last executing test programs:

39.8407502s ago: executing program 1 (id=92):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e00000"], 0x120}}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$sock(r1, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070000000c000000ffffffff00000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000040100"/28], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0)
r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)
syz_emit_ethernet(0x184, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x7}}, {@llc={0x4, {@llc={0x42, 0x4, "bf", "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"}}}}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@x86={0x9, 0x8, 0x2, 0x0, 0x3, 0xfe, 0xfa, 0x8, 0xf, 0x6, 0x2, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1, 0x52, 0xe0, '\x00', 0x4, 0x7})
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x100000, 0x7fff, 0x0, 0x0, 0xfb, 0x0, '\x00', 0x1, 0x4})
shutdown(r3, 0x1)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2a341, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b8010000000f01c1f265d9ae040001000f20e035000010000f22e0c4e3bd6a3ff8c4e2a93911d359003400b8020000000f23c00f21f835020005000f23f8640f01c226da37", 0x45}], 0x1, 0x56, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1)

39.160264919s ago: executing program 1 (id=99):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000003500)={0x2020}, 0x2020)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) (async)
read$msr(r1, &(0x7f000001b000)=""/102391, 0x18ff7) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

39.081483439s ago: executing program 1 (id=102):
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x1a, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x402040)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x61a)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)

39.080194254s ago: executing program 1 (id=104):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = getpgid(0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x340000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r2 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x6)
fchdir(r3)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x200, 0x171)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
ptrace$poke(0x4, 0x0, &(0x7f0000004080), 0x9)
r5 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0)
r8 = syz_pidfd_open(r0, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0)
fsmount(r4, 0x0, 0x37)
ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x7, &(0x7f00000001c0)={0x13, "0329aedbf37e5ad4a9b6dbaf1d85ea5c315c660ec032e38616d62900"}})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
r10 = pidfd_getfd(r8, r8, 0x0)
setns(r10, 0x66020000)
getpeername(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000480)=0x80)

38.980751629s ago: executing program 1 (id=105):
syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x944, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xfe, [], [{{0x9, 0x5, 0x12, 0x3, 0x8, 0x29, 0x6, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0})
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x200408d0}, 0x24000080) (async)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) (async)
r2 = dup2(r0, r0)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x7fffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2)

38.700876487s ago: executing program 1 (id=115):
r0 = userfaultfd(0x80801)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140), 0x800000, 0x0)

38.608270036s ago: executing program 32 (id=115):
r0 = userfaultfd(0x80801)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140), 0x800000, 0x0)

34.64107027s ago: executing program 0 (id=153):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r1, 0x104, 0x3, 0x0, &(0x7f00000008c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000001c0)={0xff, 0x3, 0x1000, 0x8c6, 0xc1, "c7bee690407e1942e96fef1f39649c7fd33c9c", 0x4, 0xffffffff})

34.470719959s ago: executing program 0 (id=155):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x3})
ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc018620b, &(0x7f0000000080))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x40001}, [@IFLA_PHYS_SWITCH_ID={0x0, 0x24, "59a286d12f7e6ec67978b7fe38992e"}, @IFLA_LINK={0xfffffffffffffeb0, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000)

34.391395227s ago: executing program 0 (id=156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}], 0x1)
readv(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040)

34.389656432s ago: executing program 0 (id=157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0)

34.310818124s ago: executing program 0 (id=159):
r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r5, &(0x7f0000000200)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe)
r8 = socket(0x10, 0x3, 0x0)
r9 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
sendto(r8, &(0x7f00000000c0)="41a29764a0fe8819fad32a25ea05616e9b47248b038144577f257c8f2ff141514b819a38ec31428cceed915d5649853d312249df2555509695759b9b2f33520fc37cc00da516f3c209fc990854ef48140bf08b587787e3d93de70f791d654d0e7cca2be57a544f8fd4169d01d8e35cda6aab33788b5c2d67eb7d4df1c00d7e2c017d301877dee890c51dfe507e8b3bd4e9839e20bb02d8ddbb40f72e01ba4177c336e42048ca5ec5b3398a11721299029068306cda5b", 0xb6, 0x4001, &(0x7f0000000180)=@in={0x2, 0x4e23, @broadcast}, 0x80)
keyctl$setperm(0x5, r9, 0x1022104)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
close(0x3)
keyctl$get_security(0x11, r9, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000040)={0x2, 'ipvlan1\x00', {0x1}, 0x3})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'})

34.068639247s ago: executing program 0 (id=167):
creat(0x0, 0x12b)
open(0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)

34.000051566s ago: executing program 33 (id=167):
creat(0x0, 0x12b)
open(0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)

3.880880823s ago: executing program 4 (id=626):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xef65, 0x4e1d, 0x5ff, 0xa, 0x20, 0x0, 0x3c, 0x0, 0xee00}, {@in=@loopback, 0xfc, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x3, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x10, 0x743}, {0x4, 0x7ffffffffffffffe, 0x0, 0x4000000000000000}, {0x2}, 0x70bd29, 0x3500, 0xa, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000)
sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}, 0xf5ff}], 0x1, 0x5dc)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRESHEX], 0x134}, 0x1, 0x0, 0x0, 0x40d0}, 0x1404cc09)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x14, r4, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)="90ff7f75e03b9e5183a2b564de03495d18bff582df6c9f93bb0abb1f6dec5b3763e5bde2b02df90f88121fa57e", 0x2d)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x3ff, 0x401080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)={0x30, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r8)
keyctl$search(0xa, r8, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
sendmsg$nl_route(r5, &(0x7f00000102c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0xe, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

3.729718739s ago: executing program 2 (id=628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @broadcast, @device_a, @initial, {0x3, 0x7}}, 0x41, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40002000)
sendmsg$nl_generic(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000980)={0x14, 0x16, 0xb35, 0x70bd27, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x3b, 0x703, 0x270bd24, 0x25df9b7e, {0xd}}, 0x10}}, 0x4008800)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r6 = msgget$private(0x0, 0x790)
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88}, 0x0, 0x0, 0x7, 0x2, 0x2, 0x9, 0x313, 0x4, 0x7a0, 0x1000, 0x0, 0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x61}, 0x1, 0x0, 0x0, 0x4000}, 0x14)
getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r7, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x7ee}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf8, 0x7, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x8f, 0x7, 0x6, 0x10, 0x9}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x9, 0x3}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1409}}, {0x72, &(0x7f0000000380)=@string={0x72, 0x3, "e5e887974e06b7c6a2897529dd9841d335ae65a074858c9885ae24b17b26c56ef23093d616373d5d72c9c52bbf68c38b52976f7a25c160d6f3a78f0894ee2857f34ddeb8f0a8036a25a89c9a0058873f25914725758a8c0fe366410db48224434e6c62c5dac41c99efbb4285934b0d13"}}]})

2.30004417s ago: executing program 3 (id=642):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000008c0)='trusted\x00', &(0x7f0000000900)=@keyring)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getpeername$netrom(r1, &(0x7f0000000580)={{0x3, @bcast}, [@remote, @null, @netrom, @null, @netrom, @rose, @default, @rose]}, &(0x7f0000000600)=0x48)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRESDEC=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f00000001c0)={{@align=0x7, {0x5, 0x2, 0xff1, 0x28}}, {{[0x5, 0x8, 0x3, 0x3]}, 0x0, 0x1, 0xeae4, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x5, 0xffff]}, {0x101, 0x1, 0xc, 0x4}}, 0x3, 0x0, 'keyring\x00'}]}})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {0x7, 0x5}, {0xa, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

2.013324154s ago: executing program 3 (id=646):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='%\x00', 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x15)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000140)={@private2, 0x15, r2})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884)

1.750946763s ago: executing program 3 (id=648):
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000057c0)) (async)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000280), 0x1, 0x1) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x80010}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.551014786s ago: executing program 5 (id=651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40004)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$inet6(r1, 0x0, 0x0, 0x40000020, 0x0, 0x0)
bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0)

1.260116451s ago: executing program 3 (id=652):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000f9ff00"], 0x24}}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

1.120526769s ago: executing program 3 (id=653):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x70bd26, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x60}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1100040}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r6, 0x8, 0x70bd25, 0x8, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611040000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)

820.880349ms ago: executing program 4 (id=654):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7058c2b75435070000000a002dfbdb86616e31000000"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x24088094)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x1a1) (async)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x1a1)
openat$incfs(r6, &(0x7f0000000180)='.log\x00', 0x400, 0x2)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006)
ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000440)={0x1, 0x100, 0x40000008}) (async)
ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000440)={0x1, 0x100, 0x40000008})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xfff, 0x1)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6056040000180600fe8000000000000000000000000000aafe80000000000000000f0000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'/12], 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
syz_fuse_handle_req(r11, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000e80)={&(0x7f0000000340)={0x50, 0x0, 0x8, {0x7, 0x2d, 0x0, 0x140001, 0x0, 0xfffd, 0x8, 0x9, 0x0, 0x0, 0x53433862cff65617, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r10, &(0x7f0000002100)={0x2020}, 0x1b03) (async)
read$FUSE(r10, &(0x7f0000002100)={0x2020}, 0x1b03)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2dbd5000ffdbdd25813aa6e2f8372e00000005000300", @ANYRES32=r3, @ANYBLOB="06006600f38000001800330084000500080211000000ffffffffffff01e00b0c040067000a000600080211000001000004006700"], 0x50}, 0x1, 0x0, 0x0, 0x24008021}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

820.009961ms ago: executing program 3 (id=655):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b2, 0x0, 0x6}]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @null, 0xfff, 0x8, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
accept4$tipc(r7, 0x0, 0x0, 0x800)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x18, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r10, 0x18803, 0xc104}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
ioctl$CDROMRESET(r11, 0x5312)

661.549572ms ago: executing program 5 (id=656):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (rerun: 64)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x20040800)
r3 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r3) (async)
tkill(r3, 0x12)
ptrace(0x4208, r3) (async)
ptrace(0x4207, r3) (async)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)

660.983894ms ago: executing program 2 (id=657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x2d}]}}}]}, 0x38}}, 0x810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x50, 0x0, &(0x7f0000000180)=0x2b)
setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10)
mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000469000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x2e, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x5, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000080}, 0x5)

643.890568ms ago: executing program 4 (id=658):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
setfsuid(0xee00)
setresuid(0x0, 0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200000000bbbb00450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000080000100007f0000017f00000100186371ae9b1c0300000000"], 0x0)

580.476885ms ago: executing program 5 (id=659):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f00000001c0)={0x7, 0x0, [{0x40000001, 0xd, 0x0, 0x4, 0x1, 0x392, 0x80000000}, {0xd, 0xbd8, 0x4, 0x7fffffff, 0x1, 0x5}, {0x7, 0x3, 0x6, 0x6, 0x4, 0x400, 0x8000}, {0x6, 0x6, 0x2, 0x1, 0x4, 0x400, 0x4}, {0xb5781676cf0beb2a, 0x1, 0x0, 0xfb6d, 0xffffff80, 0x80000001, 0x100}, {0x40000000, 0x6, 0x0, 0x1b032e63, 0x2, 0x1, 0x2}, {0xa, 0x4e, 0x1, 0x7, 0x6, 0x915, 0x2}]})
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)

431.247814ms ago: executing program 4 (id=660):
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0, &(0x7f0000000000))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640), &(0x7f0000000340)})

361.185173ms ago: executing program 4 (id=661):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r3, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x1a, 0x0, &(0x7f0000000080)) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x1a, 0x0, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000040)={r4})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r5, 0x100000000)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'})
syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r9, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x180000004000080, 0x8000001, 0x8, 0x1ff, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

353.342721ms ago: executing program 5 (id=662):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@metacopy_off}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

226.61938ms ago: executing program 2 (id=663):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x400, 0xa2200)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000000c0)={0x8, 0x791})
fchdir(r1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
renameat2(r1, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

225.40613ms ago: executing program 5 (id=664):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xd, 0x4}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x35}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000c090)
r4 = getpid()
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003060102000000000007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r8 = syz_pidfd_open(r4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
getsockname(r9, 0x0, &(0x7f00000002c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r10 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setns(r8, 0x24020000)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x284d026, 0x0)

135.874136ms ago: executing program 2 (id=665):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40a402, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
mmap$IORING_OFF_SQ_RING(&(0x7f0000df9000/0x4000)=nil, 0x4000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYBLOB="3076fbf1df38ce87be011e79fd1c4f01d191f03fd964c7a631dbbd936e60e61aaac932873e6e2444bfa65fa9ec35e6405bf65e7c0119a2adff6eda6f862fc62e002357ec803c86a7cdff22884e7ccabd7f4e63c050171f20c87d9b526de9462bde360b34521ca4aafa016249ee0536e9c0c6d6"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a8)
ioctl$UFFDIO_CONTINUE(r2, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc738663500200000", 0x2d}], 0x1, 0x72, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\\+'}, {0x20, '##'}, {0x20, '.'}, {0x20, '\x00\x86<\xbd\xc1A\xe8\"\x9b!1lc\xcf\x1d\x87\xb4\xd4\xa7\b\xbb\x9ap\xc7\xa4\xabt\xe9\x90-\xfd|\x95\xbc^/\x1b+\xb0X\xce\x11\xff;?v\x05v\x97\xc6'}, {0x20, '\xff\xff\xff\xff\xf1\x11?\xe1\xb2X!h\x0ew\xb9\xa5\xf5Zg_\xaf\x1c<3\xb8@G\x16\x90\xd2&\xab\x91e\x1e\x86g\x9d\xf4\x89\xcdo\xe5\xed\x1dIG\xc6\x04\xc8\xb9\xe8\x00:>\x90}\xe39\xa72\x98'}, {0x20, '\x9b\xef\xd0\xceI \x8e,\x19U\xe1\x98\xa00$\xf05\xe8E\xeb$\x1c\x88\xb4\xed[\xeewS]Jk\xde\x15\x19\xf3)\x86\x01\x13\xcap\x0ebW)\xbc\x8d\xe5\x95*\xafFp\x86\x04</\x85\xe9+\xd6\v \x17s\x99\xea\x16}\x9d\xec\x80\xf6.\xd9Le\x02\xdc\xa8\xc8\xfff\x81\xf5\xac7\x91\xaa\xf0&\x06\x1f\x8a\xac\xf9sq:\xc4\x05x\x8f8\xd7\xfe\x98\x1b\x99>\x1d$`\xaa\xe1%\xf7\x17\rh\xa2\x04\x14CW\xfdD\x1d\x19\x8d=\xa3\xf4\xf8\x96\v\xb3\xcf\xb6\xe7T\xb1T\xf8X\x00\xcc\x1c\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9c\x8f\x04\xa2\xff\x1bz7\x06\xb1 \xcb\x03\xdd[%\xfe\xaa2\xc9\x88W\x98\x9e\xb8\xc4.\xe4\xdf6\x84\x9ef\xe3\xc70\x0f-\'.6\xa0\xe6j\xd0\xdc_\xd40>P\vGh,Xa9\xfd\x19q\xab\xdcsv\xc8f\xc6\x87}?\xe8T4\xbd\xca\x81-\"\xc0\xa3\xf5\xd9\xa9\xa9\xc1\xe32\x99\xd7\xa9\xd0\x1e\ag\x02\x1am\xae\a\xcc5)x\x86#\x88\x80\xd9$\x9e\xd5\xf4\xca\x94;\x99\xea\xb0\t\x1c\xe2\x9b\x17\xb0g\v{uc\x94 \xb2s\xc8\xfe-\x93`(\x83\xd9\x14#\xf9\x14lj\xe7rp[\xb5gA\xbb\xdb\xf8E\xda\x1a\xfb\xccdV:\xec\xf9\xc0:\xf1\xd4\xd1f:\xe5\xcc+7@\xca\xa00n.H\xe7\r\xd85\xfe\xe6\x82}\v<\xa8\xae\xa8\x8a\xa1\xd6\xf6\xcb\x06k\x9be4e\xbc\x93J\xe3\xf2\xa5Q\xc9b\x97\xdb\x88\xa9wA\xeb\xd6\xea\x00\x03\xa26\xcd\x1b{\x0f\xe4\'\xa984\xdb\xd0a3\xbd\xb1KK\x88'}, {0x20, 'TX\a\xda\x86\xfey:\xe9\xc5mZ\xa9\xd6F\xe0\xb1b);\x82\xf7\x8c\xfd\xa4\xd0\xd9^SS\xfe\x8b\xed\x94-\xae\xbc\xc1\xf0\xb8\x1d+\xf8\xb5\v\x99\x7f\x9ew+\x80\x95\xb8tv\xbc\xfa<\x87\x87\xd5\xbc\xc3)\xea.c\x05\x8cU\x0f%\xc3\xa7b\xe2N\xd9\x9c\x00x\xc9\v\x17\x88kc^=\x03+\xd1\xbe\xd4\xf4\xf8\xdc\x83IN\xf1>\xf6\xe1\xc1\"\xd3)\x17\xb1'}, {}, {0x20, '&\xaa\xa1\x05\x17\xfa\"vU\x88\x86@\xa0q\x15\x00\x00\x00\x00'}, {0x20, '.'}, {0x20, '/dev/ptmx\x00'}]}, 0x3aa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000087f000/0x4000)=nil, 0x4000}, 0x1})
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000000c0)="09000000e7003100d26f63b91b0c870834de", 0x12, 0x200000c0, &(0x7f0000000080)={0x11, 0x88a8, r8, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x67}}, 0x14)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

134.73873ms ago: executing program 2 (id=666):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket(0x22, 0x2, 0x2)
accept(r1, 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
socket(0x22, 0x2, 0x2) (async)
accept(r1, 0x0, 0x0) (async)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]}) (async)

70.429095ms ago: executing program 5 (id=667):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x32f2c1, 0x3c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x0, 0x2, 0x8000, 0x23, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x700, 0x400, 0x10001}})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x3e, 0x8, 0x3ff, 0x4, r0, 0xd, '\x00', r1, r0, 0x2, 0x5, 0x2}, 0x50)
read$watch_queue(r0, &(0x7f00000000c0)=""/229, 0xe5)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)

677.341µs ago: executing program 4 (id=668):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc000)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1)
ioctl$NBD_DO_IT(r2, 0xab03)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2)

0s ago: executing program 2 (id=669):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
close(0x3)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000380)=[0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000580)=[<r3=>0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x6, 0x4, 0x5})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000080)=[r3, r2], 0x2, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = accept4$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev, @null, 0x0, [@netrom, @default, @default, @null, @bcast, @rose]}, &(0x7f0000000240)=0x40, 0x80800)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000280)={0x3, 0xf1, "7ddc3879f16e48ab67aa0137deee0902c8aa4bc327278a7da7a6ee974b77b5135b591782b0fddce0e77b6bc746ab235be55202b56804f7698f52779552551c3cd4fa1df88503a546dd5bf15347379354d37453f466f7dfc2070e6f7f3e9365f0c47d1ddc72032737afd0560befcdfc78148702ef706cd10d409056bb44c30984970ac70891d90cf1a91fa49dc1c04f7b26163b2f230c1c2bda4c8c608683b4aeeffe31a19aa0ea7e7a42bbc32ae7a58f10fbd4e4fde38564418d23714099d4ec7151094b9dfe948f6813549487478e004c7430bd4977c920ae2df39482fa93113e46d8a9006fa7dfe493377dc894ff4ffc"})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000180)={0xffffffff, 0x1, 'client1\x00', 0x2, "31d388f9292b44f8", "e56e86c78f9bd788de91e379a36bf1b8619ce3f765af17b403000000634d8f71", 0x2, 0xc})
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async)
close(0x3) (async)
dup(r0) (async)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x6, 0x4, 0x5}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000080)=[r3, r2], 0x2}) (async)
accept4$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev, @null, 0x0, [@netrom, @default, @default, @null, @bcast, @rose]}, &(0x7f0000000240)=0x40, 0x80800) (async)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000280)={0x3, 0xf1, "7ddc3879f16e48ab67aa0137deee0902c8aa4bc327278a7da7a6ee974b77b5135b591782b0fddce0e77b6bc746ab235be55202b56804f7698f52779552551c3cd4fa1df88503a546dd5bf15347379354d37453f466f7dfc2070e6f7f3e9365f0c47d1ddc72032737afd0560befcdfc78148702ef706cd10d409056bb44c30984970ac70891d90cf1a91fa49dc1c04f7b26163b2f230c1c2bda4c8c608683b4aeeffe31a19aa0ea7e7a42bbc32ae7a58f10fbd4e4fde38564418d23714099d4ec7151094b9dfe948f6813549487478e004c7430bd4977c920ae2df39482fa93113e46d8a9006fa7dfe493377dc894ff4ffc"}) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000180)={0xffffffff, 0x1, 'client1\x00', 0x2, "31d388f9292b44f8", "e56e86c78f9bd788de91e379a36bf1b8619ce3f765af17b403000000634d8f71", 0x2, 0xc}) (async)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async)

kernel console output (not intermixed with test programs):

h could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.603466][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.610472][ T5941] team0: Port device team_slave_1 added
[   65.620608][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.622961][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.631859][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.642686][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.645217][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.653863][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.658875][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.661235][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.669555][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.690354][ T5938] team0: Port device team_slave_0 added
[   65.709910][ T5938] team0: Port device team_slave_1 added
[   65.741327][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.744122][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.752893][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.757869][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.760606][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.769377][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.796144][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.799282][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.811187][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.816996][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.820116][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.832172][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.850543][ T5934] hsr_slave_0: entered promiscuous mode
[   65.853778][ T5934] hsr_slave_1: entered promiscuous mode
[   65.863303][ T5942] hsr_slave_0: entered promiscuous mode
[   65.866590][ T5942] hsr_slave_1: entered promiscuous mode
[   65.869294][ T5942] debugfs: 'hsr0' already exists in 'hsr'
[   65.871715][ T5942] Cannot create hsr debugfs directory
[   65.913262][ T5938] hsr_slave_0: entered promiscuous mode
[   65.916233][ T5938] hsr_slave_1: entered promiscuous mode
[   65.918950][ T5938] debugfs: 'hsr0' already exists in 'hsr'
[   65.920793][ T5938] Cannot create hsr debugfs directory
[   65.992500][ T5941] hsr_slave_0: entered promiscuous mode
[   65.995857][ T5941] hsr_slave_1: entered promiscuous mode
[   65.999046][ T5941] debugfs: 'hsr0' already exists in 'hsr'
[   66.001579][ T5941] Cannot create hsr debugfs directory
[   66.411780][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.424554][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.431770][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.439739][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.510008][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.517869][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.526518][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.533830][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.611680][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.617599][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.626417][ T5949] Bluetooth: hci0: command tx timeout
[   66.636224][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.654579][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.685767][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.695144][ T5949] Bluetooth: hci2: command tx timeout
[   66.696187][ T5939] Bluetooth: hci3: command tx timeout
[   66.696233][ T5947] Bluetooth: hci1: command tx timeout
[   66.741867][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.751884][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   66.756284][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.762915][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.776234][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.799980][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.803218][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.824440][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.827048][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.848582][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.908445][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   66.933891][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.936576][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.950068][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.961675][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.963999][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.998721][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   67.013055][   T40] audit: type=1400 audit(1775071832.751:91): avc:  denied  { sys_module } for  pid=5934 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   67.022443][  T131] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.022751][  T131] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.046489][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.076100][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   67.082524][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.085883][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.120781][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.124170][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.146330][  T131] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.149247][  T131] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.202301][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.287298][ T5934] veth0_vlan: entered promiscuous mode
[   67.309526][ T5934] veth1_vlan: entered promiscuous mode
[   67.316440][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.343850][ T5934] veth0_macvtap: entered promiscuous mode
[   67.352545][ T5934] veth1_macvtap: entered promiscuous mode
[   67.378465][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.396230][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.401701][ T5941] veth0_vlan: entered promiscuous mode
[   67.422184][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.428633][   T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.434134][   T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.441019][ T5941] veth1_vlan: entered promiscuous mode
[   67.449559][   T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.453592][   T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.476475][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.543080][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.543517][ T5941] veth0_macvtap: entered promiscuous mode
[   67.550826][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.557620][ T5938] veth0_vlan: entered promiscuous mode
[   67.560896][ T5941] veth1_macvtap: entered promiscuous mode
[   67.602216][ T5938] veth1_vlan: entered promiscuous mode
[   67.612202][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.614187][ T5942] veth0_vlan: entered promiscuous mode
[   67.616337][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.620111][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.630540][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.646585][  T131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.650246][  T131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.658467][  T131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.661569][  T131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.668685][ T5942] veth1_vlan: entered promiscuous mode
[   67.672081][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.704366][ T5938] veth0_macvtap: entered promiscuous mode
[   67.711834][ T5938] veth1_macvtap: entered promiscuous mode
[   67.720241][ T5942] veth0_macvtap: entered promiscuous mode
[   67.724111][ T5942] veth1_macvtap: entered promiscuous mode
[   67.764124][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.773007][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.774835][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.774850][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.791721][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.804819][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.808177][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.812389][  T131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.822371][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.826728][  T131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.826796][  T131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.826827][  T131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.853193][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.857085][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.897347][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.901696][   T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.958798][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.962613][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.013792][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.018316][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.071761][ T6031] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.071855][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.084582][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.091529][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.096560][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.278277][ T6047] hfsplus: unable to find HFS+ superblock
[   68.293469][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   68.297305][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   68.301139][ T6047] netlink: 'syz.3.4': attribute type 19 has an invalid length.
[   68.310019][ T6051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.316319][ T6047] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4'.
[   68.417039][ T6006] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   68.588378][ T6006] usb 5-1: not running at top speed; connect to a high speed hub
[   68.593282][ T6006] usb 5-1: config 32 has an invalid interface number: 72 but max is 2
[   68.597178][ T6006] usb 5-1: config 32 has an invalid interface number: 51 but max is 2
[   68.600857][ T6006] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[   68.605704][ T6006] usb 5-1: config 32 has an invalid interface number: 244 but max is 2
[   68.609093][ T6006] usb 5-1: config 32 contains an unexpected descriptor of type 0x1, skipping
[   68.612703][ T6006] usb 5-1: config 32 has an invalid interface number: 46 but max is 2
[   68.616483][ T6006] usb 5-1: config 32 has 4 interfaces, different from the descriptor's value: 3
[   68.620281][ T6006] usb 5-1: config 32 has no interface number 0
[   68.623231][ T6006] usb 5-1: config 32 has no interface number 1
[   68.626148][ T6006] usb 5-1: config 32 has no interface number 2
[   68.628730][ T6006] usb 5-1: config 32 has no interface number 3
[   68.631227][ T6006] usb 5-1: config 32 interface 72 altsetting 14 endpoint 0x3 has invalid maxpacket 1024, setting to 1023
[   68.636492][ T6006] usb 5-1: config 32 interface 51 altsetting 16 has a duplicate endpoint with address 0xC, skipping
[   68.641664][ T6006] usb 5-1: config 32 interface 51 altsetting 16 has a duplicate endpoint with address 0x7, skipping
[   68.649982][ T6006] usb 5-1: config 32 interface 51 altsetting 16 has a duplicate endpoint with address 0x8, skipping
[   68.656468][ T6006] usb 5-1: config 32 interface 51 altsetting 16 has a duplicate endpoint with address 0xC, skipping
[   68.661206][ T6006] usb 5-1: config 32 interface 51 altsetting 16 has a duplicate endpoint with address 0xF, skipping
[   68.665916][ T6006] usb 5-1: config 32 interface 51 altsetting 16 endpoint 0xB has invalid maxpacket 1024, setting to 1023
[   68.671202][ T6006] usb 5-1: config 32 interface 51 altsetting 16 has 11 endpoint descriptors, different from the interface descriptor's value: 16
[   68.677329][ T6006] usb 5-1: too many endpoints for config 32 interface 244 altsetting 124: 249, using maximum allowed: 30
[   68.681986][ T6006] usb 5-1: config 32 interface 244 altsetting 124 has a duplicate endpoint with address 0x1, skipping
[   68.687016][ T6006] usb 5-1: config 32 interface 244 altsetting 124 endpoint 0xD has invalid wMaxPacketSize 0
[   68.691139][ T6006] usb 5-1: config 32 interface 244 altsetting 124 has a duplicate endpoint with address 0x7, skipping
[   68.694882][ T5939] Bluetooth: hci0: command tx timeout
[   68.696470][ T6006] usb 5-1: config 32 interface 244 altsetting 124 has an invalid descriptor for endpoint zero, skipping
[   68.702346][ T6006] usb 5-1: config 32 interface 244 altsetting 124 has a duplicate endpoint with address 0x7, skipping
[   68.704881][ T6023] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   68.707295][ T6006] usb 5-1: config 32 interface 244 altsetting 124 has 5 endpoint descriptors, different from the interface descriptor's value: 249
[   68.715741][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[   68.720343][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has an endpoint descriptor with address 0x3D, changing to 0xD
[   68.725501][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[   68.730338][ T6006] usb 5-1: config 32 interface 46 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64
[   68.735023][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[   68.739754][ T6006] usb 5-1: config 32 interface 46 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[   68.744839][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[   68.749388][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[   68.754058][ T6006] usb 5-1: config 32 interface 46 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 8
[   68.760290][ T6006] usb 5-1: config 32 interface 72 has no altsetting 0
[   68.763004][ T6006] usb 5-1: config 32 interface 51 has no altsetting 0
[   68.766017][ T6006] usb 5-1: config 32 interface 244 has no altsetting 0
[   68.768970][ T6006] usb 5-1: config 32 interface 46 has no altsetting 0
[   68.774891][ T5939] Bluetooth: hci1: command tx timeout
[   68.775565][ T6006] usb 5-1: New USB device found, idVendor=1d4d, idProduct=000c, bcdDevice= c.d4
[   68.780864][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.784528][ T6006] usb 5-1: Product: Я
[   68.789109][ T5939] Bluetooth: hci2: command tx timeout
[   68.789395][ T6006] usb 5-1: Manufacturer: ꪆ䫧岍໓ꁋ琭厇盫ᛗ⤱錞紓퇡Ḭ筮볜ා숋儹৪뵰ᓓ킮䥣윬藌妁ᷧ邬愈ር娉鸓⫞醋嚝๊꼉蹹壜档ꌹ㡼⺶吭๰祦䉎觩妙㶌嗛๡☚갉ᆡ衸㊛췭囝年䀚ꙷ䗯̐焔
[   68.789588][ T5949] Bluetooth: hci3: command tx timeout
[   68.805136][ T6070] Zero length message leads to an empty skb
[   68.805147][ T6006] usb 5-1: SerialNumber: Щ
[   68.833454][ T6070] faux_driver vkms: [drm] Unknown color mode 257; guessing buffer size.
[   68.884765][ T6023] usb 7-1: Using ep0 maxpacket: 8
[   68.888804][ T6023] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[   68.891574][ T6023] usb 7-1: config 0 has no interface number 0
[   68.893792][ T6023] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   68.897620][ T6023] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   68.901892][ T6023] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   68.907359][ T6023] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   68.911783][ T6023] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   68.915968][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.920919][ T6023] usb 7-1: config 0 descriptor??
[   68.929808][ T6023] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   68.976002][ T6077] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET)
[   69.064999][ T6006] usb 5-1: USB disconnect, device number 2
[   69.125552][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.136820][   T39] usb 7-1: USB disconnect, device number 2
[   69.143261][   T39] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[   69.320317][   T40] kauditd_printk_skb: 62 callbacks suppressed
[   69.320334][   T40] audit: type=1400 audit(1775071835.061:154): avc:  denied  { create } for  pid=6086 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   69.331679][   T40] audit: type=1400 audit(1775071835.071:155): avc:  denied  { create } for  pid=6086 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.341949][   T40] audit: type=1400 audit(1775071835.071:156): avc:  denied  { ioctl } for  pid=6086 comm="syz.1.19" path="socket:[10434]" dev="sockfs" ino=10434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.570677][   T40] audit: type=1400 audit(1775071835.311:157): avc:  denied  { read } for  pid=6089 comm="syz.0.20" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   69.579663][   T40] audit: type=1400 audit(1775071835.311:158): avc:  denied  { open } for  pid=6089 comm="syz.0.20" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   69.586647][ T6090] binder: BINDER_SET_CONTEXT_MGR already set
[   69.590972][   T40] audit: type=1400 audit(1775071835.311:159): avc:  denied  { ioctl } for  pid=6089 comm="syz.0.20" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   69.592927][ T6090] binder: 6089:6090 ioctl 4018620d 200000004a80 returned -16
[   69.603494][   T40] audit: type=1400 audit(1775071835.311:160): avc:  denied  { set_context_mgr } for  pid=6089 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   69.616790][   T40] audit: type=1400 audit(1775071835.331:161): avc:  denied  { map } for  pid=6089 comm="syz.0.20" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   69.626221][   T40] audit: type=1400 audit(1775071835.361:162): avc:  denied  { read write } for  pid=6089 comm="syz.0.20" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   69.636917][   T40] audit: type=1400 audit(1775071835.361:163): avc:  denied  { open } for  pid=6089 comm="syz.0.20" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   69.739753][ T6091] sp0: Synchronizing with TNC
[   69.906006][ T6100] loop9: detected capacity change from 0 to 7
[   69.912088][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'.
[   69.923091][ T6100] Dev loop9: unable to read RDB block 7
[   69.927468][ T6103] =======================================================
[   69.927468][ T6103] WARNING: The mand mount option has been deprecated and
[   69.927468][ T6103]          and is ignored by this kernel. Remove the mand
[   69.927468][ T6103]          option from the mount to silence this warning.
[   69.927468][ T6103] =======================================================
[   69.927692][ T6100]  loop9: unable to read partition table
[   69.941650][ T6100] loop9: partition table beyond EOD, truncated
[   69.944953][ T6100] loop_reread_partitions: partition scan of loop9 (�������g�C�j̖�P=��!MX���	���%��`�搘ȵ4FLQk݊5) failed (rc=-5)
[   70.023932][ T6106] mmap: syz.1.25 (6106) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   70.280914][ T6133] 9pnet_virtio: no channels available for device syz
[   70.403981][ T6089] [U] �
[   70.757604][ T6161] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   70.774502][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'.
[   70.777994][ T5939] Bluetooth: hci0: command tx timeout
[   70.779938][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'.
[   70.782280][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'.
[   70.788709][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'.
[   70.802044][ T6161] netlink: 'syz.3.37': attribute type 39 has an invalid length.
[   70.865550][ T5939] Bluetooth: hci2: command tx timeout
[   70.866202][ T5949] Bluetooth: hci3: command tx timeout
[   70.866289][ T5947] Bluetooth: hci1: command tx timeout
[   70.934626][ T6170] Bluetooth: hci2: Opcode 0x0401 failed: -4
[   70.934799][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   71.097185][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.101870][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.114763][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   71.120273][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   71.128690][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.137646][    T9] usb 6-1: config 0 descriptor??
[   71.245146][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'.
[   71.552019][    T9] usbhid 6-1:0.0: can't add hid device: -71
[   71.554242][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   71.559289][    T9] usb 6-1: USB disconnect, device number 2
[   71.574738][   T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   71.660119][ T6217] xt_hashlimit: size too large, truncated to 1048576
[   71.711726][ T6218] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   71.714761][   T34] usb 7-1: device descriptor read/64, error -71
[   71.721470][ T6218] erspan1: entered allmulticast mode
[   71.964788][   T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   72.094813][   T34] usb 7-1: device descriptor read/64, error -71
[   72.205949][   T34] usb usb7-port1: attempt power cycle
[   72.407507][ T6247] overlay: filesystem on ./bus not supported as upperdir
[   72.414561][ T6248] evm: overlay not supported
[   72.537633][ T6252] netlink: 'syz.3.64': attribute type 12 has an invalid length.
[   72.555054][   T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   72.581247][   T34] usb 7-1: device descriptor read/8, error -71
[   72.620809][ T6264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6264 comm=syz.3.67
[   72.679573][ T6264] netlink: 'syz.3.67': attribute type 30 has an invalid length.
[   72.698841][   T41] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.702162][   T41] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.707320][   T41] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.714037][   T41] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.743056][ T6276] capability: warning: `syz.0.71' uses deprecated v2 capabilities in a way that may be insecure
[   72.834961][   T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   72.854811][ T5949] Bluetooth: hci0: command tx timeout
[   72.857926][   T34] usb 7-1: device descriptor read/8, error -71
[   72.884111][ T6284] capability: warning: `syz.3.74' uses 32-bit capabilities (legacy support in use)
[   72.902284][ T6286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.934887][ T5949] Bluetooth: hci2: command tx timeout
[   72.934927][ T5939] Bluetooth: hci1: command tx timeout
[   72.935752][ T5947] Bluetooth: hci3: command tx timeout
[   72.976855][   T34] usb usb7-port1: unable to enumerate USB device
[   72.982170][ T6291] netlink: 'syz.3.76': attribute type 1 has an invalid length.
[   73.188772][ T6298] netlink: 'syz.3.79': attribute type 13 has an invalid length.
[   73.314160][ T6311] netlink: 'syz.3.82': attribute type 1 has an invalid length.
[   73.367449][ T6313] input input5: cannot allocate more than FF_MAX_EFFECTS effects
[   73.612516][ T6321] trusted_key: syz.1.87 sent an empty control message without MSG_MORE.
[   73.622298][ T6321] xt_connbytes: Forcing CT accounting to be enabled
[   73.625496][ T6321] Cannot find set identified by id 0 to match
[   73.654920][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   73.695794][ T6328] ieee802154 phy0 wpan0: encryption failed: -22
[   73.788718][ T6334] __nla_validate_parse: 5 callbacks suppressed
[   73.788734][ T6334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.92'.
[   73.813170][ T6334] Bluetooth: MGMT ver 1.23
[   73.821145][    T9] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[   73.825600][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[   73.829229][    T9] usb 8-1: Product: syz
[   73.831109][    T9] usb 8-1: Manufacturer: syz
[   73.833241][    T9] usb 8-1: SerialNumber: syz
[   73.839866][    T9] usb 8-1: config 0 descriptor??
[   73.846313][    T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[   73.849286][    T9] dvb-usb: bulk message failed: -22 (2/0)
[   73.856114][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   73.859913][    T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[   73.863402][    T9] usb 8-1: media controller created
[   73.871677][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   73.922456][ T6334] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4045560441 (64728967056 ns) > initial count (46925479072 ns). Using initial count to start timer.
[   73.941136][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'.
[   74.012785][ T5949] Bluetooth: hci0: Malformed Event: 0x02
[   74.046478][ T6315] cxusb: i2c rd: len=8192 is too big!
[   74.046478][ T6315] 
[   74.063578][    T9] cxusb: set interface failed
[   74.065495][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   74.091102][    T9] DVB: Unable to find symbol mt352_attach()
[   74.093250][    T9] dvb-usb: bulk message failed: -22 (5/0)
[   74.097133][    T9] zl10353_read_register: readreg error (reg=127, ret==-121)
[   74.100333][    T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[   74.164816][    T9] rc_core: IR keymap rc-dvico-mce not found
[   74.167167][    T9] Registered IR keymap rc-empty
[   74.170604][    T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[   74.175688][    T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input6
[   74.184186][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[   74.186889][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[   74.197324][    T9] usb 8-1: USB disconnect, device number 2
[   74.283890][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[   74.332942][   T40] kauditd_printk_skb: 131 callbacks suppressed
[   74.332954][   T40] audit: type=1400 audit(1775071840.071:295): avc:  denied  { read write } for  pid=5938 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.343375][   T40] audit: type=1400 audit(1775071840.081:296): avc:  denied  { open } for  pid=5938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.352807][   T40] audit: type=1400 audit(1775071840.081:297): avc:  denied  { ioctl } for  pid=5938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.365264][ T6356] ip6gre1: entered promiscuous mode
[   74.367555][ T6356] ip6gre1: entered allmulticast mode
[   74.373749][   T40] audit: type=1400 audit(1775071840.111:298): avc:  denied  { write } for  pid=6355 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.465559][   T40] audit: type=1400 audit(1775071840.211:299): avc:  denied  { allowed } for  pid=6361 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   74.500055][   T40] audit: type=1400 audit(1775071840.241:300): avc:  denied  { bind } for  pid=6374 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   74.535899][   T40] audit: type=1400 audit(1775071840.251:301): avc:  denied  { read } for  pid=6363 comm="syz.2.101" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   74.551326][ T6378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   74.554861][   T40] audit: type=1400 audit(1775071840.261:302): avc:  denied  { open } for  pid=6363 comm="syz.2.101" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   74.563262][   T40] audit: type=1400 audit(1775071840.261:303): avc:  denied  { append } for  pid=6363 comm="syz.2.101" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   74.625045][   T40] audit: type=1400 audit(1775071840.371:304): avc:  denied  { ioctl } for  pid=6377 comm="syz.0.103" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   74.748914][ T6393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.751540][ T6395] SELinux: failed to load policy
[   74.752476][ T6393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.875840][ T6393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.879673][ T6393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.926177][   T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.971952][ T6393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.977638][ T6393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.015425][ T5949] Bluetooth: hci2: command 0x0401 tx timeout
[   75.043336][   T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.072253][ T6419] ubi31: attaching mtd0
[   75.077799][ T6419] ubi31: scanning is finished
[   75.080058][ T6419] ubi31: empty MTD device detected
[   75.089550][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.093595][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.098609][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.102725][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.106833][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.138574][ T6393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.144325][ T6393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.175939][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'.
[   75.182058][   T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.251140][ T6425] xt_hashlimit: invalid rate
[   75.278982][ T1259] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.282424][ T1259] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.344979][   T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.361811][ T6419] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   75.365441][ T6419] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   75.368077][ T6419] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   75.370694][ T6419] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   75.372749][ T1259] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.373406][ T6419] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   75.376393][ T1259] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.379278][ T6419] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   75.385608][ T6419] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 701662744
[   75.389203][ T6419] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   75.393237][ T6438] ubi31: background thread "ubi_bgt31d" started, PID 6438
[   75.397325][   T86] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.401074][   T86] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.425997][  T131] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.429882][  T131] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.473373][ T6420] chnl_net:caif_netlink_parms(): no params data found
[   75.565868][ T6445] afs: Unknown parameter '^'
[   75.578662][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.124'.
[   75.580175][ T6447] cgroup: none used incorrectly
[   75.598604][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   75.601555][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'.
[   75.697519][ T6458] Cannot find del_set index 4 as target
[   75.756821][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.760168][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.767046][ T6420] bridge_slave_0: entered allmulticast mode
[   75.771497][ T6420] bridge_slave_0: entered promiscuous mode
[   75.775076][   T60] bridge_slave_1: left allmulticast mode
[   75.777752][   T60] bridge_slave_1: left promiscuous mode
[   75.780702][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.794091][   T60] bridge_slave_0: left allmulticast mode
[   75.797831][   T60] bridge_slave_0: left promiscuous mode
[   75.800463][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.994802][ T6022] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   76.010092][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.016458][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.026118][   T60] bond0 (unregistering): Released all slaves
[   76.030310][ T6475] overlay: filesystem on ./bus is read-only
[   76.035366][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.038951][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.042550][ T6420] bridge_slave_1: entered allmulticast mode
[   76.048115][ T6420] bridge_slave_1: entered promiscuous mode
[   76.125699][ T6420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.147718][ T6420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.168173][ T6022] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[   76.171013][ T6022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.181484][ T6022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.184762][ T6022] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   76.189467][ T6022] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   76.196081][ T6022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.201276][ T6022] usb 5-1: config 0 descriptor??
[   76.228751][ T6420] team0: Port device team_slave_0 added
[   76.232362][ T6420] team0: Port device team_slave_1 added
[   76.272769][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.276343][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.288790][ T6420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.295976][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.299547][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.312756][ T6420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.406506][ T6420] hsr_slave_0: entered promiscuous mode
[   76.410804][ T6420] hsr_slave_1: entered promiscuous mode
[   76.413942][ T6420] debugfs: 'hsr0' already exists in 'hsr'
[   76.421490][ T6420] Cannot create hsr debugfs directory
[   76.427176][ T6496] xt_hashlimit: size too large, truncated to 1048576
[   76.458114][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   76.460244][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   76.517475][   T60] hsr_slave_0: left promiscuous mode
[   76.522806][   T60] hsr_slave_1: left promiscuous mode
[   76.525265][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.527741][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.532472][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.537698][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.548541][   T60] veth1_macvtap: left promiscuous mode
[   76.551437][   T60] veth0_macvtap: left promiscuous mode
[   76.553667][   T60] veth1_vlan: left promiscuous mode
[   76.557397][   T60] veth0_vlan: left promiscuous mode
[   76.609959][ T6022] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[   76.625927][ T6022] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   76.731638][   T60] team0 (unregistering): Port device team_slave_1 removed
[   76.738749][   T60] team0 (unregistering): Port device team_slave_0 removed
[   76.859970][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.137'.
[   76.934233][ T6420] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.954964][ T6420] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.960000][ T6420] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.966642][ T6420] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.054914][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.063520][ T6420] 8021q: adding VLAN 0 to HW filter on device team0
[   77.085013][  T131] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.087328][  T131] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.098599][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.100983][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.165098][ T6420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.186771][ T5949] Bluetooth: hci3: command tx timeout
[   77.409937][ T6420] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.614872][ T6420] veth0_vlan: entered promiscuous mode
[   77.620318][ T6420] veth1_vlan: entered promiscuous mode
[   77.642645][ T6420] veth0_macvtap: entered promiscuous mode
[   77.651379][ T6420] veth1_macvtap: entered promiscuous mode
[   77.669184][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.679154][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.689971][  T131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.694459][  T131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.720299][  T131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.732961][  T131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.774759][ T5998] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   77.776508][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.780933][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.799597][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.803213][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.834146][ T6586] FAT-fs (sr0): bogus number of reserved sectors
[   77.838042][ T6586] FAT-fs (sr0): Can't find a valid FAT filesystem
[   77.847851][ T6586] Cannot find del_set index 4 as target
[   77.918019][ T6600] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   77.950678][ T5998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   77.956913][ T5998] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[   77.961274][ T5998] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   77.966001][ T5998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[   77.977364][ T5998] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[   77.980686][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.983346][ T5998] usb 7-1: Product: ⧌뽲啞캘값꘨럟⬲伢⊔ݏ햔ࡨ漅팁敢槞弱敨㌖
[   77.988275][ T5998] usb 7-1: Manufacturer: Ў
[   77.990188][ T5998] usb 7-1: SerialNumber: Ѕ
[   77.997935][ T6570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   78.015966][ T6613] syzkaller0: entered promiscuous mode
[   78.018352][ T6613] syzkaller0: entered allmulticast mode
[   78.055358][ T5970] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[   78.153195][ T6617] netlink: 64 bytes leftover after parsing attributes in process `syz.4.146'.
[   78.219383][ T6613] netlink: 104 bytes leftover after parsing attributes in process `syz.3.144'.
[   78.303439][ T6624] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0
[   78.416716][ T5998] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[   78.419654][ T5998] usb 7-1: MIDIStreaming interface descriptor not found
[   78.456151][ T5998] usb 7-1: USB disconnect, device number 7
[   78.481850][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.581126][ T6626] 9pnet_fd: p9_fd_create_unix (6626): problem connecting socket: ./file0: -111
[   78.586746][ T6626] 9pnet_fd: p9_fd_create_unix (6626): problem connecting socket: ./file0: -111
[   78.839078][   T50] usb 5-1: USB disconnect, device number 3
[   78.874915][ T6637] QAT: failed to copy from user cfg_data.
[   78.961961][ T6644] can0: slcan on ttynull.
[   78.980942][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[   79.001160][ T6646] team0: Port device team_slave_0 removed
[   79.067797][ T6643] can0 (unregistered): slcan off ttynull.
[   79.137871][ T6023] IPVS: starting estimator thread 0...
[   79.140779][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.155'.
[   79.180584][    C3] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   79.185389][    C3] sr 2:0:0:0: [sr0] tag#6 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[   79.192813][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'.
[   79.196922][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'.
[   79.224939][ T6650] IPVS: using max 27 ests per chain, 64800 per kthread
[   79.255744][ T5949] Bluetooth: hci3: command tx timeout
[   79.322386][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'.
[   79.327394][ T6666] openvswitch: netlink: Flow actions attr not present in new flow.
[   79.433177][   T40] kauditd_printk_skb: 54 callbacks suppressed
[   79.433190][   T40] audit: type=1400 audit(1775071845.171:359): avc:  denied  { mount } for  pid=6673 comm="syz.2.164" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   79.443036][   T40] audit: type=1400 audit(1775071845.181:360): avc:  denied  { read write } for  pid=6673 comm="syz.2.164" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   79.451762][   T40] audit: type=1400 audit(1775071845.181:361): avc:  denied  { open } for  pid=6673 comm="syz.2.164" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   79.456537][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'.
[   79.460377][   T40] audit: type=1400 audit(1775071845.181:362): avc:  denied  { ioctl } for  pid=6673 comm="syz.2.164" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   79.525207][ T6679] i2c i2c-1: dtv_property_process_set: SET cmd 0x3bf2fd3a undefined
[   79.550540][   T86] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.576910][ T6683] bridge_slave_0: left allmulticast mode
[   79.579136][ T6683] bridge_slave_0: left promiscuous mode
[   79.582931][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.592339][ T6683] bridge_slave_1: left allmulticast mode
[   79.594239][ T6683] bridge_slave_1: left promiscuous mode
[   79.597378][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.604335][ T6683] bond0: (slave bond_slave_0): Releasing backup interface
[   79.610735][ T6683] bond0: (slave bond_slave_1): Releasing backup interface
[   79.617205][ T6683] team0: Port device team_slave_0 removed
[   79.621637][ T6683] team0: Port device team_slave_1 removed
[   79.624144][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.629972][   T40] audit: type=1400 audit(1775071845.371:363): avc:  denied  { setopt } for  pid=6686 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.630408][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.641029][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.643395][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.647828][ T6683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   79.663910][ T6684] team0: Mode changed to "loadbalance"
[   79.664068][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'.
[   79.683441][   T86] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.689653][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.695019][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.698456][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.701712][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.705957][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.732626][ T6683] IPv6: NLM_F_REPLACE set, but no existing node found!
[   79.776342][   T40] audit: type=1400 audit(1775071845.521:364): avc:  denied  { remount } for  pid=6696 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   79.805481][   T86] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.882557][   T86] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.932056][ T6693] chnl_net:caif_netlink_parms(): no params data found
[   79.997735][   T40] audit: type=1400 audit(1775071845.741:365): avc:  denied  { write } for  pid=6706 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.023411][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.026728][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.029515][ T6693] bridge_slave_0: entered allmulticast mode
[   80.032483][ T6693] bridge_slave_0: entered promiscuous mode
[   80.041732][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.045227][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.048450][ T6693] bridge_slave_1: entered allmulticast mode
[   80.052826][ T6693] bridge_slave_1: entered promiscuous mode
[   80.101261][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.109378][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.154327][ T6693] team0: Port device team_slave_0 added
[   80.157759][ T6693] team0: Port device team_slave_1 added
[   80.182196][   T86] bridge_slave_1: left allmulticast mode
[   80.184526][   T86] bridge_slave_1: left promiscuous mode
[   80.188701][   T86] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.193821][   T86] bridge_slave_0: left allmulticast mode
[   80.197456][   T86] bridge_slave_0: left promiscuous mode
[   80.200294][   T86] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.329723][   T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.335518][   T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.341502][   T86] bond0 (unregistering): Released all slaves
[   80.347063][   T86] bond1 (unregistering): Released all slaves
[   80.355848][   T86] bond2 (unregistering): Released all slaves
[   80.376320][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.378841][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.387606][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.392276][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.394805][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.403273][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.452934][ T6693] hsr_slave_0: entered promiscuous mode
[   80.460553][ T6693] hsr_slave_1: entered promiscuous mode
[   80.462838][ T6693] debugfs: 'hsr0' already exists in 'hsr'
[   80.466035][ T6693] Cannot create hsr debugfs directory
[   80.516159][ T6728] geneve2: entered promiscuous mode
[   80.519084][ T6728] geneve2: entered allmulticast mode
[   80.667349][ T6693] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   80.680457][ T6693] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   80.691388][ T6693] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   80.698463][ T6693] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.720486][   T40] audit: type=1400 audit(1775071846.461:366): avc:  denied  { name_bind 0x1000000 } for  pid=6738 comm="syz.4.178" path="socket:[14939]" dev="sockfs" ino=14939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   80.813719][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.814092][ T6750] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   80.829647][ T6693] 8021q: adding VLAN 0 to HW filter on device team0
[   80.832905][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.180'.
[   80.840236][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.180'.
[   80.856261][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.859659][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.866888][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.869791][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.878976][   T86] hsr_slave_0: left promiscuous mode
[   80.881890][   T86] hsr_slave_1: left promiscuous mode
[   80.888188][   T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.890855][   T86] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.894126][   T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.897002][   T86] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.903107][   T86] veth1_macvtap: left promiscuous mode
[   80.905254][   T86] veth0_macvtap: left promiscuous mode
[   80.907259][   T86] veth1_vlan: left promiscuous mode
[   80.909001][   T86] veth0_vlan: left promiscuous mode
[   80.958946][ T6760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6760 comm=syz.2.181
[   80.963562][ T6760] netlink: 'syz.2.181': attribute type 5 has an invalid length.
[   81.014511][ T6761] netlink: 'syz.2.181': attribute type 5 has an invalid length.
[   81.049013][   T86] team0 (unregistering): Port device team_slave_1 removed
[   81.059102][   T86] team0 (unregistering): Port device team_slave_0 removed
[   81.066180][ T6762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.181'.
[   81.334781][ T5939] Bluetooth: hci3: command tx timeout
[   81.368842][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.374191][   T40] audit: type=1400 audit(1775071847.111:367): avc:  denied  { create } for  pid=6773 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   81.385603][ T6775] vivid-004: disconnect
[   81.418995][ T6775] vivid-004: reconnect
[   81.483589][   T40] audit: type=1400 audit(1775071847.221:368): avc:  denied  { write } for  pid=6783 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   81.530776][   T86] IPVS: stop unused estimator thread 0...
[   81.572545][ T6693] veth0_vlan: entered promiscuous mode
[   81.591372][ T6693] veth1_vlan: entered promiscuous mode
[   81.616012][ T6693] veth0_macvtap: entered promiscuous mode
[   81.622341][ T6693] veth1_macvtap: entered promiscuous mode
[   81.625715][ T6800] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   81.637283][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.645527][ T6800] netlink: 'syz.4.184': attribute type 13 has an invalid length.
[   81.646454][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.689175][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.692245][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.697613][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.701359][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.734901][ T5939] Bluetooth: hci0: command tx timeout
[   81.773670][ T6805] usb usb7: usbfs: process 6805 (syz.2.187) did not claim interface 0 before use
[   81.821712][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.821811][ T5998] IPVS: starting estimator thread 0...
[   81.823321][ T6812] unsupported nla_type 4111
[   81.823791][ T6812] netlink: 'syz.2.188': attribute type 4 has an invalid length.
[   81.831936][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.867765][ T6815] netlink: 'syz.2.190': attribute type 11 has an invalid length.
[   81.876587][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.879228][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.935674][ T6813] IPVS: using max 43 ests per chain, 103200 per kthread
[   82.080932][ T6826] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   82.283616][ T6846] tmpfs: Bad value for 'mpol'
[   82.405001][ T6001] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   82.440879][ T6856] netlink: 'syz.5.202': attribute type 61 has an invalid length.
[   82.568346][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.573415][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.581738][ T6001] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   82.589143][ T6001] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.593301][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.599903][ T6001] usb 7-1: config 0 descriptor??
[   82.600748][ T6865] process 'syz.5.206' launched './file0' with NULL argv: empty string added
[   82.693006][ T6872] ip6gretap0: entered promiscuous mode
[   82.888507][ T6882] fuse: Unknown parameter '184467440737095516150x0000000000000004'
[   83.015684][ T6001] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[   83.025808][ T6001] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   83.268995][ T6022] usb 7-1: USB disconnect, device number 8
[   83.282657][ T6914] xt_l2tp: invalid flags combination: 8
[   83.425279][ T5939] Bluetooth: hci3: command tx timeout
[   83.610615][ T6944] gfs2: error -5 reading superblock
[   83.657663][ T6948] SELinux:  policydb version 0 does not match my version range 15-35
[   83.660533][ T6948] SELinux: failed to load policy
[   83.818520][ T5939] Bluetooth: hci0: command tx timeout
[   83.830674][ T6954] fuse: Bad value for 'group_id'
[   83.832595][ T6954] fuse: Bad value for 'group_id'
[   83.944791][ T5998] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   84.047132][ T6962] Bluetooth: MGMT ver 1.23
[   84.105825][ T5998] usb 9-1: Using ep0 maxpacket: 32
[   84.113388][ T5998] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   84.118189][ T5998] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   84.122052][ T5998] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   84.125778][ T5998] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   84.132023][ T5998] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   84.137717][ T5998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.140363][ T5998] usb 9-1: Product: syz
[   84.141703][ T5998] usb 9-1: Manufacturer: syz
[   84.143146][ T5998] usb 9-1: SerialNumber: syz
[   84.156466][    C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[   84.172155][ T5998] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input9
[   84.374782][ T5998] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   84.378600][ T5998]  (id 0x00)
[   84.434884][ T5998] rc_core: IR keymap rc-imon-pad not found
[   84.437475][ T5998] Registered IR keymap rc-empty
[   84.439743][ T5998] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   84.445416][ T5998] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   84.575816][ T5998] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0
[   84.580834][ T5998] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input10
[   84.591341][ T5998] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:2> initialized
[   84.755756][ T6976] �����: renamed from lo (while UP)
[   84.764593][ T6948] xt_hashlimit: size too large, truncated to 1048576
[   84.854752][   T40] kauditd_printk_skb: 25 callbacks suppressed
[   84.854769][   T40] audit: type=1400 audit(1775071850.591:394): avc:  denied  { remove_name } for  pid=6981 comm="syz.5.235" name="file0" dev="9p" ino=79691901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.869577][   T40] audit: type=1400 audit(1775071850.591:395): avc:  denied  { unlink } for  pid=6981 comm="syz.5.235" name="file0" dev="9p" ino=79691901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.877569][   T40] audit: type=1400 audit(1775071850.601:396): avc:  denied  { create } for  pid=6981 comm="syz.5.235" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   84.880427][   T50] usb 9-1: USB disconnect, device number 2
[   84.881894][ T6984] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[   84.886525][   T40] audit: type=1400 audit(1775071850.601:397): avc:  denied  { associate } for  pid=6981 comm="syz.5.235" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   84.922075][   T40] audit: type=1400 audit(1775071850.661:398): avc:  denied  { accept } for  pid=6985 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   84.930317][ T6986] __nla_validate_parse: 5 callbacks suppressed
[   84.930332][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'.
[   85.070741][ T6991] trusted_key: encrypted_key: master key parameter '' is invalid
[   85.118761][ T6995] pim6reg: entered allmulticast mode
[   85.137968][   T40] audit: type=1400 audit(1775071850.881:399): avc:  denied  { create } for  pid=6997 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[   85.143263][ T6998] tmpfs: Unknown parameter 'nr_ms'
[   85.175933][   T40] audit: type=1400 audit(1775071850.911:400): avc:  denied  { mount } for  pid=6999 comm="syz.2.243" name="/" dev="autofs" ino=16842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   85.547961][   T40] audit: type=1400 audit(1775071851.291:401): avc:  denied  { read write } for  pid=7016 comm="syz.5.246" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   85.556980][   T40] audit: type=1400 audit(1775071851.291:402): avc:  denied  { open } for  pid=7016 comm="syz.5.246" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   85.557010][   T40] audit: type=1400 audit(1775071851.291:403): avc:  denied  { ioctl } for  pid=7016 comm="syz.5.246" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   85.600602][ T7018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26137 sclass=netlink_route_socket pid=7018 comm=syz.5.246
[   85.894875][ T5939] Bluetooth: hci0: command tx timeout
[   85.934842][ T5998] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   86.096634][ T5998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.100404][ T5998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.104305][ T5998] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   86.108844][ T5998] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   86.111791][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.118055][ T5998] usb 10-1: config 0 descriptor??
[   86.148010][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.250'.
[   86.524433][ T5998] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[   86.542237][ T5998] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   86.689430][ T7053] netlink: 'syz.4.252': attribute type 1 has an invalid length.
[   86.698770][  T841] cfg80211: failed to load regulatory.db
[   86.729016][    T9] usb 10-1: USB disconnect, device number 2
[   86.746500][ T7053] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.751653][ T7053] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   86.789518][ T7058] bond1: (slave gretap1): making interface the new active one
[   86.793830][ T7058] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   86.808052][ T7058] macvlan2: entered promiscuous mode
[   86.810076][ T7058] macvlan2: entered allmulticast mode
[   86.812496][ T7058] bond1: entered promiscuous mode
[   86.814302][ T7058] gretap1: entered promiscuous mode
[   86.817789][ T7058] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   86.822522][ T7058] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   86.827596][ T7058] bond1: left promiscuous mode
[   86.829342][ T7058] gretap1: left promiscuous mode
[   87.029164][ T7031] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   87.032672][ T7031] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   87.051511][ T7031] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   87.054022][ T7031] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   87.142219][ T7031] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   87.144939][ T7031] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   87.186147][ T7031] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   87.188231][ T7031] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   87.259637][ T7079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7079 comm=syz.4.255
[   87.347859][ T7089] binder: BINDER_SET_CONTEXT_MGR already set
[   87.350531][ T7089] binder: 7087:7089 ioctl 4018620d 200000004a80 returned -16
[   87.353420][ T7089] binder: BINDER_SET_CONTEXT_MGR already set
[   87.358282][ T7089] binder: 7087:7089 ioctl 4018620d 200000004a80 returned -16
[   87.394915][ T7085] "syz.2.258" (7085) uses obsolete ecb(arc4) skcipher
[   87.454790][ T7098] netlink: 'syz.2.262': attribute type 4 has an invalid length.
[   87.764833][ T6001] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   87.777852][ T7113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7113 comm=syz.4.267
[   87.915124][ T6006] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   87.939814][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.944310][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.951749][ T6001] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.958586][ T6001] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.962539][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.978151][ T6001] usb 7-1: config 0 descriptor??
[   88.066110][ T6006] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.069975][ T6006] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   88.075875][ T6006] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.079499][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.083020][ T6006] usb 10-1: Product: syz
[   88.085456][ T6006] usb 10-1: Manufacturer: syz
[   88.087755][ T6006] usb 10-1: SerialNumber: syz
[   88.093975][ T6006] cdc_mbim 10-1:1.0: skipping garbage
[   88.249121][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.274'.
[   88.294115][ T7109] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   88.402438][ T6001] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[   88.413980][ T6001] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   88.672864][ T6001] usb 7-1: USB disconnect, device number 9
[   88.822933][ T7156] netlink: 124 bytes leftover after parsing attributes in process `syz.4.276'.
[   88.902056][ T7109] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   88.906970][ T6006] cdc_mbim 10-1:1.0: setting tx_max = 184
[   88.916316][ T6006] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device
[   88.931884][ T6006] wwan wwan0: port wwan0mbim0 attached
[   88.952260][ T6006] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, aa:29:04:3f:7a:0c
[   89.111118][    C3] cdc_mbim 10-1:1.0: nonzero urb status received: -71
[   89.114503][    C3] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes
[   89.118313][    C3] cdc_mbim 10-1:1.0: nonzero urb status received: -71
[   89.121177][    C3] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes
[   89.124121][    C3] cdc_mbim 10-1:1.0: nonzero urb status received: -71
[   89.127152][    C3] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes
[   89.131334][    C3] cdc_mbim 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[   89.138836][ T6001] usb 10-1: USB disconnect, device number 3
[   89.146400][ T6001] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[   89.175773][ T7171] netlink: 'syz.4.279': attribute type 7 has an invalid length.
[   89.222127][ T6001] wwan wwan0: port wwan0mbim0 disconnected
[   89.344189][ T7188] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.283'.
[   89.449444][ T7200] netlink: 'syz.3.284': attribute type 2 has an invalid length.
[   89.453202][ T7200] syz.3.284 (7200): attempted to duplicate a private mapping with mremap.  This is not supported.
[   90.043618][ T7228] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   90.069229][ T7230] overlayfs: cannot append lower layer
[   90.208244][   T40] kauditd_printk_skb: 21 callbacks suppressed
[   90.208259][   T40] audit: type=1400 audit(1775071855.951:425): avc:  denied  { bpf } for  pid=7226 comm="syz.3.291" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   90.219028][   T40] audit: type=1400 audit(1775071855.951:426): avc:  denied  { perfmon } for  pid=7226 comm="syz.3.291" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   90.268773][   T40] audit: type=1400 audit(1775071856.011:427): avc:  denied  { ioctl } for  pid=7240 comm="syz.2.296" path="socket:[17125]" dev="sockfs" ino=17125 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   90.284143][ T7243] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   90.288493][ T7243] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   90.292821][   T40] audit: type=1400 audit(1775071856.031:428): avc:  denied  { firmware_load } for  pid=7241 comm="syz.5.295" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   90.299929][ T7243] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[   90.317287][   T40] audit: type=1400 audit(1775071856.061:429): avc:  denied  { append } for  pid=7244 comm="syz.2.297" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   90.320417][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'.
[   90.338713][   T40] audit: type=1400 audit(1775071856.081:430): avc:  denied  { map } for  pid=7244 comm="syz.2.297" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   90.347191][   T40] audit: type=1400 audit(1775071856.081:431): avc:  denied  { execute } for  pid=7244 comm="syz.2.297" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   90.355919][   T40] audit: type=1400 audit(1775071856.081:432): avc:  denied  { set_context_mgr } for  pid=7244 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   90.362423][   T40] audit: type=1400 audit(1775071856.081:433): avc:  denied  { watch } for  pid=7244 comm="syz.2.297" path="/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   90.366377][ T7245] binder: 7244:7245 ioctl c0109428 2000000001c0 returned -22
[   90.377448][   T40] audit: type=1400 audit(1775071856.081:434): avc:  denied  { watch_sb watch_reads } for  pid=7244 comm="syz.2.297" path="/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   90.756557][ T7220] syz.4.289 (7220): drop_caches: 1
[   91.170092][ T7289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.311'.
[   91.178127][ T7292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.311'.
[   91.330230][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[   91.385977][ T7290] infiniband syz2: set active
[   91.388502][ T7290] infiniband syz2: added bridge_slave_1
[   91.398670][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[   91.415701][ T7309] Cannot find add_set index 65532 as target
[   91.430474][ T7290] RDS/IB: syz2: added
[   91.432464][ T7290] smc: adding ib device syz2 with port count 1
[   91.434949][ T7290] smc:    ib device syz2 port 1 has no pnetid
[   91.546605][ T7312] input: syz0 as /devices/virtual/input/input14
[   91.693027][ T7322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7322 comm=syz.4.319
[   91.699510][ T7322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7322 comm=syz.4.319
[   91.893996][ T7329] FAULT_INJECTION: forcing a failure.
[   91.893996][ T7329] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   91.907144][ T7329] CPU: 2 UID: 0 PID: 7329 Comm: syz.3.321 Not tainted syzkaller #0 PREEMPT(full) 
[   91.907184][ T7329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.907193][ T7329] Call Trace:
[   91.907207][ T7329]  <TASK>
[   91.907213][ T7329]  dump_stack_lvl+0x100/0x190
[   91.907251][ T7329]  should_fail_ex.cold+0x5/0xa
[   91.907274][ T7329]  _copy_to_user+0x32/0xd0
[   91.907302][ T7329]  simple_read_from_buffer+0xcb/0x170
[   91.907321][ T7329]  proc_fail_nth_read+0x1af/0x230
[   91.907346][ T7329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   91.907371][ T7329]  ? rw_verify_area+0xce/0x6d0
[   91.907394][ T7329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   91.907416][ T7329]  vfs_read+0x1e4/0xb30
[   91.907460][ T7329]  ? __pfx_vfs_read+0x10/0x10
[   91.907475][ T7329]  ? __fget_files+0x215/0x3d0
[   91.907498][ T7329]  ? __fget_files+0x21f/0x3d0
[   91.907522][ T7329]  ksys_read+0x12a/0x250
[   91.907537][ T7329]  ? __pfx_ksys_read+0x10/0x10
[   91.907559][ T7329]  do_syscall_64+0x106/0xf80
[   91.907604][ T7329]  ? clear_bhb_loop+0x40/0x90
[   91.907624][ T7329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.907640][ T7329] RIP: 0033:0x7f1ab095d04e
[   91.907655][ T7329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   91.907671][ T7329] RSP: 002b:00007f1ab18b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.907687][ T7329] RAX: ffffffffffffffda RBX: 00007f1ab18b26c0 RCX: 00007f1ab095d04e
[   91.907698][ T7329] RDX: 000000000000000f RSI: 00007f1ab18b20a0 RDI: 0000000000000004
[   91.907706][ T7329] RBP: 00007f1ab18b2090 R08: 0000000000000000 R09: 0000000000000000
[   91.907717][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.907725][ T7329] R13: 00007f1ab0c16038 R14: 00007f1ab0c15fa0 R15: 00007fff53a9f718
[   91.907772][ T7329]  </TASK>
[   92.098426][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'.
[   92.274013][ T6006] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   92.398080][ T7347] syzkaller1: entered promiscuous mode
[   92.400723][ T7347] syzkaller1: entered allmulticast mode
[   92.424819][ T6006] usb 7-1: Using ep0 maxpacket: 8
[   92.428516][ T6006] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.432823][ T6006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.437362][ T6006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   92.441882][ T6006] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.449160][ T6006] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   92.452831][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.564736][ T7353] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   92.576976][ T7353] CIFS: Unable to determine destination address
[   92.663003][ T6006] usb 7-1: GET_CAPABILITIES returned 0
[   92.674774][ T6006] usbtmc 7-1:16.0: can't read capabilities
[   92.866946][ T7335] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32
[   92.894488][ T7335] input: syz1 as /devices/virtual/input/input15
[   93.058676][    T9] usb 7-1: USB disconnect, device number 10
[   93.820012][ T7429] qnx6: unable to read the first superblock
[   93.823805][ T7429] qnx6: unable to read the first superblock
[   93.827185][ T7429] qnx6: unable to read the first superblock
[   94.072384][ T7447] netlink: 'syz.2.351': attribute type 1 has an invalid length.
[   94.075515][ T7447] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.351'.
[   94.243103][ T7455] SELinux: failed to load policy
[   94.246549][ T7455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.354'.
[   94.257448][ T3250] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   94.415397][ T3250] usb 8-1: Using ep0 maxpacket: 8
[   94.421333][ T3250] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.424903][ T3250] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   94.428615][ T3250] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   94.436900][ T3250] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[   94.440309][ T3250] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   94.443023][ T3250] usb 8-1: Product: syz
[   94.444449][ T3250] usb 8-1: Manufacturer: syz
[   94.446582][ T3250] usb 8-1: SerialNumber: syz
[   94.449726][ T3250] usb 8-1: config 0 descriptor??
[   94.505275][ T3250] rc_core: IR keymap rc-imon-rsc not found
[   94.507345][ T3250] Registered IR keymap rc-empty
[   94.510440][ T3250] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[   94.515252][ T3250] input: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input16
[   94.656151][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.659453][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.676006][ T7486] netlink: 'syz.4.361': attribute type 8 has an invalid length.
[   94.781781][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[   94.794504][ T7504] mkiss: ax0: crc mode is auto.
[   94.928187][ T7513] virtio-fs: tag </dev/sg0> not found
[   95.190683][ T5998] usb 8-1: USB disconnect, device number 4
[   95.371729][   T40] kauditd_printk_skb: 16 callbacks suppressed
[   95.371744][   T40] audit: type=1400 audit(1775071861.111:451): avc:  denied  { bind } for  pid=7541 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   95.419238][   T40] audit: type=1400 audit(1775071861.161:452): avc:  denied  { read append } for  pid=7543 comm="syz.3.379" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   95.438866][   T40] audit: type=1400 audit(1775071861.161:453): avc:  denied  { open } for  pid=7543 comm="syz.3.379" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   95.450357][   T40] audit: type=1400 audit(1775071861.171:454): avc:  denied  { ioctl } for  pid=7543 comm="syz.3.379" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   95.498042][ T7544] wg1: entered promiscuous mode
[   95.500205][ T7544] wg1: entered allmulticast mode
[   95.543332][ T7544] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   96.178105][ T7570] loop3: detected capacity change from 0 to 7
[   96.187341][ T5950] Dev loop3: unable to read RDB block 7
[   96.189196][ T5950]  loop3: unable to read partition table
[   96.191189][ T5950] loop3: partition table beyond EOD, truncated
[   96.207474][ T7570] Dev loop3: unable to read RDB block 7
[   96.209874][ T7570]  loop3: unable to read partition table
[   96.212425][ T7570] loop3: partition table beyond EOD, truncated
[   96.220197][ T7568] syzkaller0: entered promiscuous mode
[   96.222730][ T7568] syzkaller0: entered allmulticast mode
[   96.229890][ T7570] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[   96.255620][ T7568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7568 comm=syz.3.386
[   96.335284][   T40] audit: type=1400 audit(1775071862.081:455): avc:  denied  { kexec_image_load } for  pid=7581 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   96.345659][ T7582] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   96.366739][   T40] audit: type=1400 audit(1775071862.111:456): avc:  denied  { mounton } for  pid=7572 comm="syz.5.388" path="/proc/184/task" dev="proc" ino=21558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   96.404767][ T7586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.390'.
[   96.494018][ T7598] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   96.550652][   T40] audit: type=1400 audit(1775071862.291:457): avc:  denied  { getopt } for  pid=7605 comm="syz.4.394" lport=39602 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   96.581832][ T7610] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   96.584447][ T7610] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   96.589688][ T7610] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.395'.
[   96.642898][ T7615] binder: 7614:7615 ioctl c0044dff 200000000200 returned -22
[   96.681767][   T40] audit: type=1400 audit(1775071862.421:458): avc:  denied  { read } for  pid=7622 comm="syz.2.399" dev="nsfs" ino=4026533168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   96.691235][   T40] audit: type=1400 audit(1775071862.421:459): avc:  denied  { open } for  pid=7622 comm="syz.2.399" path="net:[4026533168]" dev="nsfs" ino=4026533168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   96.711967][ T7626] bridge_slave_1: left allmulticast mode
[   96.714219][ T7626] bridge_slave_1: left promiscuous mode
[   96.716997][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.725757][ T7626] bridge_slave_0: left allmulticast mode
[   96.727723][ T7626] bridge_slave_0: left promiscuous mode
[   96.730510][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.763599][   T40] audit: type=1400 audit(1775071862.501:460): avc:  denied  { getopt } for  pid=7625 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.958689][ T7639] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.402'.
[   96.963886][ T7639] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   96.969763][ T7639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.346799][ T7657] random: crng reseeded on system resumption
[   97.360436][ T7657] PM: hibernation: Image mismatch: memory size
[   97.564406][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'.
[   97.601743][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'.
[   97.701769][ T7673] IPv6: NLM_F_CREATE should be specified when creating new route
[   97.779991][ T7682] ipt_REJECT: TCP_RESET invalid for non-tcp
[   97.940461][ T7706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=7706 comm=syz.2.420
[   97.998036][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.424'.
[   98.066226][ T7718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7718 comm=syz.5.426
[   98.114820][ T7722] tmpfs: Bad value for 'mpol'
[   98.190198][ T7730] comedi comedi0: comedi_config --init_data is deprecated
[   98.193330][ T7730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=7730 comm=syz.3.432
[   98.198903][ T7730] netlink: 10 bytes leftover after parsing attributes in process `syz.3.432'.
[   98.245035][ T7732] netlink: 'syz.3.433': attribute type 1 has an invalid length.
[   98.249353][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'.
[   98.368866][ T7743] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[   98.372524][ T7743] qnx6: wrong signature (magic) in superblock #1.
[   98.375021][ T7743] qnx6: unable to read the first superblock
[   98.430980][ T7743] loop5: detected capacity change from 0 to 7
[   98.437516][ T7743] Dev loop5: unable to read RDB block 7
[   98.439647][ T7743]  loop5: unable to read partition table
[   98.442172][ T7743] loop5: partition table beyond EOD, truncated
[   98.444945][ T7743] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   98.450452][ T7743] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[   98.454089][ T7743] qnx6: wrong signature (magic) in superblock #1.
[   98.457636][ T7743] qnx6: unable to read the first superblock
[   98.494806][ T1922] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   98.619202][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'.
[   98.658765][ T1922] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   98.662943][ T1922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.669094][ T1922] usb 8-1: Product: syz
[   98.671144][ T1922] usb 8-1: Manufacturer: syz
[   98.673570][ T1922] usb 8-1: SerialNumber: syz
[   98.687491][ T1922] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   98.719054][    T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   98.926093][ T6025] usb 8-1: USB disconnect, device number 5
[   99.042340][ T7775] fuse: Unknown parameter '000000000000000000000110x0000000000000009'
[   99.268363][ T7787] netlink: 'syz.5.450': attribute type 4 has an invalid length.
[   99.279203][ T7787] netlink: 'syz.5.450': attribute type 4 has an invalid length.
[   99.536369][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.451'.
[   99.537731][ T7797] ALSA: mixer_oss: invalid OSS volume ''
[   99.787579][ T7807] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.814940][    T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[   99.818525][    T9] ath9k_htc: Failed to initialize the device
[   99.823241][ T6025] usb 8-1: ath9k_htc: USB layer deinitialized
[  100.035996][ T7826] pim6reg1: tun_chr_ioctl cmd 1074025678
[  100.038166][ T7826] pim6reg1: group set to 0
[  100.095368][ T7828] program syz.4.462 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.104904][ T1922] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  100.105066][ T7822] nbd0: detected capacity change from 0 to 128
[  100.264762][ T1922] usb 7-1: Using ep0 maxpacket: 8
[  100.268330][ T1922] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  100.274862][ T1922] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.279586][ T1922] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.283883][ T1922] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.292043][ T1922] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.305102][ T1922] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  100.308081][ T1922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.355591][ T7821] nbd1: detected capacity change from 0 to 128
[  100.364805][ T7826] netlink: 'syz.4.462': attribute type 1 has an invalid length.
[  100.368479][ T7826] netlink: 'syz.4.462': attribute type 2 has an invalid length.
[  100.383611][ T5949] block nbd0: Receive control failed (result -104)
[  100.383633][ T5935] block nbd1: Receive control failed (result -32)
[  100.383633][ T5947] block nbd1: Receive control failed (result -32)
[  100.386193][ T5939] block nbd0: Receive control failed (result -32)
[  100.442595][   T40] kauditd_printk_skb: 24 callbacks suppressed
[  100.442608][   T40] audit: type=1400 audit(1775071866.181:485): avc:  denied  { setopt } for  pid=7837 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  100.521504][ T1922] usb 7-1: usb_control_msg returned -32
[  100.523360][ T1922] usbtmc 7-1:16.0: can't read capabilities
[  100.649660][   T40] audit: type=1400 audit(1775071866.391:486): avc:  denied  { connect } for  pid=7853 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  100.662010][   T40] audit: type=1400 audit(1775071866.401:487): avc:  denied  { ioctl } for  pid=7853 comm="syz.4.471" path="socket:[21375]" dev="sockfs" ino=21375 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  100.672495][   T40] audit: type=1400 audit(1775071866.401:488): avc:  denied  { read } for  pid=7853 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  100.720959][ T7860] pim6reg: entered allmulticast mode
[  100.725223][ T7860] pim6reg: left allmulticast mode
[  100.789119][ T7862] 9pnet_fd: Insufficient options for proto=fd
[  101.227733][ T7872] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 4
[  101.279937][   T40] audit: type=1400 audit(1775071867.021:489): avc:  denied  { create } for  pid=7816 comm="syz.2.459" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  101.286907][   T40] audit: type=1400 audit(1775071867.021:490): avc:  denied  { link } for  pid=7816 comm="syz.2.459" name="#10" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  101.294252][   T40] audit: type=1400 audit(1775071867.021:491): avc:  denied  { rename } for  pid=7816 comm="syz.2.459" name="#11" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  101.431832][   T39] usb 7-1: USB disconnect, device number 11
[  101.515293][ T7875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.826808][ T7884] binder_alloc: binder_alloc_mmap_handler: 7883 200000ffb000-200000fff000 already mapped failed -16
[  101.882885][   T40] audit: type=1400 audit(1775071867.621:492): avc:  denied  { mounton } for  pid=7883 comm="syz.5.479" path="/86/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  101.891490][ T7885] 9pnet_virtio: no channels available for device syz
[  101.922459][   T40] audit: type=1400 audit(1775071867.661:493): avc:  denied  { ioctl } for  pid=7891 comm="syz.3.481" path="socket:[22120]" dev="sockfs" ino=22120 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  102.074908][ T7906] vxfs: unable to read disk superblock at 1
[  102.078697][ T7906] vxfs: unable to read disk superblock at 8
[  102.081441][ T7906] vxfs: can't find superblock.
[  102.108702][ T7908] SELinux:  policydb table sizes (0,4096) do not match mine (8,7)
[  102.111899][ T7908] SELinux: failed to load policy
[  102.152519][ T7913] netlink: 'syz.2.488': attribute type 4 has an invalid length.
[  102.245696][ T7920] IPVS: set_ctl: invalid protocol: 33 172.30.0.3:20002
[  102.248855][ T7920] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20004
[  102.252012][   T40] audit: type=1400 audit(1775071867.991:494): avc:  denied  { append } for  pid=7919 comm="syz.2.491" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  102.306967][ T7925] kernel profiling enabled (shift: 63)
[  102.308916][ T7925] profiling shift: 63 too large
[  102.899178][ T7954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7954 comm=syz.4.502
[  103.264855][ T6023] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  103.444785][ T6023] usb 9-1: Using ep0 maxpacket: 32
[  103.447769][ T6023] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.450850][ T6023] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.457356][ T6023] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  103.460224][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  103.462071][ T7974] __nla_validate_parse: 1 callbacks suppressed
[  103.462083][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'.
[  103.463287][ T6023] usb 9-1: Product: syz
[  103.469985][ T6023] usb 9-1: Manufacturer: syz
[  103.471537][ T6023] usb 9-1: SerialNumber: syz
[  103.491206][ T6023] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input17
[  103.593570][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[  103.649590][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[  103.690654][ T7958] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  103.756513][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[  103.863690][ T7988] netlink: 52 bytes leftover after parsing attributes in process `syz.5.511'.
[  104.337871][ T8003] sp0: Synchronizing with TNC
[  104.529560][ T8011] Invalid source name
[  104.606422][ T8019] overlay: Unknown parameter '.'
[  104.689866][ T8026] overlayfs: upper fs does not support tmpfile.
[  104.757673][ T8038] 9p: Bad value for 'version'
[  105.005905][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'.
[  105.027709][ T8060] QAT: Invalid ioctl -1072630520
[  105.170931][ T8070] 9pnet_virtio: no channels available for device syz
[  105.372430][ T8078] 9p: Bad value for 'version'
[  105.490635][ T8080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.541'.
[  105.550593][   T40] kauditd_printk_skb: 22 callbacks suppressed
[  105.550611][   T40] audit: type=1400 audit(1775071871.291:517): avc:  denied  { bind } for  pid=8075 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  105.605556][ T8085] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.542'.
[  105.665044][ T8091] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  105.707341][ T8090] bond3: (slave geneve2): making interface the new active one
[  105.711227][ T8090] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  105.715817][ T1231] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  105.719947][ T1231] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  105.720343][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'.
[  105.723912][ T1231] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  105.730611][ T1231] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  105.738211][ T8089] bond3 (unregistering): (slave geneve2): Releasing active interface
[  105.742470][ T8089] bond3 (unregistering): Released all slaves
[  105.751598][ T1231] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  105.755950][ T1231] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  105.759858][ T1231] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  105.764098][ T1231] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  105.876906][ T6023] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  105.934776][ T8102] team0 (unregistering): Port device team_slave_1 removed
[  105.981614][ T8106] Invalid logical block size (536872960)
[  106.001478][    T9] usb 9-1: USB disconnect, device number 3
[  106.020353][    T9] appletouch 9-1:1.0: input: appletouch disconnected
[  106.049905][ T6023] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  106.052893][ T6023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  106.056531][ T6023] usb 8-1: Product: syz
[  106.058061][ T6023] usb 8-1: Manufacturer: syz
[  106.060114][ T6023] usb 8-1: SerialNumber: syz
[  106.063182][ T6023] usb 8-1: config 0 descriptor??
[  106.066754][ T8108] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  106.068966][ T6023] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  106.071543][ T6023] dvb-usb: bulk message failed: -22 (2/0)
[  106.076843][ T6023] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  106.080758][ T6023] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  106.083286][ T6023] usb 8-1: media controller created
[  106.096349][ T6023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  106.114362][ T8112] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  106.117857][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  106.140939][ T8112] vhci_hcd vhci_hcd.0: Device attached
[  106.175165][ T8112] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11)
[  106.177860][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  106.186471][ T8112] vhci_hcd vhci_hcd.0: Device attached
[  106.189314][ T8123] vhci_hcd: connection closed
[  106.190413][ T8113] vhci_hcd: connection closed
[  106.191327][   T41] vhci_hcd vhci_hcd.2: stop threads
[  106.206241][   T41] vhci_hcd vhci_hcd.2: release socket
[  106.208132][   T41] vhci_hcd vhci_hcd.2: disconnect device
[  106.226447][   T41] vhci_hcd vhci_hcd.2: stop threads
[  106.229190][   T41] vhci_hcd vhci_hcd.2: release socket
[  106.231843][   T41] vhci_hcd vhci_hcd.2: disconnect device
[  106.240158][   T40] audit: type=1400 audit(1775071871.981:518): avc:  denied  { append } for  pid=8118 comm="syz.4.553" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  106.250443][   T40] audit: type=1400 audit(1775071871.991:519): avc:  denied  { map } for  pid=8118 comm="syz.4.553" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  106.278593][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'.
[  106.281654][ T8087] netlink: 'syz.3.543': attribute type 9 has an invalid length.
[  106.284464][ T8087] netlink: 'syz.3.543': attribute type 9 has an invalid length.
[  106.288733][ T6023] cxusb: set interface failed
[  106.290916][ T6023] dvb-usb: bulk message failed: -22 (1/0)
[  106.295666][ T8087] dvb-usb: bulk message failed: -22 (15/0)
[  106.298926][ T8087] tmpfs: Unknown parameter 'n2_in��V|��p���^Ӏ3���!yY��S�@���c�u'�8�~}��Yi�4���1m�)�N��D���ɹx6H��oYO�
[  106.298926][ T8087] �'
[  106.334732][ T6023] DVB: Unable to find symbol mt352_attach()
[  106.337130][ T6023] dvb-usb: bulk message failed: -22 (5/0)
[  106.339835][ T6023] zl10353_read_register: readreg error (reg=127, ret==-121)
[  106.343052][ T6023] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  106.403551][ T8143] 9p: Bad value for 'version'
[  106.405106][ T6023] rc_core: IR keymap rc-dvico-mce not found
[  106.408572][ T6023] Registered IR keymap rc-empty
[  106.411261][ T6023] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[  106.417990][ T6023] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input18
[  106.423959][ T6023] dvb-usb: schedule remote query interval to 100 msecs.
[  106.426539][ T6023] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  106.432048][ T6023] usb 8-1: USB disconnect, device number 6
[  106.469195][ T8145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8145 comm=syz.4.559
[  106.489516][ T8145] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  106.631981][   T40] audit: type=1400 audit(1775071872.371:520): avc:  denied  { accept } for  pid=8147 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  106.729199][   T40] audit: type=1400 audit(1775071872.471:521): avc:  denied  { setopt } for  pid=8157 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  106.819499][ T6023] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  106.907763][   T40] audit: type=1400 audit(1775071872.651:522): avc:  denied  { map } for  pid=8172 comm="syz.5.567" path="/119/file0/cpu.stat" dev="9p" ino=79692005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.928437][   T40] audit: type=1400 audit(1775071872.651:523): avc:  denied  { execute } for  pid=8172 comm="syz.5.567" path="/119/file0/cpu.stat" dev="9p" ino=79692005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  107.036673][ T8195] sctp: [Deprecated]: syz.3.572 (pid 8195) Use of int in maxseg socket option.
[  107.036673][ T8195] Use struct sctp_assoc_value instead
[  107.168136][   T40] audit: type=1400 audit(1775071872.911:524): avc:  denied  { unmount } for  pid=6420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  107.261543][ T8216] 9p: Bad value for 'version'
[  107.525810][ T8236] Device name not specified.
[  107.525810][ T8236] 
[  107.530264][ T8236] Device name not specified.
[  107.530264][ T8236] 
[  107.559203][ T8241] Cannot find set identified by id 65534 to match
[  107.639424][ T8248] dlm: no local IP address has been set
[  107.644016][ T8248] dlm: cannot start dlm midcomms -107
[  107.647662][   T40] audit: type=1400 audit(1775071873.391:525): avc:  denied  { setopt } for  pid=8247 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  107.682876][   T40] audit: type=1400 audit(1775071873.421:526): avc:  denied  { create } for  pid=8249 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  107.809453][ T8257] syz_tun: entered allmulticast mode
[  107.818439][ T8257] dvmrp8: entered allmulticast mode
[  107.822944][ T8256] syz_tun: left allmulticast mode
[  107.855324][ T8259] xt_CT: No such helper "snmp_trap"
[  107.936353][ T8266] xt_l2tp: v2 doesn't support IP mode
[  107.936816][ T8265] overlayfs: missing 'lowerdir'
[  108.162803][ T8285] xt_connbytes: Forcing CT accounting to be enabled
[  108.181832][ T8284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.191942][ T8285] [U] 
[  108.193301][ T8285] [U] +��
[  108.194426][ T8285] [U] �$܁P~ƊQ���r���A��e�`G��-R��ij笨��mA������)߀�N�o4��g�V�����;���u�Q`
[  108.198110][ T8285] [U] � Wg����-u]��}�FyȘ�e��Ʈ���)�>���,>f�}a&\��msO�H�n�'Ä=�#$Ǧ�&g��C���.,jP�^{�"��O��������iňo��;pʪ��6�qwS_{�CW�fs�+R��~�����q��u�›�ŸNn!	
[  108.203680][ T8285] [U] Zph��5��Laӝ8H��
[  108.205397][ T8285] [U] �V)*��Gr���
[  108.206702][ T8285] [U] �g�©����M��D9�i^g���[��&�T�Xd}y^�#"��Z�&|�JiY
���DX�~re�G���i�UMNk���q�GJc��Ӕ�0�r�08��8�D�<�U0P9��=>�Ȫ���U��[��ƒ�uW��9�����j�l"�h��ZG�+E�Ė#��LY`z����2�

[  108.212947][ T8285] [U] }{_S��|j��\�p�����tژ��1��b��-S4��!{�9C5-��>�M

[  108.215750][ T8285] [U] �����U���X�B�H��,����~�nm����IM�/a��
[  108.218110][ T8285] [U] VS��6��e^�S�Hk�"�(��*:$�}<��^Y�D�?�r��n��HE���X#��X�3�Ys6
[  108.221017][ T8285] [U] ��
[  108.222171][ T8285] [U] ��
�71D�%��}7���G\�4���'�Kp��7U�,����"�^|��-�B��g&@��b��W�R�Y
[  108.225241][ T8284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.226907][ T8285] [U] ���p~���
[  108.230423][ T8285] [U] hQV���OK�) �Ƶ���Z>�u�Y`XԶޖ�Qt�B�hvM�dR�/����%����F��8�`�yǥ�Y䦈Fؾ�x@�-d�֛����0�ʩz�;���D�"��)�tRgiL(�)d�6�"BnB��f�?ӛ<�F��κ��x�AJfo�ȷ��%�}
[  108.239572][ T8285] [U] û�ф�F���Ɛ
[  108.241055][ T8285] [U] ������*�"D�� n��Җ���6vR����r���C�/[J3����eޏ�P���)�1??�t�r8��¦5�_��1��2>�,ѧ`�'L��q�	��6����t�2t����@�F@p�6��v�������]�t�4�N�ξ����y�RΓv�P�':�J�۫��ۆ���E��*̣]�;�M�4�T�q�B�_5��pM
[  108.241519][ T8284] bond0 (unregistering): Released all slaves
[  108.251978][ T8285] [U] ��_�mֱ���9KU""^��s6r�P
[  108.253904][ T8285] [U] ��¥��U������[m�������j0z���O�oF��|������:!�	�/$@R�H�(Η��1�K@ǚ/�w�����4|�x���J�3���:<�f����&~[�J�r&J2t߈[�E�*n���H��~�4�떌�DF	G�Pjw��~�5�tl?a�9�Y�	��Hyn�}�k���A�CZu�2������7S�P�1�9ɦH�=[&����<�J���ډrf!��
[  108.262396][ T8285] [U] ��3�kT�2��lUM�3(4��x��N�*Y���%�f]�
[  108.264706][ T8285] [U] �a�1ݯt8��d+�{�������GėJ)+LE�dbN�!��D���ڽk����{�����#��J��M0�
[  108.267754][ T8285] [U] ��L�ϿI>
[  108.269023][ T8285] [U] V�:��p��\U�� 5�V"��c��d��:n�b�3Ob,%ǯe��	j
�9�>�\rCˉiV���E�<���\�7;�娍+ȏ�
��"��IƔ/6FN�hg�w�~�xc�Wö��}H6�TI����������؆�6a�A耹�C�1����v]b��a���9��xT������	�
[  108.274944][ T8285] [U] �����ۼu����J���D���⠙�(��"�wZ[(s1yX�NׯtA���c�/p�iǎ��j Ѕ#�{�0��`y�,��Hp+�̄��j5�4��?@պN�a�^!�4���^3"�
[  108.281690][ T8285] [U] I\x��ez��W�80���ܚ�P�fz�q���i^�@O	
[  108.283989][ T8285] [U] gڑ��/P�+�����ؒb�=�pY�Y�1gJ��d�<�?*^㺓{�������K�us
[  108.287616][ T8285] [U] �R�.6��/-���o����}�MX҅���;{�����)&���2��r[_ �n������&��L�K4��G�hz6a:Oސf����z��|O4H6J�	� E�&T���^�J��}�R�!K]"�����y�L�4�N�\W.��+O���@��S�����b�;"��k\�v�)i%�&�1��~]�F+|���/��O��	�h���J���6�dxJ�o³�.:���H���ݹ�}�w{J�3%��M=*p�x������l5�fX+���ǃ�*
�׍���il�(H6���!Nk�
[  108.300009][ T8285] [U] 
[  108.301225][ T8285] [U] ���)�kP�#�.�,��Um�t����C���÷�N����2v�a�˼�������U���r;�8@�L�o�7B��0:S��v��C�����D���~�Ƅ�ˆQidA���<O'�V2��kƹ�����if��ʺ
[  108.309450][ T8285] [U] �v
[  108.310584][ T8285] [U] ]����5E�κ�6��`�41H�)����BtZ���C���3��ҢȆ�dBH��u>�!x�����K��T����a�;�P�a�o�Fl��u����8:!V���D�������G�\zwi�=�)�m)o!�Җ�>08j�
��ͻ���*(��������sL��Q@�0Ke��������V���sz�K�P?
�e����/���K��M�R�l�ya�?
����'EtU{�R�]�ֈS$���9�O�u���(ŀ�~le/�I8��#����� a	�?�,#p�;���R{�4��H�w�"�X{�����\��\�����.K�V�2$Ēΐ�܀���6<
[  108.321926][ T8285] [U] q� �Ou�lv~-��_�������8���?O�6��$��z«�e�A��O_�NO/C	���.�b�yr��ˋ��<��[���Dx������ҿ���WW�X���
[  108.325856][ T8285] [U] ܲ�|��9���$n�`i�(��RǿDt�A��4�o/̈́eV�2
��B��l�n|��:KY�W&;��l�1;
[  108.328726][ T8285] [U] ;�JO6P��
[  108.414438][ T8305] loop5: detected capacity change from 0 to 7
[  108.441438][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.446979][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.450935][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.454932][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.465691][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.469223][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.472829][    C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.476029][    C3] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.487831][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.492235][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.496092][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.500846][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.509545][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.512766][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.515651][ T8305] ldm_validate_partition_table(): Disk read failed.
[  108.524737][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.527933][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.532513][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.535733][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.538865][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.542432][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  108.545757][ T8305] Dev loop5: unable to read RDB block 0
[  108.548244][ T8305]  loop5: unable to read partition table
[  108.550255][ T8305] loop5: partition table beyond EOD, truncated
[  108.552330][ T8305] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  108.613907][ T8314] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  108.620241][ T8315] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  108.623702][ T8314] __nla_validate_parse: 8 callbacks suppressed
[  108.623716][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'.
[  108.745714][ T8319] xt_hashlimit: size too large, truncated to 1048576
[  108.929386][ T8277] [U] q1n�
��#���G��4���Y›�rM�n�Uf[Xi^��='���ډ�z��;�:Q
��7��,E
[  108.967760][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'.
[  108.970892][ T8336] openvswitch: netlink: Missing key (keys=40, expected=80)
[  109.117138][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.616'.
[  109.175144][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'.
[  109.629191][ T8365] binder: BINDER_SET_CONTEXT_MGR already set
[  109.631649][ T8365] binder: 8364:8365 ioctl 4018620d 200000004a80 returned -16
[  109.744945][ T8362] random: crng reseeded on system resumption
[  109.796406][ T8362] Unrecognized hibernate image header format!
[  109.798757][ T8362] PM: hibernation: Image mismatch: architecture specific data
[  109.896854][ T8377] netlink: 'syz.3.627': attribute type 10 has an invalid length.
[  109.901447][ T8377] bond0: (slave wlan1): Opening slave failed
[  110.244812][ T5998] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  110.298197][ T8391] bond1 (unregistering): Released all slaves
[  110.404765][ T5998] usb 7-1: device descriptor read/64, error -71
[  110.547838][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'.
[  110.656839][ T5998] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  110.806703][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  110.806719][   T40] audit: type=1400 audit(1775071876.551:533): avc:  denied  { ioctl } for  pid=8420 comm="syz.3.639" path="socket:[24467]" dev="sockfs" ino=24467 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  110.827020][ T5998] usb 7-1: device descriptor read/64, error -71
[  110.911015][ T8426] batadv_slave_1: entered promiscuous mode
[  110.916589][ T8426] random: crng reseeded on system resumption
[  110.925203][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.640'.
[  110.928456][ T8426] netlink: 'syz.3.640': attribute type 7 has an invalid length.
[  110.933201][ T8426] netlink: 'syz.3.640': attribute type 8 has an invalid length.
[  110.941275][   T40] audit: type=1400 audit(1775071876.661:534): avc:  denied  { ioctl } for  pid=8425 comm="syz.3.640" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  110.950886][ T5998] usb usb7-port1: attempt power cycle
[  110.953230][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'.
[  111.015831][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  111.177989][ T8430] batadv_slave_1: left promiscuous mode
[  111.294873][ T5998] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  111.311861][ T8440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.642'.
[  111.316683][ T5998] usb 7-1: device descriptor read/8, error -71
[  111.325860][   T40] audit: type=1400 audit(1775071877.071:535): avc:  denied  { ioctl } for  pid=8439 comm="syz.3.642" path="socket:[26909]" dev="sockfs" ino=26909 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  111.367264][ T8440] syzkaller0: entered promiscuous mode
[  111.369532][ T8440] syzkaller0: entered allmulticast mode
[  111.555177][ T5998] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  111.574214][   T40] audit: type=1400 audit(1775071877.311:536): avc:  denied  { read write } for  pid=8451 comm="syz.5.645" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  111.595094][   T40] audit: type=1400 audit(1775071877.311:537): avc:  denied  { open } for  pid=8451 comm="syz.5.645" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  111.604105][ T5998] usb 7-1: device descriptor read/8, error -71
[  111.607070][ T8454] netlink: 'syz.3.646': attribute type 1 has an invalid length.
[  111.667443][   T40] audit: type=1400 audit(1775071877.411:538): avc:  denied  { ioctl } for  pid=8453 comm="syz.3.646" path="socket:[26170]" dev="sockfs" ino=26170 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  111.680215][ T8454] macvlan2: entered promiscuous mode
[  111.682756][ T8454] macvlan2: entered allmulticast mode
[  111.689343][   T40] audit: type=1400 audit(1775071877.431:539): avc:  denied  { ioctl } for  pid=8451 comm="syz.5.645" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x6434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  111.695325][ T8454] bond1: entered promiscuous mode
[  111.705498][ T8454] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.715003][ T5998] usb usb7-port1: unable to enumerate USB device
[  111.719068][ T8454] bond1: left promiscuous mode
[  111.980352][ T8464] kvm: kvm [8462]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  112.006400][ T8464] kvm: kvm [8462]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  112.353979][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'.
[  112.361287][ T8478] netlink: 52 bytes leftover after parsing attributes in process `syz.3.652'.
[  112.549469][ T8480] XFS (loop3): SB validate failed with error -5.
[  112.629524][ T8480] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  112.642552][ T8480] bond2 (unregistering): Released all slaves
[  112.994491][ T8508] bond0: (slave bond_slave_0): Releasing backup interface
[  113.020897][ T8508] bond0: (slave bond_slave_1): Releasing backup interface
[  113.045123][ T1922] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  113.048244][ T8508] team0: Port device team_slave_0 removed
[  113.073610][ T8508] team0: Port device team_slave_1 removed
[  113.085759][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.089081][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.094445][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.098832][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.104467][ T8508] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  113.199751][ T1922] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  113.203897][ T1922] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.207641][ T1922] usb 8-1: config 0 interface 0 has no altsetting 0
[  113.210103][ T1922] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  113.213968][ T1922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.225636][ T1922] usb 8-1: config 0 descriptor??
[  113.249697][   T40] audit: type=1400 audit(1775071878.991:540): avc:  denied  { map } for  pid=8517 comm="syz.4.661" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  113.261623][   T40] audit: type=1400 audit(1775071878.991:541): avc:  denied  { execute } for  pid=8517 comm="syz.4.661" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  113.269604][ T8522] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  113.276662][ T8522] overlayfs: missing 'lowerdir'
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x158000)
[  113.333015][   T40] audit: type=1400 audit(1775071879.071:542): avc:  denied  { connect } for  pid=8517 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  113.366064][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  113.368658][ T1116] ata1: failed to read log page 10h (errno=-5)
[  113.370883][ T1116] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[  113.374631][ T1116] ata1.00: irq_stat 0x41000000
[  113.376708][ T1116] ata1.00: failed command: READ FPDMA QUEUED
[  113.378955][ T1116] ata1.00: cmd 60/c0:70:56:3b:01/0a:00:00:00:00/40 tag 14 ncq dma 1409024 in
[  113.378955][ T1116]          res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  113.388758][ T1116] ata1.00: status: { DRDY }
[  113.390311][ T1116] ata1.00: failed command: READ FPDMA QUEUED
[  113.392294][ T1116] ata1.00: cmd 60/60:78:2e:46:01/08:00:00:00:00/40 tag 15 ncq dma 1097728 in
[  113.392294][ T1116]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  113.399647][ T1116] ata1.00: status: { DRDY }
[  113.401147][ T1116] ata1.00: error: { ABRT }
[  113.403310][ T1116] ata1.00: configured for UDMA/100
[  113.405607][ T1116] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  113.409665][ T1116] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] 
[  113.413253][ T1116] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information
[  113.417779][ T1116] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3b 56 00 0a c0 00
[  113.422241][ T1116] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  113.426847][ T1116] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] 
[  113.430144][ T1116] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information
[  113.433951][ T1116] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 46 2e 00 08 60 00
[  113.438494][ T1116] ata1: EH complete
[  113.641006][ T5935] block nbd4: Receive control failed (result -107)
[  113.647110][ T5935] 
[  113.648030][ T5935] ======================================================
[  113.650392][ T5935] WARNING: possible circular locking dependency detected
[  113.653029][ T5935] syzkaller #0 Tainted: G             L     
[  113.655543][ T5935] ------------------------------------------------------
[  113.658553][ T5935] kworker/u33:2/5935 is trying to acquire lock:
[  113.661450][ T5935] ffff888059a04ee0 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410
[  113.666059][ T5935] 
[  113.666059][ T5935] but task is already holding lock:
[  113.669339][ T5935] ffff8880356b6e70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0
[  113.673567][ T5935] 
[  113.673567][ T5935] which lock already depends on the new lock.
[  113.673567][ T5935] 
[  113.678905][ T5935] 
[  113.678905][ T5935] the existing dependency chain (in reverse order) is:
[  113.683386][ T5935] 
[  113.683386][ T5935] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  113.686694][ T5935]        __mutex_lock+0x1a2/0x1b90
[  113.688414][ T5935]        nbd_queue_rq+0x428/0x1080
[  113.690124][ T5935]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  113.692285][ T5935]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  113.694974][ T5935]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  113.698073][ T5935]        blk_mq_run_hw_queue+0x23c/0x670
[  113.700390][ T5935]        blk_mq_dispatch_list+0x51d/0x1360
[  113.702336][ T5935]        blk_mq_flush_plug_list+0x130/0x600
[  113.704562][ T5935]        __blk_flush_plug+0x2c4/0x4b0
[  113.706418][ T5935]        __submit_bio+0x584/0x6c0
[  113.708137][ T5935]        submit_bio_noacct_nocheck+0x562/0xc10
[  113.710365][ T5935]        submit_bio_noacct+0xd17/0x2010
[  113.712223][ T5935]        submit_bh_wbc+0x59c/0x770
[  113.713957][ T5935]        block_read_full_folio+0x4c8/0x8e0
[  113.716152][ T5935]        filemap_read_folio+0xfc/0x3b0
[  113.718032][ T5935]        do_read_cache_folio+0x2d7/0x6b0
[  113.720110][ T5935]        read_part_sector+0xd1/0x370
[  113.722079][ T5935]        adfspart_check_ICS+0x93/0x910
[  113.724091][ T5935]        bdev_disk_changed+0x7f8/0xc80
[  113.726083][ T5935]        blkdev_get_whole+0x187/0x290
[  113.727916][ T5935]        bdev_open+0x2c7/0xe40
[  113.729702][ T5935]        blkdev_open+0x34e/0x4f0
[  113.731137][ T5935]        do_dentry_open+0x6d8/0x1660
[  113.732910][ T5935]        vfs_open+0x82/0x3f0
[  113.734468][ T5935]        path_openat+0x208c/0x31a0
[  113.736421][ T5935]        do_file_open+0x20e/0x430
[  113.738463][ T5935]        do_sys_openat2+0x10d/0x1e0
[  113.740464][ T5935]        __x64_sys_openat+0x12d/0x210
[  113.742246][ T5935]        do_syscall_64+0x106/0xf80
[  113.744215][ T5935]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.746697][ T5935] 
[  113.746697][ T5935] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  113.749613][ T5935]        __mutex_lock+0x1a2/0x1b90
[  113.751693][ T5935]        nbd_queue_rq+0xba/0x1080
[  113.753962][ T5935]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  113.756371][ T5935]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  113.758857][ T5935]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  113.761062][ T5935]        blk_mq_run_hw_queue+0x23c/0x670
[  113.762938][ T5935]        blk_mq_dispatch_list+0x51d/0x1360
[  113.765073][ T5935]        blk_mq_flush_plug_list+0x130/0x600
[  113.767134][ T5935]        __blk_flush_plug+0x2c4/0x4b0
[  113.769031][ T5935]        __submit_bio+0x584/0x6c0
[  113.770855][ T5935]        submit_bio_noacct_nocheck+0x562/0xc10
[  113.773063][ T5935]        submit_bio_noacct+0xd17/0x2010
[  113.775136][ T5935]        submit_bh_wbc+0x59c/0x770
[  113.777185][ T5935]        block_read_full_folio+0x4c8/0x8e0
[  113.779196][ T5935]        filemap_read_folio+0xfc/0x3b0
[  113.781087][ T5935]        do_read_cache_folio+0x2d7/0x6b0
[  113.783028][ T5935]        read_part_sector+0xd1/0x370
[  113.784823][ T5935]        adfspart_check_ICS+0x93/0x910
[  113.786652][ T5935]        bdev_disk_changed+0x7f8/0xc80
[  113.788498][ T5935]        blkdev_get_whole+0x187/0x290
[  113.790338][ T5935]        bdev_open+0x2c7/0xe40
[  113.792035][ T5935]        blkdev_open+0x34e/0x4f0
[  113.794152][ T5935]        do_dentry_open+0x6d8/0x1660
[  113.796498][ T5935]        vfs_open+0x82/0x3f0
[  113.798488][ T5935]        path_openat+0x208c/0x31a0
[  113.800737][ T5935]        do_file_open+0x20e/0x430
[  113.802650][ T5935]        do_sys_openat2+0x10d/0x1e0
[  113.804848][ T5935]        __x64_sys_openat+0x12d/0x210
[  113.806908][ T5935]        do_syscall_64+0x106/0xf80
[  113.808944][ T5935]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.810932][ T5935] 
[  113.810932][ T5935] -> #4 (set->srcu){.+.+}-{0:0}:
[  113.813734][ T5935]        __synchronize_srcu+0xa2/0x300
[  113.815566][ T5935]        blk_mq_quiesce_queue+0x149/0x1c0
[  113.817382][ T5935]        elevator_switch+0x17b/0x7e0
[  113.819279][ T5935]        elevator_change+0x352/0x530
[  113.821777][ T5935]        elevator_set_default+0x29e/0x360
[  113.824339][ T5935]        blk_register_queue+0x412/0x590
[  113.826539][ T5935]        __add_disk+0x73f/0xe40
[  113.828241][ T5935]        add_disk_fwnode+0x118/0x5c0
[  113.830041][ T5935]        nbd_dev_add+0x77a/0xb10
[  113.831763][ T5935]        nbd_init+0x291/0x2b0
[  113.833362][ T5935]        do_one_initcall+0x11d/0x760
[  113.835233][ T5935]        kernel_init_freeable+0x6e5/0x7a0
[  113.837096][ T5935]        kernel_init+0x1f/0x1e0
[  113.839118][ T5935]        ret_from_fork+0x754/0xd80
[  113.841345][ T5935]        ret_from_fork_asm+0x1a/0x30
[  113.843884][ T5935] 
[  113.843884][ T5935] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  113.846383][ T5935]        __mutex_lock+0x1a2/0x1b90
[  113.848063][ T5935]        elevator_change+0x1bc/0x530
[  113.849807][ T5935]        elevator_set_none+0x92/0xf0
[  113.851495][ T5935]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[  113.854099][ T5935]        nbd_start_device+0x1a6/0xbd0
[  113.856617][ T5935]        nbd_genl_connect+0xff2/0x1a40
[  113.859033][ T5935]        genl_family_rcv_msg_doit+0x214/0x300
[  113.861697][ T5935]        genl_rcv_msg+0x560/0x800
[  113.863878][ T5935]        netlink_rcv_skb+0x159/0x420
[  113.866115][ T5935]        genl_rcv+0x28/0x40
[  113.868074][ T5935]        netlink_unicast+0x5aa/0x870
[  113.870251][ T5935]        netlink_sendmsg+0x8b0/0xda0
[  113.872185][ T5935]        ____sys_sendmsg+0x9e1/0xb70
[  113.874089][ T5935]        ___sys_sendmsg+0x190/0x1e0
[  113.876005][ T5935]        __sys_sendmsg+0x170/0x220
[  113.877857][ T5935]        do_syscall_64+0x106/0xf80
[  113.879762][ T5935]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.882099][ T5935] 
[  113.882099][ T5935] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  113.885864][ T5935]        blk_alloc_queue+0x610/0x790
[  113.888182][ T5935]        blk_mq_alloc_queue+0x174/0x290
[  113.890658][ T5935]        __blk_mq_alloc_disk+0x29/0x120
[  113.893111][ T5935]        nbd_dev_add+0x492/0xb10
[  113.895393][ T5935]        nbd_init+0x291/0x2b0
[  113.897628][ T5935]        do_one_initcall+0x11d/0x760
[  113.900019][ T5935]        kernel_init_freeable+0x6e5/0x7a0
[  113.903050][ T5935]        kernel_init+0x1f/0x1e0
[  113.905285][ T5935]        ret_from_fork+0x754/0xd80
[  113.907507][ T5935]        ret_from_fork_asm+0x1a/0x30
[  113.909867][ T5935] 
[  113.909867][ T5935] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  113.913080][ T5935]        fs_reclaim_acquire+0xc4/0x100
[  113.915444][ T5935]        kmem_cache_alloc_node_noprof+0x53/0x6f0
[  113.918611][ T5935]        __alloc_skb+0x140/0x710
[  113.921520][ T5935]        tcp_stream_alloc_skb+0x34/0x660
[  113.924113][ T5935]        tcp_sendmsg_locked+0x1396/0x45e0
[  113.926793][ T5935]        tcp_sendmsg+0x2e/0x50
[  113.929006][ T5935]        inet_sendmsg+0xb9/0x140
[  113.931227][ T5935]        sock_write_iter+0x4ea/0x5a0
[  113.933572][ T5935]        vfs_write+0x6ac/0x1070
[  113.935744][ T5935]        ksys_write+0x1f8/0x250
[  113.937882][ T5935]        do_syscall_64+0x106/0xf80
[  113.940165][ T5935]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.942938][ T5935] 
[  113.942938][ T5935] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}:
[  113.946253][ T5935]        __lock_acquire+0x14b8/0x2630
[  113.948641][ T5935]        lock_acquire+0x1cf/0x380
[  113.950748][ T5935]        lock_sock_nested+0x41/0xf0
[  113.952974][ T5935]        inet_shutdown+0x67/0x410
[  113.955055][ T5935]        nbd_mark_nsock_dead+0xae/0x5c0
[  113.957333][ T5935]        recv_work+0x5fb/0x8c0
[  113.959535][ T5935]        process_one_work+0xa23/0x19a0
[  113.961958][ T5935]        worker_thread+0x5ef/0xe50
[  113.964300][ T5935]        kthread+0x370/0x450
[  113.966387][ T5935]        ret_from_fork+0x754/0xd80
[  113.968781][ T5935]        ret_from_fork_asm+0x1a/0x30
[  113.971114][ T5935] 
[  113.971114][ T5935] other info that might help us debug this:
[  113.971114][ T5935] 
[  113.975515][ T5935] Chain exists of:
[  113.975515][ T5935]   sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock
[  113.975515][ T5935] 
[  113.980896][ T5935]  Possible unsafe locking scenario:
[  113.980896][ T5935] 
[  113.984110][ T5935]        CPU0                    CPU1
[  113.986545][ T5935]        ----                    ----
[  113.988768][ T5935]   lock(&nsock->tx_lock);
[  113.990562][ T5935]                                lock(&cmd->lock);
[  113.993234][ T5935]                                lock(&nsock->tx_lock);
[  113.996253][ T5935]   lock(sk_lock-AF_INET);
[  113.998244][ T5935] 
[  113.998244][ T5935]  *** DEADLOCK ***
[  113.998244][ T5935] 
[  114.001606][ T5935] 3 locks held by kworker/u33:2/5935:
[  114.003880][ T5935]  #0: ffff88802805d148 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  114.008324][ T5935]  #1: ffffc90005fb7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  114.013032][ T5935]  #2: ffff8880356b6e70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0
[  114.016842][ T5935] 
[  114.016842][ T5935] stack backtrace:
[  114.019394][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: kworker/u33:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.019421][ T5935] Tainted: [L]=SOFTLOCKUP
[  114.019427][ T5935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.019439][ T5935] Workqueue: nbd4-recv recv_work
[  114.019459][ T5935] Call Trace:
[  114.019468][ T5935]  <TASK>
[  114.019476][ T5935]  dump_stack_lvl+0x100/0x190
[  114.019505][ T5935]  print_circular_bug.cold+0x178/0x1c7
[  114.019534][ T5935]  check_noncircular+0x146/0x160
[  114.019563][ T5935]  __lock_acquire+0x14b8/0x2630
[  114.019581][ T5935]  ? irqentry_exit+0x180/0x670
[  114.019610][ T5935]  lock_acquire+0x1cf/0x380
[  114.019626][ T5935]  ? inet_shutdown+0x67/0x410
[  114.019647][ T5935]  lock_sock_nested+0x41/0xf0
[  114.019672][ T5935]  ? inet_shutdown+0x67/0x410
[  114.019688][ T5935]  inet_shutdown+0x67/0x410
[  114.019705][ T5935]  nbd_mark_nsock_dead+0xae/0x5c0
[  114.019726][ T5935]  recv_work+0x5fb/0x8c0
[  114.019742][ T5935]  ? lockdep_hardirqs_on+0x78/0x100
[  114.019769][ T5935]  ? __pfx_recv_work+0x10/0x10
[  114.019787][ T5935]  ? lock_acquire+0x5e/0x380
[  114.019804][ T5935]  ? rcu_is_watching+0x12/0xc0
[  114.019828][ T5935]  process_one_work+0xa23/0x19a0
[  114.019856][ T5935]  ? __pfx_process_one_work+0x10/0x10
[  114.019877][ T5935]  ? __pfx_recv_work+0x10/0x10
[  114.019893][ T5935]  worker_thread+0x5ef/0xe50
[  114.019913][ T5935]  ? __pfx_worker_thread+0x10/0x10
[  114.019932][ T5935]  ? kthread+0x13a/0x450
[  114.019947][ T5935]  ? __pfx_worker_thread+0x10/0x10
[  114.019965][ T5935]  kthread+0x370/0x450
[  114.019981][ T5935]  ? __pfx_kthread+0x10/0x10
[  114.019998][ T5935]  ret_from_fork+0x754/0xd80
[  114.020016][ T5935]  ? __pfx_ret_from_fork+0x10/0x10
[  114.020033][ T5935]  ? __switch_to+0x7b4/0x1120
[  114.020054][ T5935]  ? __pfx_kthread+0x10/0x10
[  114.020069][ T5935]  ret_from_fork_asm+0x1a/0x30
[  114.020095][ T5935]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  114.256192][ T1922] usbhid 8-1:0.0: can't add hid device: -71
[  114.258761][ T1922] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  114.264898][ T1922] usb 8-1: USB disconnect, device number 7
[  114.313568][   T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.419101][   T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.589997][   T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.616375][ T8549] block nbd4: shutting down sockets
[  114.700013][   T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.849550][   T41] bridge_slave_1: left allmulticast mode
[  114.851906][   T41] bridge_slave_1: left promiscuous mode
[  114.854167][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.858271][   T41] bridge_slave_0: left allmulticast mode
[  114.860891][   T41] bridge_slave_0: left promiscuous mode
[  114.863623][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.965910][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.971223][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.976380][   T41] bond0 (unregistering): Released all slaves
[  114.981031][   T41] bond1 (unregistering): Released all slaves
[  114.987860][   T41] bond2 (unregistering): Released all slaves
[  115.270854][   T41] hsr_slave_0: left promiscuous mode
[  115.273862][   T41] hsr_slave_1: left promiscuous mode
[  115.276879][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.280574][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.285020][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.289429][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.297020][   T41] veth1_macvtap: left promiscuous mode
[  115.299518][   T41] veth0_macvtap: left promiscuous mode
[  115.302018][   T41] veth1_vlan: left promiscuous mode
[  115.305080][   T41] veth0_vlan: left promiscuous mode
[  115.926298][   T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.012626][   T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.084136][   T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.144179][   T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.323010][   T41] bond1 (unregistering): (slave gretap1): Releasing active interface
[  116.400783][   T41] bond0 (unregistering): Released all slaves
[  116.404896][   T41] bond1 (unregistering): Released all slaves
[  116.743019][   T41] hsr_slave_0: left promiscuous mode
[  116.754768][   T41] hsr_slave_1: left promiscuous mode
[  116.759286][   T41] veth1_macvtap: left promiscuous mode
[  116.761481][   T41] veth0_macvtap: left promiscuous mode
[  116.763564][   T41] veth1_vlan: left promiscuous mode
[  116.767018][   T41] veth0_vlan: left promiscuous mode
[  117.208353][   T41] IPVS: stop unused estimator thread 0...