 audit(1737224390.138:554): avc:  denied  { remount } for  pid=8200 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   83.800802][   T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   83.816527][ T8227] input: syz1 as /devices/virtual/input/input11
[   83.831457][ T5940] Bluetooth: hci3: unexpected event for opcode 0x2040
[   83.840688][ T8227] veth2: entered promiscuous mode
[   83.921611][   T39] audit: type=1400 audit(1737224390.615:555): avc:  denied  { module_request } for  pid=8231 comm="syz.0.561" kmod="net-pf-16-proto-16-family-/dev/video#" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   83.982995][   T30] usb 8-1: Using ep0 maxpacket: 16
[   83.986109][   T30] usb 8-1: config 0 has an invalid interface descriptor of length 2, skipping
[   83.990046][   T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.994537][   T30] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   83.997947][   T30] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   84.001256][   T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.007141][   T30] usb 8-1: config 0 descriptor??
[   84.011207][   T39] audit: type=1400 audit(1737224390.699:556): avc:  denied  { append } for  pid=8237 comm="syz.0.562" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   84.069663][ T8238] binder_alloc: 8237: binder_alloc_buf, no vma
[   84.339716][ T5936] block nbd2: Receive control failed (result -32)
[   84.340568][ T8210] block nbd2: shutting down sockets
[   84.389964][   T30] usb 8-1: string descriptor 0 read error: -71
[   84.395638][   T30] usb 8-1: USB disconnect, device number 10
[   84.423329][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'.
[   84.469437][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.565'.
[   84.682301][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'.
[   84.724911][ T8258] x_tables: duplicate underflow at hook 1
[   84.733793][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'.
[   84.737381][ T8258] netem: incorrect ge model size
[   84.739537][ T8258] netem: change failed
[   84.773517][   T57] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[   84.786835][   T39] audit: type=1400 audit(1737224391.429:557): avc:  denied  { map } for  pid=8260 comm="syz.1.568" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   84.799505][   T39] audit: type=1400 audit(1737224391.429:558): avc:  denied  { execute } for  pid=8260 comm="syz.1.568" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   84.860033][ T8263] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[   84.866675][ T8263] netlink: 72 bytes leftover after parsing attributes in process `syz.1.569'.
[   84.912576][   T57] usb 7-1: device descriptor read/64, error -71
[   84.979097][   T39] audit: type=1400 audit(1737224391.606:559): avc:  denied  { read } for  pid=8273 comm="syz.1.573" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   84.985577][   T39] audit: type=1400 audit(1737224391.606:560): avc:  denied  { open } for  pid=8273 comm="syz.1.573" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   84.995725][   T39] audit: type=1400 audit(1737224391.606:561): avc:  denied  { ioctl } for  pid=8273 comm="syz.1.573" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   85.083090][ T8282] netlink: 'syz.0.576': attribute type 15 has an invalid length.
[   85.088811][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'.
[   85.142519][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.155212][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'.
[   85.157823][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'.
[   85.160986][ T8297] netlink: 'syz.0.579': attribute type 12 has an invalid length.
[   85.179746][   T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[   85.205282][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.256811][   T39] audit: type=1400 audit(1737224391.868:562): avc:  denied  { checkpoint_restore } for  pid=8310 comm="syz.0.581" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   85.264715][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.319569][   T57] usb 7-1: device descriptor read/64, error -71
[   85.436506][   T57] usb usb7-port1: attempt power cycle
[   85.623408][   T39] audit: type=1400 audit(1737224392.205:563): avc:  denied  { read } for  pid=8354 comm="syz.0.587" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   85.722754][   T30] IPVS: starting estimator thread 0...
[   85.821418][ T8369] IPVS: using max 42 ests per chain, 100800 per kthread
[   85.823273][   T57] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[   85.845210][   T57] usb 7-1: device descriptor read/8, error -71
[   85.942727][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[   86.015125][ T5936] Bluetooth: hci2: ACL packet for unknown connection handle 3
[   86.018883][ T8398] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   86.058892][ T8403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8403 comm=syz.1.593
[   86.100732][   T57] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[   86.121024][   T57] usb 7-1: device descriptor read/8, error -71
[   86.196869][ T8409] netdevsim netdevsim3: Direct firmware load for .
[   86.196869][ T8409]  failed with error -2
[   86.201012][ T8409] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[   86.201012][ T8409] 
[   86.238230][   T57] usb usb7-port1: unable to enumerate USB device
[   86.738752][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'.
[   87.140911][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.530411][ T8484] sp0: Synchronizing with TNC
[   88.733018][ T8512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8512 comm=syz.3.626
[   88.742029][ T8512] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   88.778329][   T39] kauditd_printk_skb: 44 callbacks suppressed
[   88.778340][   T39] audit: type=1400 audit(1737224395.157:608): avc:  denied  { create } for  pid=8516 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.793153][   T39] audit: type=1400 audit(1737224395.157:609): avc:  denied  { getopt } for  pid=8516 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.799510][   T39] audit: type=1400 audit(1737224395.167:610): avc:  denied  { execmem } for  pid=8516 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   88.812988][   T39] audit: type=1400 audit(1737224395.167:611): avc:  denied  { execute } for  pid=8516 comm="syz.0.627" path="/194/cgroup.controllers" dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   88.822092][   T39] audit: type=1400 audit(1737224395.195:612): avc:  denied  { create } for  pid=8520 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.829612][   T39] audit: type=1400 audit(1737224395.195:613): avc:  denied  { read write } for  pid=8520 comm="syz.0.629" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   88.837836][   T39] audit: type=1400 audit(1737224395.195:614): avc:  denied  { open } for  pid=8520 comm="syz.0.629" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   88.846134][   T39] audit: type=1400 audit(1737224395.195:615): avc:  denied  { ioctl } for  pid=8520 comm="syz.0.629" path="/dev/video2" dev="devtmpfs" ino=957 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   88.859970][   T39] audit: type=1400 audit(1737224395.195:616): avc:  denied  { connect } for  pid=8520 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.866970][   T39] audit: type=1400 audit(1737224395.195:617): avc:  denied  { create } for  pid=8520 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   89.097369][ T8531] netlink: 'syz.0.633': attribute type 7 has an invalid length.
[   89.099633][ T8531] netlink: 'syz.0.633': attribute type 8 has an invalid length.
[   89.258183][ T8551] netlink: 'syz.0.637': attribute type 3 has an invalid length.
[   89.260574][ T8551] netlink: 'syz.0.637': attribute type 2 has an invalid length.
[   89.270715][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.273659][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.290132][ T5936] Bluetooth: Unexpected continuation frame (len 10)
[   89.328376][ T1118] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[   89.331543][ T1118] sr 2:0:0:0: [sr0] tag#1 Sense Key : Illegal Request [current] 
[   89.333758][ T1118] sr 2:0:0:0: [sr0] tag#1 Add. Sense: Invalid command operation code
[   89.335961][ T1118] sr 2:0:0:0: [sr0] tag#1 CDB: Write(10) 2a 00 00 00 00 00 00 00 06 00
[   89.338837][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 0
[   89.342682][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write
[   89.346134][ T1118] Buffer I/O error on dev sr0, logical block 1, lost async page write
[   89.350253][ T1118] Buffer I/O error on dev sr0, logical block 2, lost async page write
[   89.417856][ T8564] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   89.419911][ T8564] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   89.421988][ T8564] bridge0: port 3(netdevsim0) entered disabled state
[   89.429293][ T8564] bridge_slave_1: left allmulticast mode
[   89.430946][ T8564] bridge_slave_1: left promiscuous mode
[   89.432588][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.437614][ T8564] bridge_slave_0: left allmulticast mode
[   89.439245][ T8564] bridge_slave_0: left promiscuous mode
[   89.441080][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.541615][ T5973] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   89.565902][ T8576] syz.2.643: attempt to access beyond end of device
[   89.565902][ T8576] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[   89.569621][ T8576] syz.2.643: attempt to access beyond end of device
[   89.569621][ T8576] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[   89.573734][ T8576] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   89.578011][ T8576] syz.2.643: attempt to access beyond end of device
[   89.578011][ T8576] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[   89.581816][ T8576] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   89.584708][ T8576] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   89.586977][ T8576] UDF-fs: Scanning with blocksize 1024 failed
[   89.588920][ T8576] syz.2.643: attempt to access beyond end of device
[   89.588920][ T8576] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[   89.592624][ T8576] syz.2.643: attempt to access beyond end of device
[   89.592624][ T8576] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[   89.596500][ T8576] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   89.599214][ T8576] syz.2.643: attempt to access beyond end of device
[   89.599214][ T8576] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[   89.602851][ T8576] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   89.605549][ T8576] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   89.607731][ T8576] UDF-fs: Scanning with blocksize 2048 failed
[   89.609591][ T8576] syz.2.643: attempt to access beyond end of device
[   89.609591][ T8576] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[   89.613166][ T8576] syz.2.643: attempt to access beyond end of device
[   89.613166][ T8576] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0
[   89.617790][ T8576] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   89.620479][ T8576] syz.2.643: attempt to access beyond end of device
[   89.620479][ T8576] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0
[   89.624169][ T8576] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   89.626848][ T8576] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   89.629017][ T8576] UDF-fs: Scanning with blocksize 4096 failed
[   89.630677][ T8576] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[   89.666444][ T8585] RDS: rds_bind could not find a transport for fe80::40, load rds_tcp or rds_rdma?
[   89.702514][ T5973] usb 5-1: device descriptor read/64, error -71
[   89.971324][ T8596] __nla_validate_parse: 12 callbacks suppressed
[   89.971336][ T8596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.649'.
[   89.980097][ T5973] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   90.129471][ T5973] usb 5-1: device descriptor read/64, error -71
[   90.258115][ T5973] usb usb5-port1: attempt power cycle
[   90.263325][ T8603] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   90.274297][ T8600] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   90.280938][ T8600] tipc: Enabling of bearer <udf:s> rejected, media not registered
[   90.506348][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'.
[   90.653344][ T5973] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   90.675292][ T5973] usb 5-1: device descriptor read/8, error -71
[   90.941970][ T5973] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   90.963743][ T5973] usb 5-1: device descriptor read/8, error -71
[   91.081236][ T5973] usb usb5-port1: unable to enumerate USB device
[   91.754198][ T8633] netlink: 'syz.2.659': attribute type 32 has an invalid length.
[   91.757218][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'.
[   91.760005][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'.
[   91.911427][ T8637] (syz.2.660,8637,3):dlmfs_mkdir:420 ERROR: invalid domain name for directory.
[   92.498816][ T8639] syz.0.661: attempt to access beyond end of device
[   92.498816][ T8639] sr0: rw=2048, sector=0, nr_sectors = 4 limit=0
[   92.503947][ T8639] hfsplus: unable to find HFS+ superblock
[   92.748790][ T5940] Bluetooth: hci4: command 0xfc11 tx timeout
[   92.748880][ T5936] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   92.990677][ T8679] tipc: Can't bind to reserved service type 2
[   93.026490][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'.
[   93.686390][ T8714] xt_ipcomp: unknown flags 12
[   93.830171][ T8724] i2c i2c-1: Invalid block write size 34
[   93.993721][ T8741] netlink: 'syz.2.689': attribute type 3 has an invalid length.
[   93.998964][ T8741] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.689'.
[   94.008416][ T8741] netlink: 83 bytes leftover after parsing attributes in process `syz.2.689'.
[   94.059088][ T8746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40466 sclass=netlink_route_socket pid=8746 comm=syz.1.694
[   94.105272][ T8750] Invalid ELF header type: 3 != 1
[   94.112279][ T8750] Invalid ELF header type: 3 != 1
[   94.123570][ T8752] overlayfs: overlapping lowerdir path
[   94.146644][   T39] kauditd_printk_skb: 147 callbacks suppressed
[   94.146654][   T39] audit: type=1326 audit(1737224400.180:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6cb585d29 code=0x7ffc0000
[   94.155339][ T8755] xt_hashlimit: size too large, truncated to 1048576
[   94.159824][   T39] audit: type=1326 audit(1737224400.180:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6cb585d29 code=0x7ffc0000
[   94.166471][   T39] audit: type=1326 audit(1737224400.190:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd6cb585d29 code=0x7ffc0000
[   94.181416][   T39] audit: type=1400 audit(1737224400.208:768): avc:  denied  { write } for  pid=8757 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   94.187246][   T39] audit: type=1400 audit(1737224400.208:769): avc:  denied  { nlmsg_read } for  pid=8757 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   94.254050][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'.
[   94.267359][   T39] audit: type=1400 audit(1737224400.292:770): avc:  denied  { connect } for  pid=8767 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   94.277496][   T39] audit: type=1400 audit(1737224400.302:771): avc:  denied  { name_bind } for  pid=8761 comm="syz.1.700" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   94.288326][   T39] audit: type=1400 audit(1737224400.302:772): avc:  denied  { node_bind } for  pid=8761 comm="syz.1.700" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   94.294038][   T39] audit: type=1400 audit(1737224400.311:773): avc:  denied  { getopt } for  pid=8767 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.378135][ T8711] syz.3.683 (8711) used greatest stack depth: 20448 bytes left
[   94.555478][   T35] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[   94.715787][   T35] usb 7-1: Using ep0 maxpacket: 16
[   94.719327][   T35] usb 7-1: config 0 has no interfaces?
[   94.723691][   T35] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[   94.727622][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.730878][   T35] usb 7-1: Product: syz
[   94.732681][   T35] usb 7-1: Manufacturer: syz
[   94.734476][   T35] usb 7-1: SerialNumber: syz
[   94.739536][ T7089] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   94.745889][   T35] usb 7-1: config 0 descriptor??
[   94.897488][ T7089] usb 6-1: Using ep0 maxpacket: 16
[   94.900320][ T7089] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[   94.902774][ T7089] usb 6-1: config 0 has no interface number 0
[   94.904637][ T7089] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   94.907865][ T7089] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   94.912298][ T7089] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   94.914884][ T7089] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   94.917299][ T7089] usb 6-1: Product: syz
[   94.918520][ T7089] usb 6-1: SerialNumber: syz
[   94.922007][ T7089] usb 6-1: config 0 descriptor??
[   94.924996][ T7089] cm109 6-1:0.8: invalid payload size 0, expected 4
[   94.927600][ T7089] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input12
[   94.933385][   T39] audit: type=1400 audit(1737224400.919:774): avc:  denied  { read } for  pid=5336 comm="acpid" name="event4" dev="devtmpfs" ino=3051 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.139593][    C3] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[   95.328465][ T1468] usb 7-1: USB disconnect, device number 16
[   95.366049][ T8790] tmpfs: Bad value for 'mpol'
[   95.370927][ T8790] xfrm1: entered allmulticast mode
[   95.575157][ T8802] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   95.585882][ T8802] CIFS: Unable to determine destination address
[   95.779368][ T8812] IPv6: NLM_F_CREATE should be specified when creating new route
[   95.807668][ T5996] IPVS: starting estimator thread 0...
[   95.902459][ T8821] IPVS: using max 41 ests per chain, 98400 per kthread
[   96.101887][ T8852] netlink: 512 bytes leftover after parsing attributes in process `syz.3.722'.
[   96.333604][ T8866] No source specified
[   96.518988][ T8880] netlink: 'syz.0.728': attribute type 1 has an invalid length.
[   96.521368][ T8880] netlink: 224 bytes leftover after parsing attributes in process `syz.0.728'.
[   96.722127][ T8886] netlink: 'syz.0.731': attribute type 27 has an invalid length.
[   96.729666][ T8886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'.
[   96.786795][ T8890] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 8890 comm: syz.0.733)
[   97.078397][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   97.131617][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'.
[   97.185465][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'.
[   97.188503][ T8898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.736'.
[   97.238832][    T8] usb 5-1: Using ep0 maxpacket: 32
[   97.242048][    T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   97.244436][    T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   97.247094][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   97.250201][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   97.253437][    T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   97.256748][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   97.257175][ T5936] block nbd0: Receive control failed (result -107)
[   97.261561][    T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   97.261575][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.262705][    T8] usb 5-1: config 0 descriptor??
[   97.303244][ T8898] nbd0: detected capacity change from 0 to 256
[   97.307664][ T6219] block nbd0: Dead connection, failed to find a fallback
[   97.312508][ T6219] block nbd0: shutting down sockets
[   97.314517][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.317845][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.321173][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.323988][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.327250][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.332370][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.340089][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.343868][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.347327][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.351015][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.354329][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.357712][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.360175][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.362976][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.365432][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.368081][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.370365][ T6219] ldm_validate_partition_table(): Disk read failed.
[   97.372424][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.375076][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.377383][ T6219] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   97.380049][ T6219] Buffer I/O error on dev nbd0, logical block 0, async page read
[   97.382528][ T6219] Dev nbd0: unable to read RDB block 0
[   97.384444][ T6219]  nbd0: unable to read partition table
[   97.388102][ T6219] ldm_validate_partition_table(): Disk read failed.
[   97.391494][ T6219] Dev nbd0: unable to read RDB block 0
[   97.393425][ T6219]  nbd0: unable to read partition table
[   97.491942][    T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   97.499827][    T8] usb 5-1: USB disconnect, device number 9
[   97.502773][    T8] usblp0: removed
[   97.618923][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[   97.622899][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[   97.624278][ T5974] usb 6-1: USB disconnect, device number 11
[   97.624954][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   97.630190][ T5974] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   97.905181][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.743'.
[   97.912442][ T8918] dvmrp1: entered allmulticast mode
[   97.914859][ T8918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.743'.
[   97.918602][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8918 comm=syz.1.743
[   97.923699][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.743'.
[   97.949601][ T8923] dccp_invalid_packet: invalid packet type
[   97.953888][ T8923] fuse: Bad value for 'group_id'
[   97.955061][    T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   97.955603][ T8923] fuse: Bad value for 'group_id'
[   98.044684][ T8926] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   98.046738][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   98.052532][ T8926] vhci_hcd vhci_hcd.0: Device attached
[   98.126074][    T8] usb 5-1: Using ep0 maxpacket: 32
[   98.128816][    T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   98.131355][    T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   98.133931][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   98.136480][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   98.140948][    T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   98.145459][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   98.150642][    T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   98.154277][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.158611][    T8] usb 5-1: config 0 descriptor??
[   98.243807][   T57] vhci_hcd: vhci_device speed not set
[   98.307916][   T57] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[   98.377949][    T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   98.493798][ T8936] 9pnet_virtio: no channels available for device syz
[   98.521828][ T8935] syz.3.747 (8935) used greatest stack depth: 20288 bytes left
[   98.591617][    T8] usb 5-1: USB disconnect, device number 10
[   98.595462][    T8] usblp0: removed
[   98.874013][ T8927] vhci_hcd: connection reset by peer
[   98.879977][ T1223] vhci_hcd: stop threads
[   98.881691][ T1223] vhci_hcd: release socket
[   98.884290][ T1223] vhci_hcd: disconnect device
[   99.257876][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[   99.392336][ T8963] syz.0.754 uses old SIOCAX25GETINFO
[   99.539841][   T39] kauditd_printk_skb: 50 callbacks suppressed
[   99.539857][   T39] audit: type=1400 audit(1737224405.231:825): avc:  denied  { bind } for  pid=8981 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.550045][   T39] audit: type=1400 audit(1737224405.231:826): avc:  denied  { name_bind } for  pid=8981 comm="syz.1.760" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   99.556046][   T39] audit: type=1400 audit(1737224405.231:827): avc:  denied  { node_bind } for  pid=8981 comm="syz.1.760" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   99.647555][   T39] audit: type=1400 audit(1737224405.325:828): avc:  denied  { setcurrent } for  pid=8990 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   99.653184][   T39] audit: type=1401 audit(1737224405.325:829): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[   99.658309][   T39] audit: type=1400 audit(1737224405.325:830): avc:  denied  { unlink } for  pid=8990 comm="syz.3.762" name="#f" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   99.664637][   T39] audit: type=1400 audit(1737224405.325:831): avc:  denied  { mount } for  pid=8990 comm="syz.3.762" name="/" dev="overlay" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   99.670862][   T39] audit: type=1400 audit(1737224405.344:832): avc:  denied  { unmount } for  pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   99.696041][ T8994] netlink: 'syz.3.765': attribute type 10 has an invalid length.
[   99.699239][ T8994] hsr0: entered allmulticast mode
[   99.700740][ T8994] hsr_slave_0: entered allmulticast mode
[   99.702452][ T8994] hsr_slave_1: entered allmulticast mode
[   99.733861][   T39] audit: type=1400 audit(1737224405.409:833): avc:  denied  { setopt } for  pid=8995 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   99.740433][    T8] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[   99.745688][   T39] audit: type=1400 audit(1737224405.418:834): avc:  denied  { ioctl } for  pid=8995 comm="syz.3.766" path="socket:[25640]" dev="sockfs" ino=25640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   99.789580][ T8998] netem: incorrect gi model size
[   99.791354][ T8998] netem: change failed
[   99.902763][    T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   99.905368][    T8] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[   99.908320][    T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   99.910982][    T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64
[   99.915897][    T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   99.918719][    T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   99.921093][    T8] usb 7-1: Product: syz
[   99.922753][    T8] usb 7-1: Manufacturer: syz
[   99.926788][    T8] cdc_wdm 7-1:1.0: skipping garbage
[   99.928461][    T8] cdc_wdm 7-1:1.0: skipping garbage
[   99.930061][    T8] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  100.147048][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.149579][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.581504][ T5936] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  100.663908][ T9017] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  100.665876][ T9017] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  100.668239][ T9017] vhci_hcd vhci_hcd.0: Device attached
[  100.670165][ T9020] vhci_hcd: connection closed
[  100.670450][   T11] vhci_hcd: stop threads
[  100.674098][   T11] vhci_hcd: release socket
[  100.681094][   T11] vhci_hcd: disconnect device
[  101.082089][ T9030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.182052][ T9037] program syz.3.778 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.277560][ T9044] team0: Port device team_slave_1 removed
[  101.289978][    C2] ata1: illegal qc_active transition (00000000->00200000)
[  101.347983][ T9053] openvswitch: netlink: IPv4 tun info is not correct
[  101.468382][ T9066] __nla_validate_parse: 70 callbacks suppressed
[  101.468393][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.0.788'.
[  101.477724][ T9069] input: syz0 as /devices/virtual/input/input13
[  101.571123][ T9078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  101.634790][ T1109] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  101.641328][ T1109] ata1.00: configured for UDMA/100
[  101.647706][ T1468] 
[  101.648452][ T1468] ======================================================
[  101.650459][ T1468] WARNING: possible circular locking dependency detected
[  101.652475][ T1468] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted
[  101.655002][ T1468] ------------------------------------------------------
[  101.657713][ T1468] kworker/2:2/1468 is trying to acquire lock:
[  101.659448][ T1468] ffff8881073231c8 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950
[  101.662539][ T1468] 
[  101.662539][ T1468] but task is already holding lock:
[  101.664640][ T1468] ffff8881073237e0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  101.667523][ T1468] 
[  101.667523][ T1468] which lock already depends on the new lock.
[  101.667523][ T1468] 
[  101.670446][ T1468] 
[  101.670446][ T1468] the existing dependency chain (in reverse order) is:
[  101.673009][ T1468] 
[  101.673009][ T1468] -> #5 (&q->limits_lock){+.+.}-{4:4}:
[  101.675189][ T1468]        __mutex_lock+0x19b/0xa60
[  101.676646][ T1468]        __nbd_set_size+0x2c0/0x730
[  101.678139][ T1468]        nbd_start_device+0x8fd/0xd70
[  101.679692][ T1468]        nbd_genl_connect+0x1204/0x1c00
[  101.681280][ T1468]        genl_family_rcv_msg_doit+0x202/0x2f0
[  101.683028][ T1468]        genl_rcv_msg+0x565/0x800
[  101.684486][ T1468]        netlink_rcv_skb+0x16b/0x440
[  101.686026][ T1468]        genl_rcv+0x28/0x40
[  101.687328][ T1468]        netlink_unicast+0x53c/0x7f0
[  101.688850][ T1468]        netlink_sendmsg+0x8b8/0xd70
[  101.690367][ T1468]        ____sys_sendmsg+0xaaf/0xc90
[  101.691884][ T1468]        ___sys_sendmsg+0x135/0x1e0
[  101.693413][ T1468]        __sys_sendmsg+0x16e/0x220
[  101.694885][ T1468]        do_syscall_64+0xcd/0x250
[  101.696344][ T1468]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.698242][ T1468] 
[  101.698242][ T1468] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  101.700714][ T1468]        blk_mq_submit_bio+0x1fb6/0x24c0
[  101.702318][ T1468]        __submit_bio+0x384/0x540
[  101.703776][ T1468]        submit_bio_noacct_nocheck+0x698/0xd70
[  101.705549][ T1468]        submit_bio_noacct+0x93a/0x1e20
[  101.707130][ T1468]        block_read_full_folio+0x812/0xa50
[  101.708812][ T1468]        filemap_read_folio+0xc6/0x2a0
[  101.710378][ T1468]        filemap_get_pages+0x155f/0x1be0
[  101.711976][ T1468]        filemap_read+0x3ca/0xd70
[  101.713441][ T1468]        blkdev_read_iter+0x187/0x480
[  101.714975][ T1468]        vfs_read+0x87f/0xbe0
[  101.716329][ T1468]        ksys_read+0x12b/0x250
[  101.717698][ T1468]        do_syscall_64+0xcd/0x250
[  101.719155][ T1468]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.721056][ T1468] 
[  101.721056][ T1468] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  101.723500][ T1468]        down_read+0x9a/0x330
[  101.724922][ T1468]        filemap_fault+0x62c/0x2820
[  101.726442][ T1468]        __do_fault+0x10a/0x490
[  101.727857][ T1468]        do_pte_missing+0xebd/0x3e00
[  101.729409][ T1468]        __handle_mm_fault+0x103c/0x2a40
[  101.731017][ T1468]        handle_mm_fault+0x3fa/0xaa0
[  101.732547][ T1468]        do_user_addr_fault+0x7a3/0x13f0
[  101.734167][ T1468]        exc_page_fault+0x5c/0xc0
[  101.735778][ T1468]        asm_exc_page_fault+0x26/0x30
[  101.737338][ T1468]        _copy_from_iter+0x380/0x1560
[  101.738887][ T1468]        tipc_msg_build+0x308/0x1120
[  101.740425][ T1468]        __tipc_sendstream+0x6fa/0x1190
[  101.742011][ T1468]        tipc_sendstream+0x4f/0x70
[  101.743497][ T1468]        sock_write_iter+0x4fe/0x5b0
[  101.745010][ T1468]        vfs_write+0x5ae/0x1150
[  101.746411][ T1468]        ksys_write+0x207/0x250
[  101.747807][ T1468]        do_syscall_64+0xcd/0x250
[  101.749268][ T1468]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.751092][ T1468] 
[  101.751092][ T1468] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  101.753591][ T1468]        __might_fault+0x11b/0x190
[  101.755312][ T1468]        _copy_from_user+0x29/0xd0
[  101.756787][ T1468]        __blk_trace_setup+0xa8/0x180
[  101.758323][ T1468]        blk_trace_ioctl+0x163/0x290
[  101.759826][ T1468]        blkdev_ioctl+0x109/0x6d0
[  101.761303][ T1468]        __x64_sys_ioctl+0x190/0x200
[  101.762836][ T1468]        do_syscall_64+0xcd/0x250
[  101.764312][ T1468]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.766135][ T1468] 
[  101.766135][ T1468] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  101.768359][ T1468]        __mutex_lock+0x19b/0xa60
[  101.769807][ T1468]        blk_mq_init_sched+0x42b/0x640
[  101.771366][ T1468]        elevator_init_mq+0x2cd/0x420
[  101.772924][ T1468]        add_disk_fwnode+0x113/0x1300
[  101.774469][ T1468]        sd_probe+0xa86/0x1000
[  101.775836][ T1468]        really_probe+0x23e/0xa90
[  101.777285][ T1468]        __driver_probe_device+0x1de/0x440
[  101.778961][ T1468]        driver_probe_device+0x4c/0x1b0
[  101.780541][ T1468]        __device_attach_driver+0x1df/0x310
[  101.782248][ T1468]        bus_for_each_drv+0x157/0x1e0
[  101.783783][ T1468]        __device_attach_async_helper+0x1d3/0x290
[  101.785607][ T1468]        async_run_entry_fn+0x9c/0x530
[  101.787165][ T1468]        process_one_work+0x9c5/0x1ba0
[  101.788729][ T1468]        worker_thread+0x6c8/0xf00
[  101.790187][ T1468]        kthread+0x2c1/0x3a0
[  101.791518][ T1468]        ret_from_fork+0x45/0x80
[  101.792977][ T1468]        ret_from_fork_asm+0x1a/0x30
[  101.794505][ T1468] 
[  101.794505][ T1468] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}:
[  101.797019][ T1468]        __lock_acquire+0x249e/0x3c40
[  101.798554][ T1468]        lock_acquire.part.0+0x11b/0x380
[  101.800166][ T1468]        blk_queue_enter+0x50f/0x640
[  101.801695][ T1468]        blk_mq_alloc_request+0x59b/0x950
[  101.803366][ T1468]        scsi_execute_cmd+0x1da/0xf40
[  101.804911][ T1468]        read_capacity_16+0x213/0xe10
[  101.806456][ T1468]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  101.808278][ T1468]        scsi_rescan_device+0x243/0x340
[  101.809853][ T1468]        ata_scsi_dev_rescan+0x1cb/0x470
[  101.811450][ T1468]        process_one_work+0x9c5/0x1ba0
[  101.813032][ T1468]        worker_thread+0x6c8/0xf00
[  101.814494][ T1468]        kthread+0x2c1/0x3a0
[  101.815814][ T1468]        ret_from_fork+0x45/0x80
[  101.817238][ T1468]        ret_from_fork_asm+0x1a/0x30
[  101.818754][ T1468] 
[  101.818754][ T1468] other info that might help us debug this:
[  101.818754][ T1468] 
[  101.821646][ T1468] Chain exists of:
[  101.821646][ T1468]   &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#49 --> &q->limits_lock
[  101.821646][ T1468] 
[  101.825944][ T1468]  Possible unsafe locking scenario:
[  101.825944][ T1468] 
[  101.828050][ T1468]        CPU0                    CPU1
[  101.829596][ T1468]        ----                    ----
[  101.831118][ T1468]   lock(&q->limits_lock);
[  101.832450][ T1468]                                lock(&q->q_usage_counter(io)#49);
[  101.834696][ T1468]                                lock(&q->limits_lock);
[  101.836659][ T1468]   rlock(&q->q_usage_counter(queue)#51);
[  101.838278][ T1468] 
[  101.838278][ T1468]  *** DEADLOCK ***
[  101.838278][ T1468] 
[  101.840583][ T1468] 5 locks held by kworker/2:2/1468:
[  101.842073][ T1468]  #0: ffff88801b088948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  101.845046][ T1468]  #1: ffffc9000712fd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  101.848649][ T1468]  #2: ffff888026d4c358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470
[  101.851554][ T1468]  #3: ffff888107c6c378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340
[  101.854271][ T1468]  #4: ffff8881073237e0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  101.857267][ T1468] 
[  101.857267][ T1468] stack backtrace:
[  101.858958][ T1468] CPU: 2 UID: 0 PID: 1468 Comm: kworker/2:2 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[  101.861976][ T1468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  101.865046][ T1468] Workqueue: events ata_scsi_dev_rescan
[  101.866621][ T1468] Call Trace:
[  101.867584][ T1468]  <TASK>
[  101.868448][ T1468]  dump_stack_lvl+0x116/0x1f0
[  101.869796][ T1468]  print_circular_bug+0x419/0x5d0
[  101.871249][ T1468]  check_noncircular+0x31a/0x400
[  101.872698][ T1468]  ? __pfx_check_noncircular+0x10/0x10
[  101.874259][ T1468]  ? lockdep_lock+0xc6/0x200
[  101.875587][ T1468]  ? __pfx_lockdep_lock+0x10/0x10
[  101.877040][ T1468]  __lock_acquire+0x249e/0x3c40
[  101.878436][ T1468]  ? __pfx___lock_acquire+0x10/0x10
[  101.879993][ T1468]  lock_acquire.part.0+0x11b/0x380
[  101.881463][ T1468]  ? blk_mq_alloc_request+0x59b/0x950
[  101.883017][ T1468]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  101.884627][ T1468]  ? rcu_is_watching+0x12/0xc0
[  101.885996][ T1468]  ? trace_lock_acquire+0x14e/0x1f0
[  101.887480][ T1468]  ? blk_mq_alloc_request+0x59b/0x950
[  101.889017][ T1468]  ? lock_acquire+0x2f/0xb0
[  101.890324][ T1468]  ? blk_mq_alloc_request+0x59b/0x950
[  101.891873][ T1468]  blk_queue_enter+0x50f/0x640
[  101.893295][ T1468]  ? blk_mq_alloc_request+0x59b/0x950
[  101.894820][ T1468]  ? __pfx_blk_queue_enter+0x10/0x10
[  101.896336][ T1468]  ? lockdep_lock+0xc6/0x200
[  101.897660][ T1468]  ? add_lock_to_list+0x17d/0x390
[  101.899110][ T1468]  ? lockdep_unlock+0x11a/0x290
[  101.900510][ T1468]  blk_mq_alloc_request+0x59b/0x950
[  101.901994][ T1468]  ? __pfx_blk_mq_alloc_request+0x10/0x10
[  101.903636][ T1468]  ? find_held_lock+0x2d/0x110
[  101.905014][ T1468]  scsi_execute_cmd+0x1da/0xf40
[  101.906416][ T1468]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  101.907940][ T1468]  ? sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  101.909637][ T1468]  read_capacity_16+0x213/0xe10
[  101.911021][ T1468]  ? blk_mq_free_request+0x1e9/0x340
[  101.912548][ T1468]  ? __pfx_read_capacity_16+0x10/0x10
[  101.914092][ T1468]  ? __pfx___mutex_lock+0x10/0x10
[  101.915530][ T1468]  sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  101.917202][ T1468]  ? mark_held_locks+0x9f/0xe0
[  101.918569][ T1468]  ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10
[  101.920389][ T1468]  ? kasan_save_stack+0x33/0x60
[  101.921779][ T1468]  ? kasan_save_track+0x14/0x30
[  101.923200][ T1468]  ? kasan_save_free_info+0x3b/0x60
[  101.924691][ T1468]  ? __kasan_slab_free+0x51/0x70
[  101.926118][ T1468]  ? kfree+0x14f/0x4b0
[  101.927292][ T1468]  ? scsi_attach_vpd+0x4dc/0x580
[  101.928744][ T1468]  ? scsi_rescan_device+0xf5/0x340
[  101.930219][ T1468]  ? ata_scsi_dev_rescan+0x1cb/0x470
[  101.931729][ T1468]  ? process_one_work+0x9c5/0x1ba0
[  101.933250][ T1468]  ? worker_thread+0x6c8/0xf00
[  101.934631][ T1468]  ? kthread+0x2c1/0x3a0
[  101.935856][ T1468]  ? hlock_class+0x4e/0x130
[  101.937167][ T1468]  ? mark_lock+0xb5/0xc60
[  101.938498][ T1468]  ? mark_held_locks+0x9f/0xe0
[  101.939889][ T1468]  ? kasan_quarantine_put+0x10a/0x240
[  101.941424][ T1468]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.942960][ T1468]  ? kfree+0x14f/0x4b0
[  101.944189][ T1468]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.945694][ T1468]  ? scsi_attach_vpd+0x4dc/0x580
[  101.947134][ T1468]  ? scsi_attach_vpd+0x4dc/0x580
[  101.948590][ T1468]  ? __pfx_sd_rescan+0x10/0x10
[  101.949979][ T1468]  scsi_rescan_device+0x243/0x340
[  101.951426][ T1468]  ata_scsi_dev_rescan+0x1cb/0x470
[  101.952926][ T1468]  process_one_work+0x9c5/0x1ba0
[  101.954362][ T1468]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  101.955962][ T1468]  ? __pfx_process_one_work+0x10/0x10
[  101.957498][ T1468]  ? rcu_is_watching+0x12/0xc0
[  101.958885][ T1468]  ? assign_work+0x1a0/0x250
[  101.960235][ T1468]  worker_thread+0x6c8/0xf00
[  101.962032][ T1468]  ? __kthread_parkme+0x148/0x220
[  101.963558][ T1468]  ? __pfx_worker_thread+0x10/0x10
[  101.965044][ T1468]  kthread+0x2c1/0x3a0
[  101.966216][ T1468]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.967696][ T1468]  ? __pfx_kthread+0x10/0x10
[  101.969049][ T1468]  ret_from_fork+0x45/0x80
[  101.970333][ T1468]  ? __pfx_kthread+0x10/0x10
[  101.971668][ T1468]  ret_from_fork_asm+0x1a/0x30
[  101.973063][ T1468]  </TASK>
[  102.675469][    T8] usb 7-1: USB disconnect, device number 17
[  103.770742][   T57] vhci_hcd: vhci_device speed not set
[  104.038133][ T5936] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  104.040600][ T5936] Bluetooth: hci2: Injecting HCI hardware error event
[  104.042792][ T5936] Bluetooth: hci2: hardware error 0x00
[  106.261646][ T5936] Bluetooth: hci2: Opcode 0x0c03 failed: -110

VM DIAGNOSIS:
18:20:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88806a844a40 RCX=ffffffff818e191c RDX=ffff88802134c880
RSI=ffffffff818e18f6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003fb7b00
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed100d508949 R13=0000000000000001 R14=ffff88806a844a48 R15=ffff88806a63fe40
RIP=ffffffff818e18f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577ff1500 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fd6cb569ae0 CR3=0000000055602000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad3802a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad3802aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad3802aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad3802ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad3802b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad3802c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad394b488 00007f2ad394b480 00007f2ad394b478 00007f2ad394b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad44ad100 00007f2ad394b440 00007f2ad394b458 00007f2ad394b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad394b498 00007f2ad394b490 00007f2ad394b488 00007f2ad394b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000dd87c RBX=0000000000000001 RCX=ffffffff8b2a27c9 RDX=ffffed100d4e6fee
RSI=ffffffff8bd1ef60 RDI=ffffffff8170a6b9 RBP=ffffed1003ad8910 RSP=ffffc90000187e08
R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000
R12=0000000000000001 R13=ffff88801d6c4880 R14=ffffffff905f4fd0 R15=0000000000000000
RIP=ffffffff8b2a3baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fd6cc47ef98 CR3=0000000024168000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cbe70ba26731c469 a7e1f1e604b74939
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3b402a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3b402aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3b402aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3b402ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3b402b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee3b402c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 433fb43e378923a7 9852a16e660b5d71 61b461b2aa842442 5cb1a6c33971bfde
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6c3a0baa663f695 aee2c31647679a16 974a10a4f63e0004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0bd249f3dfa049 8c298781e161b826 0733fdfca5267bc6 26bf7b9007e179af
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce59619b4f2de2c3 145a5d11d9a97370 0c0b01d492f3e036 f19d0ac5083a6e21
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea91819aa3e553d2 c56dc46f4f7f75fb fefceb2746bae6f4 03a7fdff0bd249f3
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dfa0498c298781e1 61b8260733fdfca5 267bc626bf7b9007 e179aff6c3a0baa6
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63f695aee2c31647 679a16974a10a4f6 3ef101ca5679bd9f 1b41ac433fb43e37
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851c1355 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000712ea78
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000020 R14=ffffffff851c12f0 R15=0000000000000000
RIP=ffffffff851c137f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2f3ed5 CR3=0000000024da8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77e3d6451d4fad1a 63e166bb1a236e27
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ec5e4ff3c997c85 461a3ef9f5351da2
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f41acd35ca5d58e bca7a1a89639b2ce
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 90021be9adad38b6 ff729b5af34a8d11
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 90d6008001000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003eab67003eab6b 003eab7101000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dda00080003eab69 01000000e8a80080
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003eab6f22540080 3ca60080003eab66
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a664b20de192feed 2f593fee399b8d4e
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e66609d866bd6d18 5a8789ba453c48ed
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f54b488 00007f9b2f54b480 00007f9b2f54b478 00007f9b2f54b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b300ad100 00007f9b2f54b440 00007f9b2f540004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f54b498 00007f9b2f54b490 00007f9b2f54b488 00007f9b2f54b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000cdac4 RBX=0000000000000003 RCX=ffffffff8b2a27c9 RDX=ffffed100d526fee
RSI=ffffffff8bd1ef60 RDI=ffffffff8170a6b9 RBP=ffffed1003adb488 RSP=ffffc900001a7e08
R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000
R12=0000000000000003 R13=ffff88801d6da440 R14=ffffffff905f4fd0 R15=0000000000000000
RIP=ffffffff8b2a3baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f2ad45b9f98 CR3=0000000026f74000 CR4=00352ef0
DR0=000000000000126c DR1=0000000000000003 DR2=0000000000000081 DR3=0000000000000002 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea5853d60 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f402a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f402aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f402aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f402ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f402b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b2f402c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000