last executing test programs:

19.081426201s ago: executing program 2 (id=504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000010400000000030000000000000077b1a0a2279e04cf2b481b92219016ed01979f3f79d1a77f23cf8595b3d1ef73f4bac749b1e7b88a1c0d355f1a3f729474e94ebe4ff64f99778598ec5b593a1e7ec5a7", @ANYRES32=0x0, @ANYBLOB="fab0817dbcedf71a2c001280110001006272696467655f736c6176650000000014000580050019000300000005000a0001000000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

19.081003971s ago: executing program 2 (id=505):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}, 0x30004084)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0)
ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000b000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)={[&(0x7f00000000c0)='\x00', &(0x7f00000004c0)='\xd7\\\x83\xcb\xfe\x80e4yM\xdc\x04 ', &(0x7f0000000240)=':\x00', 0x0, &(0x7f00000002c0)='/dev/video#\x00', &(0x7f0000000300)='/dev/video#\x00', &(0x7f0000000340)='$-\x00']}, &(0x7f0000000480)={[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=').}\x7f#-.\'%+\x00', &(0x7f0000000440)='\x00']}, 0x100) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) (async)
r5 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x80, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x69, 0xa8, @random="0741c3332be9cd7c121f4dbe1fb52183726c78cae78c03f55ebc0080dbc0cfa7b8139b7c830a3414a2c18ab6eb1858743c4239f583bed038375efe3859b3a15aa80f54d4bae63e760cd08d4b63744f0680c7eb12af572ee4ec980af5cc9dc58727679e4627"}]}, 0x80}}, 0x200449c1) (async)
recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async)
mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xa1)
getdents64(r8, &(0x7f0000000c40)=""/4096, 0x1000) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async)
bind$alg(r9, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

18.95138092s ago: executing program 2 (id=506):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async)
r1 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x6)
ioctl$FICLONE(r0, 0x40049409, r1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x900, 0x0, 0xffffff95})

18.94955893s ago: executing program 2 (id=507):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b189a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x18e5811, 0x0) (async)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) (async)
r4 = fcntl$dupfd(r2, 0x406, r2)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) (async)
syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x346}, 0x0, &(0x7f0000000400)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
openat$tun(0xffffff9c, 0x0, 0x200080, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

18.880064103s ago: executing program 2 (id=508):
r0 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, 0x0)
mq_getsetattr(r0, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x81, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404)
ioctl$SNDCTL_TMR_STOP(r1, 0x5403)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0)
ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000180)=0x7af)
sendmmsg$inet(r2, &(0x7f0000000080), 0x400000000000043, 0x8014)

18.75937762s ago: executing program 2 (id=509):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="c4c1e279ebe93fe93fa000b0bbeef080962080000038f4c4e18df552f3c4e2390c8b034500000f23690f01d1c4c335386a8f930f3501c5", 0x37}], 0x1, 0x54, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700002e00000008000100"], 0x38}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x7a, 0x20002)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="c4c1e279ebe93fe93fa000b0bbeef080962080000038f4c4e18df552f3c4e2390c8b034500000f23690f01d1c4c335386a8f930f3501c5", 0x37}], 0x1, 0x54, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700002e00000008000100"], 0x38}}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x7a, 0x20002) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

18.710131081s ago: executing program 32 (id=509):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="c4c1e279ebe93fe93fa000b0bbeef080962080000038f4c4e18df552f3c4e2390c8b034500000f23690f01d1c4c335386a8f930f3501c5", 0x37}], 0x1, 0x54, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700002e00000008000100"], 0x38}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x7a, 0x20002)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="c4c1e279ebe93fe93fa000b0bbeef080962080000038f4c4e18df552f3c4e2390c8b034500000f23690f01d1c4c335386a8f930f3501c5", 0x37}], 0x1, 0x54, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700002e00000008000100"], 0x38}}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x7a, 0x20002) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

2.189972423s ago: executing program 3 (id=738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)

1.841040938s ago: executing program 3 (id=741):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000040)="0f2265650f01c426844e00f2660f21b5c4e115f2eec4e3fdcfb675000000838fea201282003800000e0000000f300f3221c1", 0x32}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

1.790482358s ago: executing program 3 (id=742):
r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff06)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000940)="00000010000097a1c4bbe89086dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYRES64=r3], 0x158}}, 0x4040400) (async)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f0000000440)={0x100, 0x0, r5, [{0x0, 0x5, 0x1, 0x5, '\x00'}, {0x3, 0x8000000000000001, 0x5, 0x9, '\x03\'<\xd7,'}, {0x1, 0xbc, 0x4, 0xffffffff, '#(\xcd%'}, {0x6, 0x3, 0x1, 0x60000000, '}'}, {0x2, 0x6, 0x0, 0x193}, {0x4, 0xc, 0x1, 0xb, '\x00'}, {0x5, 0x8, 0x0, 0x9}, {0x3, 0x1, 0x1, 0x7, '\x00'}]}, 0x100) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1e003300c034010008e110000001ffffffffffff505005000000202c0700000004006c006bd3787da57a8c4dfe388ced00c4cba45d1db2d440edce2ddb5aa3a702000000000000003a0943fe79efd53aa3bf2b501a8e6bb3b95ee770ef482420d048f4210fe732c14b08c343d0b79352e00793bc97000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20000044)
listen(r0, 0x0) (async)
syz_io_uring_setup(0x169a, &(0x7f0000000240)={0x0, 0xd0f1, 0x10000, 0x2, 0x18d}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x80, &(0x7f0000000340)=0x6, 0x0, 0x4)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0xc, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0xcb47, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x8, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x1, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x10000, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0x9, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x10, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0xffffffff, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x0, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x6, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x7ff, 0x0, 0x9, 0x5, 0xc0000, 0x5, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x6, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x14044eb2, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x40036, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x0, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x1, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x9, 0x72, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b80)={'syztnl1\x00', <r14=>0x0, 0x8000, 0x20, 0x6, 0x3, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x66, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, {[@lsrr={0x83, 0x7, 0x65, [@remote]}, @timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0x5, [{@remote, 0xb}]}]}}}}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)="d42c048f0409970ce17f1618d0ac827721937556628600d1b772adfcad4a8757c21f8dc9eedada3ae7c861f181f4fc585866acaee31bcf2e8485eb2d0c5ed8a4ff88a7f76ef21ad9e0de61067a0bb75afdf32fcaf1636ffd9e42eb20de22bdb0c04b3778ef206cc4dc4149132083db2e546e5f3ffce80b787c8b2195f156607c25416c8f2398c79e44b7686e7c1014107d91436596ba5ab0d4bf14a476dfb3013e47f9cb1e662ab7e0881e3d1784057525fbb25774808a346e77a83f74c258b014fe44346135bc62114290f9f139f9467bbc744fadce8082f2c3c97c584d56509ccb", 0xe2}, {&(0x7f0000000840)="6e71ffcda7102521fbce632b20155d9d44fb0a4c4731e644f80f5a3b3f6eac2c3aaedb51389bfb0cea1f6a8ed6719cef0bd24ca11bdb9987d9699b46ddf4491d153609aa2f7e0316855fd61a2b1e2d61768a8353b5f5769acad05e598fbf76b69ecfd1f4e0b838fd4b8879991536167291e5e3e61a59aabdf798df6ec0bfb7c8d9c87c19a0953bbd6d9f766fbd489a328f3186375f1ee43094ab11cb9ee16ba730d07c185372792c4ef794ec650d328cc7ff550bad1d6ba15d0379d9eaff7183d4637c491009b0bf73652b539d94fdd8", 0xd0}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000980)="0367b759dc50697a3eb63365216fd1f60aa388d3002729435c248f79185dc606", 0x20}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="222d650bbf4ec096b9cd841c0f6880ae23732edaff4db9b876c59f5e1e07f0286d280a1454afef5057b322faf98afe12cc93ebd554386078011d41d5730e8bc1f779cc664edd1d1251818dca094d68ff6a42220607edef3de3cc6931adbc38cd027cc766c40846fc713b44684a9edc1ebac1dc1acafcf7a3582367a52bd92a35633d8bd4667d4adac6d6796eb0580abbba94e683a39a52a1c5283f6dcc6c4a", 0x9f}, {&(0x7f0000000ac0)}], 0x7, &(0x7f0000003e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x3a}, @local}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x9, "36602d471ca8b3"}]}, @ssrr={0x89, 0xb, 0xbe, [@broadcast, @local]}, @generic={0x86, 0xd, "eb15e45caafa99fea3b622"}, @lsrr={0x83, 0x1b, 0x78, [@dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010100, @loopback, @private=0xa010102, @remote, @broadcast]}, @lsrr={0x83, 0x7, 0xce, [@loopback]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x68, 0x0, [{0x6, 0xd, "0c75bc88abf2a972fa22a8"}, {0x7, 0x12, "0ab7012bed72c88c7fad763504dd19b4"}, {0x7, 0x6, "7ab6db5c"}, {0x7, 0x5, "3702f5"}, {0x0, 0xe, "66ca6e57a93db74f7e465628"}, {0x6, 0xf, "ff6408591e77a0d4e5e08a045e"}, {0x1, 0x11, "4ba1bcd3ee86b554df14cea94f9e74"}, {0x7, 0x6, "f83b2372"}, {0x0, 0x4, "f3b7"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x3, [0x5, 0x6]}, @lsrr={0x83, 0x27, 0xc7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @rand_addr=0x64010100]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x6c, 0x0, 0xb, [0x0, 0xe, 0x10000, 0x9, 0x7, 0x6, 0x1b5d]}]}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@generic={0xddddedbbb692ff1d, 0x10, "d78cda0d1ac8e9ec5eb5198b8396"}, @timestamp_addr={0x44, 0x4c, 0xdb, 0x1, 0x4, [{@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010101, 0xa}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1d}, {@local, 0x8}]}, @ssrr={0x89, 0x7, 0x8c, [@private=0xa010102]}, @cipso={0x86, 0x1c, 0x2, [{0x2, 0x6, "90313789"}, {0x0, 0x10, "06e16a3ddb6643db2d08819bff67"}]}, @ssrr={0x89, 0x7, 0x8a, [@private=0xa010102]}]}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xa9, 0x1, 0xc, [{@local, 0x10}, {@multicast1, 0x9b}, {@loopback, 0x4}, {@loopback}, {@loopback, 0x8}, {@multicast1, 0x1}, {@broadcast, 0xffffffff}, {@multicast2, 0x8}, {@rand_addr=0x64010100, 0x2}]}, @generic={0x83, 0x8, "fc9f39333805"}, @timestamp_prespec={0x44, 0x2c, 0x51, 0x3, 0xf, [{@broadcast, 0x8}, {@local, 0x2}, {@loopback, 0xe}, {@multicast2, 0xfffffffd}, {@loopback, 0x8e}]}, @timestamp={0x44, 0x14, 0x96, 0x0, 0x1, [0x3, 0xfffffff2, 0x2, 0x4]}, @noop, @noop, @rr={0x7, 0x1f, 0x83, [@empty, @empty, @multicast1, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x5}, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}], 0x328}, 0x20041) (async)
timer_create(0x5, &(0x7f00000002c0)={0x0, 0x23, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

1.708608231s ago: executing program 3 (id=744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000008}, @TCA_NETEM_RATE64={0xc, 0x8, 0x26455f14adc0284b}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)="7bde898718a6c6c9237cb3183110240767593c40c38b46f5aaeb010661a7f3a802772dbeacbb719d97936097c7800c3d28a0234a87eba4fc532c7a3e1d96bc18a74bc61cf414ee3274f2ad278b47c77c0e45053d47029eb9ef0b3ac4a709f6dd73fdf65e6cc009bb98827b4d1716e42b0498dad14ebb339fe30c9128e7661135a70a36cc3a0198de1ee50ac13750797f4ea33fabeecb09d217918384bb28ef8d0367ab68e1ed5e3d832450b228c8c1feb0f8ec2d26694be70a3d212c9a304aa07e798a47ba95b016f13bfb0c94e2f325c1a8fc53ec4e06f0c27f07ed17b85387eb107c2ae94bc026472c78b61bc85fbb101d4c3a6ee4", 0xf6}, {&(0x7f00000000c0)="92309e6d23dd22b738dccfb217c3fe033ba644e321e9f54a1e7ec77550f2e0272b4806d914c9f23c3732ebae91b667771f0d5abb4436b0d81cb607cc7cfa30391ec6bbfdf6b477eeae64afd922c6b7aab5", 0x51}], 0x2}}], 0x1, 0x20048814)
r5 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x1, &(0x7f00000012c0)=<r6=>0x0)
r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r7, 0x0, 0x0, 0x200000000004}])
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010029bd7000ffdbdf25000000004b65c18743a7be51b2df13dcea4a4bd0979a092f3d5ce48fc0bf772f262e1cb34315a70e94c8433e946ca4b602492f", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000018001680140001801000020006000000450d000008000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x20201, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040))
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000680)='7Q', 0x2}], 0x1)
close(r8)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x6840, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
ioctl$CDROM_SELECT_DISK(r10, 0x5322, 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0700000000000000000005000000b677b9cbc0a8f62ea722ba5e1d4ef4926561cc01cfbf3e806f2dce357359cfbb32684f2233e334af18fd177532bf5a5f9bf379b113b9b80cf40a1f808fd339fbcecfed3f921dec2ea3a18a85924fb9777cfe6f5b2d2007cef79555cf4a8b547382815e532c8497a8c85d049d07da9318b089d580d2a854daacd910973be7aee669e0db7ddfe1875a48cc4c93f067938271be8ccf431b1a23e606775d9f0cf4e14497b2"], 0x14}}, 0x0)

1.447941165s ago: executing program 1 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x5, 0x1})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$bind(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x800060, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0)

1.110867085s ago: executing program 1 (id=754):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x4}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000080000000000000000000000000006800000100000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
read$usbmon(r0, &(0x7f0000000240)=""/123, 0x7b)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1fffc000, 0xb, 0x5}}}}]}, 0x40}}, 0x0)
r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000000c0)='fd', 0x0, r5)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r10 = userfaultfd(0x801)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x411c, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x3, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r12=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0xfffffffe, @empty, 0x8}, r12, 0x8}}, 0x48)

901.309391ms ago: executing program 3 (id=755):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="a087c1373414d2cfa22e00c83740b466be64bedc98f2af89ec28ee936ad4f987422a3eed72e8562daa554aaad557da943308aafa5ddaa7c2f09384d5864597a40b41ddc47169de1ddb25fea3291c37c39938b083ae6502c9d947cdd57ea189b22fb38ca3464d4a14ca7369e63a8d45fb3e581a26cbf7065731b6a20f22a34f5d3dc0414a815df56701d88bf66a1c1a16589ae9117316d740a2556b5b07a175f1f2e19b45fc03ae3e1c7c89590f95a6b526d3", 0xb2}, {&(0x7f0000000200)="db922057df0bcfd489756be57cbc14359f1c5db482b8ef2f94a3b4664076b5f4079f1518334dd10e2522046533a420b462366f29e48d0870bbf0bb0dc4712b1f7b073914", 0x44}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="d1d833abb292da820c7e1b3710a889283db96f3758d83ead31158117b7ce99c8e4db87eae5724be84e5b7488dcea2d0f1453604b62d2e65ae5188cdd22adf65fd817965ca689a3a7a18e71907c622b5fe0345258d6530b9d9027690051615a6e46ea257d004d896d3225", 0x6a}], 0x4}, 0x44804)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)

831.138965ms ago: executing program 3 (id=757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x3fffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48)
setreuid(0xee01, 0xee01)
r2 = fanotify_init(0x200, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', <r4=>0x0, 0x8000, 0x80, 0xf, 0xe8000000, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xd5, [@empty, @multicast1, @local]}, @generic={0x89, 0x9, "3758a686b2cd9b"}, @lsrr={0x83, 0x7, 0x88, [@loopback]}, @timestamp_prespec={0x44, 0x3c, 0x67, 0x3, 0x6, [{@empty, 0x8}, {@broadcast, 0x7}, {@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x7}, {@remote, 0xefd8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

604.036783ms ago: executing program 4 (id=760):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=""/222, 0xde, <r0=>0x0, &(0x7f0000000180)=""/253, 0xfd}}, 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
sendto$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94)

411.071526ms ago: executing program 0 (id=763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d4f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x0)

340.930389ms ago: executing program 0 (id=764):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents(r0, &(0x7f0000000000)=""/34, 0x22) (async)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10a03)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x2, 0x9})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x4000}) (async)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10)

340.516272ms ago: executing program 0 (id=765):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth0_virt_wifi\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x2a, 0xb, 0xa85, {0xd, @hdata="c6bc97f570b24b9064a36ad05ede9141e14f65c1521fd00b32f05efd6020db0d0909afcf99ae74b7f19b45d02b34ccc35c734499", {0x0, @multicast, 0xb, 0x4, [0x3b112ec3, 0x100]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x27}, @local, 0x401, 0x3}, {0x0, @broadcast, 0x2, 0x6f30, [0x3, 0x793]}, 0x8000000000000001, 0x4}}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xfffffffffffffe9b, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x0, 0x1, 'TEE\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000d80)={0x7d8, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x7c4, 0x3, 0x0, 0x1, [{0x394, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "0c0a14984162a89e008f2cbb5b0dd1eb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "3a7fbc32248ad2cd9324eacfae17308e6779522eb74628823e0b527e29437556454cba4fcfb247734ff314af8bf7df30b481f26e2a26b3e31f2222adacaedaff237436bc60b710071578db0bc03a809aafc7d5c98054235d1c07f6fd18187d45eb0d3166749eea6a2cd9dffed57c73d231"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "24473fbf5f2830a2e887f328a7f64683457557d2b93b697d7f80e9fe0acd34985eb4afa03e960cbcc87f4b43e6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "c62125f5c086f1af86c909734e09262b77d5e4022769a88cb8748fa887a602dd377f9e22dfee11d322e3932efe1eb21f80cf513abf7bdbae7305ad9c1ca17b38605ef84d9aa885e9b9943f840d470e35d3310d8fc57159729618d82de7c80a8f1a1691a4b61b38b6d8229d183f3767a84a9bd4dc940da7ab4ab006cf3f86"}, @NFTA_DATA_VALUE={0xa0, 0x1, "442938514de45b65afdc49be6904d80eac099cc860b8fe60ffa576cd1e8159fa8cce6fd9a25100672e065bb814663eb47118aa53ee0f9c3c350330c451d34b3dca9631af2cb91bda3facf6f61249dd969ce984da5915d17d2a45bbfa7a6476d442b9af460c1f1187b5b03ba028f162e6e83f9619f9764f89d00212d1c89f1ac356ab81ecc73ffcb0a093fd86af54899f1d42c5fc0104134de8a44e73"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "5b11749246faa5f3553e1b0032559f621553dee7cfdc03cad523662f0c1dab4c856c2b68881c11644f1263708422d145ec17a5193f629eb950498bfffabbb2faac185f47b2c89e231fba83a1ab75c7ab349a7fc56f3f2b984d4173971397b3c98adf7daa552bbeb50b616e91a1af60b6e0ae98f388481c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x188, 0xb, 0x0, 0x1, [{0x150, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x140, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "176f9233c1bee24c209a8baac7dc7f403489aae9f848555a7f96d1f48737d5e632548db4ae3b3b3804a730989e9d27f3"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x6a, 0x3, "7d436e5d8bf849fa5887a23e3b20ca531877cc5b309483cf0c4d69559f2977b70378a80877de09e8e986461ac61f4643bd7c7acb74c5dcc0e6cc4506b504613e04941e79c321ce5d2cf2d6ff09abb9d642d42e7486c1381370b341064b54e7a1dcfc2fec77e7"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x77, 0x3, "81a2378fdc3e38eac33fd9ee0e873f45d1f11759002fbbefe348878e48c32e09650c9b51e9a1eefd8d667c947d7d18c2a7417452ffff1c055082ff8f9204c0a8914e5f9d3ea0290450da284e294118b2485e630d6bc999ac170c5a15b5c0b16bf42818ef2c2a2a244d55bf0a4e9d508be28f00"}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "075a481f1b087e9cd7a77547a5109eba74cc12b7a91679bd5eb263a427ec7964b27513fa68d79f7c9401792949b44047abad3d616fa455cc12693b7dcb8340654729dbfbfdf6c24bd81f0d77632a317a7b32324292f462aa8392cf4e43e387515ed4c5c9878bed1084fd8da88ee8d4b060bd1247b88a74a43a7b2cab9be6e11e738afb195a99d2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "dbeb6f0724b0e31886eb2cc5894811e8678a"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6628}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x7d8}, 0x1, 0x0, 0x0, 0x4000040}, 0x40080)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f00000001c0)=r6)
sendto$inet(r6, &(0x7f0000000400)="8d3e882485b7b6c6e496fedcf73e2f17cf52744a6ae5039cd7a430fce1a4dc1ace83bf3fa593e76eaf08549df97402e84d1b2346f22e4ee4ed0aa0617d0c0d0056e0171333df2233f834a2fdae20f04c0a7b67a9fec331038ec99e84ad7327d9d31156d2b772a01a50340b880676f5508531707f6b9b6417f57b28d9e596018e3b04c102103227362b2874bcd7dec4855d6ef1c9e9238ccc87e2ce9e2ca94a79ae1671973dae784296e4", 0xaa, 0x60, &(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

340.245401ms ago: executing program 4 (id=766):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
close_range(0xffffffffffffffff, r0, 0x2)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040))
r1 = fsmount(r0, 0x1, 0x88)
syz_emit_ethernet(0xa1, &(0x7f0000000080)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@llc_tr={0x11, {@snap={0x0, 0xaa, "ffd5", "f6d0b3", 0x8884, "51af9f34c4545340f251c35c3f71733f95a95dc7e7efba4d5d06ea04ff9c34c4696a97eef83b9de4169d0df8956cc3a84e10da25fd7117f0ed1591df6bc307f2885248bb9fbabd565c243c8d1a0844486382207a6398b60f6eb2276ec87b14585fe80b191afaf2436f8ccabd3ad3f78f729176efcb6b47afd35a082600c17c98ba670dfd99c4478756c7"}}}}}, &(0x7f0000000140)={0x0, 0x4, [0xdb, 0x763, 0x723, 0xbfa]})
pread64(r0, &(0x7f0000000180)=""/241, 0xf1, 0x4)
recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000280)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/243, 0xf3}], 0x1}, 0x4}, {{&(0x7f0000000440)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f0000000800)=""/91, 0x5b}], 0x5}, 0xc0000000}, {{&(0x7f0000000900)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000000a80)=""/112, 0x70}, {&(0x7f0000000b00)=""/253, 0xfd}, {&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/202, 0xca}, {&(0x7f0000000d80)=""/87, 0x57}, {&(0x7f0000000e00)=""/53, 0x35}, {&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/202, 0xca}], 0xa, &(0x7f0000001080)=""/207, 0xcf}, 0x6}, {{&(0x7f0000001180)=@l2, 0x80, &(0x7f0000001440)=[{&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/240, 0xf0}, {&(0x7f0000001380)=""/133, 0x85}], 0x3}, 0x1}, {{&(0x7f0000001480)=@xdp={0x2c, 0x0, <r2=>0x0}, 0x80, &(0x7f0000001500)=[{0xffffffffffffffff}], 0x1, &(0x7f0000001540)=""/206, 0xce}, 0x5}, {{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/150, 0x96}, {&(0x7f0000001780)=""/58, 0x3a}, {&(0x7f00000017c0)=""/167, 0xa7}, {&(0x7f0000001880)=""/221, 0xdd}, {&(0x7f0000001980)=""/147, 0x93}], 0x5, &(0x7f0000001ac0)=""/43, 0x2b}, 0x3}, {{&(0x7f0000001b00)=@can, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/232, 0xe8}, {&(0x7f0000001c80)=""/132, 0x84}], 0x2}, 0x8}, {{&(0x7f0000001d80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)}], 0x1, &(0x7f0000001e80)=""/132, 0x84}, 0x3}, {{&(0x7f0000001f40)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001fc0)=""/138, 0x8a}, {&(0x7f0000002080)=""/254, 0xfe}, {&(0x7f0000002180)=""/166, 0xa6}], 0x3}, 0x6}], 0x9, 0x163, 0x0)
r4 = io_uring_setup(0xbde, &(0x7f00000024c0)={0x0, 0x5c17, 0x100, 0x0, 0xe8})
r5 = io_uring_setup(0x5ae, &(0x7f0000002540)={0x0, 0x6c32, 0x40, 0x0, 0x327})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f00000025c0))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x11, 0xa, &(0x7f0000002600)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x7, 0x6, 0x8, 0xfffffffffffffff0}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}], &(0x7f0000002680)='GPL\x00', 0x15, 0xb9, &(0x7f00000026c0)=""/185, 0x41100, 0x45, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002780)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000027c0)={0x1, 0x4, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002800)=[r0, r0, r0]}, 0x94)
fallocate(r0, 0x0, 0x7f, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000002900)={{0x4, 0xa2}, 'port1\x00', 0x11, 0x51011, 0x2, 0x5, 0x7fff, 0x4, 0x3, 0x0, 0xe, 0x3})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000002a00)={0x48, 0x8, r1, 0x0, 0x7, 0x1678cf, 0x1f, &(0x7f00000029c0)="08ccde93f58279525d0da9fb7b8c4a3717e68382d949e6c7edec546a251d51", 0x10001})
bind(r6, &(0x7f0000002a80)=@isdn={0x22, 0x3, 0x4, 0xfe, 0xc}, 0x80)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000002b00)={0x1, 0xe, 0xe923})
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000002b80)=@attr_other={0x0, 0xffffff3b, 0x401, &(0x7f0000002b40)=0x4})
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000002bc0)={0x2, {0x3, 0xffffffff, 0x0, 0x100}})
syz_genetlink_get_family_id$gtp(&(0x7f0000002c00), r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000002c40)={{0x2, 0x2}, 'port1\x00', 0x16, 0x0, 0x6, 0x4, 0x3, 0xb6f, 0x1, 0x0, 0x1, 0x5})
fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000002d00))
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000002e40)={0x8, 0x8, &(0x7f0000002d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002dc0)=[0x0], &(0x7f0000002e00)=[0x0]})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000002e80))
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000003f40)={0x1, 0x8, 0x1000, &(0x7f0000002f40)=""/4096})
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000003f80)={0x2, [0x3, 0x4, 0x8001, 0x3, 0xfff, 0xfffb, 0x3, 0x6c0, 0x6, 0x100, 0x8, 0x7, 0x3ff, 0x6, 0xe816, 0xe48, 0xfff9, 0x7, 0x0, 0x40, 0x9, 0xf506, 0x7, 0x4, 0x1, 0xfff8, 0x6, 0x5, 0x6, 0x8000, 0x4, 0x1, 0x0, 0x3, 0x7f2, 0x6, 0x5, 0x6, 0x8, 0x3, 0x1000, 0x9, 0x1000, 0x7, 0x3, 0x9b0, 0x8, 0x200], 0x6})
mkdir(&(0x7f0000004000)='./file0\x00', 0x12)
write$UHID_INPUT2(r1, &(0x7f0000004040)={0xc, {0x87, "698c31a2c3d1f7c279277fa7b1c2801933fd13fb7b01e36b9ca1cfee08a375e9204d8f8a301cc4093ad962fbcec53b773b9e31ec644c065b181ee8f1fd3077f8b52f55d991d849452c25bcf643a379ff8e8201c5cf5a7d2ed5f2f4eead5910d31d8b45e0907d993c4a452627b865a124503d72f64dae2d51e2227984ac354317dbc667eefc1973"}}, 0x8d)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004140), r3)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004200)={&(0x7f0000004180)={0x58, r7, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x40)

260.475545ms ago: executing program 4 (id=767):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='WZ', @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

190.601663ms ago: executing program 1 (id=768):
r0 = syz_open_procfs(0x0, &(0x7f0000001380))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000070c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000007180)={0x0, 0x0, &(0x7f0000007140)={&(0x7f0000007100)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20008000)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)
getdents(r0, &(0x7f0000002000)=""/4096, 0x1000)

189.13862ms ago: executing program 0 (id=769):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x300, 0x293, 0x3, 0xbcb1, 0xfff, r1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x5c, r4, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "1c4a6d", "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"}}, 0x110)
sendmmsg$inet(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x4e1a, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x2, 0x4000)

116.805956ms ago: executing program 0 (id=770):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket(0x1d, 0x2, 0x6)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x49200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x208041)
pipe2(&(0x7f00000003c0), 0x4800)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1})
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000140)=0x4)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03d", 0x7}], 0x1)
syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e07011020"], 0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000c051)
io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b})

116.321839ms ago: executing program 4 (id=771):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async)
timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048090) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x2d, 0x2, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x1, 0x4}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000001a000000000000fe00009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)

116.099864ms ago: executing program 1 (id=772):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d40), 0x100, 0x0)
ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000dc0)={@lba=0x4, 0x1, 0x18, &(0x7f0000000080)=""/24}) (async, rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r2=>0xffffffffffffffff}, 0x4) (async, rerun: 64)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000000)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

59.221812ms ago: executing program 4 (id=773):
r0 = socket$kcm(0xa, 0x1, 0x106)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4)

59.036736ms ago: executing program 1 (id=774):
r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xfffe, 0x38, 0x7}, 'syz1\x00', 0x44e4})
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

1.108916ms ago: executing program 4 (id=775):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffd1f, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0x7fffffff, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000810)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x0, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000380)=""/203, 0xcb}], 0x2, 0x7, 0x7fff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c)

190.613µs ago: executing program 1 (id=776):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x20004000)
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl'])
modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4207, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540))
ptrace$cont(0x9, r1, 0x1, 0x80000002)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {}, @result}], 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0x9, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40004)

0s ago: executing program 0 (id=777):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x1, 0x0, 0x200})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async, rerun: 32)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async, rerun: 32)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xdb) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xcc)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async, rerun: 32)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47dfffa, 0x0) (rerun: 32)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})

kernel console output (not intermixed with test programs):

[   44.147207][   T40] audit: type=1400 audit(1766646257.755:61): avc:  denied  { siginh } for  pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:17036' (ED25519) to the list of known hosts.
[   46.596763][   T40] audit: type=1400 audit(1766646260.225:62): avc:  denied  { name_bind } for  pid=5846 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   46.641941][   T40] audit: type=1400 audit(1766646260.265:63): avc:  denied  { execute } for  pid=5847 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   46.649913][   T40] audit: type=1400 audit(1766646260.275:64): avc:  denied  { execute_no_trans } for  pid=5847 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   48.848324][   T40] audit: type=1400 audit(1766646262.475:65): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   48.863237][   T40] audit: type=1400 audit(1766646262.495:66): avc:  denied  { mount } for  pid=5847 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.865982][ T5847] cgroup: Unknown subsys name 'net'
[   49.056376][ T5847] cgroup: Unknown subsys name 'cpuset'
[   49.060659][ T5847] cgroup: Unknown subsys name 'rlimit'
[   49.256156][   T40] kauditd_printk_skb: 7 callbacks suppressed
[   49.256172][   T40] audit: type=1400 audit(1766646262.885:74): avc:  denied  { setattr } for  pid=5847 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   49.270185][   T40] audit: type=1400 audit(1766646262.885:75): avc:  denied  { create } for  pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   49.279376][   T40] audit: type=1400 audit(1766646262.885:76): avc:  denied  { write } for  pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   49.288833][   T40] audit: type=1400 audit(1766646262.885:77): avc:  denied  { read } for  pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   49.299065][   T40] audit: type=1400 audit(1766646262.895:78): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   49.309206][   T40] audit: type=1400 audit(1766646262.895:79): avc:  denied  { mount } for  pid=5847 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   49.317283][   T40] audit: type=1400 audit(1766646262.905:80): avc:  denied  { read } for  pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   49.323087][ T5909] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   49.329129][   T40] audit: type=1400 audit(1766646262.955:81): avc:  denied  { relabelto } for  pid=5909 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   49.338525][   T40] audit: type=1400 audit(1766646262.955:82): avc:  denied  { write } for  pid=5909 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   49.354831][   T40] audit: type=1400 audit(1766646262.985:83): avc:  denied  { read } for  pid=5847 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   50.042580][ T5847] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.383083][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.383875][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.386185][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.386880][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.387179][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.387691][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.387972][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.389365][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.391692][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.392058][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.395681][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.397792][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.399521][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.401931][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.404046][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.404538][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.405817][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.406295][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.410734][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.433400][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.675687][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   53.714309][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   53.788691][ T5936] chnl_net:caif_netlink_parms(): no params data found
[   53.821799][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.824416][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.827647][ T5935] bridge_slave_0: entered allmulticast mode
[   53.830385][ T5935] bridge_slave_0: entered promiscuous mode
[   53.872138][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.875340][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.878364][ T5935] bridge_slave_1: entered allmulticast mode
[   53.881633][ T5935] bridge_slave_1: entered promiscuous mode
[   53.936043][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.939054][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.942047][ T5940] bridge_slave_0: entered allmulticast mode
[   53.946248][ T5940] bridge_slave_0: entered promiscuous mode
[   53.970922][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.975447][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.978392][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.981446][ T5940] bridge_slave_1: entered allmulticast mode
[   53.984390][ T5940] bridge_slave_1: entered promiscuous mode
[   53.997913][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.038172][ T5935] team0: Port device team_slave_0 added
[   54.041939][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.045268][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.047919][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.050286][ T5936] bridge_slave_0: entered allmulticast mode
[   54.053357][ T5936] bridge_slave_0: entered promiscuous mode
[   54.057441][ T5935] team0: Port device team_slave_1 added
[   54.060697][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.064255][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.066588][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.068965][ T5936] bridge_slave_1: entered allmulticast mode
[   54.071800][ T5936] bridge_slave_1: entered promiscuous mode
[   54.109150][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   54.115708][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.118879][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.129890][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.143019][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.151551][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.154796][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.165754][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.171374][ T5940] team0: Port device team_slave_0 added
[   54.175462][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.195646][ T5940] team0: Port device team_slave_1 added
[   54.234461][ T5936] team0: Port device team_slave_0 added
[   54.274125][ T5936] team0: Port device team_slave_1 added
[   54.277048][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.280023][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.289195][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.300924][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.304109][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.313377][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.317143][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.319515][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.321985][ T5942] bridge_slave_0: entered allmulticast mode
[   54.325043][ T5942] bridge_slave_0: entered promiscuous mode
[   54.335226][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.337761][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.340263][ T5942] bridge_slave_1: entered allmulticast mode
[   54.343542][ T5942] bridge_slave_1: entered promiscuous mode
[   54.350317][ T5935] hsr_slave_0: entered promiscuous mode
[   54.352858][ T5935] hsr_slave_1: entered promiscuous mode
[   54.389929][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.392441][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.400759][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.411196][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.413888][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.422220][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.439539][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.453139][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.479343][ T5940] hsr_slave_0: entered promiscuous mode
[   54.481737][ T5940] hsr_slave_1: entered promiscuous mode
[   54.484110][ T5940] debugfs: 'hsr0' already exists in 'hsr'
[   54.486029][ T5940] Cannot create hsr debugfs directory
[   54.511794][ T5942] team0: Port device team_slave_0 added
[   54.532222][ T5942] team0: Port device team_slave_1 added
[   54.546644][ T5936] hsr_slave_0: entered promiscuous mode
[   54.549810][ T5936] hsr_slave_1: entered promiscuous mode
[   54.552066][ T5936] debugfs: 'hsr0' already exists in 'hsr'
[   54.554046][ T5936] Cannot create hsr debugfs directory
[   54.589803][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.592179][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.600974][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.625051][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.627678][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.636435][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.749952][ T5942] hsr_slave_0: entered promiscuous mode
[   54.752747][ T5942] hsr_slave_1: entered promiscuous mode
[   54.755262][ T5942] debugfs: 'hsr0' already exists in 'hsr'
[   54.757216][ T5942] Cannot create hsr debugfs directory
[   54.831819][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.845957][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.855595][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.868686][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.924615][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.930524][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.936988][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.941810][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.994937][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.003032][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.011271][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.020528][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.080136][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.086438][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.091561][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.097498][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.105346][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.128854][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   55.152283][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.154877][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.170603][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.173084][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.181056][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.217474][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.224104][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   55.242076][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.244661][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.250933][ T5936] 8021q: adding VLAN 0 to HW filter on device team0
[   55.257951][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.261223][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.277719][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.280959][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.289424][   T40] kauditd_printk_skb: 10 callbacks suppressed
[   55.289434][   T40] audit: type=1400 audit(1766646268.915:94): avc:  denied  { sys_module } for  pid=5935 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   55.293492][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.300967][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.317235][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.340950][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   55.351687][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.359234][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.361718][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.378238][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.380690][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.414018][ T5948] Bluetooth: hci1: command tx timeout
[   55.430672][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.467222][ T5935] veth0_vlan: entered promiscuous mode
[   55.474770][ T5935] veth1_vlan: entered promiscuous mode
[   55.482495][ T5948] Bluetooth: hci2: command tx timeout
[   55.482538][   T64] Bluetooth: hci3: command tx timeout
[   55.482554][ T5297] Bluetooth: hci0: command tx timeout
[   55.489680][ T5935] veth0_macvtap: entered promiscuous mode
[   55.506400][ T5935] veth1_macvtap: entered promiscuous mode
[   55.522270][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.526837][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.536289][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.544405][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.557167][   T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.571885][   T85] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.580423][   T85] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.589769][   T85] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.605813][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.624453][ T5940] veth0_vlan: entered promiscuous mode
[   55.651214][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.652609][ T5940] veth1_vlan: entered promiscuous mode
[   55.655328][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.672179][ T5936] veth0_vlan: entered promiscuous mode
[   55.704962][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.707470][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.717872][ T5936] veth1_vlan: entered promiscuous mode
[   55.724618][   T40] audit: type=1400 audit(1766646269.355:95): avc:  denied  { mount } for  pid=5935 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   55.734910][ T5942] veth0_vlan: entered promiscuous mode
[   55.738195][   T40] audit: type=1400 audit(1766646269.355:96): avc:  denied  { mounton } for  pid=5935 comm="syz-executor" path="/syzkaller.gVfNeu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   55.748989][ T5942] veth1_vlan: entered promiscuous mode
[   55.749824][   T40] audit: type=1400 audit(1766646269.355:97): avc:  denied  { mount } for  pid=5935 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   55.752300][ T5940] veth0_macvtap: entered promiscuous mode
[   55.760428][   T40] audit: type=1400 audit(1766646269.355:98): avc:  denied  { mounton } for  pid=5935 comm="syz-executor" path="/syzkaller.gVfNeu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   55.773809][   T40] audit: type=1400 audit(1766646269.355:99): avc:  denied  { mounton } for  pid=5935 comm="syz-executor" path="/syzkaller.gVfNeu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   55.776180][ T5942] veth0_macvtap: entered promiscuous mode
[   55.782663][   T40] audit: type=1400 audit(1766646269.355:100): avc:  denied  { unmount } for  pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   55.791086][   T40] audit: type=1400 audit(1766646269.365:101): avc:  denied  { mounton } for  pid=5935 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   55.798925][   T40] audit: type=1400 audit(1766646269.365:102): avc:  denied  { mount } for  pid=5935 comm="syz-executor" name="/" dev="gadgetfs" ino=6981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   55.802212][ T5940] veth1_macvtap: entered promiscuous mode
[   55.809046][   T40] audit: type=1400 audit(1766646269.365:103): avc:  denied  { mount } for  pid=5935 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   55.812854][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.816258][ T5942] veth1_macvtap: entered promiscuous mode
[   55.826039][ T5936] veth0_macvtap: entered promiscuous mode
[   55.836429][ T5936] veth1_macvtap: entered promiscuous mode
[   55.854068][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.863436][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.870972][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.876512][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.884196][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.891741][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.902647][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.905645][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.910448][ T1212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.915114][ T1212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.922766][ T1212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.926545][ T1212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.935638][ T1212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.938557][ T1212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.944933][ T1212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.947855][ T1212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.954716][ T1212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.958048][ T1212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.015659][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.018848][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.045849][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.049151][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.059971][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.063092][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.075785][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.079031][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.094037][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.096687][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.116276][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.121391][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.230958][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.251245][ T6037] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.256617][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.275780][ T6037] 8021q: adding VLAN 0 to HW filter on device bond2
[   56.279056][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.298884][ T6037] 8021q: adding VLAN 0 to HW filter on device bond3
[   56.301705][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.323911][ T6037] 8021q: adding VLAN 0 to HW filter on device bond4
[   56.327084][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.356507][ T6037] 8021q: adding VLAN 0 to HW filter on device bond5
[   56.359554][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.360508][ T6050] ieee802154 phy0 wpan0: encryption failed: -22
[   56.387667][ T6037] 8021q: adding VLAN 0 to HW filter on device bond6
[   56.390651][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.393894][ T6053] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b
[   56.419186][ T6037] 8021q: adding VLAN 0 to HW filter on device bond7
[   56.422806][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.447214][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'.
[   56.450260][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'.
[   56.450465][ T6037] 8021q: adding VLAN 0 to HW filter on device bond8
[   56.463161][   T85] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.476923][ T6037] 8021q: adding VLAN 0 to HW filter on device bond9
[   56.480428][   T85] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.480706][ T6059] Zero length message leads to an empty skb
[   56.483563][ T1213] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.497784][ T6037] 8021q: adding VLAN 0 to HW filter on device bond10
[   56.523310][ T6037] 8021q: adding VLAN 0 to HW filter on device bond11
[   56.526232][ T1213] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.544339][ T6037] 8021q: adding VLAN 0 to HW filter on device bond12
[   56.562996][ T6067] process 'syz.0.11' launched './file1' with NULL argv: empty string added
[   56.609661][ T6037] 8021q: adding VLAN 0 to HW filter on device bond13
[   56.624147][ T6037] 8021q: adding VLAN 0 to HW filter on device bond14
[   56.637144][ T6037] 8021q: adding VLAN 0 to HW filter on device bond15
[   56.662919][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   56.665169][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   56.668339][ T6075] vhci_hcd vhci_hcd.0: Device attached
[   56.668596][ T6037] 8021q: adding VLAN 0 to HW filter on device bond16
[   56.672796][ T6078] vhci_hcd: unknown pdu 2
[   56.678775][ T1213] vhci_hcd vhci_hcd.3: stop threads
[   56.680745][ T1213] vhci_hcd vhci_hcd.3: release socket
[   56.685717][ T1213] vhci_hcd vhci_hcd.3: disconnect device
[   56.696898][ T6037] 8021q: adding VLAN 0 to HW filter on device bond17
[   56.710781][ T6037] 8021q: adding VLAN 0 to HW filter on device bond18
[   56.736896][ T6037] 8021q: adding VLAN 0 to HW filter on device bond19
[   56.739924][ T6086] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   56.760247][ T6037] 8021q: adding VLAN 0 to HW filter on device bond20
[   56.794142][ T6086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.812596][ T6037] 8021q: adding VLAN 0 to HW filter on device bond21
[   56.830017][ T6037] 8021q: adding VLAN 0 to HW filter on device bond22
[   56.837119][ T6096] openvswitch: netlink: Missing key (keys=40, expected=100)
[   56.849458][ T6037] 8021q: adding VLAN 0 to HW filter on device bond23
[   56.882036][ T6098] comedi comedi3: comedi_config --init_data is deprecated
[   56.896631][ T6037] 8021q: adding VLAN 0 to HW filter on device bond24
[   56.920355][ T6037] 8021q: adding VLAN 0 to HW filter on device bond25
[   56.945502][ T6037] 8021q: adding VLAN 0 to HW filter on device bond26
[   56.981712][  T838] IPVS: starting estimator thread 0...
[   56.989823][ T6037] 8021q: adding VLAN 0 to HW filter on device bond27
[   57.013818][ T6037] 8021q: adding VLAN 0 to HW filter on device bond28
[   57.050839][ T6119] usb usb8: check_ctrlrecip: process 6119 (syz.1.22) requesting ep 01 but needs 81
[   57.054438][ T6119] usb usb8: usbfs: process 6119 (syz.1.22) did not claim interface 0 before use
[   57.054666][ T6037] 8021q: adding VLAN 0 to HW filter on device bond29
[   57.072696][ T6115] IPVS: using max 44 ests per chain, 105600 per kthread
[   57.118461][ T6131] loop6: detected capacity change from 0 to 2640
[   57.122344][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.130814][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.133787][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.136486][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.139583][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.142160][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.145164][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.147975][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.150615][ T6131] ldm_validate_partition_table(): Disk read failed.
[   57.153452][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.156008][ T6131] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.158741][ T6131] Dev loop6: unable to read RDB block 0
[   57.160813][ T6131]  loop6: unable to read partition table
[   57.163095][ T6131] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[   57.182865][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6134 comm=syz.2.26
[   57.256150][ T5347] ldm_validate_partition_table(): Disk read failed.
[   57.258106][ T6144] overlayfs: failed lookup in lower (newroot/2, name='bus', err=-40): overlapping layers
[   57.261356][ T5347] Dev loop6: unable to read RDB block 0
[   57.264150][ T5347]  loop6: unable to read partition table
[   57.267457][ T6141] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   57.485223][   T64] Bluetooth: hci1: command tx timeout
[   57.562580][   T64] Bluetooth: hci0: command tx timeout
[   57.564610][   T64] Bluetooth: hci3: command tx timeout
[   57.572523][   T64] Bluetooth: hci2: command tx timeout
[   57.778685][ T6199] mmap: syz.1.46 (6199) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   57.832692][ T6026] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   57.867528][ T6204] nft_compat: unsupported protocol 0
[   57.985277][ T6214] kvm: Disabled LAPIC found during irq injection
[   57.995773][ T6026] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[   57.999884][ T6026] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 59, changing to 7
[   58.004786][ T6026] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 57356, setting to 1024
[   58.009729][ T6026] usb 8-1: config 0 interface 0 has no altsetting 0
[   58.014260][ T6026] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   58.017527][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   58.021221][ T6026] usb 8-1: Product: syz
[   58.022921][ T6026] usb 8-1: Manufacturer: syz
[   58.024593][ T6026] usb 8-1: SerialNumber: syz
[   58.028408][ T6026] usb 8-1: config 0 descriptor??
[   58.033414][ T6026] hub 8-1:0.0: bad descriptor, ignoring hub
[   58.035912][ T6026] hub 8-1:0.0: probe with driver hub failed with error -5
[   58.041828][ T6026] usb 8-1: selecting invalid altsetting 0
[   58.166293][ T6217] overlayfs: workdir and upperdir must reside under the same mount
[   58.166779][ T6219] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   58.294061][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.300818][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.346818][ T6236] netlink: 'syz.1.55': attribute type 4 has an invalid length.
[   58.508174][ T6234] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.944125][ T6184] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[   58.954220][ T4106] IPVS: starting estimator thread 0...
[   58.983674][ T6267] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   58.985868][ T6267] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   58.988469][ T6267] vhci_hcd vhci_hcd.0: Device attached
[   58.996163][ T6269] vhci_hcd: connection closed
[   58.996802][ T1212] vhci_hcd vhci_hcd.2: stop threads
[   59.001278][ T1212] vhci_hcd vhci_hcd.2: release socket
[   59.004902][ T1212] vhci_hcd vhci_hcd.2: disconnect device
[   59.009002][ T6272] netlink: 'syz.0.66': attribute type 10 has an invalid length.
[   59.019653][ T6272] team0: Port device dummy0 added
[   59.025718][ T6274] tipc: Started in network mode
[   59.027533][ T6274] tipc: Node identity 7f000001, cluster identity 4711
[   59.030285][ T6274] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.034519][ T6274] tipc: Enabled bearer <eth:ip6_vti0>, priority 10
[   59.057390][ T6277] syz.0.68 uses obsolete (PF_INET,SOCK_PACKET)
[   59.062594][ T6265] IPVS: using max 44 ests per chain, 105600 per kthread
[   59.082794][ T6184] usb 8-1: device descriptor read/64, error -71
[   59.235406][ T6282] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.332815][ T6184] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[   59.338629][ T6294] overlayfs: missing 'lowerdir'
[   59.472624][ T6184] usb 8-1: device descriptor read/64, error -71
[   59.563490][   T64] Bluetooth: hci1: command tx timeout
[   59.642557][   T64] Bluetooth: hci2: command tx timeout
[   59.642597][ T5948] Bluetooth: hci3: command tx timeout
[   59.645104][ T5297] Bluetooth: hci0: command tx timeout
[   59.712866][ T6184] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[   59.733347][ T6184] usb 8-1: device descriptor read/8, error -71
[   59.970839][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.977081][ T6317] batadv_slave_0: entered promiscuous mode
[   59.977920][ T6184] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[   59.979707][ T6317] batadv_slave_0: entered allmulticast mode
[   60.003437][ T6184] usb 8-1: device descriptor read/8, error -71
[   60.114106][ T6026] usb 8-1: USB disconnect, device number 2
[   60.146613][ T1150] tipc: Node number set to 2130706433
[   60.241592][ T3248] cfg80211: failed to load regulatory.db
[   60.278693][ T6340] Cannot find set identified by id 65534 to match
[   60.293530][ T6026] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   60.308951][   T40] kauditd_printk_skb: 155 callbacks suppressed
[   60.308968][   T40] audit: type=1400 audit(1766646273.935:259): avc:  denied  { unmount } for  pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   60.365038][   T40] audit: type=1400 audit(1766646273.995:260): avc:  denied  { write } for  pid=6347 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   60.392735][ T6348] macvlan2: entered promiscuous mode
[   60.394388][ T6348] macvlan2: entered allmulticast mode
[   60.396644][ T6348] bond10: (slave macvlan2): Opening slave failed
[   60.422570][ T6026] usb 8-1: device descriptor read/64, error -71
[   60.505630][   T40] audit: type=1400 audit(1766646274.135:261): avc:  denied  { mounton } for  pid=6357 comm="syz.1.94" path="/29/file0" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.505654][ T6360] 9pnet_virtio: no channels available for device syz
[   60.520571][   T40] audit: type=1400 audit(1766646274.145:262): avc:  denied  { unmount } for  pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   60.564334][   T40] audit: type=1400 audit(1766646274.185:263): avc:  denied  { mount } for  pid=6368 comm="syz.2.98" name="/" dev="ramfs" ino=12342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   60.574237][   T40] audit: type=1400 audit(1766646274.205:264): avc:  denied  { write } for  pid=6368 comm="syz.2.98" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   60.581519][   T40] audit: type=1400 audit(1766646274.205:265): avc:  denied  { map } for  pid=6368 comm="syz.2.98" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   60.592955][   T40] audit: type=1400 audit(1766646274.215:266): avc:  denied  { unmount } for  pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   60.616473][   T40] audit: type=1400 audit(1766646274.245:267): avc:  denied  { create } for  pid=6370 comm="syz.2.99" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   60.632614][   T40] audit: type=1400 audit(1766646274.265:268): avc:  denied  { write } for  pid=6370 comm="syz.2.99" name="file0" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   60.662991][ T6026] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   60.686781][ T6384] openvswitch: netlink: VXLAN extension 30 out of range max 1
[   60.689829][ T6382] program syz.0.102 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.690783][ T6387] netlink: 'syz.0.102': attribute type 1 has an invalid length.
[   60.740026][ T6397] netlink: 'syz.3.106': attribute type 8 has an invalid length.
[   60.805713][ T6414] program syz.0.110 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.806076][ T6410] x_tables: duplicate underflow at hook 2
[   60.824729][ T6413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=6413 comm=syz.3.109
[   60.862059][ T6416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   60.928938][ T6426] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   60.972915][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   61.028136][ T6435] overlayfs: missing 'lowerdir'
[   61.037766][ T6437] kernel read not supported for file /policy (pid: 6437 comm: syz.0.122)
[   61.132877][    T9] usb 6-1: Using ep0 maxpacket: 8
[   61.135785][    T9] usb 6-1: config 2 interface 0 has no altsetting 0
[   61.139500][    T9] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[   61.142943][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.145634][    T9] usb 6-1: Product: syz
[   61.147039][    T9] usb 6-1: Manufacturer: syz
[   61.152606][    T9] usb 6-1: SerialNumber: syz
[   61.182644][ T3248] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   61.354433][ T3248] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   61.358076][ T3248] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   61.362448][ T3248] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   61.365794][ T3248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.376249][    T9] usb 6-1: USB disconnect, device number 2
[   61.407930][ T6456] program syz.3.127 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   61.484232][    C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   61.495885][ T6458] netlink: 'syz.0.128': attribute type 11 has an invalid length.
[   61.500616][ T6458] Cannot find add_set index 46338 as target
[   61.591991][ T6465] =======================================================
[   61.591991][ T6465] WARNING: The mand mount option has been deprecated and
[   61.591991][ T6465]          and is ignored by this kernel. Remove the mand
[   61.591991][ T6465]          option from the mount to silence this warning.
[   61.591991][ T6465] =======================================================
[   61.604477][ T6465] __nla_validate_parse: 34 callbacks suppressed
[   61.604488][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'.
[   61.609667][ T6467] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   61.640778][ T3248] usb 7-1: usb_control_msg returned -71
[   61.644175][ T3248] usbtmc 7-1:16.0: can't read capabilities
[   61.651908][ T3248] usb 7-1: USB disconnect, device number 2
[   61.723096][   T64] Bluetooth: hci2: command tx timeout
[   61.725129][ T5297] Bluetooth: hci3: command tx timeout
[   70.529079][    C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   73.947018][ T6506] netlink: 'syz.0.135': attribute type 10 has an invalid length.
[   73.954014][ T6501] netlink: 'syz.0.135': attribute type 10 has an invalid length.
[   73.956149][ T6506] 8021q: adding VLAN 0 to HW filter on device team0
[   73.960177][ T6506] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.969247][ T6501] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   73.982064][ T6504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   74.089049][ T6505] No control pipe specified
[   74.142804][   T40] kauditd_printk_skb: 37 callbacks suppressed
[   74.142815][   T40] audit: type=1400 audit(1766646287.775:306): avc:  denied  { create } for  pid=6513 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.168370][   T40] audit: type=1400 audit(1766646287.785:307): avc:  denied  { write } for  pid=6513 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.253957][   T40] audit: type=1400 audit(1766646287.885:308): avc:  denied  { ioctl } for  pid=6525 comm="syz.2.141" path="socket:[11798]" dev="sockfs" ino=11798 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.321524][   T40] audit: type=1400 audit(1766646287.945:309): avc:  denied  { ioctl } for  pid=6527 comm="syz.2.142" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   74.644411][   T40] audit: type=1400 audit(1766646288.275:310): avc:  denied  { map } for  pid=6535 comm="syz.2.144" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.685992][   T40] audit: type=1400 audit(1766646288.315:311): avc:  denied  { map_create } for  pid=6537 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   74.693827][   T40] audit: type=1400 audit(1766646288.315:312): avc:  denied  { name_bind } for  pid=6537 comm="syz.0.145" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   74.702987][   T40] audit: type=1400 audit(1766646288.315:313): avc:  denied  { node_bind } for  pid=6537 comm="syz.0.145" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   74.765578][ T6544] netlink: 'syz.0.147': attribute type 30 has an invalid length.
[   74.789160][ T6544] bond1: option arp_missed_max: invalid value (0)
[   74.791375][ T6544] bond1: option arp_missed_max: allowed values 1 - 255
[   74.796240][ T6544] bond1 (unregistering): Released all slaves
[   74.835992][   T40] audit: type=1400 audit(1766646288.465:314): avc:  denied  { read } for  pid=6546 comm="syz.2.148" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   74.844269][ T6549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.149'.
[   74.847991][ T6549] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   74.862526][ T6549] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.876881][ T6549] bond1: (slave ip6erspan0): making interface the new active one
[   74.881358][ T6549] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   74.900454][ T6551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   74.904883][ T6551] block device autoloading is deprecated and will be removed.
[   74.909197][   T40] audit: type=1400 audit(1766646288.535:315): avc:  denied  { ioctl } for  pid=6546 comm="syz.2.148" path="/42/file0/file0" dev="fuse" ino=0 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   74.972965][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.976070][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.182489][ T3248] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   75.367787][ T3248] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   75.370547][ T3248] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   75.374088][ T3248] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   75.377092][ T3248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   75.380605][ T3248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   75.386380][ T3248] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   75.389373][ T3248] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   75.391990][ T3248] usb 6-1: Product: syz
[   75.393928][ T3248] usb 6-1: Manufacturer: syz
[   75.401246][ T3248] cdc_wdm 6-1:1.0: skipping garbage
[   75.403321][ T3248] cdc_wdm 6-1:1.0: skipping garbage
[   75.406919][ T3248] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   75.408886][ T3248] cdc_wdm 6-1:1.0: Unknown control protocol
[   75.599922][ T6027] usb 6-1: USB disconnect, device number 3
[   75.691637][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[   75.695967][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'.
[   75.740266][ T6607] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.033560][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'.
[   76.074969][ T6628] netlink: 'syz.0.171': attribute type 10 has an invalid length.
[   76.090558][ T6628] veth0_vlan: left promiscuous mode
[   76.094406][ T6628] veth0_vlan: entered promiscuous mode
[   76.098139][ T6628] team0: Device veth0_vlan failed to register rx_handler
[   76.287200][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[   76.289311][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[   76.343350][ T6638] binder: binder_mmap: 6637 200000000000-200000003000 bad vm_flags failed -1
[   76.395402][ T6642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.178'.
[   76.422775][ T6642] netlink: 96 bytes leftover after parsing attributes in process `syz.1.178'.
[   76.482595][ T6652] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[   76.485854][ T6652] netlink: 228 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.489864][ T6652] capability: warning: `syz.2.179' uses deprecated v2 capabilities in a way that may be insecure
[   76.521405][ T6656] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6656 comm=syz.0.180
[   76.555796][ T6662] netlink: 'syz.0.183': attribute type 4 has an invalid length.
[   76.572345][ T6662] netlink: 'syz.0.183': attribute type 4 has an invalid length.
[   76.636111][ T6664] netlink: 'syz.1.184': attribute type 37 has an invalid length.
[   76.636215][ T6665] netlink: 'syz.1.184': attribute type 37 has an invalid length.
[   76.718317][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.724700][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.743967][ T6677] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.757164][ T6678] bond2: (slave erspan1): making interface the new active one
[   76.760797][ T6678] bond2: (slave erspan1): Enslaving as an active interface with an up link
[   76.783850][ T6681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.028375][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'.
[   77.034827][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'.
[   77.156999][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[   77.162819][ T6707] bridge_slave_1: left allmulticast mode
[   77.165406][ T6707] bridge_slave_1: left promiscuous mode
[   77.168559][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.175523][ T6707] bridge_slave_0: left allmulticast mode
[   77.177452][ T6707] bridge_slave_0: left promiscuous mode
[   77.179529][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.360063][ T6710] No control pipe specified
[   77.386882][ T6714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6714 comm=syz.0.197
[   77.395609][ T6714] xt_ecn: cannot match TCP bits for non-tcp packets
[   77.399624][ T6713] delete_channel: no stack
[   77.400713][ T6718] Cannot find add_set index 0 as target
[   77.975445][ T6769] kvm: user requested TSC rate below hardware speed
[   77.980454][ T6769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   78.173579][ T6790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6790 comm=syz.3.223
[   78.282465][ T1150] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   78.285240][ T6799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.290308][ T6799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.349351][ T6810] IPv4: Oversized IP packet from 127.202.26.0
[   78.366697][ T6799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.370881][ T6799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.412526][ T1150] usb 5-1: device descriptor read/64, error -71
[   78.453043][ T6799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.456545][ T6799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.551512][ T6799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.555426][ T6799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.620128][ T1145] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.623024][ T1145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.630967][ T1145] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.633812][ T1145] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.641740][ T1145] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.644648][ T1145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.652202][ T1145] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.655021][ T1145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.662751][ T1150] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   78.713665][ T6829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   78.792437][ T1150] usb 5-1: device descriptor read/64, error -71
[   78.828161][ T6837] tmpfs: Bad value for 'mpol'
[   78.903289][ T1150] usb usb5-port1: attempt power cycle
[   79.157664][   T40] kauditd_printk_skb: 64 callbacks suppressed
[   79.157679][   T40] audit: type=1400 audit(1766646292.785:380): avc:  denied  { ioctl } for  pid=6864 comm="syz.1.249" path="socket:[14861]" dev="sockfs" ino=14861 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   79.202652][   T40] audit: type=1400 audit(1766646292.835:381): avc:  denied  { read } for  pid=6866 comm="syz.3.250" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   79.215248][   T40] audit: type=1400 audit(1766646292.835:382): avc:  denied  { open } for  pid=6866 comm="syz.3.250" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   79.253174][ T1150] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   79.256071][ T6871] validate_nla: 6 callbacks suppressed
[   79.256080][ T6871] netlink: 'syz.3.251': attribute type 8 has an invalid length.
[   79.264226][ T6871] bond0: entered promiscuous mode
[   79.265966][ T6871] bond_slave_0: entered promiscuous mode
[   79.268517][ T6871] bond_slave_1: entered promiscuous mode
[   79.273169][ T1150] usb 5-1: device descriptor read/8, error -71
[   79.276233][ T6871] gretap0: entered promiscuous mode
[   79.279738][ T6871] bridge0: entered promiscuous mode
[   79.283528][ T6871] hsr1: entered promiscuous mode
[   79.430188][ T6888] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   79.518220][ T6892] Bluetooth: MGMT ver 1.23
[   79.524377][ T1150] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   79.553582][ T1150] usb 5-1: device descriptor read/8, error -71
[   79.661710][   T40] audit: type=1400 audit(1766646293.285:383): avc:  denied  { ioctl } for  pid=6915 comm="syz.2.263" path="socket:[12167]" dev="sockfs" ino=12167 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.672516][ T1150] usb usb5-port1: unable to enumerate USB device
[   79.695472][ T6909] No control pipe specified
[   79.713792][ T6919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=6919 comm=syz.2.264
[   79.713919][   T40] audit: type=1400 audit(1766646293.345:384): avc:  denied  { setopt } for  pid=6918 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.759904][ T6924] could not open pipe file descriptor
[   80.026806][   T40] audit: type=1400 audit(1766646293.655:385): avc:  denied  { ioctl } for  pid=6937 comm="syz.2.269" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   80.036312][   T40] audit: type=1400 audit(1766646293.655:386): avc:  denied  { set_context_mgr } for  pid=6937 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   80.044567][   T40] audit: type=1400 audit(1766646293.655:387): avc:  denied  { call } for  pid=6937 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   80.134842][   T40] audit: type=1400 audit(1766646293.765:388): avc:  denied  { write } for  pid=6940 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.220937][ T6944] xt_l2tp: missing protocol rule (udp|l2tpip)
[   80.344479][   T40] audit: type=1326 audit(1766646293.975:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.1.258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6413b8f7c9 code=0x7fc00000
[   80.694340][ T6025] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   80.853227][ T6025] usb 7-1: Using ep0 maxpacket: 8
[   80.865630][ T6025] usb 7-1: unable to get BOS descriptor or descriptor too short
[   80.873826][ T6025] usb 7-1: no configurations
[   80.876013][ T6025] usb 7-1: can't read configurations, error -22
[   81.102746][ T6995] __nla_validate_parse: 10 callbacks suppressed
[   81.102757][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'.
[   81.145093][ T7001] QAT: Invalid ioctl 1342215192
[   81.255908][ T7015] deleting an unspecified loop device is not supported.
[   81.419991][ T7034] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   81.472927][ T7039] kvm: user requested TSC rate below hardware speed
[   81.476750][ T7039] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   81.511274][ T7044] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   81.514614][ T7044] netlink: 228 bytes leftover after parsing attributes in process `syz.1.295'.
[   81.517653][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   81.614233][ T7052] loop9: detected capacity change from 0 to 6
[   81.621126][ T7052] Dev loop9: unable to read RDB block 6
[   81.624993][ T7052]  loop9: unable to read partition table
[   81.627355][ T7052] loop9: partition table beyond EOD, truncated
[   81.629926][ T7052] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[   82.010133][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.120537][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'.
[   82.125964][ T7085] netlink: 'syz.3.305': attribute type 83 has an invalid length.
[   82.131808][ T7086] netlink: 'syz.3.305': attribute type 83 has an invalid length.
[   82.211787][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   82.215404][ T7094] netlink: 'syz.0.311': attribute type 21 has an invalid length.
[   82.217888][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'.
[   82.227221][ T4676] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.227279][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   82.230217][ T4676] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.233161][ T7094] netlink: 'syz.0.311': attribute type 21 has an invalid length.
[   82.240123][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'.
[   82.241028][ T4676] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.247374][ T4676] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.249872][ T7090] netlink: 'syz.3.309': attribute type 7 has an invalid length.
[   82.362764][    T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   82.518264][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'.
[   83.031789][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[   83.036052][    T9] usb 6-1: can't read configurations, error -71
[   83.038104][ T7143] fuse: Bad value for 'fd'
[   83.178695][ T7155] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   83.215999][ T7155] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   83.219681][ T7155] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   83.269108][ T7160] gretap1: entered promiscuous mode
[   83.273831][ T7160] bond3: (slave gretap1): making interface the new active one
[   83.277254][ T7160] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   83.790633][ T7140] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   83.793207][ T7140] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   83.799180][ T7140] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   83.806135][ T7140] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   83.808245][ T7140] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   83.811315][ T7140] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   83.816251][ T7140] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   83.818915][ T7140] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   83.823872][ T7140] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   83.826927][ T7140] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   83.829236][ T7140] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   83.833018][ T7140] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   83.862827][ T7184] syz.2.336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   83.885503][ T7188] netlink: 'syz.0.337': attribute type 32 has an invalid length.
[   84.082626][ T6027] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   84.195429][ T7205] MTD: Couldn't look up './bus': -15
[   84.232486][ T6027] usb 8-1: Using ep0 maxpacket: 8
[   84.237646][   T40] kauditd_printk_skb: 42 callbacks suppressed
[   84.237662][   T40] audit: type=1400 audit(1766646297.865:432): avc:  denied  { getopt } for  pid=7206 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   84.250826][ T6027] usb 8-1: config 0 has no interfaces?
[   84.253733][ T6027] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   84.257610][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.263687][ T6027] usb 8-1: config 0 descriptor??
[   84.370069][   T40] audit: type=1400 audit(1766646297.995:433): avc:  denied  { name_bind } for  pid=7211 comm="syz.1.345" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   84.436874][ T7221] syzkaller1: entered promiscuous mode
[   84.438773][ T7221] syzkaller1: entered allmulticast mode
[   84.724832][ T7231] kAFS: unable to lookup cell '(,c��L'
[   84.782815][   T40] audit: type=1400 audit(1766646298.405:434): avc:  denied  { map } for  pid=7230 comm="syz.1.351" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   84.937373][   T40] audit: type=1400 audit(1766646298.565:435): avc:  denied  { getopt } for  pid=7240 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.040217][   T40] audit: type=1400 audit(1766646298.665:436): avc:  denied  { mount } for  pid=7243 comm="syz.2.354" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   85.050611][ T7246] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   85.093567][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   85.300454][   T40] audit: type=1400 audit(1766646298.925:437): avc:  denied  { unmount } for  pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   85.324432][   T40] audit: type=1400 audit(1766646298.955:438): avc:  denied  { create } for  pid=7247 comm="syz.2.355" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   85.523478][ T7251] bridge1: entered promiscuous mode
[   85.525303][ T7251] bridge1: entered allmulticast mode
[   85.800342][ T7257] No control pipe specified
[   85.901480][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   85.901674][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout
[   85.906531][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout
[   86.122664][   T64] Bluetooth: hci4: command 0x1003 tx timeout
[   86.126741][ T5297] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   86.155248][ T7239] Set syz1 is full, maxelem 65536 reached
[   86.200558][ T7270] netlink: 'syz.0.358': attribute type 29 has an invalid length.
[   86.210141][ T7269] netlink: 'syz.0.358': attribute type 29 has an invalid length.
[   86.241888][ T7275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7275 comm=syz.0.360
[   86.250195][ T7275] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   86.262332][ T7275] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.275261][ T7275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7275 comm=syz.0.360
[   86.286286][ T7275] team0: Port device dummy0 removed
[   86.294443][ T7275] bond1: (slave dummy0): making interface the new active one
[   86.297629][ T7275] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   86.355340][ T7285] loop7: detected capacity change from 0 to 7
[   86.358199][ T7285] buffer_io_error: 27 callbacks suppressed
[   86.358209][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.364891][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.367735][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.370453][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.374852][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.377793][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.380524][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.383625][ T7285] ldm_validate_partition_table(): Disk read failed.
[   86.386837][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.389977][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.394162][ T7285] Buffer I/O error on dev loop7, logical block 0, async page read
[   86.397476][ T7285] Dev loop7: unable to read RDB block 0
[   86.399679][ T7285]  loop7: unable to read partition table
[   86.401889][ T7285] loop7: partition table beyond EOD, truncated
[   86.402831][ T7287] __nla_validate_parse: 6 callbacks suppressed
[   86.402841][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[   86.404459][ T7285] loop_reread_partitions: partition scan of loop7 (����7x~��S�j̖�P) failed (rc=-5)
[   86.422228][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[   86.632026][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[   86.635352][ T7309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.641204][ T6026] usb 8-1: USB disconnect, device number 5
[   86.649009][ T7311] program syz.0.371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.652713][ T7311] ata1.00: invalid transfer count 0
[   86.704081][   T40] audit: type=1400 audit(1766646300.335:439): avc:  denied  { map } for  pid=7312 comm="syz.3.372" path="socket:[18785]" dev="sockfs" ino=18785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   86.718653][ T7318] netlink: 'syz.1.374': attribute type 4 has an invalid length.
[   86.732796][   T40] audit: type=1400 audit(1766646300.335:440): avc:  denied  { read accept } for  pid=7312 comm="syz.3.372" path="socket:[18785]" dev="sockfs" ino=18785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   86.742711][   T40] audit: type=1400 audit(1766646300.335:441): avc:  denied  { setopt } for  pid=7315 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   86.755386][ T7324] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   86.761830][ T7325] CIFS mount error: No usable UNC path provided in device string!
[   86.761830][ T7325] 
[   86.763855][ T7324] CIFS mount error: No usable UNC path provided in device string!
[   86.763855][ T7324] 
[   86.767042][ T7325] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   86.770301][ T7324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   86.930107][ T7344] netlink: 'syz.1.384': attribute type 1 has an invalid length.
[   86.934203][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[   86.939771][ T7345] bridge0: entered allmulticast mode
[   86.962156][ T7345] block device autoloading is deprecated and will be removed.
[   87.159189][ T7360] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   87.162949][ T5297] Bluetooth: hci0: command 0x0c1a tx timeout
[   87.324328][ T7374] openvswitch: netlink: IP tunnel TTL not specified.
[   87.364638][ T7375] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   87.373239][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   87.526935][ T7387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.533052][    T9] usb 8-1: Using ep0 maxpacket: 8
[   87.536556][    T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.539983][    T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.543184][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   87.545691][    T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   87.549071][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.554293][    T9] usb 8-1: config 0 descriptor??
[   87.617588][ T7387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.713047][ T7387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.803245][    C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   87.898788][ T7387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.963524][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout
[   87.964235][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   87.966132][ T5297] Bluetooth: hci2: command 0x0c1a tx timeout
[   87.970812][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   87.971053][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   87.974068][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   87.974455][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.402'.
[   87.981656][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   87.984452][    T9] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[   87.987404][    T9] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[   88.003378][ T7411] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000
[   88.007994][ T7411] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004
[   88.016722][ T1145] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.027702][ T1145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.040617][ T1145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.072844][ T1145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.161168][ T1150] usb 8-1: USB disconnect, device number 6
[   88.337991][ T7431] No control pipe specified
[   88.355523][ T7442] use of bytesused == 0 is deprecated and will be removed in the future,
[   88.358472][ T7442] use the actual size instead.
[   88.440143][ T7445] netlink: 'syz.0.414': attribute type 4 has an invalid length.
[   88.450855][ T7445] netlink: 'syz.0.414': attribute type 4 has an invalid length.
[   88.453682][ T6027] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   88.622449][ T6027] usb 6-1: Using ep0 maxpacket: 8
[   88.625547][ T6027] usb 6-1: config 0 has no interfaces?
[   88.627371][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   88.630428][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.636369][ T6027] usb 6-1: config 0 descriptor??
[   88.660907][ T7448] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   88.765739][ T7459] sctp: [Deprecated]: syz.0.418 (pid 7459) Use of int in maxseg socket option.
[   88.765739][ T7459] Use struct sctp_assoc_value instead
[   88.770440][ T7461] 9p: p9: multiple sources not supported
[   89.008572][ T7480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.423'.
[   89.042215][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.048412][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.074931][   T34] usb 6-1: USB disconnect, device number 7
[   89.242715][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   89.252742][ T6027] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[   89.295512][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.426'.
[   89.299439][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz.2.426'.
[   89.308744][   T40] kauditd_printk_skb: 18 callbacks suppressed
[   89.308755][   T40] audit: type=1400 audit(1766646302.935:460): avc:  denied  { setopt } for  pid=7492 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   89.342416][   T64] Bluetooth: hci2: Malformed HCI Event
[   89.344102][   T40] audit: type=1400 audit(1766646302.975:461): avc:  denied  { read write } for  pid=7495 comm="syz.2.429" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   89.362748][   T40] audit: type=1400 audit(1766646302.995:462): avc:  denied  { open } for  pid=7495 comm="syz.2.429" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   89.412480][ T6027] usb 8-1: Invalid ep0 maxpacket: 64
[   89.471834][ T7511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.508923][ T7516] bond0: entered promiscuous mode
[   89.510750][ T7516] bond_slave_0: entered promiscuous mode
[   89.513160][ T7516] bond_slave_1: entered promiscuous mode
[   89.542529][ T6027] usb 8-1: new low-speed USB device number 8 using dummy_hcd
[   89.554168][ T7520] syzkaller0: entered promiscuous mode
[   89.556047][ T7520] syzkaller0: entered allmulticast mode
[   89.584316][ T7520] netlink: 100 bytes leftover after parsing attributes in process `syz.2.434'.
[   89.722953][ T6027] usb 8-1: Invalid ep0 maxpacket: 64
[   89.728572][ T6027] usb usb8-port1: attempt power cycle
[   89.907516][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[   89.967661][ T7549] overlayfs: failed to set uuid (96/file0, err=-1); falling back to uuid=null.
[   89.970754][ T7549] overlayfs: failed to verify upper root origin
[   89.973498][ T7551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7551 comm=syz.0.442
[   89.978738][ T7549] netlink: 'syz.1.441': attribute type 10 has an invalid length.
[   89.979144][ T7552] tmpfs: Bad value for 'mpol'
[   89.982721][ T7551] tmpfs: Bad value for 'mpol'
[   90.042845][ T5297] Bluetooth: hci2: command 0x0c1a tx timeout
[   90.043033][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout
[   90.044952][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   90.072940][ T6027] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[   90.103085][ T6027] usb 8-1: Invalid ep0 maxpacket: 64
[   90.235529][ T6027] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[   90.243577][ T7571] netlink: 'syz.1.445': attribute type 21 has an invalid length.
[   90.246217][ T7571] Bluetooth: MGMT ver 1.23
[   90.273094][ T6027] usb 8-1: Invalid ep0 maxpacket: 64
[   90.282574][ T6027] usb usb8-port1: unable to enumerate USB device
[   90.295874][ T7580] macsec0: entered promiscuous mode
[   90.298441][ T7580] macsec0: entered allmulticast mode
[   90.300461][ T7582] netlink: 'syz.0.448': attribute type 30 has an invalid length.
[   90.300845][ T7580] veth1_macvtap: entered allmulticast mode
[   90.560974][   T40] audit: type=1400 audit(1766646304.185:463): avc:  denied  { remount } for  pid=7604 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   90.717383][   T40] audit: type=1400 audit(1766646304.345:464): avc:  denied  { bind } for  pid=7615 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   90.725958][   T40] audit: type=1400 audit(1766646304.345:465): avc:  denied  { write } for  pid=7615 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   90.801175][ T7625] loop9: detected capacity change from 0 to 7
[   90.805047][ T6498] ldm_validate_partition_table(): Disk read failed.
[   90.807277][ T6498] Dev loop9: unable to read RDB block 0
[   90.809107][ T6498]  loop9: unable to read partition table
[   90.811081][ T6498] loop9: partition table beyond EOD, truncated
[   90.814296][ T7625] ldm_validate_partition_table(): Disk read failed.
[   90.817429][ T7625] Dev loop9: unable to read RDB block 0
[   90.819932][ T7625]  loop9: unable to read partition table
[   90.822706][ T7625] loop9: partition table beyond EOD, truncated
[   90.825649][ T7625] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   90.825649][ T7625] 
) failed (rc=-5)
[   90.860740][ T7621] No control pipe specified
[   91.724537][   T40] audit: type=1400 audit(1766646305.355:466): avc:  denied  { name_bind } for  pid=7640 comm="syz.0.464" path="socket:[19981]" dev="sockfs" ino=19981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   91.732009][ T6027] hid-generic FFC0:0100:0004.0003: unknown main item tag 0x5
[   91.735487][ T6027] hid-generic FFC0:0100:0004.0003: reserved main item tag 0xd
[   91.738010][ T6027] hid-generic FFC0:0100:0004.0003: unknown main item tag 0x7
[   91.740654][ T6027] hid-generic FFC0:0100:0004.0003: item fetching failed at offset 19/195
[   91.745721][ T6027] hid-generic FFC0:0100:0004.0003: probe with driver hid-generic failed with error -22
[   91.842595][ T7654] netlink: 'syz.0.467': attribute type 21 has an invalid length.
[   91.845276][ T7654] __nla_validate_parse: 1 callbacks suppressed
[   91.845285][ T7654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.467'.
[   91.921779][   T40] audit: type=1400 audit(1766646305.545:467): avc:  denied  { connect } for  pid=7659 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.075971][   T40] audit: type=1400 audit(1766646305.705:468): avc:  denied  { view } for  pid=7665 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   92.082329][   T40] audit: type=1400 audit(1766646305.705:469): avc:  denied  { map } for  pid=7665 comm="syz.0.472" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   92.474618][ T7696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7696 comm=syz.0.481
[   92.521991][ T7703] SELinux:  Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped).
[   92.648045][ T7712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7712 comm=syz.2.487
[   92.653219][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[   92.862637][ T4106] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   93.014039][ T4106] usb 5-1: config 0 has no interfaces?
[   93.015855][ T4106] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   93.018802][ T4106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.033931][ T4106] usb 5-1: config 0 descriptor??
[   93.059608][ T7741] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   93.257600][ T4106] usb 5-1: USB disconnect, device number 6
[   93.258638][ T7764] openvswitch: netlink: Missing key (keys=40, expected=100)
[   93.396055][ T7766] can: request_module (can-proto-0) failed.
[   93.493727][ T7773] netlink: 64 bytes leftover after parsing attributes in process `syz.2.504'.
[   93.514151][   T59] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   93.616504][ T7780] program syz.2.506 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.619494][ T7780] ata1.00: non-matching transfer count (0/2304)
[   93.683776][   T59] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   93.687547][   T59] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   93.690947][   T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   93.695272][   T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   93.699780][   T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   93.705073][   T59] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   93.709015][   T59] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   93.711919][   T59] usb 6-1: Product: syz
[   93.714984][   T59] usb 6-1: Manufacturer: syz
[   93.722612][   T59] cdc_wdm 6-1:1.0: skipping garbage
[   93.724399][   T59] cdc_wdm 6-1:1.0: skipping garbage
[   93.727977][   T59] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   93.729944][   T59] cdc_wdm 6-1:1.0: Unknown control protocol
[   93.841352][ T4031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.895885][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'.
[   93.947280][ T4031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.958031][ T7795] ip6t_rpfilter: unknown options
[   93.967506][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.976672][   T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.980714][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.986969][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.991098][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.023208][ T6027] usb 6-1: USB disconnect, device number 8
[   94.023365][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   94.029302][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   94.031978][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   94.047832][ T4031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.138750][ T4031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.189703][ T7796] chnl_net:caif_netlink_parms(): no params data found
[   94.212480][ T4106] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   94.228637][ T7802] overlay: Unknown parameter 'permit_directio'
[   94.265761][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.268858][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.271880][ T7796] bridge_slave_0: entered allmulticast mode
[   94.275381][ T7796] bridge_slave_0: entered promiscuous mode
[   94.279918][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.283201][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.286064][ T7796] bridge_slave_1: entered allmulticast mode
[   94.289805][ T7796] bridge_slave_1: entered promiscuous mode
[   94.343215][ T7796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.349770][ T7796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.363768][ T4106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.368561][ T4106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.373024][ T4106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.378448][ T4106] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.382844][ T4106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.392748][ T4106] usb 5-1: config 0 descriptor??
[   94.419562][ T7812] team0: Device gtp0 is up. Set it down before adding it as a team port
[   94.448976][ T7796] team0: Port device team_slave_0 added
[   94.455655][ T7796] team0: Port device team_slave_1 added
[   94.458310][ T4031] bridge_slave_1: left allmulticast mode
[   94.461157][ T4031] bridge_slave_1: left promiscuous mode
[   94.465173][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.472209][ T4031] bridge_slave_0: left allmulticast mode
[   94.476632][ T4031] bridge_slave_0: left promiscuous mode
[   94.479341][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.576452][   T40] kauditd_printk_skb: 30 callbacks suppressed
[   94.576464][   T40] audit: type=1400 audit(1766646308.205:500): avc:  denied  { map } for  pid=7814 comm="syz.3.516" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1
[   94.678207][ T4031] bridge0 (unregistering): left allmulticast mode
[   94.684681][ T7821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.517'.
[   94.688584][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'.
[   94.810488][ T4106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x1
[   94.820746][ T4106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   94.825572][ T4031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.829163][ T4106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   94.834153][ T4031] bond_slave_0: left promiscuous mode
[   94.840134][ T4031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.844738][ T4031] bond_slave_1: left promiscuous mode
[   94.847523][ T4031] bond0 (unregistering): Released all slaves
[   94.849250][ T4106] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   94.877424][ T5347] udevd[5347]: worker [6498] terminated by signal 33 (Unknown signal 33)
[   94.880909][ T5347] udevd[5347]: worker [6498] failed while handling '/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:047F:FFFF.0004/hidraw/hidraw1'
[   94.927506][ T4031] bond1 (unregistering): Released all slaves
[   94.993301][ T4031] bond2 (unregistering): Released all slaves
[   95.003887][   T40] audit: type=1400 audit(1766646308.635:501): avc:  denied  { mount } for  pid=7794 comm="syz.0.513" name="/" dev="hugetlbfs" ino=20799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   95.064079][ T4031] bond3 (unregistering): Released all slaves
[   95.070371][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7795 comm=syz.0.513
[   95.096870][ T4106] usb 5-1: USB disconnect, device number 7
[   95.149586][ T4031] bond4 (unregistering): Released all slaves
[   95.215485][ T4031] bond5 (unregistering): Released all slaves
[   95.268146][ T4031] bond6 (unregistering): Released all slaves
[   95.328785][ T4031] bond7 (unregistering): Released all slaves
[   95.410152][ T4031] bond8 (unregistering): Released all slaves
[   95.477999][ T4031] bond9 (unregistering): Released all slaves
[   95.538607][ T4031] bond10 (unregistering): Released all slaves
[   95.595344][ T4031] bond11 (unregistering): Released all slaves
[   95.637340][   T40] audit: type=1400 audit(1766646309.265:502): avc:  denied  { unmount } for  pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   95.672159][ T4031] bond12 (unregistering): Released all slaves
[   95.729678][ T4031] bond13 (unregistering): Released all slaves
[   95.791932][ T4031] bond14 (unregistering): Released all slaves
[   95.866916][ T4031] bond15 (unregistering): Released all slaves
[   95.869117][   T40] audit: type=1400 audit(1766646309.495:503): avc:  denied  { ioctl } for  pid=7835 comm="syz.0.520" path="socket:[22567]" dev="sockfs" ino=22567 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.894846][   T40] audit: type=1400 audit(1766646309.525:504): avc:  denied  { map } for  pid=7830 comm="syz.1.521" path="/proc/346/maps" dev="proc" ino=22635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   95.961679][ T4031] bond16 (unregistering): Released all slaves
[   96.033139][ T4031] bond17 (unregistering): Released all slaves
[   96.042640][ T5950] Bluetooth: hci2: command tx timeout
[   96.095423][ T4031] bond18 (unregistering): Released all slaves
[   96.149414][ T4031] bond19 (unregistering): Released all slaves
[   96.202747][ T4031] bond20 (unregistering): Released all slaves
[   96.262240][ T4031] bond21 (unregistering): Released all slaves
[   96.337987][ T4031] bond22 (unregistering): Released all slaves
[   96.406927][ T4031] bond23 (unregistering): Released all slaves
[   96.481954][ T4031] bond24 (unregistering): Released all slaves
[   96.606019][ T4031] bond25 (unregistering): Released all slaves
[   96.714703][ T4031] bond26 (unregistering): Released all slaves
[   96.789485][ T4031] bond27 (unregistering): Released all slaves
[   96.841036][ T4031] bond28 (unregistering): Released all slaves
[   96.908152][ T4031] bond29 (unregistering): Released all slaves
[   96.962944][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.965363][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.973591][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.980988][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.983699][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.992070][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.043869][ T7796] hsr_slave_0: entered promiscuous mode
[   97.046495][ T7796] hsr_slave_1: entered promiscuous mode
[   97.048792][ T7796] debugfs: 'hsr0' already exists in 'hsr'
[   97.050771][ T7796] Cannot create hsr debugfs directory
[   97.342342][ T7796] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.435382][   T40] audit: type=1400 audit(1766646311.065:505): avc:  denied  { write } for  pid=7879 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   97.435482][ T7883] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[   97.473902][ T7885] kAFS: unable to lookup cell '(,c��L'
[   97.476055][ T7885] kAFS: unable to lookup cell '\,'
[   97.483855][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'.
[   97.486789][ T7885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.528'.
[   97.489712][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'.
[   97.527238][ T7796] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.537564][ T7796] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.547728][ T7796] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.627679][ T7902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32796 sclass=netlink_route_socket pid=7902 comm=syz.0.532
[   97.639377][ T4031] hsr_slave_0: left promiscuous mode
[   97.641991][ T4031] hsr_slave_1: left promiscuous mode
[   97.645806][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.649064][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.651611][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.671616][ T4031] veth1_macvtap: left promiscuous mode
[   97.675356][ T4031] veth0_macvtap: left promiscuous mode
[   97.677995][ T4031] veth1_vlan: left promiscuous mode
[   97.679873][ T4031] veth0_vlan: left promiscuous mode
[   97.961478][ T4031] team0 (unregistering): Port device team_slave_1 removed
[   97.983074][ T4031] team0 (unregistering): Port device team_slave_0 removed
[   98.124021][ T5950] Bluetooth: hci2: command tx timeout
[   98.243331][   T40] audit: type=1400 audit(1766646311.875:506): avc:  denied  { mounton } for  pid=7914 comm="syz.0.534" path="/160/file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   98.244897][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.273779][ T7796] 8021q: adding VLAN 0 to HW filter on device team0
[   98.282198][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.284653][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.294584][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.297009][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.323639][   T40] audit: type=1400 audit(1766646311.955:507): avc:  denied  { getattr } for  pid=7918 comm="syz.0.535" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   98.325933][ T7919] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   98.350151][   T40] audit: type=1400 audit(1766646311.975:508): avc:  denied  { module_request } for  pid=7796 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   98.380410][   T40] audit: type=1400 audit(1766646312.005:509): avc:  denied  { read } for  pid=7918 comm="syz.0.535" name="file0" dev="9p" ino=71827739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.390782][ T7919] evm: overlay not supported
[   98.461870][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.553811][ T4031] IPVS: stop unused estimator thread 0...
[   98.625122][ T7796] veth0_vlan: entered promiscuous mode
[   98.630162][ T7796] veth1_vlan: entered promiscuous mode
[   98.655960][ T7796] veth0_macvtap: entered promiscuous mode
[   98.660103][ T7796] veth1_macvtap: entered promiscuous mode
[   98.676239][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.682461][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.690709][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.695940][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.698967][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.702238][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.751378][ T4676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.756435][ T4676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.788851][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.791905][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.984272][ T8053] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   98.990724][ T8053] xt_TCPMSS: Only works on TCP SYN packets
[   99.029877][ T1213] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[   99.031219][ T4531] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   99.032310][ T4531] Bluetooth: hci4: Frame reassembly failed (-84)
[   99.086394][ T8060] No control pipe specified
[   99.647925][   T40] kauditd_printk_skb: 14 callbacks suppressed
[   99.647942][   T40] audit: type=1400 audit(1766646313.275:524): avc:  denied  { create } for  pid=8080 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   99.661735][   T40] audit: type=1400 audit(1766646313.285:525): avc:  denied  { sys_admin } for  pid=8080 comm="syz.1.556" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   99.670714][   T40] audit: type=1400 audit(1766646313.285:526): avc:  denied  { mount } for  pid=8080 comm="syz.1.556" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[   99.772722][ T8086] tipc: Bearer <eth:wg0>: already 2 bearers with priority 10
[   99.775223][ T8086] tipc: Bearer <eth:wg0>: trying with adjusted priority
[   99.777692][ T8086] tipc: Enabled bearer <eth:wg0>, priority 9
[   99.856085][   T40] audit: type=1400 audit(1766646313.485:527): avc:  denied  { mount } for  pid=8091 comm="syz.1.559" name="/" dev="pstore" ino=1763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   99.864657][   T40] audit: type=1400 audit(1766646313.485:528): avc:  denied  { remount } for  pid=8091 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   99.883135][   T40] audit: type=1400 audit(1766646313.505:529): avc:  denied  { unmount } for  pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   99.889744][   T40] audit: type=1400 audit(1766646313.515:530): avc:  denied  { getopt } for  pid=8095 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   99.974425][   T40] audit: type=1400 audit(1766646313.605:531): avc:  denied  { bpf } for  pid=8104 comm="syz.1.563" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.993654][   T40] audit: type=1400 audit(1766646313.605:532): avc:  denied  { perfmon } for  pid=8104 comm="syz.1.563" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  100.055383][ T8108] team0: Port device team_slave_1 removed
[  100.138320][ T8111] No control pipe specified
[  100.202543][   T64] Bluetooth: hci2: command tx timeout
[  100.840160][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[  100.844910][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'.
[  100.858948][ T1213] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.858984][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[  100.863419][ T1213] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.867086][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'.
[  100.871611][ T1213] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.891383][ T1213] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.901166][   T40] audit: type=1400 audit(1766646314.525:533): avc:  denied  { associate } for  pid=8129 comm="syz.3.570" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  101.061952][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'.
[  101.083620][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  101.231151][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'.
[  101.235814][ T8155] bridge_slave_1: left allmulticast mode
[  101.238388][ T8155] bridge_slave_1: left promiscuous mode
[  101.242181][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.250613][ T8155] bridge_slave_0: left allmulticast mode
[  101.253627][ T8155] bridge_slave_0: left promiscuous mode
[  101.256668][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.305328][ T8155] bridge0 (unregistering): left promiscuous mode
[  101.318868][ T8172] No control pipe specified
[  101.619822][ T8188] fuse: Bad value for 'fd'
[  101.726670][ T8197] netlink: 376 bytes leftover after parsing attributes in process `syz.3.589'.
[  101.834445][ T8209] can0: slcan on ttyS3.
[  101.965807][ T8208] can0 (unregistered): slcan off ttyS3.
[  102.107638][ T8236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8236 comm=syz.0.600
[  102.284777][ T5950] Bluetooth: hci2: command tx timeout
[  102.354177][ T8257] overlayfs: failed to resolve './bus': -2
[  102.651317][ T8267] vcan0: tx address claim with different name
[  102.654896][ T8267] __nla_validate_parse: 2 callbacks suppressed
[  102.654905][ T8267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.610'.
[  102.666781][ T8264] No control pipe specified
[  102.930663][ T8286] RDS: rds_bind could not find a transport for fe80::3a, load rds_tcp or rds_rdma?
[  102.988220][ T8292] sp0: Synchronizing with TNC
[  102.994315][ T8295] 9pnet_virtio: no channels available for device 
[  102.996918][ T8295] 9pnet_virtio: no channels available for device 
[  102.999272][ T8291] [U] �
[  103.003910][ T8295] 9pnet_virtio: no channels available for device 
[  103.006856][ T8295] 9pnet_virtio: no channels available for device 
[  103.009374][ T8295] 9pnet_virtio: no channels available for device 
[  103.014362][ T8295] 9pnet_virtio: no channels available for device 
[  103.017043][ T8295] 9pnet_virtio: no channels available for device 
[  103.019885][ T8295] 9pnet_virtio: no channels available for device 
[  103.023069][ T8295] 9pnet_virtio: no channels available for device 
[  103.025452][ T8295] 9pnet_virtio: no channels available for device 
[  103.027876][ T8295] 9pnet_virtio: no channels available for device 
[  103.030335][ T8295] 9pnet_virtio: no channels available for device 
[  103.034246][ T8295] 9pnet_virtio: no channels available for device 
[  103.036777][ T8295] 9pnet_virtio: no channels available for device 
[  103.039188][ T8295] 9pnet_virtio: no channels available for device 
[  103.041544][ T8295] 9pnet_virtio: no channels available for device 
[  103.044624][ T8295] 9pnet_virtio: no channels available for device 
[  103.047390][ T8295] 9pnet_virtio: no channels available for device 
[  103.049705][ T8295] 9pnet_virtio: no channels available for device 
[  103.052064][ T8295] 9pnet_virtio: no channels available for device 
[  103.054552][ T8295] 9pnet_virtio: no channels available for device 
[  103.056780][ T8295] 9pnet_virtio: no channels available for device 
[  103.059048][ T8295] 9pnet_virtio: no channels available for device 
[  103.061307][ T8295] 9pnet_virtio: no channels available for device 
[  103.063959][ T8295] 9pnet_virtio: no channels available for device 
[  103.066672][ T8295] 9pnet_virtio: no channels available for device 
[  103.069047][ T8295] 9pnet_virtio: no channels available for device 
[  103.071404][ T8295] 9pnet_virtio: no channels available for device 
[  103.073887][ T8295] 9pnet_virtio: no channels available for device 
[  103.076270][ T8295] 9pnet_virtio: no channels available for device 
[  103.087598][ T8295] 9pnet_virtio: no channels available for device 
[  103.089831][ T8295] 9pnet_virtio: no channels available for device 
[  103.123074][ T8301] NILFS (nullb0): couldn't find nilfs on the device
[  103.481093][ T8324] fuse: Invalid rootmode
[  103.554103][ T8327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.556863][ T8327] IPv6: NLM_F_CREATE should be set when creating new route
[  103.559257][ T8327] IPv6: NLM_F_CREATE should be set when creating new route
[  103.561982][ T8327] IPv6: NLM_F_CREATE should be set when creating new route
[  103.566866][ T8327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.583710][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.586503][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.649676][ T8329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.657161][ T8329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.676834][ T8337] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[  103.680262][ T8337] ref_ctr increment failed for inode: 0x3d8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803357ee40
[  103.687480][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'.
[  103.692110][ T8335] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[  103.697137][ T8335] ref_ctr decrement failed for inode: 0x3d8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803357ee40
[  103.701650][ T8335] uprobe: syz.0.630:8335 failed to unregister, leaking uprobe
[  103.763369][ T4676] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.767547][ T4676] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.779151][ T4676] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.785253][ T4676] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.790227][ T8342] overlayfs: unescaped trailing colons in lowerdir mount option.
[  103.847597][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'.
[  103.954338][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.958986][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.962176][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.966010][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.968902][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.971551][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.973862][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.976321][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.978582][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.980850][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.983174][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.985687][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.988017][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.990635][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.992973][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.995216][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  103.997440][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.000257][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.003145][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.005830][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.008634][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.011512][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.014308][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.017031][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.019855][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.022178][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.024556][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.026426][ T8367] PID 8367 killed due to inadequate hugepage pool
[  104.028879][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.031160][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.033709][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.036131][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.038358][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.040580][ T5297] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  104.072733][ T5297] Bluetooth: hci3: unexpected event for opcode 0x042c
[  104.364496][ T8388] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  104.369636][ T8388] fuse: Invalid rootmode
[  104.374536][ T8388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.648'.
[  104.804656][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'.
[  104.813042][   T40] kauditd_printk_skb: 19 callbacks suppressed
[  104.813053][   T40] audit: type=1400 audit(1766646318.445:553): avc:  denied  { name_bind } for  pid=8407 comm="syz.1.654" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  104.875250][   T40] audit: type=1400 audit(1766646318.505:554): avc:  denied  { execute } for  pid=8416 comm="syz.4.657" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=25741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  104.973337][   T40] audit: type=1400 audit(1766646318.605:555): avc:  denied  { block_suspend } for  pid=8422 comm="syz.0.659" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  105.041098][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'.
[  105.054270][ T8434] netlink: 31 bytes leftover after parsing attributes in process `syz.4.661'.
[  105.061463][ T8434] netlink: 'syz.4.661': attribute type 3 has an invalid length.
[  105.066653][   T40] audit: type=1400 audit(1766646318.695:556): avc:  denied  { nlmsg_read } for  pid=8422 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.067273][ T8431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.659'.
[  105.083364][ T8434] netlink: 'syz.4.661': attribute type 2 has an invalid length.
[  105.087381][ T8434] netlink: 31 bytes leftover after parsing attributes in process `syz.4.661'.
[  105.197855][   T40] audit: type=1400 audit(1766646318.825:557): avc:  denied  { set_context_mgr } for  pid=8438 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  105.203848][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'.
[  105.253397][   T40] audit: type=1400 audit(1766646318.885:558): avc:  denied  { create } for  pid=8442 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  105.327862][ T8448] geneve2: entered promiscuous mode
[  105.330264][ T8448] geneve2: entered allmulticast mode
[  105.336359][ T1213] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  105.340204][ T1213] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  105.344611][ T1213] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  105.348113][ T1213] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  105.742300][   T40] audit: type=1400 audit(1766646319.365:559): avc:  denied  { read } for  pid=8454 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  105.752969][ T8458] netlink: 'syz.1.669': attribute type 2 has an invalid length.
[  105.915697][ T8458] vcan0: tx drop: invalid da for name 0x0000000000000003
[  105.991868][ T8462] 9pnet_virtio: no channels available for device syz
[  106.000530][ T8463] 0�: renamed from hsr0 (while UP)
[  106.005460][ T8463] 0�: entered allmulticast mode
[  106.007695][ T8463] hsr_slave_0: entered allmulticast mode
[  106.010532][ T8463] hsr_slave_1: entered allmulticast mode
[  106.014344][ T8463] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[  106.108689][   T40] audit: type=1400 audit(1766646319.735:560): avc:  denied  { getopt } for  pid=8474 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  106.120867][ T8475] new mount options do not match the existing superblock, will be ignored
[  106.128556][ T8476] can: request_module (can-proto-0) failed.
[  106.276738][   T40] audit: type=1400 audit(1766646319.905:561): avc:  denied  { read } for  pid=8484 comm="syz.0.677" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  106.286022][   T40] audit: type=1400 audit(1766646319.905:562): avc:  denied  { open } for  pid=8484 comm="syz.0.677" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  106.351013][ T8485] raw_sendmsg: syz.0.677 forgot to set AF_INET. Fix it!
[  106.838488][ T8513] program syz.4.684 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.841722][ T8513] ata1.00: invalid transfer count 0
[  106.850071][ T8513] kvm: emulating exchange as write
[  107.029996][ T8526] bond1: ARP target 4.0.0.0 is already present
[  107.032052][ T8526] bond1: option arp_ip_target: invalid value (4)
[  107.036384][ T8526] bond1 (unregistering): Released all slaves
[  107.051044][ T4106] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  107.099300][ T8530] netlink: 'syz.1.689': attribute type 21 has an invalid length.
[  107.135452][ T8530] netlink: 'syz.1.689': attribute type 21 has an invalid length.
[  107.140508][ T8530] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  107.146978][ T8530] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  107.151096][ T8530] cramfs: wrong magic
[  107.242557][ T5297] Bluetooth: hci3: command 0x0c1a tx timeout
[  107.261056][ T8537] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  107.264619][ T8537] tipc: Bearer <udp:s>: trying with adjusted priority
[  107.266966][ T8537] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  107.362651][ T4106] usb 8-1: device descriptor read/64, error -71
[  107.396113][ T8541] trusted_key: syz.4.693 sent an empty control message without MSG_MORE.
[  107.483966][ T8544] binder: 8542:8544 ioctl ae01 32 returned -22
[  107.602722][ T4106] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  107.742650][ T4106] usb 8-1: device descriptor read/64, error -71
[  107.868357][ T4106] usb usb8-port1: attempt power cycle
[  107.986040][ T8546] sp0: Synchronizing with TNC
[  107.993500][ T8546] sp0: Found TNC
[  107.996441][ T8545] [U] �`
[  108.151455][ T8554] xt_nfacct: accounting object `syz0' does not exist
[  108.212475][ T4106] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  108.224659][ T8561] team0: Device xfrm1 is of different type
[  108.233444][ T4106] usb 8-1: device descriptor read/8, error -71
[  108.393334][ T8577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8577 comm=syz.4.705
[  108.399950][ T8579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.444792][ T8583] __nla_validate_parse: 9 callbacks suppressed
[  108.444810][ T8583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.707'.
[  108.451596][ T8583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.707'.
[  108.482456][ T4106] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  108.504030][ T4106] usb 8-1: device descriptor read/8, error -71
[  108.541018][ T8589] netlink: 'syz.1.710': attribute type 2 has an invalid length.
[  108.615914][ T4106] usb usb8-port1: unable to enumerate USB device
[  108.637996][ T8596] sock: sock_set_timeout: `syz.0.712' (pid 8596) tries to set negative timeout
[  108.774069][ T8609] overlayfs: failed to resolve './file0': -2
[  108.812902][ T8612] overlay: ./file0 is not a directory
[  108.825206][ T8615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.717'.
[  108.862299][ T8617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18448 sclass=netlink_route_socket pid=8617 comm=syz.4.718
[  108.891606][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.717'.
[  108.933560][ T8623] loop4: detected capacity change from 0 to 7
[  108.943152][ T7725] Dev loop4: unable to read RDB block 7
[  108.945325][ T7725]  loop4: AHDI p1 p2 p3
[  108.947224][ T7725] loop4: partition table partially beyond EOD, truncated
[  108.950622][ T7725] loop4: p1 start 1601398130 is beyond EOD, truncated
[  108.954758][ T7725] loop4: p2 start 1702059890 is beyond EOD, truncated
[  108.961069][ T8623] Dev loop4: unable to read RDB block 7
[  108.963855][ T8623]  loop4: AHDI p1 p2 p3
[  108.965426][ T8623] loop4: partition table partially beyond EOD, truncated
[  108.969041][ T8623] loop4: p1 start 1601398130 is beyond EOD, truncated
[  108.972237][ T8623] loop4: p2 start 1702059890 is beyond EOD, truncated
[  109.026323][ T8629] vxlan0: entered promiscuous mode
[  109.029372][ T8629] vxlan0: entered allmulticast mode
[  109.032309][ T4531] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.040455][ T4531] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.048512][ T4531] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.051638][ T4531] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.347922][ T8656] syz_tun: entered allmulticast mode
[  109.351514][ T8656] vcan0: entered allmulticast mode
[  109.356555][ T8656] loop9: detected capacity change from 0 to 6
[  109.359838][ T8656] Dev loop9: unable to read RDB block 6
[  109.361984][ T8656]  loop9: unable to read partition table
[  109.366255][ T8656] loop9: partition table beyond EOD, truncated
[  109.368439][ T8656] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  109.373750][ T8655] syz_tun: left allmulticast mode
[  109.527085][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'.
[  109.591475][ T8673] overlayfs: conflicting options: userxattr,redirect_dir=on
[  109.729411][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'.
[  109.772261][ T8677] tipc: Resetting bearer <eth:ip6_vti0>
[  109.781042][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'.
[  109.786260][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'.
[  109.844122][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  109.844140][   T40] audit: type=1400 audit(1766646323.475:577): avc:  denied  { write } for  pid=8678 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  109.890192][ T8682] program syz.1.734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.225603][   T40] audit: type=1400 audit(1766646323.835:578): avc:  denied  { setopt } for  pid=8683 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  110.253929][ T8677] bridge0: port 1(veth0_to_bond) entered blocking state
[  110.256472][ T8677] bridge0: port 1(veth0_to_bond) entered disabled state
[  110.260903][ T8677] veth0_to_bond: entered allmulticast mode
[  110.264679][ T8677] veth0_to_bond: entered promiscuous mode
[  110.384300][ T8692] xt_NFQUEUE: number of total queues is 0
[  110.484928][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'.
[  110.486082][ T8697] netlink: 'syz.4.739': attribute type 23 has an invalid length.
[  110.497057][ T8698] netlink: 'syz.4.739': attribute type 23 has an invalid length.
[  110.549146][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'.
[  110.765872][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  110.768854][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  110.785519][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  110.787814][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  110.790114][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  110.792342][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  111.014127][ T8729] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  111.059648][   T40] audit: type=1400 audit(1766646324.685:579): avc:  denied  { execute } for  pid=8730 comm="syz.0.746" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  111.120833][ T8739] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  111.124609][ T8739] NCSI netlink: No device for ifindex 0
[  111.177077][   T40] audit: type=1400 audit(1766646324.805:580): avc:  denied  { mounton } for  pid=8742 comm="syz.1.750" path="/188/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  111.188005][   T40] audit: type=1400 audit(1766646324.815:581): avc:  denied  { remount } for  pid=8742 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  111.514396][ T8759] 9p: Bad value for 'wfdno'
[  111.516778][ T8759] netlink: 'syz.1.754': attribute type 8 has an invalid length.
[  111.577082][ T8755] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  111.609835][   T40] audit: type=1800 audit(1766646325.235:582): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.753" name="/newroot/56/file0" dev="tmpfs" ino=329 res=0 errno=0
[  111.687479][ T8765] netlink: 'syz.3.755': attribute type 9 has an invalid length.
[  111.690200][ T8765] netlink: 'syz.3.755': attribute type 11 has an invalid length.
[  111.693182][ T8765] netlink: 'syz.3.755': attribute type 12 has an invalid length.
[  111.797144][   T40] audit: type=1400 audit(1766646325.425:583): avc:  denied  { ioctl } for  pid=8773 comm="syz.4.758" path="socket:[26224]" dev="sockfs" ino=26224 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  111.902340][ T8777] gfs2: path_lookup on \\�8�<��$�$�&6n @�M��<�A�׾Y@g��
[  111.902340][ T8777] @��%��Ė�b�R.�`fd܋rBl{�\�A
[  111.902340][ T8777] �='Z���j$v�w�\\�����
 returned error -2
[  111.981669][   T40] audit: type=1400 audit(1766646325.605:584): avc:  denied  { create } for  pid=8778 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  111.992048][   T40] audit: type=1400 audit(1766646325.615:585): avc:  denied  { connect } for  pid=8778 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  111.999648][   T40] audit: type=1400 audit(1766646325.615:586): avc:  denied  { write } for  pid=8778 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  112.186713][ T8792] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.268908][ T8798] IPv6: sit1: Disabled Multicast RS
[  112.271785][ T8798] sit1: entered allmulticast mode
[  112.319194][ T8802] bridge_slave_0: left allmulticast mode
[  112.321822][ T8802] bridge_slave_0: left promiscuous mode
[  112.324732][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.330042][ T8802] bridge_slave_1: left allmulticast mode
[  112.333119][ T8802] bridge_slave_1: left promiscuous mode
[  112.335945][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.357342][ T8802] bond0: (slave bond_slave_0): Releasing backup interface
[  112.374577][ T8802] bond0: (slave bond_slave_1): Releasing backup interface
[  112.386673][ T8802] team0: Port device team_slave_0 removed
[  112.391115][ T8802] team0: Port device team_slave_1 removed
[  112.396537][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.400764][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.406769][ T8802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  112.525845][ T8823] input input9: cannot allocate more than FF_MAX_EFFECTS effects
[  112.531074][   T64] Bluetooth: hci3: unexpected event for opcode 0x2010
[  112.608177][ T8832] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI
[  112.612175][ T8832] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[  112.615277][ T8832] CPU: 3 UID: 0 PID: 8832 Comm: syz.0.777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.618935][ T8832] Tainted: [L]=SOFTLOCKUP
[  112.620389][ T8832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  112.623908][ T8832] RIP: 0010:h5_recv+0x104/0x950
[  112.625534][ T8832] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 8c 6b f9 48 8b 44 24 08 <80> 38 00 0f 85 c3 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  112.631776][ T8832] RSP: 0018:ffffc90004fafbf0 EFLAGS: 00010293
[  112.633840][ T8832] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885359da
[  112.636461][ T8832] RDX: ffff8880331e8000 RSI: ffffffff88535a1f RDI: 0000000000000005
[  112.639072][ T8832] RBP: ffffc90004fafd78 R08: 0000000000000005 R09: 0000000000000000
[  112.641679][ T8832] R10: 0000000000000001 R11: ffff8880331e8b30 R12: 0000000000000001
[  112.644278][ T8832] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c947ac0
[  112.646864][ T8832] FS:  00007f2f993b46c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000
[  112.649797][ T8832] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.651990][ T8832] CR2: 00007f2f993b3f98 CR3: 0000000023263000 CR4: 0000000000352ef0
[  112.654583][ T8832] Call Trace:
[  112.655739][ T8832]  <TASK>
[  112.656737][ T8832]  ? __pfx_h5_recv+0x10/0x10
[  112.658281][ T8832]  hci_uart_tty_receive+0x254/0x7e0
[  112.660051][ T8832]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[  112.661894][ T8832]  tty_ioctl+0x583/0x1650
[  112.663383][ T8832]  ? __pfx_tty_ioctl+0x10/0x10
[  112.664945][ T8832]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  112.667151][ T8832]  ? hook_file_ioctl_common+0x144/0x410
[  112.668986][ T8832]  ? selinux_file_ioctl+0x180/0x270
[  112.670768][ T8832]  ? selinux_file_ioctl+0xb4/0x270
[  112.672639][ T8832]  ? __pfx_tty_ioctl+0x10/0x10
[  112.674250][ T8832]  __x64_sys_ioctl+0x18e/0x210
[  112.675764][ T8832]  do_syscall_64+0xcd/0xf80
[  112.677105][ T8832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.678812][ T8832] RIP: 0033:0x7f2f9b18f7c9
[  112.680317][ T8832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.686508][ T8832] RSP: 002b:00007f2f993b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.689229][ T8832] RAX: ffffffffffffffda RBX: 00007f2f9b3e6180 RCX: 00007f2f9b18f7c9
[  112.691857][ T8832] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005
[  112.694466][ T8832] RBP: 00007f2f9b213f91 R08: 0000000000000000 R09: 0000000000000000
[  112.697079][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.699678][ T8832] R13: 00007f2f9b3e6218 R14: 00007f2f9b3e6180 R15: 00007ffc249e9658
[  112.702297][ T8832]  </TASK>
[  112.703343][ T8832] Modules linked in:
[  112.705130][ T8832] ---[ end trace 0000000000000000 ]---
[  112.709474][ T8832] RIP: 0010:h5_recv+0x104/0x950
[  112.711398][ T8832] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 8c 6b f9 48 8b 44 24 08 <80> 38 00 0f 85 c3 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  112.718488][ T8832] RSP: 0018:ffffc90004fafbf0 EFLAGS: 00010293
[  112.720555][ T8832] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885359da
[  112.723441][ T8832] RDX: ffff8880331e8000 RSI: ffffffff88535a1f RDI: 0000000000000005
[  112.726123][ T8832] RBP: ffffc90004fafd78 R08: 0000000000000005 R09: 0000000000000000
[  112.729002][ T8832] R10: 0000000000000001 R11: ffff8880331e8b30 R12: 0000000000000001
[  112.731875][ T8832] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c947ac0
[  112.735133][ T8832] FS:  00007f2f993b46c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000
[  112.738127][ T8832] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.740685][ T8832] CR2: 00007f25e844fd58 CR3: 0000000023263000 CR4: 0000000000352ef0
[  112.743643][ T8832] Kernel panic - not syncing: Fatal exception
[  112.746446][ T8832] Kernel Offset: disabled
[  112.747883][ T8832] Rebooting in 86400 seconds..