last executing test programs:

48.521494584s ago: executing program 3 (id=16):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000080)=0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, r2, 0x1, 0x70bd28, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x20000000)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, <r4=>r0})
r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/ip6_mr_cache\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000366000/0x4000)=nil, 0x4000, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5)

48.18242864s ago: executing program 3 (id=28):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='sockfs\x00', 0x1024444, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
clock_getres(0x5, 0x0) (async)
clock_getres(0x5, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000007c0)=<r0=>0x0)
ptrace(0x8, r0) (async)
ptrace(0x8, r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000740))
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe21}, 0x2a)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000780)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

47.343021363s ago: executing program 3 (id=38):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5c743, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, <r3=>0x0})
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
r4 = syz_open_dev$cec(0x0, 0x0, 0x82840)
ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0xc0001, 0x0)
close(r5)
ioctl$BLKGETSIZE64(r5, 0x80081272, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r3], 0x1, 0x80000, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0x7, 0x0, 0x0)
mq_open(0x0, 0x1, 0x28, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0x4008094)
dup3(r6, r6, 0x80000)
bind$bt_l2cap(r7, 0x0, 0x0)
listen(r7, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x800, 0x0)
accept4(r7, 0x0, 0x0, 0x80800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

47.214316622s ago: executing program 3 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00')
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r1 = open_tree(r0, &(0x7f0000002140)='\x00', 0x88901)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[], 0xd)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)

47.138689814s ago: executing program 3 (id=42):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0xfffffffffffffe42, 0x223, 0x2, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0x3, 0x8, 0x3, 0x8000000000006, 0xffffffff, 0xffffffff00000001, 0x7}]}, 0x78)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
readv(r1, &(0x7f0000001980)=[{&(0x7f0000000580)=""/221, 0xdd}], 0x1)
close(r0)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f0000000080), 0x10)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0xe, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8fff9, 0x0, 0xd000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000000, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}], 0x1}, 0x0)

46.770903301s ago: executing program 3 (id=52):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="040013000a000600ffffffffffff000006001200040800000600b500c90200000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="150227bd7000fedbdf253800000008000300", @ANYRES32=r4, @ANYBLOB="0c0058000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48080)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'gretap0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)

46.685991642s ago: executing program 32 (id=52):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="040013000a000600ffffffffffff000006001200040800000600b500c90200000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="150227bd7000fedbdf253800000008000300", @ANYRES32=r4, @ANYBLOB="0c0058000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48080)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'gretap0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)

39.242859557s ago: executing program 2 (id=152):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1ff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0xfffffffffffffffd, 0x4000850}, 0x24044010)

39.242023281s ago: executing program 2 (id=153):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
accept(r0, 0x0, 0x0)

39.162927266s ago: executing program 2 (id=155):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r1 = mq_open(&(0x7f0000000280)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F.\xc3@.\b2i\xd9\xe5F\xf88n!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\x05\x00\x00\x00`83\xb7n#\xe0\xc1_\xec\xba\xdez\b\x00\x00\x00\x00\x00\x00\x00woo\xbcnq-\x90\x03\x00\x00\x00+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x7ffa, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f)
recvmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41)
ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}})
r4 = openat$ndctl0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$sock_int(r5, 0x1, 0xe, 0x0, &(0x7f0000000040))
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x8a402, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000100001082dbd7000fbdbdf2500000000", @ANYRES8=r0, @ANYRESDEC=r4], 0x28}}, 0x4)
write(r6, &(0x7f0000000200)='2', 0x1)

39.01902135s ago: executing program 2 (id=159):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a)
fcntl$setlease(r2, 0x400, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0xa, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r3)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040))
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1})

38.08409186s ago: executing program 2 (id=176):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
sendto$inet(r0, 0x0, 0x97, 0x6000000000000000, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000100)=ANY=[@ANYBLOB="75738371756f74615f626c6f636b5f686172646c696d69743d362c00783eae9c1fede10a97e733ab24ff67ffff2e3833cdc66dfae3a9381976599b02ca88e80c89a1d31f3d9e40d175dcb78ab46eba417cb84b16416ea2795aa3e7d9472787f75646387e6c9d"])
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)

37.464084621s ago: executing program 2 (id=182):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r6=>0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = dup3(r5, r7, 0x80000)
r9 = dup(r8) (async, rerun: 64)
pwrite64(r5, &(0x7f0000000040)="46f4", 0x2, 0x4) (async, rerun: 64)
pwrite64(r5, &(0x7f0000000100)="8612e4191774a1e37f8ed72564692a1638bf612ec36b3fe69c30d76a86c3a6145145144e28a71f45e08b8454641b602fa164bc43659d4c57a26f21a20c5dd038ca862bf3cf41146936c274190d3c6bc1b059e3b511cd2435ca3a53f111df3fbac6545290dbd805890082cff0b1a4b0f05bb80f1cc36dd5a5ffe99642f79735f27e5019a480a8e4e7f356cc12088bac1f967e2a15", 0x94, 0x2)
read(r9, &(0x7f00000014c0)=""/4096, 0x1000) (async)
timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r10, 0x25, 0x2, @void}, 0x10) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x31, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}}}, 0x0)
ioctl(r1, 0x8b32, &(0x7f0000000040)) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r11, 0x2, &(0x7f0000000300)="acb097ac9baf1c554236924de8303c9c50ff79fbec45effed9a9c7f6ab081a0e4adfa9ad56630b972bd081db8fdf23506692b260ebe954e60959b02c55c627f5966b49098c994b8d51643918ede777cb7949334157d25aded57c0d3fe9f2e4b804df3cbc5fc7d4e674db0bc46f401c5a7c4e4ff763f446f8a1484902096d38da55283204dba1eb6a0410b45587179f14758b")
getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000005640)={'broute\x00', 0x0, 0x0, 0x0, [0x413c, 0x0, 0x5, 0x8, 0x80000001, 0x10001]}, &(0x7f00000056c0)=0x78) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000100)={0x980915, 0x8})

37.382696268s ago: executing program 33 (id=182):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r6=>0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = dup3(r5, r7, 0x80000)
r9 = dup(r8) (async, rerun: 64)
pwrite64(r5, &(0x7f0000000040)="46f4", 0x2, 0x4) (async, rerun: 64)
pwrite64(r5, &(0x7f0000000100)="8612e4191774a1e37f8ed72564692a1638bf612ec36b3fe69c30d76a86c3a6145145144e28a71f45e08b8454641b602fa164bc43659d4c57a26f21a20c5dd038ca862bf3cf41146936c274190d3c6bc1b059e3b511cd2435ca3a53f111df3fbac6545290dbd805890082cff0b1a4b0f05bb80f1cc36dd5a5ffe99642f79735f27e5019a480a8e4e7f356cc12088bac1f967e2a15", 0x94, 0x2)
read(r9, &(0x7f00000014c0)=""/4096, 0x1000) (async)
timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r10, 0x25, 0x2, @void}, 0x10) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x31, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}}}, 0x0)
ioctl(r1, 0x8b32, &(0x7f0000000040)) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r11, 0x2, &(0x7f0000000300)="acb097ac9baf1c554236924de8303c9c50ff79fbec45effed9a9c7f6ab081a0e4adfa9ad56630b972bd081db8fdf23506692b260ebe954e60959b02c55c627f5966b49098c994b8d51643918ede777cb7949334157d25aded57c0d3fe9f2e4b804df3cbc5fc7d4e674db0bc46f401c5a7c4e4ff763f446f8a1484902096d38da55283204dba1eb6a0410b45587179f14758b")
getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000005640)={'broute\x00', 0x0, 0x0, 0x0, [0x413c, 0x0, 0x5, 0x8, 0x80000001, 0x10001]}, &(0x7f00000056c0)=0x78) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000100)={0x980915, 0x8})

7.758470899s ago: executing program 1 (id=538):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0}) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async, rerun: 32)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) (async)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x5, 0x0, @thr={&(0x7f0000000140)="0afe25c8afb33bf834fdae46da49d73c902e12221a5972527b7449c429dd63a08ec285d21c9bde81c9ad0d17bda2ce536f32b9", &(0x7f0000000180)="dfaae4d490cfc84f221972d6a60c29ab50e58b7c6a"}}) (async)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x0, 0x6, 0x0, 0x0, 0x6, 0x49e0382, r1})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'nicvf0\x00'})
r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0xa283)
syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000080)={0x7, 0xe, 0x8, 0xb, 0x1, 0x1})

7.754875054s ago: executing program 1 (id=539):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x515001, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f0000000140)) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000040)={0x4b3, r1, 0x2}) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800)

7.692029112s ago: executing program 1 (id=540):
syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x80, 0x80000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003"], 0x509)
close(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1800, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)

7.612049714s ago: executing program 1 (id=541):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50)
close(0x3)
r3 = socket(0x2c, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010102}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x1324f}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4e811}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
r6 = socket(0x1, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000600), &(0x7f0000001380)=@udp=r6}, 0x20)
recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/101, 0x65}], 0x1}, 0x40000162)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff)
ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000000)={0x6, 0x0, [{0x669, 0x0, 0x39294324}, {0x119, 0x0, 0x10000}, {0xbd4, 0x0, 0x8}, {0xa2a, 0x0, 0x6}, {0x887, 0x0, 0x7}, {0x3b7, 0x0, 0x1}]})

7.381169099s ago: executing program 1 (id=542):
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
write(r4, &(0x7f0000000200)='1', 0x1)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000000b010300000000000000000200000a080002400000000108000340000000000d8001007270661f011d696c7465730000000091b0151ffaace6a34889a32fb35b163bf04857d68a54a871afef078144f7077f5d2dc669f151acae129f99932900b87fed2e138962640a65068cc277abcf70ff56f77726e5af057809cb9f693ac86d8c07b0dc41b266c8c1af479cdc040c50796f0bcd790531125649f36fbb0ff6ad055b6c5d5a7fd9e9098b832b8ddb44c45328db0d7d04fd4c589084aa9196a02cad039fcb8bb83b18e23d93bf469b890b92205108391818d38c154cc6763125527192f92b6d441f13804c84"], 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010)

7.270873342s ago: executing program 1 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x3, 0x0, [{0x362, 0x0, 0x2ad2}, {0xa93, 0x0, 0x1}, {0xab5, 0x0, 0x8001}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x10000, 0xf, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x47}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x10, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x70000, 0xdddd0000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x5}, {0xeeee3000, 0xffff1000, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x2, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xd000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0x7}, {0xa000, 0xf000, 0x10, 0x82, 0x1, 0xfb, 0x2, 0x5, 0xfe, 0x1, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x2}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0x8080000, 0x100200, 0x6, 0xe000, 0xe6e70c00, [0x6, 0x401, 0x8, 0xc5]})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
sendmmsg$inet(r3, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000001)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0xf, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x3, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x1000, 0x3, 0x3f, 0x2, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0x1000, 0x9, 0x7, 0x10, 0x6f, 0x1, 0x7, 0x23, 0x80, 0x1, 0xfc}, {0x8080000, 0x10000, 0xc, 0x9d, 0x3, 0x2, 0x1, 0xb, 0x3, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x45}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]})
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x26000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x2, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0xa000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x6}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xe, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0xc000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86c, 0x8001]})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000740)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001c40))
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000480)="4e87fa42168cd29897bc7d01247c2e122dac4f749ea895bf17b51163a6b378bdffb137d5bc86198190f69523734f681ad41a2c7ba5683910ce5531ea4ae1c7f3de1711147421bc26edae4d7daf810a1903b06c3dea151bd1154c715fe8da69db2732b21f7a35019b8e1d58a3da94a8116f052ee46b6f8954d4188ddfa8e41fb4f98dd5156dc5432db9681008e262ed7f76f0074fdc2a8258859c67c048611696892b77f518851d55151709af604d4dce621efd984701d16b972b6ef13dda6c88c11550653c01acc331d8f15811620750fd13c4f7c8", 0xd5}], 0x1}, 0x1)
dup(r9)

2.581894248s ago: executing program 5 (id=617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r6, &(0x7f0000000180)='0\x00', 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x81, 0x6, @remote}, 0x14)
r10 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
io_setup(0x80, &(0x7f0000000480)=<r13=>0x0)
io_cancel(r13, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f00000004c0)="9aeb9a", 0x3, 0x1, 0x0, 0x3, r6}, &(0x7f0000000580))
sendmsg$nl_route_sched(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff81, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1fffc000, 0xb, 0x5}}}}]}, 0x40}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', <r14=>r7, 0x4, 0x8d, 0x7f, 0x4, 0x2, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x3, 0x4}})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@mpls_getroute={0x16c, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x20, 0x79, 0x0, 0x2, 0x0, 0x4, 0x800}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_VIA={0x14, 0x12, {0x1a, "77ec389b166df2e0dbc72ecca13f"}}, @RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x100}, {0x5, 0x0, 0x1}, {0x8}, {}, {}, {0x1}, {0x78e}, {0x8001}, {0x54c}, {0x8f877, 0x0, 0x1}, {0x5}, {0x3}, {0x4, 0x0, 0x1}, {0x10}, {0x4}, {0xa8f0c, 0x0, 0x1}, {0xffffe}, {0xf, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0xc}, {0x1}, {0x100}, {0x4}, {0x7}, {}, {0x5}, {}, {0x400, 0x0, 0x1}, {0x60}, {0x3ed, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x39d}, {0x9}, {0x3}, {0x5}, {0x4, 0x0, 0x1}, {0x9325}, {0x7}, {0x400}, {0xd2}, {0x6}, {0x9ed, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8}, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {0x2}, {0x6, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x4}, {0xffff, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6}, {0x961c, 0x0, 0x1}, {0x67c6}, {0x800}]}, @RTA_VIA={0x14, 0x12, {0x3, "2fa870bdca98de2d5e3d0772b700"}}, @RTA_OIF={0x8, 0x4, r14}, @RTA_OIF={0x8, 0x4, r9}, @RTA_OIF={0x8, 0x4, r12}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20048010)

2.39635389s ago: executing program 5 (id=619):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
add_key$user(0x0, 0x0, &(0x7f0000000400)='>', 0x1, 0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={<r3=>r2, &(0x7f0000000140)='\x00', 0x202, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x1]}, {0xa, 0x49, 0x6, 0x4}}, 0x4497bc0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xfffff233})
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000280)=0xfffffe01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.331655456s ago: executing program 0 (id=629):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@empty]}, 0x18)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

1.281152828s ago: executing program 0 (id=630):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@rand_addr=0x64010101, @broadcast, r4}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

1.15138426s ago: executing program 0 (id=631):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
setresgid(0xee00, 0xee01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = dup(r2)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000), 0x4)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xfffffffffffffff8)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0xfffffffffffffffc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0x0)
r12 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r12, 0xab07, 0x80000000)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f0000000300))
ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000080)={0x67, 0xaa80})

900.695978ms ago: executing program 0 (id=633):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_getroute={0x44, 0x1a, 0x20, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x71, 0xfc, 0x3, 0xfd, 0x8, 0x2000}, [@RTA_EXPIRES={0x8, 0x17, 0x40}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PRIORITY={0x8, 0x6, 0x23d7}, @RTA_MARK={0x8, 0x10, 0x982}, @RTA_UID={0x8, 0x19, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @remote, 0x6}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @remote, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x2, @sliced={0x0, [0x0, 0x2, 0x6, 0x7, 0x0, 0x6, 0xfff8, 0x10, 0xfffd, 0x7, 0x90b, 0x3, 0x2, 0x7, 0x8, 0x6, 0x0, 0x2, 0x1, 0x5, 0x7, 0x3, 0x6000, 0x4, 0x5, 0x76c7, 0x9, 0x2, 0x9, 0x0, 0xc7e, 0x82, 0x8000, 0x4, 0x7, 0x7, 0x5, 0x400, 0x680, 0x800, 0x6, 0x8, 0x0, 0x7, 0x4, 0x1, 0x7ff, 0x7f], 0x1000}})
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0)
writev(r8, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) (async)
writev(r8, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3)
open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x82)
ftruncate(0xffffffffffffffff, 0x6000000)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34343459, 0x0, 0xb, [{0x6, 0xd37e}, {0xdc5, 0x45}, {0x0, 0x5}, {0x6, 0x1ff}, {0x1000, 0xcb}, {0x4605, 0x1000006}, {0x1496c345, 0x80000001}, {0x8003, 0x8000}], 0x7, 0xa, 0x2, 0x2, 0x6}})
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x4, 0x9, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r10, @ANYBLOB="4d74a7d8", @ANYRES32=r3, @ANYBLOB="0500070002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)

829.491864ms ago: executing program 0 (id=635):
syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4ad"], 0x0) (async)
setns(0xc9, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet(0x2, 0x2, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000280)={r6, 0xffff}, &(0x7f00000002c0)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0401000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="040013000a000600ffffffffffff000006001200040800000600b500c90200000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000100), 0x12) (async)
listen(r8, 0x1) (async)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43"], 0x88)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000504000000000000000000001f00", @ANYRES32=r9, @ANYRES32=0x0, @ANYRESOCT=r9], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x2004000c) (async)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e22, @broadcast}})

731.914321ms ago: executing program 0 (id=638):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
exit(0xffff)
pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

312.219535ms ago: executing program 4 (id=644):
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x222081)
read(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

311.83774ms ago: executing program 4 (id=645):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000070300800c0001"], 0x314}], 0x1}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000060001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000070300800c0001"], 0x314}], 0x1}, 0x800) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1a) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000060001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) (async)

241.577686ms ago: executing program 4 (id=646):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x40000102, 0x1})
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, 0x3f9, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

188.078875ms ago: executing program 4 (id=647):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0x225, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000040)=0x7) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, &(0x7f0000000440)) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000140009052cbd701d0000001701180000", @ANYRES16=r4, @ANYBLOB="08000200e0000002"], 0x20}}, 0x4000) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x4, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
socket$netlink(0x10, 0x3, 0x0)

187.490524ms ago: executing program 5 (id=648):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) (async)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000001440)={0x0, 0x0}) (async)
syz_emit_ethernet(0x8f, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x74}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_uc={0x8864, {[], @generic="b3c067f4bdeef17a795289ca3d675f834539fd714ea4d663443d9ab9891122db8f39cdb60a8562bac4aaeadba591dec49f4ca6b7454ca8a33fd6ad4a24733cd779ad72c633ac74f94f9cc66731929984240e5ebfc8734ad87988744a63fa3507bd7e861e3c2d5b2c3d984098a02a173b4a035012a5906fbbcc"}}}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f7f", 0x27}], 0x1}, 0x48800) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
ioprio_set$pid(0x2, 0x0, 0x6000)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac)
sendfile(r7, r7, 0x0, 0x68) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}}, 0x20042000)

70.642656ms ago: executing program 4 (id=649):
socket$netlink(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000440)=0x1, 0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x103, 0xb3cf, 0x33565348, 0x0, 0x4, [{0x6}, {0x9, 0x5}, {0x0, 0x20001}, {0x8, 0x9}, {0x3, 0xb68e}, {0x80000003, 0x7ff}, {0x3, 0x1}, {0x3}], 0x9, 0x82, 0x7, 0x2, 0x3}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r4, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000400), &(0x7f0000000500)=@tcp, 0x1}, 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040), 0x10)
listen(r8, 0x0)
r9 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r9, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close_range(r7, 0xffffffffffffffff, 0x0)
r10 = fsmount(r0, 0x1, 0xe)
fchdir(r10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18)

70.320674ms ago: executing program 5 (id=650):
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0x40049409, 0x0)

1.645426ms ago: executing program 5 (id=651):
close(0xffffffffffffffff) (async)
rmdir(&(0x7f0000000280)='./file0\x00') (async)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x82202, 0x0)
socketpair(0x11, 0x1, 0xb, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1, {0x3, 0x1}}, './file0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="51715edb98687b4741bf0cfd00e19b000000001411001c00128009000100626f6e0180000000ff00000005000e00070000000084b813c1bde524ce388268472a569402143b04dc895c848ec821ca2985"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)

552.064µs ago: executing program 4 (id=652):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e2a, 0x7f, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000008, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001080)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}})
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001040), 0xf)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

0s ago: executing program 5 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a0104000000000000000001007ffe0900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000003000900030073797a320000000068000000060a010400000000000000000100000008000b400000000040000480100001800a00010072656469720000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000060900010073797a3000"], 0xdc}}, 0x408d4)

kernel console output (not intermixed with test programs):

T42] audit: type=1400 audit(1786926437.902:141): avc:  denied  { mounton } for  pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   48.223128][   T42] audit: type=1400 audit(1786926437.912:142): avc:  denied  { mount } for  pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.225185][ T5713] cgroup: Unknown subsys name 'net'
[   48.234799][   T42] audit: type=1400 audit(1786926437.932:143): avc:  denied  { unmount } for  pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.372183][ T5713] cgroup: Unknown subsys name 'cpuset'
[   48.380824][ T5713] cgroup: Unknown subsys name 'rlimit'
[   48.556160][   T42] audit: type=1400 audit(1786926438.252:144): avc:  denied  { setattr } for  pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   48.565547][   T42] audit: type=1400 audit(1786926438.252:145): avc:  denied  { create } for  pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.574230][   T42] audit: type=1400 audit(1786926438.252:146): avc:  denied  { write } for  pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.582859][   T42] audit: type=1400 audit(1786926438.252:147): avc:  denied  { read } for  pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.591514][   T42] audit: type=1400 audit(1786926438.262:148): avc:  denied  { mounton } for  pid=5713 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   48.602383][   T42] audit: type=1400 audit(1786926438.262:149): avc:  denied  { mount } for  pid=5713 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   48.612106][   T42] audit: type=1400 audit(1786926438.292:150): avc:  denied  { read } for  pid=5439 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   48.634911][ T5716] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   49.507755][ T5713] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.335153][   T42] kauditd_printk_skb: 7 callbacks suppressed
[   53.335166][   T42] audit: type=1400 audit(1786926443.022:158): avc:  denied  { execmem } for  pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   53.601396][   T42] audit: type=1400 audit(1786926443.292:159): avc:  denied  { create } for  pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.609887][   T42] audit: type=1400 audit(1786926443.302:160): avc:  denied  { read write } for  pid=5726 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.622786][   T42] audit: type=1400 audit(1786926443.302:161): avc:  denied  { open } for  pid=5726 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.630757][   T42] audit: type=1400 audit(1786926443.312:162): avc:  denied  { ioctl } for  pid=5727 comm="syz-executor" path="socket:[6623]" dev="sockfs" ino=6623 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.642668][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.649604][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.655354][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.659252][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.660520][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.663146][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.667048][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.668666][ T5730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.671180][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.673567][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.675037][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.675468][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.676356][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.677109][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.677152][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.677954][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.680811][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.682651][   T42] audit: type=1400 audit(1786926443.372:163): avc:  denied  { read } for  pid=5726 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   53.684306][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.696647][   T42] audit: type=1400 audit(1786926443.372:164): avc:  denied  { open } for  pid=5726 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   53.702706][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.712900][   T42] audit: type=1400 audit(1786926443.382:165): avc:  denied  { mounton } for  pid=5726 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   53.720010][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.720771][   T42] audit: type=1400 audit(1786926443.392:166): avc:  denied  { module_request } for  pid=5727 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   53.730796][   T42] audit: type=1400 audit(1786926443.412:167): avc:  denied  { sys_module } for  pid=5727 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   54.344250][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.347647][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.349942][ T5737] bridge_slave_0: entered allmulticast mode
[   54.352682][ T5737] bridge_slave_0: entered promiscuous mode
[   54.357467][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.360281][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.363466][ T5737] bridge_slave_1: entered allmulticast mode
[   54.367029][ T5737] bridge_slave_1: entered promiscuous mode
[   54.377887][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.381105][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.384171][ T5726] bridge_slave_0: entered allmulticast mode
[   54.388050][ T5726] bridge_slave_0: entered promiscuous mode
[   54.392793][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.395961][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.399002][ T5726] bridge_slave_1: entered allmulticast mode
[   54.402841][ T5726] bridge_slave_1: entered promiscuous mode
[   54.470874][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.479955][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.482245][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.484521][ T5727] bridge_slave_0: entered allmulticast mode
[   54.487333][ T5727] bridge_slave_0: entered promiscuous mode
[   54.492436][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.509548][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.521835][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.524732][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.527917][ T5727] bridge_slave_1: entered allmulticast mode
[   54.532030][ T5727] bridge_slave_1: entered promiscuous mode
[   54.546159][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.596927][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.614833][ T5726] team0: Port device team_slave_0 added
[   54.618615][ T5726] team0: Port device team_slave_1 added
[   54.621485][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.639032][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.642122][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.645158][ T5733] bridge_slave_0: entered allmulticast mode
[   54.649474][ T5733] bridge_slave_0: entered promiscuous mode
[   54.675453][ T5737] team0: Port device team_slave_0 added
[   54.678146][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.680936][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.683859][ T5733] bridge_slave_1: entered allmulticast mode
[   54.687684][ T5733] bridge_slave_1: entered promiscuous mode
[   54.702723][ T5727] team0: Port device team_slave_0 added
[   54.706820][ T5737] team0: Port device team_slave_1 added
[   54.720382][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.722957][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.731961][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.738737][ T5727] team0: Port device team_slave_1 added
[   54.773531][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.776062][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.784467][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.804241][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.807178][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.817261][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.824181][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.833149][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.849426][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.852122][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.862280][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.889457][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.892246][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.901454][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.906009][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.908384][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.917913][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.935366][ T5733] team0: Port device team_slave_0 added
[   54.943152][ T5733] team0: Port device team_slave_1 added
[   54.958974][ T5726] hsr_slave_0: entered promiscuous mode
[   54.962867][ T5726] hsr_slave_1: entered promiscuous mode
[   54.994889][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.998184][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.010331][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.044515][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.047850][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.058111][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.067939][ T5737] hsr_slave_0: entered promiscuous mode
[   55.071049][ T5737] hsr_slave_1: entered promiscuous mode
[   55.073545][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[   55.075813][ T5737] Cannot create hsr debugfs directory
[   55.109412][ T5727] hsr_slave_0: entered promiscuous mode
[   55.112500][ T5727] hsr_slave_1: entered promiscuous mode
[   55.115295][ T5727] debugfs: 'hsr0' already exists in 'hsr'
[   55.117821][ T5727] Cannot create hsr debugfs directory
[   55.233772][ T5733] hsr_slave_0: entered promiscuous mode
[   55.236691][ T5733] hsr_slave_1: entered promiscuous mode
[   55.238947][ T5733] debugfs: 'hsr0' already exists in 'hsr'
[   55.240937][ T5733] Cannot create hsr debugfs directory
[   55.513167][ T5726] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.521485][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.539535][ T5726] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.546103][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.549165][ T5726] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.552917][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.565668][ T5726] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.571597][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.637862][ T5727] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.643804][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.647824][ T5727] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.652353][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.655987][ T5727] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.661801][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.668321][ T5727] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.674723][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.717686][ T5734] Bluetooth: hci3: command tx timeout
[   55.717725][ T5732] Bluetooth: hci0: command tx timeout
[   55.717781][ T5741] Bluetooth: hci1: command tx timeout
[   55.750527][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.757053][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.767856][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.773656][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.778318][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.784610][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.786323][ T5732] Bluetooth: hci2: command tx timeout
[   55.798076][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.805062][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.891804][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.896527][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.899692][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.903658][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.912514][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.919685][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.923367][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.930910][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.941091][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.988159][ T5726] 8021q: adding VLAN 0 to HW filter on device team0
[   56.005184][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.008693][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.037494][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.040636][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.051695][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.110353][ T5727] 8021q: adding VLAN 0 to HW filter on device team0
[   56.128643][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.138608][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.140970][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.158220][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.160949][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.190367][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   56.213315][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.220444][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.223341][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.245553][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.247855][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.258178][ T5733] 8021q: adding VLAN 0 to HW filter on device team0
[   56.270922][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.273894][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.297149][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.299795][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.503974][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.550890][ T5726] veth0_vlan: entered promiscuous mode
[   56.559008][ T5726] veth1_vlan: entered promiscuous mode
[   56.577568][ T5726] veth0_macvtap: entered promiscuous mode
[   56.585262][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.595327][ T5726] veth1_macvtap: entered promiscuous mode
[   56.604635][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.618301][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.630445][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.664588][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.692989][ T5727] veth0_vlan: entered promiscuous mode
[   56.699011][ T5737] veth0_vlan: entered promiscuous mode
[   56.718928][ T5727] veth1_vlan: entered promiscuous mode
[   56.724661][ T5737] veth1_vlan: entered promiscuous mode
[   56.764585][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.768225][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.770546][ T5733] veth0_vlan: entered promiscuous mode
[   56.777967][ T5727] veth0_macvtap: entered promiscuous mode
[   56.791036][ T5727] veth1_macvtap: entered promiscuous mode
[   56.794574][ T5733] veth1_vlan: entered promiscuous mode
[   56.808566][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.810998][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.816414][ T5737] veth0_macvtap: entered promiscuous mode
[   56.822800][ T5737] veth1_macvtap: entered promiscuous mode
[   56.833552][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.847775][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.864618][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.868154][ T5726] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.869265][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.881051][ T5733] veth0_macvtap: entered promiscuous mode
[   56.890957][ T5733] veth1_macvtap: entered promiscuous mode
[   56.943623][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.964458][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.976507][ T5805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.998662][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.001620][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.034779][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.038873][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.041924][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.045037][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.045294][ T5880] netlink: 'syz.0.1': attribute type 39 has an invalid length.
[   57.082065][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.085450][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.107641][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.129699][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.140390][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.206166][ T5805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.215656][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.219352][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.230880][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.236145][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.257743][ T5805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.261731][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.276146][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.281501][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.290249][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.296894][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.301945][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.326351][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.338829][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.357704][ T5886] jffs2: notice: (5886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   57.366413][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.372326][ T5805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.375069][ T5805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.409666][ T5890] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[   57.500116][ T5894] lo: entered promiscuous mode
[   57.503469][ T5894] bond0: entered promiscuous mode
[   57.505668][ T5894] dummy0: entered promiscuous mode
[   57.509874][ T5894] eql: entered promiscuous mode
[   57.512466][ T5894] ifb0: entered promiscuous mode
[   57.515127][ T5894] ifb1: entered promiscuous mode
[   57.521516][ T5894] e1000 0000:00:06.0 eth0: entered promiscuous mode
[   57.534423][ T5894] e1000e 0000:00:02.0 eth1: entered promiscuous mode
[   57.540631][ T5894] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[   57.544843][ T5894] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[   57.551950][ T5894] hwsim0: entered promiscuous mode
[   57.555677][ T5894] ieee802154 phy0 wpan0: entered promiscuous mode
[   57.560012][ T5894] ieee802154 phy1 wpan1: entered promiscuous mode
[   57.563464][ T5894] teql0: entered promiscuous mode
[   57.565804][ T5894] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[   57.633807][ T5899] openvswitch: netlink: IP tunnel dst address not specified
[   57.637386][ T5899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.732302][ T5905] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   57.736292][ T5905] overlayfs: missing 'lowerdir'
[   57.786899][ T5732] Bluetooth: hci0: command tx timeout
[   57.787441][ T5734] Bluetooth: hci1: command tx timeout
[   57.787562][ T5741] Bluetooth: hci3: command tx timeout
[   57.866038][ T5734] Bluetooth: hci2: command tx timeout
[   57.899127][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.561257][   T42] kauditd_printk_skb: 69 callbacks suppressed
[   58.561271][   T42] audit: type=1400 audit(1786926448.252:237): avc:  denied  { ioctl } for  pid=5916 comm="syz.0.13" path="/dev/v4l-subdev5" dev="devtmpfs" ino=969 ioctlcmd=0x5626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.583015][   T42] audit: type=1400 audit(1786926448.252:238): avc:  denied  { read write } for  pid=5916 comm="syz.0.13" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   58.599562][   T42] audit: type=1400 audit(1786926448.252:239): avc:  denied  { open } for  pid=5916 comm="syz.0.13" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   58.607885][ T5926] Zero length message leads to an empty skb
[   58.643164][ T5929] Bluetooth: MGMT ver 1.23
[   58.690634][ T5933] jffs2: notice: (5933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   58.691614][   T42] audit: type=1400 audit(1786926448.382:240): avc:  denied  { create } for  pid=5934 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.705259][   T42] audit: type=1400 audit(1786926448.392:241): avc:  denied  { setopt } for  pid=5934 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.713146][   T42] audit: type=1400 audit(1786926448.392:242): avc:  denied  { ioctl } for  pid=5934 comm="syz.0.19" path="socket:[11886]" dev="sockfs" ino=11886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.723940][   T42] audit: type=1400 audit(1786926448.392:243): avc:  denied  { write } for  pid=5934 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.732581][   T42] audit: type=1400 audit(1786926448.412:244): avc:  denied  { write } for  pid=5932 comm="syz.2.20" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.741232][   T42] audit: type=1400 audit(1786926448.412:245): avc:  denied  { add_name } for  pid=5932 comm="syz.2.20" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.749277][   T42] audit: type=1400 audit(1786926448.412:246): avc:  denied  { create } for  pid=5932 comm="syz.2.20" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   58.810512][   T65] block nbd0: Receive control failed (result -32)
[   58.897585][ T5962] =======================================================
[   58.897585][ T5962] WARNING: The mand mount option has been deprecated and
[   58.897585][ T5962]          and is ignored by this kernel. Remove the mand
[   58.897585][ T5962]          option from the mount to silence this warning.
[   58.897585][ T5962] =======================================================
[   58.914680][ T5965] overlayfs: overlapping lowerdir path
[   58.917650][ T5962] overlayfs: overlapping lowerdir path
[   58.924613][ T5965] overlayfs: missing 'lowerdir'
[   58.934748][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'.
[   58.937762][ T5959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   58.941076][ T5959] IPv6: NLM_F_CREATE should be set when creating new route
[   58.975001][ T5960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5960 comm=syz.0.26
[   59.866548][ T5734] Bluetooth: hci1: command tx timeout
[   59.866802][ T5732] Bluetooth: hci3: command tx timeout
[   59.868303][ T5734] Bluetooth: hci0: command tx timeout
[   59.889070][ T6012] ipvlan2: entered allmulticast mode
[   59.891444][ T6012] batadv_slave_1: entered allmulticast mode
[   59.898128][ T6012] batman_adv: batadv0: Adding interface: ipvlan2
[   59.900769][ T6012] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.911656][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.916246][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.920386][ T6012] batman_adv: batadv0: Interface activated: ipvlan2
[   59.945963][ T5734] Bluetooth: hci2: command tx timeout
[   60.012768][ T6017] netlink: 312 bytes leftover after parsing attributes in process `syz.2.41'.
[   60.037147][ T6017] sctp: [Deprecated]: syz.2.41 (pid 6017) Use of int in max_burst socket option.
[   60.037147][ T6017] Use struct sctp_assoc_value instead
[   60.098403][ T6022] gfs2: error -5 reading superblock
[   60.227367][ T6028] binder: 6027:6028 ioctl c0306201 200000000040 returned -22
[   60.274302][ T6033] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   60.285930][ T6033] netlink: 'syz.2.49': attribute type 1 has an invalid length.
[   60.296865][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'.
[   60.300620][ T6033] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   60.305069][ T6033] netlink: 'syz.2.49': attribute type 1 has an invalid length.
[   60.308586][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'.
[   60.311920][ T6033] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2
[   60.502635][ T6056] warning: `syz.2.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.513366][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.521056][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.525651][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.531165][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.535028][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.543239][ T6056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.58'.
[   60.635227][ T6080] ref_ctr increment failed for inode: 0x57 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880285d3fc0
[   60.640741][ T6075] uprobe: syz.0.63:6075 failed to unregister, leaking uprobe
[   60.820672][ T6091] Bluetooth: MGMT ver 1.23
[   61.018851][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.021431][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.024179][ T6061] bridge_slave_0: entered allmulticast mode
[   61.028259][ T6061] bridge_slave_0: entered promiscuous mode
[   61.031927][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.034899][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.037745][ T6061] bridge_slave_1: entered allmulticast mode
[   61.040690][ T6061] bridge_slave_1: entered promiscuous mode
[   61.061546][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.071025][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.096669][ T6061] team0: Port device team_slave_0 added
[   61.101426][ T6061] team0: Port device team_slave_1 added
[   61.125099][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.128293][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.139317][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.145205][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.150457][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.161283][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.207354][ T6061] hsr_slave_0: entered promiscuous mode
[   61.210501][ T6061] hsr_slave_1: entered promiscuous mode
[   61.213425][ T6061] debugfs: 'hsr0' already exists in 'hsr'
[   61.215723][ T6061] Cannot create hsr debugfs directory
[   61.398948][ T6061] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.408176][ T6061] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   61.412221][ T6061] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.420963][ T6061] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   61.425056][ T6061] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.431865][ T6061] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   61.434520][ T6061] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.441726][ T6061] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   61.477721][ T6110] misc userio: Can't change port type on an already running userio instance
[   61.483021][ T6110] misc userio: Can't change port type on an already running userio instance
[   61.486798][ T6111] misc userio: Begin command sent, but we're already running
[   61.489790][ T6112] misc userio: Can't change port type on an already running userio instance
[   61.504066][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.515202][ T6061] 8021q: adding VLAN 0 to HW filter on device team0
[   61.522348][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.524543][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.531557][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.533765][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.815609][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.849864][ T6133] process 'syz.2.71' launched './file1' with NULL argv: empty string added
[   61.947963][ T5732] Bluetooth: hci0: command tx timeout
[   61.949675][ T5734] Bluetooth: hci3: command tx timeout
[   61.965274][ T6152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65299 sclass=netlink_route_socket pid=6152 comm=syz.0.76
[   62.040653][ T6061] veth0_vlan: entered promiscuous mode
[   62.050269][ T6061] veth1_vlan: entered promiscuous mode
[   62.078297][ T6061] veth0_macvtap: entered promiscuous mode
[   62.082898][ T6061] veth1_macvtap: entered promiscuous mode
[   62.093470][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.100735][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.173788][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.176454][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.200467][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.205059][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.242958][ T6178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58355 sclass=netlink_route_socket pid=6178 comm=syz.2.83
[   62.247595][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.249445][ T6178] netlink: 'syz.2.83': attribute type 1 has an invalid length.
[   62.258958][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.296386][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.300003][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.339194][   T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   62.396534][ T6182] mtrr: base(0x20000) is not aligned on a size(0xde020000) boundary
[   62.498788][   T50] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   62.510228][   T50] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[   62.514608][   T50] usb 5-1: config 1 has no interface number 0
[   62.517906][   T50] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.528374][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.531842][   T50] usb 5-1: Product: syz
[   62.536027][   T50] usb 5-1: Manufacturer: syz
[   62.539130][   T50] usb 5-1: SerialNumber: syz
[   62.563253][   T50] usb 5-1: Expected 3 endpoints, found: 2
[   62.588816][ T5734] Bluetooth: hci2: command tx timeout
[   62.765635][   T50] usb 5-1: USB disconnect, device number 2
[   62.828775][ T5741] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   63.216130][   T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   63.371938][   T50] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   63.376838][ T6215] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   63.377278][   T50] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[   63.381421][ T6215] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   63.382098][ T6216] cgroup: Name too long
[   63.383941][   T50] usb 5-1: config 1 has no interface number 0
[   63.395330][   T50] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   63.401076][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.404426][   T50] usb 5-1: Product: ᰁ
[   63.406303][   T50] usb 5-1: Manufacturer: Ö۲刵
[   63.408570][   T50] usb 5-1: SerialNumber: 糦榼ෆ⻬姪馲뿗ꯃ
[   63.425223][   T50] usb 5-1: Expected 3 endpoints, found: 2
[   63.577606][   T42] kauditd_printk_skb: 106 callbacks suppressed
[   63.577619][   T42] audit: type=1400 audit(1786926453.272:353): avc:  denied  { setopt } for  pid=6227 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.586877][   T42] audit: type=1400 audit(1786926453.282:354): avc:  denied  { bind } for  pid=6227 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.605116][   T42] audit: type=1400 audit(1786926453.292:355): avc:  denied  { accept } for  pid=6227 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   63.643203][   T42] audit: type=1400 audit(1786926453.332:356): avc:  denied  { append } for  pid=6229 comm="syz.4.99" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.676111][   T42] audit: type=1400 audit(1786926453.362:357): avc:  denied  { create } for  pid=6229 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   63.682963][   T42] audit: type=1400 audit(1786926453.372:358): avc:  denied  { write } for  pid=6229 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   63.690187][   T42] audit: type=1400 audit(1786926453.372:359): avc:  denied  { listen } for  pid=6229 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   63.697945][   T42] audit: type=1400 audit(1786926453.372:360): avc:  denied  { append } for  pid=6229 comm="syz.4.99" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   63.760769][ T6230] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer.
[   63.779205][ T6230] kvm: kvm [6229]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   63.784443][ T6230] kvm: kvm [6229]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   63.871579][   T42] audit: type=1400 audit(1786926453.562:361): avc:  denied  { read } for  pid=6236 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   63.923039][   T42] audit: type=1400 audit(1786926453.612:362): avc:  denied  { write } for  pid=6236 comm="syz.1.102" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.959996][ T6242] netlink: 'syz.2.103': attribute type 21 has an invalid length.
[   63.966389][ T6242] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   63.970119][ T6242] netlink: 84 bytes leftover after parsing attributes in process `syz.2.103'.
[   63.973246][ T6242] netlink: 'syz.2.103': attribute type 2 has an invalid length.
[   63.975732][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'.
[   63.981453][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   64.066082][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   64.070183][ T6251] smc: net device lo applied user defined pnetid SYZ0
[   64.110811][ T6255] jffs2: notice: (6255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   64.118603][ T6255] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   64.236078][ T5714] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   64.345973][ T5812] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   64.352623][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.359127][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.396720][ T5714] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[   64.407211][ T5714] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.411341][ T5714] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   64.415426][ T5714] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   64.422530][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   64.435128][ T5714] usb 6-1: Product: syz
[   64.438618][ T5714] usb 6-1: Manufacturer: syz
[   64.446959][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   64.459096][ T5714] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[   64.474007][ T5714] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   64.516383][ T5812] usb 9-1: Using ep0 maxpacket: 32
[   64.522003][ T5812] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   64.543912][ T5812] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   64.554884][ T5812] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   64.558737][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.564217][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.567217][ T5812] usb 9-1: Product: syz
[   64.568611][ T5812] usb 9-1: Manufacturer: syz
[   64.570238][ T5812] usb 9-1: SerialNumber: syz
[   64.574578][ T5812] usb 9-1: config 0 descriptor??
[   64.577375][ T6253] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   64.580948][ T5812] hub 9-1:0.0: bad descriptor, ignoring hub
[   64.583121][ T5812] hub 9-1:0.0: probe with driver hub failed with error -5
[   64.669744][ T5741] Bluetooth: hci2: command 0x041b tx timeout
[   64.680501][ T6244] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET)
[   64.779041][   T50] usb 6-1: USB disconnect, device number 2
[   64.808176][   T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   64.813492][   T50] garmin_gps 6-1:1.0: device disconnected
[   64.896340][   T56] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   64.906307][ T5812] usb 9-1: USB disconnect, device number 2
[   65.068763][   T56] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   65.074520][   T56] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   65.079505][   T56] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[   65.083657][   T56] usb 7-1: config 0 interface 0 has no altsetting 0
[   65.089203][   T56] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   65.092683][   T56] usb 7-1: Product: syz
[   65.094654][   T56] usb 7-1: Manufacturer: syz
[   65.096877][   T56] usb 7-1: SerialNumber: syz
[   65.101354][   T56] usb 7-1: config 0 descriptor??
[   65.112509][   T56] usb 7-1: selecting invalid altsetting 0
[   65.317545][ T5877] usb 7-1: USB disconnect, device number 2
[   65.587512][   T56] usb 5-1: USB disconnect, device number 3
[   65.965504][ T6290] bridge1: entered promiscuous mode
[   65.967884][ T6290] bridge1: entered allmulticast mode
[   65.979320][ T6290] sctp: [Deprecated]: syz.2.118 (pid 6290) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.979320][ T6290] Use struct sctp_sack_info instead
[   66.184643][ T6294] trusted_key: syz.2.119 sent an empty control message without MSG_MORE.
[   66.305202][ T6301] NILFS (nbd1): device size too small
[   66.528032][ T6318] Bluetooth: MGMT ver 1.23
[   66.619053][ T6329] netlink: 'syz.2.130': attribute type 11 has an invalid length.
[   66.622167][ T6329] netlink: 224 bytes leftover after parsing attributes in process `syz.2.130'.
[   66.683296][ T6332] mmap: syz.0.135 (6332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   66.737959][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   66.740442][ T5842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.742450][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   66.746238][ T5741] Bluetooth: hci2: command 0x041b tx timeout
[   66.758472][ T5842] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   66.783197][ T6342] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   66.802642][ T6342] VFS: Can't find a romfs filesystem on dev nullb0.
[   66.802642][ T6342] 
[   66.810577][ T6341] fido_id[6341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   66.881425][ T6346] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[   66.915421][ T6348] raw_sendmsg: syz.1.141 forgot to set AF_INET. Fix it!
[   66.958653][ T6351] syzkaller0: entered promiscuous mode
[   66.960462][ T6351] syzkaller0: entered allmulticast mode
[   67.338885][   T56] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   67.508339][   T56] usb 6-1: Using ep0 maxpacket: 32
[   67.516327][   T56] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[   67.529593][   T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.539401][   T56] usb 6-1: config 0 descriptor??
[   67.552977][   T56] as10x_usb: device has been detected
[   67.569391][   T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[   67.652028][   T56] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[   67.687481][ T6346] syz.0.140 (6346): drop_caches: 2
[   67.710305][   T56] as10x_usb: error during firmware upload part1
[   67.712500][   T56] Registered device nBox DVB-T Dongle
[   67.761259][ T5714] usb 6-1: USB disconnect, device number 3
[   67.946415][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[   67.950551][ T6399] FAULT_INJECTION: forcing a failure.
[   67.950551][ T6399] name fail_futex, interval 1, probability 0, space 0, times 1
[   67.957919][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) 
[   67.957946][ T6399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   67.957959][ T6399] Call Trace:
[   67.957990][ T6399]  <TASK>
[   67.957997][ T6399]  dump_stack_lvl+0x100/0x190
[   67.958088][ T6399]  should_fail_ex.cold+0x5/0xa
[   67.958125][ T6399]  get_futex_key+0x1d2/0x14f0
[   67.958167][ T6399]  ? __pfx_get_futex_key+0x10/0x10
[   67.958197][ T6399]  ? enqueue_task+0x1dc/0x4f0
[   67.958218][ T6399]  futex_wait_setup+0x91/0x540
[   67.958245][ T6399]  __futex_wait+0x19f/0x300
[   67.958290][ T6399]  ? __pfx___futex_wait+0x10/0x10
[   67.958309][ T6399]  ? __pfx_try_to_wake_up+0x10/0x10
[   67.958338][ T6399]  ? futex_hash+0x311/0x400
[   67.958364][ T6399]  ? __pfx_futex_wake_mark+0x10/0x10
[   67.958389][ T6399]  ? find_held_lock+0x2b/0x80
[   67.958406][ T6399]  ? futex_wake+0x4ea/0x5e0
[   67.958430][ T6399]  futex_wait+0xe6/0x370
[   67.958450][ T6399]  ? __pfx_futex_wait+0x10/0x10
[   67.958474][ T6399]  ? rcu_read_lock_any_held+0x6a/0xa0
[   67.958494][ T6399]  ? find_held_lock+0x2b/0x80
[   67.958512][ T6399]  ? ksys_write+0x190/0x250
[   67.958542][ T6399]  ? ksys_write+0x190/0x250
[   67.958566][ T6399]  do_futex+0x265/0x440
[   67.958596][ T6399]  ? __pfx_do_futex+0x10/0x10
[   67.958626][ T6399]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   67.958694][ T6399]  __x64_sys_futex+0x34f/0x4d0
[   67.958728][ T6399]  ? fput+0x79/0x100
[   67.958753][ T6399]  ? __pfx___x64_sys_futex+0x10/0x10
[   67.958779][ T6399]  ? ksys_write+0x1ac/0x250
[   67.958797][ T6399]  ? __pfx_ksys_write+0x10/0x10
[   67.958824][ T6399]  do_syscall_64+0x115/0x870
[   67.958846][ T6399]  ? clear_bhb_loop+0x70/0xc0
[   67.958870][ T6399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.958888][ T6399] RIP: 0033:0x7fcc4ad9e0d9
[   67.958906][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.958923][ T6399] RSP: 002b:00007fcc4bc7d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   67.958962][ T6399] RAX: ffffffffffffffda RBX: 00007fcc4b025fa8 RCX: 00007fcc4ad9e0d9
[   67.958975][ T6399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc4b025fa8
[   67.958988][ T6399] RBP: 00007fcc4b025fa0 R08: 0000000000000000 R09: 0000000000000000
[   67.959000][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.959013][ T6399] R13: 00007fcc4b026038 R14: 00007ffc31026040 R15: 00007ffc31026128
[   67.959046][ T6399]  </TASK>
[   68.138943][ T5714] Unregistered device nBox DVB-T Dongle
[   68.152696][ T5714] as10x_usb: device has been disconnected
[   68.310098][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   68.370725][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'.
[   68.478910][ T6438] overlayfs: conflicting lowerdir path
[   68.513272][ T6432] 9pnet_virtio: no channels available for device syz
[   68.687943][ T6441] pimreg: entered allmulticast mode
[   68.735232][   T42] kauditd_printk_skb: 91 callbacks suppressed
[   68.735252][   T42] audit: type=1400 audit(1786926458.422:454): avc:  denied  { map } for  pid=6442 comm="syz.4.170" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   68.807533][   T42] audit: type=1400 audit(1786926458.502:455): avc:  denied  { ioctl } for  pid=6444 comm="syz.0.171" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13023 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   68.823622][ T5741] Bluetooth: hci2: Malformed HCI Event: 0x22
[   68.832687][ T5741] Bluetooth: hci2: command 0x041b tx timeout
[   68.855274][   T42] audit: type=1400 audit(1786926458.542:456): avc:  denied  { ioctl } for  pid=6444 comm="syz.0.171" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   68.878283][ T5741] Bluetooth: hci2: unexpected event for opcode 0x0c1a
[   68.932020][ T6456] ip6erspan0: entered allmulticast mode
[   68.937297][   T42] audit: type=1400 audit(1786926458.622:457): avc:  denied  { connect } for  pid=6455 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   68.947100][   T42] audit: type=1400 audit(1786926458.622:458): avc:  denied  { read } for  pid=6455 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   69.117660][ T6463] __nla_validate_parse: 1 callbacks suppressed
[   69.117678][ T6463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.178'.
[   69.185991][   T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   69.244794][ T6470] netlink: 'syz.1.180': attribute type 21 has an invalid length.
[   69.248512][ T6470] netlink: 152 bytes leftover after parsing attributes in process `syz.1.180'.
[   69.289292][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   69.299296][   T42] audit: type=1400 audit(1786926458.992:459): avc:  denied  { write } for  pid=6471 comm="syz.1.188" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   69.307719][   T42] audit: type=1400 audit(1786926458.992:460): avc:  denied  { open } for  pid=6471 comm="syz.1.188" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   69.328055][   T50] usb 9-1: device descriptor read/64, error -71
[   69.354291][ T5821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.525257][ T5821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.539439][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'.
[   69.579722][   T50] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   69.590428][ T6474] jffs2: notice: (6474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[   69.692712][ T5821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.715953][   T50] usb 9-1: device descriptor read/64, error -71
[   69.795777][ T6481] Bluetooth: hci3: Frame reassembly failed (-84)
[   69.802616][ T1159] Bluetooth: hci3: Frame reassembly failed (-84)
[   69.812699][ T5732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   69.833605][ T5732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   69.835154][ T5732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   69.836738][   T50] usb usb9-port1: attempt power cycle
[   69.840118][   T42] audit: type=1400 audit(1786926459.532:461): avc:  denied  { bind } for  pid=6484 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   69.840150][   T42] audit: type=1400 audit(1786926459.532:462): avc:  denied  { connect } for  pid=6484 comm="syz.0.184" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   69.841330][ T5732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   69.841979][ T5732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   69.843670][ T5821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.033068][ T5821] bridge_slave_1: left allmulticast mode
[   70.036176][ T5821] bridge_slave_1: left promiscuous mode
[   70.040785][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.049940][ T5821] bridge_slave_0: left allmulticast mode
[   70.052415][ T5821] bridge_slave_0: left promiscuous mode
[   70.054470][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.095953][   T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   70.200870][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.201843][   T50] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   70.214786][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.224107][ T5821] bond0 (unregistering): Released all slaves
[   70.226380][   T50] usb 9-1: device descriptor read/8, error -71
[   70.246879][   T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.251944][   T41] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   70.257045][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   70.261240][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   70.264984][   T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   70.270683][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.276538][   T41] usb 5-1: config 0 descriptor??
[   70.309628][   T42] audit: type=1400 audit(1786926460.002:463): avc:  denied  { write } for  pid=6495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.424623][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2
[   70.466339][   T50] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   70.486610][   T50] usb 9-1: device descriptor read/8, error -71
[   70.589790][ T5821] hsr_slave_0: left promiscuous mode
[   70.593190][ T5821] hsr_slave_1: left promiscuous mode
[   70.596142][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.597740][   T50] usb usb9-port1: unable to enumerate USB device
[   70.599011][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.605640][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.608629][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.628676][ T5821] veth1_macvtap: left promiscuous mode
[   70.631936][ T5821] veth0_macvtap: left promiscuous mode
[   70.634431][ T5821] veth1_vlan: left promiscuous mode
[   70.639887][ T5821] veth0_vlan: left promiscuous mode
[   70.689787][   T41] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[   70.724054][   T41] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   70.843454][ T5821] team0 (unregistering): Port device team_slave_1 removed
[   70.854479][ T5821] team0 (unregistering): Port device team_slave_0 removed
[   70.940417][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3
[   70.960666][ T6485] CIFS mount error: No usable UNC path provided in device string!
[   70.960666][ T6485] 
[   70.964354][ T6485] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   70.976901][ T5714] usb 5-1: USB disconnect, device number 4
[   71.042100][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.045610][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.048579][ T6482] bridge_slave_0: entered allmulticast mode
[   71.051410][ T6482] bridge_slave_0: entered promiscuous mode
[   71.055641][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.058027][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.060322][ T6482] bridge_slave_1: entered allmulticast mode
[   71.063037][ T6482] bridge_slave_1: entered promiscuous mode
[   71.100838][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.107932][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.132889][ T6482] team0: Port device team_slave_0 added
[   71.137727][ T6482] team0: Port device team_slave_1 added
[   71.163714][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.166601][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.177718][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.183706][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.186773][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.196430][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.234546][ T6482] hsr_slave_0: entered promiscuous mode
[   71.238056][ T6482] hsr_slave_1: entered promiscuous mode
[   71.240859][ T6482] debugfs: 'hsr0' already exists in 'hsr'
[   71.243324][ T6482] Cannot create hsr debugfs directory
[   71.247332][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4
[   71.381418][ T6482] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   71.385652][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.388814][ T6482] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   71.393802][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.396586][ T6482] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   71.401310][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.403942][ T6482] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   71.413320][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.440708][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.443141][ T6482] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.445554][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.448373][ T6482] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.470280][ T1435] ieee802154 phy0 wpan0: encryption failed: -22
[   71.473508][ T1435] ieee802154 phy1 wpan1: encryption failed: -22
[   71.483918][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5
[   71.501321][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.513392][ T6482] 8021q: adding VLAN 0 to HW filter on device team0
[   71.519283][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.522061][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.529686][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.532047][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.539759][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.541840][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.817547][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.866392][ T5732] Bluetooth: hci4: command tx timeout
[   71.866430][ T5734] Bluetooth: hci3: command 0x1003 tx timeout
[   71.866498][ T5741] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   71.979427][ T6482] veth0_vlan: entered promiscuous mode
[   71.984536][ T6482] veth1_vlan: entered promiscuous mode
[   72.002764][ T6482] veth0_macvtap: entered promiscuous mode
[   72.012545][ T6482] veth1_macvtap: entered promiscuous mode
[   72.030837][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.040026][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.058895][ T6558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.189'.
[   72.101034][ T5805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.113910][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'.
[   72.117262][ T5805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.141017][ T6562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6562 comm=syz.4.192
[   72.147781][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.152318][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.177129][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.179975][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.186003][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.189324][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.621317][ T6603] syz.0.200: attempt to access beyond end of device
[   72.621317][ T6603] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[   72.625446][ T6603] gfs2: error -5 reading superblock
[   72.627329][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   72.635580][ T6604] syz.0.200: attempt to access beyond end of device
[   72.635580][ T6604] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[   72.640541][ T6604] gfs2: error -5 reading superblock
[   72.651740][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6603 comm=syz.0.200
[   72.658223][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6603 comm=syz.0.200
[   72.666799][ T6604] IPv6: NLM_F_REPLACE set, but no existing node found!
[   72.670192][ T6603] IPv6: NLM_F_REPLACE set, but no existing node found!
[   72.713460][ T6608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.202'.
[   72.776845][   T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   72.782588][   T24] usb 6-1: config 27 has an invalid descriptor of length 81, skipping remainder of the config
[   72.783393][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'.
[   72.787497][   T24] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[   72.793651][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.824763][ T6614] netlink: 'syz.0.204': attribute type 2 has an invalid length.
[   72.835348][ T6614] netlink: 'syz.0.204': attribute type 2 has an invalid length.
[   72.839034][ T6614] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.204'.
[   72.840092][ T6612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.012894][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'.
[   73.181309][   T24] usb 6-1: USB disconnect, device number 4
[   73.222069][ T6653] netlink: 'syz.4.213': attribute type 1 has an invalid length.
[   73.381220][ T6659] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   73.382191][ T6670] tipc: Started in network mode
[   73.387416][ T6670] tipc: Node identity ac141441, cluster identity 4711
[   73.391192][ T6670] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.503724][ T6659] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[   73.534534][ T6682] nvme_fabrics: unknown parameter or missing value 'nq����n=testnqn' in ctrl creation request
[   73.638264][ T6686] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   73.691945][ T6691] blkio.reset_stats is deprecated
[   73.742197][ T6698] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   73.786075][   T56] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   73.938956][   T56] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[   73.943893][   T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51008, setting to 1024
[   73.948571][   T56] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[   73.948598][ T5741] Bluetooth: hci4: command tx timeout
[   73.952608][   T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.961414][ T6680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   73.966472][   T56] opticon 9-1:1.0: opticon converter detected
[   73.976470][   T56] usb 9-1: opticon converter now attached to ttyUSB0
[   74.408739][   T41] tipc: Node number set to 2886997057
[   74.511512][   T42] kauditd_printk_skb: 25 callbacks suppressed
[   74.511525][   T42] audit: type=1400 audit(1786926464.202:489): avc:  denied  { mmap_zero } for  pid=6700 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   74.640683][   T42] audit: type=1400 audit(1786926464.332:490): avc:  denied  { write } for  pid=6709 comm="syz.0.234" path="socket:[15099]" dev="sockfs" ino=15099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   74.646684][   T41] usb 9-1: USB disconnect, device number 7
[   74.663823][   T41] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[   74.670793][ T6715] ip_tables: iptables: counters copy to user failed while replacing table
[   74.673906][   T41] opticon 9-1:1.0: device disconnected
[   74.798571][   T42] audit: type=1400 audit(1786926464.492:491): avc:  denied  { getopt } for  pid=6724 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   74.850010][   T42] audit: type=1400 audit(1786926464.542:492): avc:  denied  { view } for  pid=6726 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   74.904713][   T42] audit: type=1400 audit(1786926464.592:493): avc:  denied  { map } for  pid=6728 comm="syz.5.240" path="socket:[15120]" dev="sockfs" ino=15120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.916026][   T42] audit: type=1400 audit(1786926464.592:494): avc:  denied  { read } for  pid=6728 comm="syz.5.240" path="socket:[15120]" dev="sockfs" ino=15120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.924295][   T42] audit: type=1400 audit(1786926464.592:495): avc:  denied  { mount } for  pid=6730 comm="syz.0.241" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   74.924298][ T6731] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   74.931716][   T42] audit: type=1400 audit(1786926464.592:496): avc:  denied  { mounton } for  pid=6730 comm="syz.0.241" path="/60/mnt_trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   74.936322][ T6731] overlayfs: failed to set xattr on upper
[   74.941330][   T42] audit: type=1400 audit(1786926464.592:497): avc:  denied  { mount } for  pid=6730 comm="syz.0.241" name="/" dev="ramfs" ino=14217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   74.943059][ T6731] overlayfs: ...falling back to redirect_dir=nofollow.
[   74.949665][   T42] audit: type=1400 audit(1786926464.612:498): avc:  denied  { mounton } for  pid=6730 comm="syz.0.241" path="/file0" dev="ramfs" ino=14219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   74.952541][ T6731] overlayfs: ...falling back to index=off.
[   74.963239][ T6731] overlayfs: ...falling back to uuid=null.
[   74.965807][ T6731] overlayfs: ...falling back to xino=off.
[   74.999282][ T6735] SELinux:  policydb magic number 0x79732f2e does not match expected magic number 0xf97cff8c
[   75.003795][ T6735] SELinux: failed to load policy
[   75.028647][ T6738] Cannot find del_set index 8193 as target
[   75.169747][ T6750] __nla_validate_parse: 9 callbacks suppressed
[   75.169759][ T6750] netlink: 104 bytes leftover after parsing attributes in process `syz.5.247'.
[   75.198521][ T6752] fuse: Invalid rootmode
[   75.332657][ T6769] netlink: 104 bytes leftover after parsing attributes in process `syz.0.253'.
[   75.336037][ T6770] netlink: 104 bytes leftover after parsing attributes in process `syz.0.253'.
[   75.375501][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.455172][ T6779] kAFS: unable to lookup cell '(,c��'
[   75.523487][ T6784] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   75.629972][ T6791] syzkaller0: entered promiscuous mode
[   75.637187][ T6791] syzkaller0: entered allmulticast mode
[   75.762800][ T6824] SELinux:  truncated policydb string identifier
[   75.764923][ T6824] SELinux: failed to load policy
[   76.027047][ T5741] Bluetooth: hci4: command tx timeout
[   77.074123][ T6842] overlayfs: failed to resolve '/=ޣb�~f��Nq'�<��6�;�F���9�;���A
[   77.074123][ T6842] ���U������1�b�g_�d�A���!': -2
[   77.080991][ T6842] overlayfs: failed to resolve '/': -2
[   77.096727][ T6842] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   77.103681][ T6842] Cannot find add_set index 0 as target
[   77.115822][ T6842] qnx4: no qnx4 filesystem (no root dir).
[   77.253725][ T6862] ip6t_REJECT: ECHOREPLY is not supported
[   77.442508][ T6888] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   77.449886][ T6888] cramfs: wrong magic
[   77.762885][ T6931] netlink: 'syz.4.292': attribute type 34 has an invalid length.
[   77.766319][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[   77.790721][ T6934] comedi comedi2: comedi_config --init_data is deprecated
[   77.807556][ T6934] omfs: Invalid superblock (0)
[   77.918566][ T6944] binder: BINDER_SET_CONTEXT_MGR already set
[   77.921106][ T6944] binder: 6943:6944 ioctl 4018620d 200000000480 returned -16
[   78.106034][ T5741] Bluetooth: hci4: command tx timeout
[   78.617100][ T7000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7000 comm=syz.5.298
[   78.813915][ T7020] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[   78.824738][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.5.303'.
[   79.476418][ T5741] Bluetooth: hci0: command tx timeout
[   80.924161][ T6945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.998747][   T42] kauditd_printk_skb: 53 callbacks suppressed
[   80.998760][   T42] audit: type=1400 audit(1786926470.692:552): avc:  denied  { setopt } for  pid=7029 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.017548][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'.
[   81.053524][   T42] audit: type=1400 audit(1786926470.744:553): avc:  denied  { mounton } for  pid=7036 comm="syz.1.310" path="/proc/213/task" dev="proc" ino=17374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   81.384402][ T7070] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   81.421397][ T7070] bond1: entered promiscuous mode
[   81.424042][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.446927][ T7070] bond1: (slave bridge1): making interface the new active one
[   81.450311][ T7070] bridge1: entered promiscuous mode
[   81.454094][ T7070] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   81.462228][ T7071] cgroup: No subsys list or none specified
[   81.505715][ T7078] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[   81.507640][ T7070] block device autoloading is deprecated and will be removed.
[   81.630578][   T42] audit: type=1400 audit(1786926471.324:554): avc:  denied  { write } for  pid=7085 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   81.646991][ T5741] Bluetooth: hci1: Malformed LE Event: 0x0b
[   81.712288][   T42] audit: type=1400 audit(1786926471.394:555): avc:  denied  { ioctl } for  pid=7085 comm="syz.0.325" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   81.747243][   T34] cfg80211: failed to load regulatory.db
[   81.762570][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.763498][   T42] audit: type=1400 audit(1786926471.454:556): avc:  denied  { write } for  pid=7085 comm="syz.0.325" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   81.773513][ T7086] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   81.800135][ T7091] netlink: 'syz.5.326': attribute type 63 has an invalid length.
[   81.804204][ T7091] netlink: 5 bytes leftover after parsing attributes in process `syz.5.326'.
[   81.969124][ T7097] openvswitch: netlink: IP tunnel dst address not specified
[   81.997275][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'.
[   82.000244][ T7097] netlink: 80 bytes leftover after parsing attributes in process `syz.0.327'.
[   82.130828][   T42] audit: type=1400 audit(1786926471.824:557): avc:  denied  { connect } for  pid=7109 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   82.137376][   T42] audit: type=1400 audit(1786926471.824:558): avc:  denied  { write } for  pid=7109 comm="syz.0.330" path="socket:[19559]" dev="sockfs" ino=19559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   82.149164][   T42] audit: type=1400 audit(1786926471.824:559): avc:  denied  { read } for  pid=7109 comm="syz.0.330" laddr=172.20.20.170 lport=12936 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   82.272319][   T42] audit: type=1400 audit(1786926471.964:560): avc:  denied  { ioctl } for  pid=7118 comm="syz.5.332" path="socket:[18459]" dev="sockfs" ino=18459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   82.284534][   T42] audit: type=1400 audit(1786926471.964:561): avc:  denied  { getopt } for  pid=7118 comm="syz.5.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   82.331304][ T7123] capability: warning: `syz.5.334' uses deprecated v2 capabilities in a way that may be insecure
[   82.368385][ T7128] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   82.376970][ T7128] CIFS: Attempting to mount //127.0.0.1/share
[   82.381714][ T7128] CIFS: VFS: Error connecting to socket. Aborting operation.
[   82.384143][ T7128] CIFS: VFS: cifs_mount failed w/return code = -101
[   82.389826][ T7130] Device name not specified.
[   82.389826][ T7130] 
[   82.390704][ T7131] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   82.461881][ T7138] netlink: 'syz.4.340': attribute type 2 has an invalid length.
[   82.464296][ T7138] netlink: 232 bytes leftover after parsing attributes in process `syz.4.340'.
[   82.468188][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'.
[   82.474883][    C3] Unknown status report in ack skb
[   82.485657][ T1486] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   82.562849][ T7149] ata1.00: invalid multi_count 1 ignored
[   82.655887][ T1486] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.660176][ T1486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.663555][ T1486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.673767][ T1486] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   82.679708][ T1486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.693574][ T1486] usb 5-1: config 0 descriptor??
[   82.731731][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.347'.
[   82.826681][ T7178] tipc: Enabling of bearer <uth:gre0> rejected, media not registered
[   82.908225][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.911213][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.914019][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.917574][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.920531][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.923303][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.930745][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.934862][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.938832][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.941699][ T1486] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   82.955105][ T1486] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   83.053706][ T7203] afs: Unknown parameter 'dy����Kn'
[   83.062708][ T7200] syzkaller1: entered promiscuous mode
[   83.065160][ T7200] syzkaller1: entered allmulticast mode
[   83.159937][ T1486] usb 5-1: USB disconnect, device number 5
[   83.161652][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'.
[   83.230895][ T7219] netlink: 100 bytes leftover after parsing attributes in process `syz.5.357'.
[   83.542585][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.362'.
[   83.847263][ T7266] xt_l2tp: v2 sid > 0xffff: 4294967294
[   83.848464][ T7267] xt_cgroup: xt_cgroup: no path or classid specified
[   86.532403][   T42] kauditd_printk_skb: 26 callbacks suppressed
[   86.532421][   T42] audit: type=1400 audit(1786926476.227:588): avc:  denied  { relabelfrom } for  pid=7275 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   86.543421][   T42] audit: type=1400 audit(1786926476.237:589): avc:  denied  { relabelto } for  pid=7275 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   86.587320][   T42] audit: type=1400 audit(1786926476.267:590): avc:  denied  { attach_queue } for  pid=7275 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   86.588870][ T7280] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   86.639656][ T7281] input: syz0 as /devices/virtual/input/input8
[   86.674375][   T42] audit: type=1400 audit(1786926476.367:591): avc:  denied  { read } for  pid=5122 comm="acpid" name="event4" dev="devtmpfs" ino=3069 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.676896][ T7286] device-mapper: ioctl: Invalid ioctl structure: uuid �, name , dev 30
[   86.694760][   T42] audit: type=1400 audit(1786926476.367:592): avc:  denied  { open } for  pid=5122 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3069 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.704502][   T42] audit: type=1400 audit(1786926476.367:593): avc:  denied  { ioctl } for  pid=5122 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3069 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.746323][   T42] audit: type=1400 audit(1786926476.447:594): avc:  denied  { write } for  pid=7287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.850724][   T42] audit: type=1400 audit(1786926476.547:595): avc:  denied  { write } for  pid=7293 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.904555][   T42] audit: type=1800 audit(1786926476.607:596): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.372" name="/newroot/97/bus/#558//deleted" dev="tmpfs" ino=558 res=0 errno=0
[   86.923904][ T1038] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   86.952435][   T42] audit: type=1400 audit(1786926476.647:597): avc:  denied  { read write } for  pid=7304 comm="syz.4.374" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   87.084500][ T1038] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   87.093367][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.098537][ T1038] usb 6-1: Product: syz
[   87.099865][ T1038] usb 6-1: Manufacturer: syz
[   87.108281][ T1038] usb 6-1: SerialNumber: syz
[   87.161561][ T5877] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   87.179714][ T7325] Rounding down aligned max_sectors from 4294967295 to 4294967288
[   87.184055][ T7326] netlink: 'syz.4.379': attribute type 39 has an invalid length.
[   87.185728][ T7329] netlink: 'syz.4.379': attribute type 39 has an invalid length.
[   87.295381][ T1038] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   87.470385][ T1038] usb 10-1: Using ep0 maxpacket: 32
[   87.476452][ T1038] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   87.480806][ T1038] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[   87.483845][ T1038] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   87.487336][ T1038] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   87.490909][ T1038] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[   87.494819][ T1038] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   87.498735][ T1038] usb 10-1: config 0 interface 0 has no altsetting 0
[   87.503476][ T1038] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   87.506236][ T1038] usb 10-1: Product: syz
[   87.507650][ T1038] usb 10-1: Manufacturer: syz
[   87.509207][ T1038] usb 10-1: SerialNumber: syz
[   87.513142][ T1038] usb 10-1: config 0 descriptor??
[   87.516661][ T7354] jffs2: notice: (7354) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[   87.517835][ T1038] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   87.527156][ T1038] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   87.573453][ T7286] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   87.585039][ T1038] usb 6-1: USB disconnect, device number 5
[   87.643342][ T6174] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   87.783134][ T6174] usb 5-1: device descriptor read/64, error -71
[   87.804962][ T1486] usb 10-1: USB disconnect, device number 2
[   87.814782][ T1486] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[   88.023909][ T6174] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   88.149888][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'.
[   88.153795][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'.
[   88.162573][ T6174] usb 5-1: device descriptor read/64, error -71
[   88.192554][ T5877] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[   88.195683][ T5877] ath9k_htc: Failed to initialize the device
[   88.199005][ T7383] SELinux: ebitmap: start bit 0 comes after start bit 0
[   88.213342][ T1038] usb 6-1: ath9k_htc: USB layer deinitialized
[   88.213765][ T7383] SELinux: failed to load policy
[   88.272747][ T6174] usb usb5-port1: attempt power cycle
[   88.352575][ T7373] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   88.360323][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'.
[   88.504699][ T7373] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   88.513229][ T7373] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.519677][ T7373] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.526639][ T7373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.529865][ T7373] usb 10-1: Product: syz
[   88.531246][ T7373] usb 10-1: Manufacturer: syz
[   88.534669][ T7373] usb 10-1: SerialNumber: syz
[   88.594511][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'.
[   88.612481][ T6174] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   88.649334][ T6174] usb 5-1: device descriptor read/8, error -71
[   88.750623][ T7378] tipc: Started in network mode
[   88.753761][ T7378] tipc: Node identity ac141441, cluster identity 4711
[   88.757516][ T7378] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.877701][ T7398] event trace: Could not enable event p
[   88.892267][ T6174] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   88.902225][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[   88.911824][   T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   88.912541][ T6174] usb 5-1: device descriptor read/8, error -71
[   88.919339][   T10] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   89.032521][ T6174] usb usb5-port1: unable to enumerate USB device
[   89.037933][ T7400] netlink: 'syz.5.388': attribute type 7 has an invalid length.
[   89.721771][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'.
[   89.792003][ T7409] xt_TCPMSS: Only works on TCP SYN packets
[   89.884049][ T1038] tipc: Node number set to 2886997057
[   90.034842][ T1038] usb 10-1: USB disconnect, device number 3
[   90.431718][   T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   90.583775][   T34] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   90.591777][   T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   90.595885][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   90.599930][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   90.605803][   T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.608539][   T34] usb 6-1: Product: syz
[   90.610208][   T34] usb 6-1: Manufacturer: syz
[   90.612426][   T34] usb 6-1: SerialNumber: syz
[   90.613448][ T7426] syz.5.404 (7426) used greatest stack depth: 18120 bytes left
[   90.617991][   T34] usb 6-1: config 0 descriptor??
[   90.620749][ T7422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   90.665270][ T7431] openvswitch: netlink: Flow actions attr not present in new flow.
[   90.681277][   T34] rc_core: IR keymap rc-streamzap not found
[   90.684005][   T34] Registered IR keymap rc-empty
[   90.689434][   T34] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   90.699098][   T34] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9
[   90.747847][ T7440] netlink: zone id is out of range
[   90.749664][ T7440] netlink: del zone limit has 8 unknown bytes
[   90.818113][ T1038] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   90.966116][   T24] usb 6-1: USB disconnect, device number 6
[   90.971150][ T1038] usb 5-1: Using ep0 maxpacket: 8
[   90.977834][ T1038] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[   90.981863][   T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   90.988686][ T1038] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[   90.991952][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.994519][   T10] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   90.999400][ T1038] usb 5-1: config 0 has no interface number 0
[   91.003510][ T1038] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   91.007932][ T1038] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[   91.016874][ T1038] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[   91.023662][ T1038] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   91.028581][ T1038] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   91.043570][ T1038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.050265][ T1038] usb 5-1: Product: syz
[   91.053439][ T1038] usb 5-1: Manufacturer: syz
[   91.056137][ T1038] usb 5-1: SerialNumber: syz
[   91.078052][ T1038] usb 5-1: config 0 descriptor??
[   91.500632][ T1038] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[   91.518154][ T1038] usb 5-1: USB disconnect, device number 10
[   91.525974][ T7451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   91.557627][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'.
[   91.587381][ T7456] hfsplus: unable to find HFS+ superblock
[   91.618600][   T42] kauditd_printk_skb: 27 callbacks suppressed
[   91.618618][   T42] audit: type=1400 audit(1786926481.309:625): avc:  denied  { bind } for  pid=7459 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   91.629952][   T42] audit: type=1400 audit(1786926481.319:626): avc:  denied  { connect } for  pid=7459 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   91.660919][ T7462] geneve2: entered promiscuous mode
[   91.969866][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.419'.
[   91.994359][ T7466] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   92.000148][ T7466] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   92.177122][   T42] audit: type=1400 audit(1786926481.869:627): avc:  denied  { setopt } for  pid=7474 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.187015][   T42] audit: type=1400 audit(1786926481.879:628): avc:  denied  { map } for  pid=7474 comm="syz.5.420" path="socket:[21672]" dev="sockfs" ino=21672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.196291][   T42] audit: type=1400 audit(1786926481.879:629): avc:  denied  { read } for  pid=7474 comm="syz.5.420" path="socket:[21672]" dev="sockfs" ino=21672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.243092][ T7484] fuse: Unknown parameter ''
[   92.247424][ T7484] netlink: 'syz.4.423': attribute type 1 has an invalid length.
[   92.276672][ T7484] bond2: entered promiscuous mode
[   92.279212][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.304326][   T42] audit: type=1400 audit(1786926482.000:630): avc:  denied  { read } for  pid=7488 comm="syz.0.424" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   92.314167][   T42] audit: type=1400 audit(1786926482.000:631): avc:  denied  { open } for  pid=7488 comm="syz.0.424" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   92.325899][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.336279][ T7484] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[   92.341226][ T7484] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode
[   92.344066][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'.
[   92.348370][ T7484] bond2: (slave gre1): making interface the new active one
[   92.351444][ T7484] gre1: entered promiscuous mode
[   92.357694][   T42] audit: type=1400 audit(1786926482.050:632): avc:  denied  { shutdown } for  pid=7483 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.368241][ T7484] bond2: (slave gre1): Enslaving as an active interface with an up link
[   92.389149][ T7492] bond2 (unregistering): (slave gre1): Releasing backup interface
[   92.392676][ T7492] gre1: left promiscuous mode
[   92.398855][ T7492] bond2 (unregistering): Released all slaves
[   92.428568][ T7496] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   92.435392][ T7496] overlayfs: missing 'lowerdir'
[   92.445713][ T7496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=7496 comm=syz.5.426
[   92.496208][   T42] audit: type=1400 audit(1786926482.190:633): avc:  denied  { getopt } for  pid=7500 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   92.538813][   T42] audit: type=1400 audit(1786926482.230:634): avc:  denied  { write } for  pid=7507 comm="syz.4.430" name="unix" dev="proc" ino=4026533801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   92.549438][ T7510] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   92.554061][ T7510] overlayfs: missing 'lowerdir'
[   92.577519][ T7514] netlink: 'syz.0.433': attribute type 13 has an invalid length.
[   92.671384][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   92.677558][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.789536][ T7533] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   92.791742][ T7533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   92.797716][ T7533] vhci_hcd vhci_hcd.0: Device attached
[   92.979887][ T7556] program syz.5.444 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.030127][   T24] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[   93.034143][ T7537] vhci_hcd: sendmsg failed!, ret=-32 for 48
[   93.035596][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'.
[   93.042669][ T5805] vhci_hcd vhci_hcd.0: stop threads
[   93.044846][ T5805] vhci_hcd vhci_hcd.0: release socket
[   93.055024][ T5805] vhci_hcd vhci_hcd.0: disconnect device
[   93.230242][ T5741] Bluetooth: hci2: command 0x041b tx timeout
[   93.236407][   T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   93.236458][   T10] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[   93.264401][ T7573] netlink: 'syz.1.451': attribute type 1 has an invalid length.
[   93.267918][ T7573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.451'.
[   93.438197][ T7580] could not allocate digest TFM handle blake2b-160
[   93.499890][ T1038] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   93.679781][ T1038] usb 10-1: Using ep0 maxpacket: 32
[   93.682643][ T1038] usb 10-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[   93.686458][ T1038] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   93.690620][ T1038] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   93.693998][ T1038] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[   93.698964][ T1038] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.701564][ T1038] usb 10-1: Product: 뇮㼹⺸␖埵㸘㍡饞ͯ쉆⌿妹łﻬ耖㻞兾셄⭀Ꚋ맧慂ꕌ⯬ﺼ볇沅⼳賱씞룒葳亳聕ᱚ좟寡Ꞛ떟飗俆根샂Ⴄٱ圊鉃㯐燎토╦୽⑻唣쯍쵠ꆓ̱┘圔㾮鰱晶裤啧馮仮拵럼鳓碭ꪉ㕿覮휅簰㑝冏⽭娓䘰Ⅷ劯⧊耚䢖峞売截ꜵ酞㧩偓濨謖엷辤☎属츓ꨆ㺭㛼꜒↩斺誄謋檀ﲼ
[   93.712068][ T1038] usb 10-1: Manufacturer: Y帒㞣耹␻ၬ咇悿딎뜌락␀쳙䫖䔏璢鴰ꚡ좫쇺∎鑠跜⅟뮄ᤘᖖ纔ꃰ嗴ư໸뽺⏀讌悍괮鼩까岹沍瀖뺿렑돜畿ࣤ嗶狝ꟙ긭ꊌ갣ѣ䯢Ἰ溞뺦Ⅻ৐氲텭ⅲ￞餖踿搘탐ᦏ쫉ꨥ悒鋿㢜晦
[   93.720159][ T1038] usb 10-1: SerialNumber: syz
[   93.829806][   T41] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[   93.935988][ T1038] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[   93.965322][ T1038] usb 10-1: USB disconnect, device number 4
[   93.981754][   T41] usb 9-1: not running at top speed; connect to a high speed hub
[   93.984951][   T41] usb 9-1: New USB device found, idVendor=0b05, idProduct=17eb, bcdDevice=d8.47
[   93.990043][   T41] usb 9-1: config 8 has an invalid interface number: 69 but max is 2
[   93.993489][   T41] usb 9-1: config 8 has an invalid interface number: 100 but max is 2
[   93.996864][   T41] usb 9-1: config 8 has no interface number 0
[   94.002025][   T41] usb 9-1: config 8 has no interface number 2
[   94.007625][   T41] usb 9-1: config 8 interface 69 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   94.012188][   T41] usb 9-1: config 8 interface 69 altsetting 5 has a duplicate endpoint with address 0xF, skipping
[   94.016538][   T41] usb 9-1: config 8 interface 69 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[   94.021058][   T41] usb 9-1: config 8 interface 69 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   94.021597][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.025531][   T41] usb 9-1: config 8 interface 69 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[   94.034328][   T41] usb 9-1: config 8 interface 69 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   94.037783][   T41] usb 9-1: config 8 interface 69 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   94.042218][   T41] usb 9-1: config 8 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 576, setting to 64
[   94.045670][   T41] usb 9-1: config 8 interface 100 altsetting 29 has a duplicate endpoint with address 0x2, skipping
[   94.049023][   T41] usb 9-1: config 8 interface 100 altsetting 29 has a duplicate endpoint with address 0x7, skipping
[   94.053732][   T41] usb 9-1: config 8 interface 100 altsetting 29 endpoint 0xD has invalid maxpacket 1024, setting to 64
[   94.058237][   T41] usb 9-1: config 8 interface 100 altsetting 29 has an invalid descriptor for endpoint zero, skipping
[   94.063043][   T41] usb 9-1: config 8 interface 1 altsetting 33 has a duplicate endpoint with address 0x3, skipping
[   94.067335][   T41] usb 9-1: config 8 interface 1 altsetting 33 has an invalid descriptor for endpoint zero, skipping
[   94.072120][   T41] usb 9-1: config 8 interface 1 altsetting 33 has a duplicate endpoint with address 0xE, skipping
[   94.076575][   T41] usb 9-1: config 8 interface 1 altsetting 33 has an invalid descriptor for endpoint zero, skipping
[   94.081081][   T41] usb 9-1: config 8 interface 1 altsetting 33 has a duplicate endpoint with address 0x9, skipping
[   94.085395][   T41] usb 9-1: config 8 interface 1 altsetting 33 has a duplicate endpoint with address 0xF, skipping
[   94.089749][   T41] usb 9-1: config 8 interface 1 altsetting 33 has a duplicate endpoint with address 0xD, skipping
[   94.094084][   T41] usb 9-1: config 8 interface 69 has no altsetting 0
[   94.096679][   T41] usb 9-1: config 8 interface 100 has no altsetting 0
[   94.100037][   T41] usb 9-1: config 8 interface 1 has no altsetting 0
[   94.105403][   T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.108419][   T41] usb 9-1: Product: syz
[   94.110041][   T41] usb 9-1: Manufacturer: 䰊
[   94.111700][   T41] usb 9-1: SerialNumber: syz
[   94.154906][ T7594] binder: 7593:7594 ioctl c0306201 200000000100 returned -14
[   94.327731][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.330878][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.335369][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.339666][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.344506][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.348585][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.354081][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.358882][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.447327][   T41] usb 9-1: USB disconnect, device number 8
[   94.559696][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'.
[   94.698823][ T7615] devpts: Bad value for 'max'
[   94.731892][ T7615] kvm: pic: non byte write
[   95.173313][ T7651] input: syz0 as /devices/virtual/input/input11
[   95.176633][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'.
[   95.210292][ T7651] jffs2: notice: (7651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[   95.380717][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[   95.388981][ T7672] tipc: Started in network mode
[   95.391648][ T7672] tipc: Node identity 4, cluster identity 4711
[   95.394337][ T7672] tipc: Node number set to 4
[   95.397506][ T7667] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   95.458880][   T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[   95.460857][   T10] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[   95.469882][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout
[   95.562626][ T7680] syzkaller1: entered promiscuous mode
[   95.564492][ T7680] syzkaller1: entered allmulticast mode
[   95.958685][  T848] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   96.108608][  T848] usb 5-1: Using ep0 maxpacket: 32
[   96.113323][  T848] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   96.118409][  T848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.123004][  T848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.127074][  T848] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.134744][  T848] usb 5-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[   96.138575][  T848] usb 5-1: Product: syz
[   96.140348][  T848] usb 5-1: Manufacturer: syz
[   96.142341][  T848] usb 5-1: SerialNumber: syz
[   96.167139][  T848] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input12
[   96.371573][ T7699] /dev/nullb0: Can't open blockdev
[   96.424342][ T7705] netlink: 'syz.5.491': attribute type 5 has an invalid length.
[   96.428576][   T10] usb 5-1: USB disconnect, device number 11
[   96.455162][ T7706] netlink: 68 bytes leftover after parsing attributes in process `syz.1.492'.
[   96.477606][   T10] appletouch 5-1:1.0: input: appletouch disconnected
[   96.493839][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.501563][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.729839][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'.
[   97.174344][ T7722] netlink: 14 bytes leftover after parsing attributes in process `syz.1.496'.
[   97.305149][   T42] kauditd_printk_skb: 18 callbacks suppressed
[   97.305168][   T42] audit: type=1400 audit(1786926487.002:653): avc:  denied  { set_context_mgr } for  pid=7728 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   97.317102][ T7729] binder: BINDER_SET_CONTEXT_MGR already set
[   97.321461][ T7729] binder: 7728:7729 ioctl 4018620d 200000004a80 returned -16
[   97.336519][ T7729] binder_alloc: binder_alloc_mmap_handler: 7728 200000ffd000-200001000000 already mapped failed -16
[   97.492198][ T7729] syz.1.498 (7729): drop_caches: 2
[   97.705342][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[   97.723092][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[   97.727999][ T5821] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.732298][ T5821] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.736314][ T5821] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.740618][ T5821] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.776051][  T174] nvmet: connect request for invalid subsystem testnqn!
[   97.784390][ T7733] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn"
[   97.939790][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'.
[   97.996095][ T7756] jffs2: notice: (7756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[   98.016866][ T7756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.019905][ T7756] IPv6: NLM_F_CREATE should be set when creating new route
[   98.025572][ T7759] loop9: detected capacity change from 0 to 524287999
[   98.032856][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.043029][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.046224][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.050671][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.054138][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.057440][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.061237][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.064624][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.068271][ T7759] ldm_validate_partition_table(): Disk read failed.
[   98.071160][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.074450][ T7759] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.078199][ T7759] Dev loop9: unable to read RDB block 0
[   98.079954][ T7763] input: syz0 as /devices/virtual/input/input13
[   98.088152][ T7759]  loop9: unable to read partition table
[   98.090442][ T7759] loop_reread_partitions: partition scan of loop9 (3��x) failed (rc=-5)
[   98.133831][   T42] audit: type=1400 audit(1786926487.832:654): avc:  denied  { mmap_zero } for  pid=7764 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   98.142512][ T7765] bridge_slave_0: invalid flags given to default FDB implementation
[   98.168921][   T24] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   98.194127][   T42] audit: type=1400 audit(1786926487.892:655): avc:  denied  { create } for  pid=7767 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   98.198004][ T7768] scsi_nl_rcv_msg: discarding partial skb
[   98.201218][   T42] audit: type=1400 audit(1786926487.892:656): avc:  denied  { write } for  pid=7767 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   98.335801][   T42] audit: type=1400 audit(1786926488.032:657): avc:  denied  { mounton } for  pid=7773 comm="syz.1.513" path="/128/bus" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   98.404645][ T7779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.515'.
[   98.441416][ T7781] netlink: 56 bytes leftover after parsing attributes in process `syz.1.516'.
[   98.465290][   T42] audit: type=1400 audit(1786926488.162:658): avc:  denied  { call } for  pid=7780 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   98.476143][ T7781] netlink: 'syz.1.516': attribute type 26 has an invalid length.
[   98.751505][   T42] audit: type=1400 audit(1786926488.452:659): avc:  denied  { read } for  pid=7796 comm="syz.0.520" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   98.759725][   T42] audit: type=1400 audit(1786926488.452:660): avc:  denied  { open } for  pid=7796 comm="syz.0.520" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   98.781206][ T7797] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[   98.807717][ T1486] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   98.834032][ T7808] x_tables: duplicate underflow at hook 3
[   98.876389][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.523'.
[   98.962618][ T1486] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   98.971284][ T1486] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   98.984270][ T1486] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   98.995973][ T1486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.001510][ T1486] usb 6-1: Product: syz
[   99.004512][ T1486] usb 6-1: Manufacturer: syz
[   99.006601][ T1486] usb 6-1: SerialNumber: syz
[   99.170915][   T42] audit: type=1400 audit(1786926488.872:661): avc:  denied  { wake_alarm } for  pid=7846 comm="syz.0.535" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.237233][ T1486] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   99.251220][ T1486] usb 6-1: USB disconnect, device number 7
[   99.262850][   T42] audit: type=1400 audit(1786926488.962:662): avc:  denied  { append } for  pid=7852 comm="syz.1.537" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   99.273359][ T7853] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   99.273736][ T1486] usblp0: removed
[   99.407758][   T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[   99.433073][ T7865] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   99.577693][   T29] usb 9-1: Using ep0 maxpacket: 8
[   99.580935][   T29] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   99.586830][   T29] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[   99.592892][   T29] usb 9-1: config 0 has no interface number 0
[   99.598154][   T29] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   99.602873][   T29] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   99.606550][   T29] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   99.610700][   T29] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   99.614844][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.624371][   T29] usb 9-1: config 0 descriptor??
[   99.639630][   T29] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   99.867670][ T7814] comedi comedi1: reset error (fatal)
[   99.905095][   T29] usb 9-1: USB disconnect, device number 9
[   99.923355][   T29] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  100.412714][ T7909] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000)
[  100.520123][ T7918] netlink: 'syz.4.551': attribute type 2 has an invalid length.
[  100.522592][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'.
[  100.529123][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'.
[  100.947804][ T1486] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  101.093381][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'.
[  101.107782][ T1486] usb 5-1: Using ep0 maxpacket: 32
[  101.108056][ T7935] fuse: Unknown parameter 'gd'
[  101.174929][ T1486] usb 5-1: unable to get BOS descriptor or descriptor too short
[  101.177716][ T1486] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.181716][ T1486] usb 5-1: unable to read config index 0 descriptor/start: -71
[  101.184439][ T1486] usb 5-1: can't read configurations, error -71
[  101.898514][ T7958] autofs4:pid:7958:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375)
[  102.251256][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.265768][ T7985] bridge_slave_0 (unregistering): left allmulticast mode
[  102.268312][ T7985] bridge_slave_0 (unregistering): left promiscuous mode
[  102.272615][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.306675][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.574'.
[  102.524554][   T42] kauditd_printk_skb: 9 callbacks suppressed
[  102.524573][   T42] audit: type=1400 audit(1786926492.222:672): avc:  denied  { write } for  pid=8000 comm="syz.0.577" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  102.553330][   T42] audit: type=1400 audit(1786926492.252:673): avc:  denied  { create } for  pid=8003 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  102.615313][   T42] audit: type=1400 audit(1786926492.312:674): avc:  denied  { create } for  pid=8009 comm="syz.5.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  102.783243][   T42] audit: type=1400 audit(1786926492.482:675): avc:  denied  { map } for  pid=8024 comm="syz.0.584" path="socket:[24628]" dev="sockfs" ino=24628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.837931][   T42] audit: type=1400 audit(1786926492.542:676): avc:  denied  { write } for  pid=8027 comm="syz.0.585" name="file0" dev="tmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.838113][ T8029] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  102.857860][   T42] audit: type=1400 audit(1786926492.542:677): avc:  denied  { open } for  pid=8027 comm="syz.0.585" path="/158/file0" dev="tmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.915560][   T42] audit: type=1400 audit(1786926492.612:678): avc:  denied  { create } for  pid=8032 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  102.939668][   T42] audit: type=1400 audit(1786926492.642:679): avc:  denied  { append } for  pid=8032 comm="syz.0.587" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  102.952836][   T42] audit: type=1400 audit(1786926492.652:680): avc:  denied  { ioctl } for  pid=8032 comm="syz.0.587" path="socket:[24642]" dev="sockfs" ino=24642 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  103.696296][   T42] audit: type=1400 audit(1786926493.392:681): avc:  denied  { append } for  pid=8073 comm="syz.0.598" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  103.989369][ T8094] bond1 (unregistering): Released all slaves
[  104.028252][ T8095] bond1 (unregistering): Released all slaves
[  104.305429][ T8122] binder: BINDER_SET_CONTEXT_MGR already set
[  104.309506][ T8122] binder: 8121:8122 ioctl 4018620d 200000000040 returned -16
[  104.334981][ T8125] No control pipe specified
[  104.447430][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.616'.
[  104.853254][ T8141] netlink: 'syz.4.618': attribute type 10 has an invalid length.
[  104.859262][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.863283][ T8141] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  104.996313][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'.
[  105.260746][ T8158] SELinux: ebitmap: truncated map
[  105.264146][ T8158] SELinux:  invalid class
[  105.273590][ T8158] SELinux: failed to load policy
[  105.437726][ T1486] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  105.598660][ T1486] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  105.603109][ T1486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  105.607037][ T1486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  105.610907][ T1486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  105.615016][ T1486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  105.620271][ T1486] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.622940][ T1486] usb 9-1: Product: syz
[  105.624767][ T1486] usb 9-1: Manufacturer: syz
[  105.626365][ T1486] usb 9-1: SerialNumber: syz
[  105.631246][ T1486] usb 9-1: config 0 descriptor??
[  105.838483][ T1486] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  105.876398][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.880140][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.951181][ T8176] random: crng reseeded on system resumption
[  105.984112][ T8176] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  106.040127][ T1486] usb 9-1: USB disconnect, device number 10
[  106.210272][ T8188] vhci_hcd vhci_hcd.0: failed to lookup sock
[  106.213036][ T8186] vhci_hcd vhci_hcd.0: failed to lookup sock
[  106.307053][ T8192] netlink: 76 bytes leftover after parsing attributes in process `syz.0.635'.
[  106.423957][ T8208] netlink: 'syz.0.638': attribute type 2 has an invalid length.
[  106.450816][ T8210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.640'.
[  106.454910][   T10] IPVS: starting estimator thread 0...
[  106.487045][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'.
[  106.557864][ T8211] IPVS: using max 27 ests per chain, 64800 per kthread
[  106.715262][ T8218] netlink: 'syz.4.643': attribute type 1 has an invalid length.
[  106.718524][ T8218] netlink: 224 bytes leftover after parsing attributes in process `syz.4.643'.
[  106.784773][ T8228] netlink: 'syz.4.645': attribute type 1 has an invalid length.
[  106.788211][ T8228] netlink: 756 bytes leftover after parsing attributes in process `syz.4.645'.
[  106.793755][ T8229] netlink: 'syz.4.645': attribute type 1 has an invalid length.
[  106.797477][ T8229] netlink: 756 bytes leftover after parsing attributes in process `syz.4.645'.
[  106.844174][ T8233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=8233 comm=syz.4.646
[  106.940765][ T8241] bridge_slave_0: left allmulticast mode
[  106.942932][ T8241] bridge_slave_0: left promiscuous mode
[  106.944912][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.951918][ T8241] bridge_slave_1: left allmulticast mode
[  106.953956][ T8241] bridge_slave_1: left promiscuous mode
[  106.955908][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.963800][ T8241] bond0: (slave bond_slave_0): Releasing backup interface
[  106.969188][ T8241] bond0: (slave bond_slave_1): Releasing backup interface
[  106.983419][ T8241] team0: Port device team_slave_0 removed
[  106.992366][ T8241] team0: Port device team_slave_1 removed
[  106.994803][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.997191][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.001472][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.003860][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.009272][ T8241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.122845][ T8254] ==================================================================
[  107.122855][ T8254] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60
[  107.122920][ T8254] Write of size 8 at addr ffffc90004e411c0 by task syz.4.652/8254
[  107.122931][ T8254] 
[  107.122952][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.4.652 Not tainted syzkaller #0 PREEMPT(full) 
[  107.122969][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  107.122978][ T8254] Call Trace:
[  107.122993][ T8254]  <TASK>
[  107.122997][ T8254]  dump_stack_lvl+0x100/0x190
[  107.123025][ T8254]  print_report+0x13d/0x4b0
[  107.123048][ T8254]  ? _raw_spin_lock_irqsave+0x52/0x60
[  107.123086][ T8254]  ? sys_imageblit+0x19fb/0x1d60
[  107.123102][ T8254]  kasan_report+0xdf/0x1c0
[  107.123127][ T8254]  ? sys_imageblit+0x19fb/0x1d60
[  107.123143][ T8254]  sys_imageblit+0x19fb/0x1d60
[  107.123162][ T8254]  ? __pfx_sys_imageblit+0x10/0x10
[  107.123176][ T8254]  ? prb_read_valid+0x78/0xa0
[  107.123219][ T8254]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  107.123251][ T8254]  soft_cursor+0x524/0xa10
[  107.123264][ T8254]  ? atomic_notifier_call_chain+0x10/0x1c0
[  107.123278][ T8254]  ? fb_get_color_depth+0x120/0x250
[  107.123297][ T8254]  bit_cursor+0xd3a/0x14e0
[  107.123310][ T8254]  ? __pfx_bit_cursor+0x10/0x10
[  107.123325][ T8254]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  107.123340][ T8254]  ? get_color+0x1da/0x450
[  107.123356][ T8254]  ? __pfx_bit_cursor+0x10/0x10
[  107.123365][ T8254]  fbcon_cursor+0x43c/0x5e0
[  107.123381][ T8254]  ? add_softcursor+0x230/0x290
[  107.123398][ T8254]  set_cursor+0x1db/0x250
[  107.123411][ T8254]  con_write+0x89/0xb0
[  107.123429][ T8254]  n_tty_write+0x431/0x1160
[  107.123450][ T8254]  ? __pfx_n_tty_write+0x10/0x10
[  107.123469][ T8254]  ? __kasan_kmalloc+0xaa/0xb0
[  107.123484][ T8254]  ? __pfx_woken_wake_function+0x10/0x10
[  107.123503][ T8254]  ? rcu_is_watching+0x12/0xc0
[  107.123520][ T8254]  ? file_tty_write.isra.0+0x694/0x890
[  107.123533][ T8254]  ? kfree+0x1e5/0x6c0
[  107.123543][ T8254]  ? __pfx_n_tty_write+0x10/0x10
[  107.123559][ T8254]  file_tty_write.isra.0+0x4d2/0x890
[  107.123574][ T8254]  vfs_write+0x6ac/0x1050
[  107.123584][ T8254]  ? __pfx_tty_write+0x10/0x10
[  107.123598][ T8254]  ? __pfx_vfs_write+0x10/0x10
[  107.123607][ T8254]  ? find_held_lock+0x2b/0x80
[  107.123621][ T8254]  ksys_write+0x12a/0x250
[  107.123631][ T8254]  ? __pfx_ksys_write+0x10/0x10
[  107.123642][ T8254]  do_syscall_64+0x115/0x870
[  107.123655][ T8254]  ? clear_bhb_loop+0x70/0xc0
[  107.123670][ T8254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.123683][ T8254] RIP: 0033:0x7fa122d9e0d9
[  107.123693][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.123705][ T8254] RSP: 002b:00007fa123c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  107.123728][ T8254] RAX: ffffffffffffffda RBX: 00007fa123025fa0 RCX: 00007fa122d9e0d9
[  107.123736][ T8254] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000005
[  107.123744][ T8254] RBP: 00007fa122e35024 R08: 0000000000000000 R09: 0000000000000000
[  107.123752][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.123761][ T8254] R13: 00007fa123026038 R14: 00007fa123025fa0 R15: 00007ffcfe1f2448
[  107.123773][ T8254]  </TASK>
[  107.123777][ T8254] 
[  107.123781][ T8254] The buggy address belongs to a vmalloc virtual mapping
[  107.123793][ T8254] Memory state around the buggy address:
[  107.123799][ T8254]  ffffc90004e41080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  107.123807][ T8254]  ffffc90004e41100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  107.123815][ T8254] >ffffc90004e41180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  107.123821][ T8254]                                            ^
[  107.123827][ T8254]  ffffc90004e41200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  107.123835][ T8254]  ffffc90004e41280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  107.123843][ T8254] ==================================================================
[  107.123851][ T8254] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  107.123861][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.4.652 Not tainted syzkaller #0 PREEMPT(full) 
[  107.123876][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  107.123884][ T8254] Call Trace:
[  107.123888][ T8254]  <TASK>
[  107.123892][ T8254]  dump_stack_lvl+0x100/0x190
[  107.123909][ T8254]  vpanic+0x552/0x970
[  107.123922][ T8254]  ? __pfx_vpanic+0x10/0x10
[  107.123933][ T8254]  ? __pfx_vprintk_emit+0x10/0x10
[  107.123950][ T8254]  ? sys_imageblit+0x19fb/0x1d60
[  107.123968][ T8254]  panic+0xd1/0xe0
[  107.123982][ T8254]  ? __pfx_panic+0x10/0x10
[  107.124019][ T8254]  ? sys_imageblit+0x19fb/0x1d60
[  107.124043][ T8254]  check_panic_on_warn.cold+0x19/0x34
[  107.124064][ T8254]  end_report.part.0+0x3a/0x90
[  107.124089][ T8254]  kasan_report.cold+0xe/0x18
[  107.124115][ T8254]  ? sys_imageblit+0x19fb/0x1d60
[  107.124140][ T8254]  sys_imageblit+0x19fb/0x1d60
[  107.124166][ T8254]  ? __pfx_sys_imageblit+0x10/0x10
[  107.124191][ T8254]  ? prb_read_valid+0x78/0xa0
[  107.124216][ T8254]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  107.124247][ T8254]  soft_cursor+0x524/0xa10
[  107.124267][ T8254]  ? atomic_notifier_call_chain+0x10/0x1c0
[  107.124286][ T8254]  ? fb_get_color_depth+0x120/0x250
[  107.124315][ T8254]  bit_cursor+0xd3a/0x14e0
[  107.124335][ T8254]  ? __pfx_bit_cursor+0x10/0x10
[  107.124356][ T8254]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  107.124380][ T8254]  ? get_color+0x1da/0x450
[  107.124413][ T8254]  ? __pfx_bit_cursor+0x10/0x10
[  107.124431][ T8254]  fbcon_cursor+0x43c/0x5e0
[  107.124462][ T8254]  ? add_softcursor+0x230/0x290
[  107.124486][ T8254]  set_cursor+0x1db/0x250
[  107.124506][ T8254]  con_write+0x89/0xb0
[  107.124532][ T8254]  n_tty_write+0x431/0x1160
[  107.124564][ T8254]  ? __pfx_n_tty_write+0x10/0x10
[  107.124591][ T8254]  ? __kasan_kmalloc+0xaa/0xb0
[  107.124613][ T8254]  ? __pfx_woken_wake_function+0x10/0x10
[  107.124641][ T8254]  ? rcu_is_watching+0x12/0xc0
[  107.124668][ T8254]  ? file_tty_write.isra.0+0x694/0x890
[  107.124691][ T8254]  ? kfree+0x1e5/0x6c0
[  107.124708][ T8254]  ? __pfx_n_tty_write+0x10/0x10
[  107.124736][ T8254]  file_tty_write.isra.0+0x4d2/0x890
[  107.124761][ T8254]  vfs_write+0x6ac/0x1050
[  107.124778][ T8254]  ? __pfx_tty_write+0x10/0x10
[  107.124800][ T8254]  ? __pfx_vfs_write+0x10/0x10
[  107.124816][ T8254]  ? find_held_lock+0x2b/0x80
[  107.124839][ T8254]  ksys_write+0x12a/0x250
[  107.124856][ T8254]  ? __pfx_ksys_write+0x10/0x10
[  107.124875][ T8254]  do_syscall_64+0x115/0x870
[  107.124897][ T8254]  ? clear_bhb_loop+0x70/0xc0
[  107.124919][ T8254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.124938][ T8254] RIP: 0033:0x7fa122d9e0d9
[  107.124953][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.124973][ T8254] RSP: 002b:00007fa123c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  107.124994][ T8254] RAX: ffffffffffffffda RBX: 00007fa123025fa0 RCX: 00007fa122d9e0d9
[  107.125006][ T8254] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000005
[  107.125018][ T8254] RBP: 00007fa122e35024 R08: 0000000000000000 R09: 0000000000000000
[  107.125031][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.125044][ T8254] R13: 00007fa123026038 R14: 00007fa123025fa0 R15: 00007ffcfe1f2448
[  107.125062][ T8254]  </TASK>
[  107.125707][ T8254] Kernel Offset: disabled

VM DIAGNOSIS:
00:28:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88802b5c4a80
RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc90000007fd0
R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc90000007ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555602e5500 ffffffff 00c00000
GS =0000 ffff8880d5bde000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000004f9bd000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3833312f2e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3833312f2e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc7041c6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc7041c6 00007fffbc7041cc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f42835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f42835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f428357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f42835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a352b5 RDI=ffffffff9bc05ec0 RBP=ffffffff9bc05e80 RSP=ffffc90005ee71c0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b8f8235 R15=ffffffff85a35250
RIP=ffffffff85a352df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa123c7e6c0 ffffffff 00c00000
GS =0000 ffff8880d5cde000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020000000 CR3=00000000368d4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000000100ffff Opmask03=0000000040000000
Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000562de6df3940
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7a3df1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff00000000ff00
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f6573756f6d2d 302e313a313a302d 6273752d302e6463 685f796d6d750035
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c68aff71045535eb 0000562884000c7f 00000000000000f1 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3e49a165b3c4688 7300325ee0637814 70002a5d392d30aa 64766463746b7000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffbf7fffffffeb 7f737f7fffeffdf5 7f777f5dffffffff 6f7f677ffefff6ff
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562de6dece10 0000562de6de20c0 0000562de6df7750 0000562de6de5eb0
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000562de6de7ca0 0000000000000041 0000000000000053
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000562000c4c 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88802b35ca80
RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc90000648fd0
R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc90000648ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc7a4381880 ffffffff 00c00000
GS =0000 ffff8880d5dde000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055557de56a28 CR3=0000000034737000 CR4=00350ef0
DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000020400004
Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe04d6268 00007fffe04d6268
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe04d6440 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562de6dff9b0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7a3df1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7a3df1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373255e95ad3483 7373255bf717d159
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5f98c0277264698 7373737611ad1e9c
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 377570632f302f71 6d2f35706f6f6c2f 6b636f6c622f6c61 75747269762f7365
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003775 70632f302f716d2f 35706f6f6c2f6b63 6f6c622f6c617574
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c68aff71045535eb 000056288401c34a 0000000000000021 0000000000000034
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562de6df16f0 0000562de6df2c80 0000000000000041 0000003177617264
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88801f69a540
RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006f8fd0
R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc900006f8ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ede000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c410297 CR3=000000002270d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62a4d5d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6736bc56
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6736bc56 00007ffc6736bc5c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62a4035607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62a4035647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62a40357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62a4035639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640af651fa98b067 93bfcdd8df483b3d c2369a1482611e25 05a756b5ee24bc61
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa98b06793bfcdd8 df483b3dc2369a14 82611e2505a756b5 ee24bc6104d31758
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000