last executing test programs:

27.78961987s ago: executing program 0 (id=231):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
process_vm_readv(0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000600)=""/110, 0x6e}], 0x5, &(0x7f0000000ec0), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000005dc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x6, @local, 0x8001}, 0x1c, 0x0}}], 0x1, 0x24000880)
r3 = dup(r2)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x194, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = request_key(&(0x7f0000000040)='syzkaller\x00', 0x0, &(0x7f0000000180)='\x00', 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x66)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2})
prlimit64(0x0, 0xc, &(0x7f0000000700)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000ee0000010000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x1000, @loopback, 0x7}, 0x1c)

24.415983168s ago: executing program 0 (id=242):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xfffffffffffffede, 0x68000000}, 0x80fe)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000000500)=""/173, 0xad)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
r7 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r7, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000808)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

24.145362845s ago: executing program 4 (id=244):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xa00, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x6)

23.349563178s ago: executing program 0 (id=246):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1)
close_range(r3, 0xffffffffffffffff, 0x8000000)

23.344297396s ago: executing program 1 (id=247):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80900)
r2 = socket(0x2, 0x1, 0x100)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x8}, {0x1, 0xe}}}, 0x24}}, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

23.196619298s ago: executing program 3 (id=248):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$inet(0x2, 0x3, 0x5)
r2 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1}, 0x1ff}], 0x2, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)

23.182263314s ago: executing program 2 (id=249):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xf7f, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0xf71, 0x66, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0xb}, {"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"}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x125000, 0x3}, 0x18)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='bbr\x00', 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, 0x0)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10)
connect$unix(r2, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
migrate_pages(0x0, 0xd, 0x0, &(0x7f0000000300)=0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xe4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0)

22.755937715s ago: executing program 4 (id=250):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='neb default user:syz 00000000000000004093\x00'], 0x2a, 0x0)
r2 = add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180), &(0x7f0000000000)="8170f49587ec78b68ad12c1c8b8908b942b548fe2b54b855", 0x18, 0xfffffffffffffffe)
keyctl$read(0xb, r2, &(0x7f0000000480)=""/112, 0x70)
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="0f78e706aceabbbbbbbbbbbb0800450000380000000000019078ac5d914cbee17c140d741e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aa0000000034e1a7c1"], 0x0)
socket(0x400000000010, 0x800, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, 0x0, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x44}, 0x5}, 0x8085)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host})
socket(0x2, 0x80805, 0x0)
socket$inet6(0xa, 0x2, 0x0)

22.295275756s ago: executing program 2 (id=251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x0)

22.245072585s ago: executing program 4 (id=252):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x5453, 0x7cb7562f2d67)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0xffffbf7f)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

22.181035184s ago: executing program 1 (id=253):
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$hiddev(0xffffffffffffffff, &(0x7f00000017c0)=""/185, 0xb9)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2200c800}, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0)
syz_open_dev$video(0x0, 0x8002, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$inet(0x2b, 0x801, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)

22.169789799s ago: executing program 3 (id=254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = signalfd(r2, &(0x7f0000000540)={[0xffffffffc5093e88]}, 0x2c)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)=<r5=>0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000500)=0x4) (async)
setreuid(0x0, 0xee01) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9], 0x20}}, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000003d000900000000000000000001000000040000001400018010001080080001000a0100fe04001000080002"], 0x34}}, 0x0) (async)
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000440)) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000000)) (async, rerun: 32)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0xf7, 0x8, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x0, 0x2, 0x0, 0x7, 0x0, 0x25, 0x7, 0x4, 0x4}, {0x2000, 0x5000, 0x7, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xd000, 0xeeef0000, 0x8, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0x4000, 0xa, 0x5, 0x0, 0x0, 0x3, 0x0, 0x2, 0x4}, {0x1000, 0x0, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x2b, 0x26}, {0xdddd1000}, {0xdddd1000, 0xfffc}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x2501, 0x0, [0x100000, 0x0, 0x2]}) (async)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r14=>0x0, 0x0, 0x6, 0x6, 0x1, 0x0, @local, @private1, 0x20, 0x88, 0x2, 0x7fffffff}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200003, '\x00', r14, r13, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

22.115160045s ago: executing program 2 (id=255):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xf7f, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0xf71, 0x66, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0xb}, {"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"}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x125000, 0x3}, 0x18)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='bbr\x00', 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, 0x0)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10)
connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
migrate_pages(0x0, 0xd, 0x0, &(0x7f0000000300)=0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xe4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0)

21.198447848s ago: executing program 2 (id=256):
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x7801b000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000010046)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f)
read$watch_queue(0xffffffffffffffff, &(0x7f00000002c0)=""/59, 0x1)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x84)
keyctl$revoke(0x3, r5)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)

20.403775748s ago: executing program 3 (id=257):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd26, 0x25dfdbfe, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40850}, 0x4040080)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='io_uring_cqe_overflow\x00', r0, 0x0, 0x1}, 0x18)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffb})
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x5, 0x1}}}}, 0x11)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x40})
syz_open_dev$sg(&(0x7f00000003c0), 0xfffffffffffffffd, 0x410000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_setup(0x5f61, &(0x7f0000000480)={0x0, 0x63a0, 0x10, 0x3, 0x38, 0x0, r1})
r3 = openat(r0, &(0x7f0000000500)='./file0\x00', 0x20000, 0x10)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000540)={0x18, 0x1, 0x1, 0x0, r2, 0x7})
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x201308}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x2c}}, 0xc0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000006c0))
pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000740)=0xffffffffffffffff)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x308, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xbf}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x2b8, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x164, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x158, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x50, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x74, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5a4498e01bb86dbf}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "46a5815c324ed486eef8bec1b3acf4692b6fde545e570b09dd3d5cc2f5648672db9ea8a7159cdfe1ab1bf8f5233dab3d369bf16017f0be7bf7e9213709457880f3fe0059a8a296c7f8caedf0473daaa0367f"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_POLICY={0x8}]}, 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000bc0)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})

20.376587866s ago: executing program 3 (id=258):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x42, 0x11cfa, 0x0, 0x8000008, 0x3, 0x0, 0x80000000, 0x0, 0x2})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x44000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1883000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x20, &(0x7f0000000180)=0x9, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000, 0x0)
ioctl$PTP_PIN_GETFUNC(r10, 0xc0603d06, &(0x7f0000000540)={'\x00', 0xffff, 0x3, 0x81})
clock_gettime(0x0, &(0x7f0000000740)={<r11=>0x0, <r12=>0x0})
setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000780)={r11, r12/1000+60000}, 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000280)={0x9c0000, 0x7, 0x9306, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xf00001, 0x4, '\x00', @p_u32=0x0}})
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000080)=0x4)

20.339641756s ago: executing program 1 (id=259):
r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
getsockname$l2tp(r1, 0x0, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000002000900020073797a310000000005000500020000000500010006000000"], 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x40040c4)
socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$getregset(0x4204, 0x0, 0x2, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')

20.280452045s ago: executing program 2 (id=260):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="c7cef8a112010000000000101e04003100000000000109022400010000c00009040000010300012205000905810310000800009b79944ab98af3eae5aecaa7189acdb705955654208019238de6fc4e3948946abcceec6cb78408f1ea26be27b5bb1e7e9ce58415d2c6454aa1002311"], 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fchdir(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
close(0x3)
syz_open_dev$vim2m(&(0x7f0000000000), 0x2005, 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x7, 0x1, 0x1, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x39, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x1, 0x1, 0x8, 0x7f}, 0xb5, &(0x7f0000000340)={0x5, 0xf, 0xb5, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "fe68429339b48d2703df25db649e47fc"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x4, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x8, 0xf000, 0x3, [0x0, 0x3f0f, 0xf, 0xf]}, @generic={0x79, 0x10, 0xb, "76121b77f42670d4c7830c0052f6e406dfa1b40f5f64eae9840eff7ebc62b6ff586ccc73d3319509fa42b6d0c7c4bc7448b7cf5e0e2db70a702616150fc72b738f9a7b111e76d0137636eeebf8fc8d789a6e43c636c15896b6b240314bb261d37e3b4240e43d71b2feb7657246c17a9de011189c4978"}]}, 0x1, [{0x101, &(0x7f0000000440)=@string={0x101, 0x3, "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"}}]})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000800034000000000090002000000000002000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet(0x2, 0xa, 0x0)
r3 = socket(0xa, 0x5, 0x7)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}}, 0xfffe, {[0x0, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x8000b1, 0x40000]}}, 0x5c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
iopl(0x3)
rmdir(0x0)
socket$packet(0x11, 0x1, 0x300)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)

20.111924548s ago: executing program 0 (id=261):
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="020060c700c300010010050400010005000d0b05ab0007000600c2528b20f62ee6cc699c78fb0797059019ca53dd887119c28f05311edc3bae0002dc4e451f0cc9e3c66fc1a97f422d0ae96584f343d206c0c3696d1cd16ac0d40cf9f15f18e41154b304347efb82e1a346d23a8d9a677ce4048025578f4abbb44be673f12d6a33d959fc81357534045406197717906a0903feebfd8f02c64c02e02edff3d894f385d6f067307e8f7a90e9dc58237da98a37ea48bac5e6cf09b0be561a2ff4e6cc"], 0xcc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r5})
ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000040)='^-@\x00')
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38)
recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/179, 0xb3}], 0x1}, 0x80}], 0x1, 0x100, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="ad772c64c69b5d5c7e9b7563456958da"], 0x1c}}, 0x20000000)

19.719804202s ago: executing program 4 (id=262):
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="020060c700c300010010050400010005000d0b05ab0007000600c2528b20f62ee6cc699c78fb0797059019ca53dd887119c28f05311edc3bae0002dc4e451f0cc9e3c66fc1a97f422d0ae96584f343d206c0c3696d1cd16ac0d40cf9f15f18e41154b304347efb82e1a346d23a8d9a677ce4048025578f4abbb44be673f12d6a33d959fc81357534045406197717906a0903feebfd8f02c64c02e02edff3d894f385d6f067307e8f7a90e9dc58237da98a37ea48bac5e6cf09b0be561a2ff4e6cc"], 0xcc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r5})
ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000040)='^-@\x00')
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38)
recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/179, 0xb3}], 0x1}, 0x80}], 0x1, 0x100, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="ad772c64c69b5d5c7e9b7563456958da"], 0x1c}}, 0x20000000)

19.210503445s ago: executing program 0 (id=263):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000108204009800128009000100766c616e000000008800028006000100000000007c0004800c000100fffffffff9ffffff0c00010005000000020000000c00010006000000010000800c00010100000000600400000c00010000000000000200000000000007000000000000000c00010003000000050000000c00010006000000000800000c00010002000000483e646d0c000100cd8a00000400000008000500", @ANYRES32=r4], 0xcc}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {<r5=>0x0, 0xee01}}, './file0\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) (async)
socketpair(0x1e, 0x4, 0x1e0, &(0x7f00000004c0)) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x1000, &(0x7f0000f9a000/0x1000)=nil})
r10 = dup(r9)
ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000001640)=@newpolicy={0x2328, 0x13, 0x100, 0x70bd2d, 0x25dfdbff, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0x401, 0x2, 0xa0, 0x80, 0x87, r4, r5}, {0xc9, 0xe, 0x7fff, 0x36ab, 0x9, 0x9, 0xb, 0x1}, {0x3, 0x1a8, 0xffffffffffffffc0, 0x3}, 0x8, 0x6e6bb3, 0x1, 0x0, 0x7, 0x2}, [@algo_crypt={0x1048, 0x2, {{'adiantum(essiv-cbc-aes-sha256-neon,cast6,sha224-arm64-neon)\x00'}, 0x8000, "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"}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2a, 0x7}}, @algo_auth={0xe2, 0x1, {{'sha512-arm64\x00'}, 0x4d0, "eddb9bc572a8880c6f939bb2f45b5711ccb9946731823c7baf47434eca76742165d44131aa4eeea96d76d0845834ffbff367c7fd87cd7ad5e0ccf8724ebe3ca9348addeef09b67d1ace86641b442c89732d9b36b17948563884a9bbe1f7a98c41e39e4b4fc30e1b1b4f3057efbf611989d0a1abd1795190c2922ae6555325a78f24b3e7181c8e242d834b9f5a6003c22cab214af3048b0c28aac"}}, @algo_auth={0x1048, 0x1, {{'blake2b-256-generic\x00'}, 0x8000, "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"}}, @tfcpad={0x8, 0x16, 0x8}, @etimer_thresh={0x8, 0xc, 0xa23}, @lastused={0xc, 0xf, 0x8}, @replay_thresh={0x8, 0xb, 0x5}, @policy={0xac, 0x7, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x4e23, 0x1, 0x4e21, 0x0, 0xb20c14daba69d2d6, 0xc0, 0xa0, 0x3c, 0x0, r6}, {0x5, 0xb0, 0x7, 0x8, 0x6, 0xffffffffa214b28d, 0xfffffffffffffff9, 0x9}, {0x0, 0x2, 0x2, 0x7}, 0x8, 0x6e6bb2, 0x2, 0x1, 0x2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x5ea, 0x4e20, @in=@local}}]}, 0x2328}, 0x1, 0x0, 0x0, 0x4048000}, 0x400c044)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@fadd={0x58, 0x114, 0x6, {{0xd1, 0xfffffffa}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x80000000, 0x6, 0x9, 0x91c, 0x6, 0x2, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0xd573}, &(0x7f0000000080)=0x2, &(0x7f00000000c0), 0x9, 0x4, 0x9e9, 0x0, 0x2, 0x1}}], 0xb0}, 0x0)

19.030497676s ago: executing program 0 (id=264):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80900)
r2 = socket(0x2, 0x1, 0x100)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x8}, {0x1, 0xe}}}, 0x24}}, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18.795518535s ago: executing program 4 (id=265):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x0)

18.763063691s ago: executing program 4 (id=266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)={0x20, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

18.477801663s ago: executing program 3 (id=267):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775b31b", 0xe, 0xfffffffffffffffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)

18.392039831s ago: executing program 3 (id=268):
r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r6 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000000)={0x0, 0x1, 0x2, {0xb, @sliced={0x9, [0x8000, 0xd34, 0x7, 0x1, 0x6, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, 0x8, 0x7, 0x3, 0xfffd, 0x2000, 0x1, 0x9, 0x4, 0x7, 0x800, 0x456, 0x2, 0x1b1b, 0x4, 0x40, 0x5, 0x4e, 0x6, 0x1800, 0x6, 0xffff, 0x3, 0x9, 0x100, 0x101, 0x7, 0x1000, 0x6, 0x0, 0x6, 0x67, 0xd000, 0x5ae3, 0x2, 0x0, 0xffff, 0x1000], 0x7fffffff}}, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_misc(r7, &(0x7f0000001000), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}})

17.23510213s ago: executing program 2 (id=269):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd26, 0x25dfdbfe, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40850}, 0x4040080)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='io_uring_cqe_overflow\x00', r0, 0x0, 0x1}, 0x18)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffb})
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x5, 0x1}}}}, 0x11)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x40})
syz_open_dev$sg(&(0x7f00000003c0), 0xfffffffffffffffd, 0x410000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_setup(0x5f61, &(0x7f0000000480)={0x0, 0x63a0, 0x10, 0x3, 0x38, 0x0, r1})
r3 = openat(r0, &(0x7f0000000500)='./file0\x00', 0x20000, 0x10)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000540)={0x18, 0x1, 0x1, 0x0, r2, 0x7})
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x201308}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x2c}}, 0xc0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000006c0))
pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000740)=0xffffffffffffffff)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x308, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xbf}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x2b8, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x164, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x158, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x50, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x74, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5a4498e01bb86dbf}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "46a5815c324ed486eef8bec1b3acf4692b6fde545e570b09dd3d5cc2f5648672db9ea8a7159cdfe1ab1bf8f5233dab3d369bf16017f0be7bf7e9213709457880f3fe0059a8a296c7f8caedf0473daaa0367f"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_POLICY={0x8}]}, 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x10)

17.203257518s ago: executing program 1 (id=270):
socket$netlink(0x10, 0x3, 0x10)
io_uring_setup(0x7d9a, &(0x7f0000000240)={0x0, 0xdf07, 0x2, 0x3, 0xcd})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r4}, 0x38)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2})
r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r7, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = fanotify_init(0xf00, 0x0)
fanotify_mark(r9, 0x105, 0x40009975, r5, 0x0)
chmod(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1})

16.194522092s ago: executing program 1 (id=271):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$vcsn(0x0, 0x7fffffffffffffff, 0x640280)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0xa4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

15.239972119s ago: executing program 1 (id=272):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f00001b6000/0x2000)=nil})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x569983, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$I2C(0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb"], 0x30000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r7)
r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x4000)

3.139085898s ago: executing program 32 (id=264):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80900)
r2 = socket(0x2, 0x1, 0x100)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x8}, {0x1, 0xe}}}, 0x24}}, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.091418643s ago: executing program 33 (id=268):
r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r6 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000000)={0x0, 0x1, 0x2, {0xb, @sliced={0x9, [0x8000, 0xd34, 0x7, 0x1, 0x6, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, 0x8, 0x7, 0x3, 0xfffd, 0x2000, 0x1, 0x9, 0x4, 0x7, 0x800, 0x456, 0x2, 0x1b1b, 0x4, 0x40, 0x5, 0x4e, 0x6, 0x1800, 0x6, 0xffff, 0x3, 0x9, 0x100, 0x101, 0x7, 0x1000, 0x6, 0x0, 0x6, 0x67, 0xd000, 0x5ae3, 0x2, 0x0, 0xffff, 0x1000], 0x7fffffff}}, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_misc(r7, &(0x7f0000001000), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}})

3.051553625s ago: executing program 34 (id=266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)={0x20, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.020836064s ago: executing program 35 (id=269):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x20, 0x70bd26, 0x25dfdbfe, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40850}, 0x4040080)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='io_uring_cqe_overflow\x00', r0, 0x0, 0x1}, 0x18)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffb})
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x5, 0x1}}}}, 0x11)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x40})
syz_open_dev$sg(&(0x7f00000003c0), 0xfffffffffffffffd, 0x410000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_setup(0x5f61, &(0x7f0000000480)={0x0, 0x63a0, 0x10, 0x3, 0x38, 0x0, r1})
r3 = openat(r0, &(0x7f0000000500)='./file0\x00', 0x20000, 0x10)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000540)={0x18, 0x1, 0x1, 0x0, r2, 0x7})
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x201308}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x2c}}, 0xc0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000006c0))
pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000740)=0xffffffffffffffff)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x308, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xbf}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x2b8, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x164, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x158, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x50, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x74, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5a4498e01bb86dbf}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "46a5815c324ed486eef8bec1b3acf4692b6fde545e570b09dd3d5cc2f5648672db9ea8a7159cdfe1ab1bf8f5233dab3d369bf16017f0be7bf7e9213709457880f3fe0059a8a296c7f8caedf0473daaa0367f"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_POLICY={0x8}]}, 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x10)

0s ago: executing program 36 (id=272):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f00001b6000/0x2000)=nil})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x569983, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$I2C(0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb"], 0x30000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r7)
r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x4000)

kernel console output (not intermixed with test programs):

ready exists on: batadv_slave_0
[   66.262171][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.274469][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.368774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   66.416677][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.454743][ T5913] bridge0: port 3(netdevsim2) entered blocking state
[   66.462164][ T5913] bridge0: port 3(netdevsim2) entered disabled state
[   66.471492][ T5913] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[   66.485703][ T5837] Bluetooth: hci2: command tx timeout
[   66.491662][ T5825] Bluetooth: hci0: command tx timeout
[   66.491813][ T5839] Bluetooth: hci3: command tx timeout
[   66.497383][ T5825] Bluetooth: hci4: command tx timeout
[   66.502697][ T5837] Bluetooth: hci1: command tx timeout
[   66.517891][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.675895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   66.702642][ T5913] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[   66.713668][ T5910] (syz.4.5,5910,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   66.722255][ T5910] (syz.4.5,5910,0):ocfs2_fill_super:1177 ERROR: status = -22
[   66.758864][ T5913] bridge0: port 3(netdevsim2) entered blocking state
[   66.765860][ T5913] bridge0: port 3(netdevsim2) entered forwarding state
[   66.813323][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'.
[   66.824021][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.835272][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.846759][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.857414][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.867639][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.878410][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.889668][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.902766][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.913830][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.934781][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.938306][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.951533][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.975680][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.990846][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.999821][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.160722][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.210620][ T3977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.220172][ T3977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.339825][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.352577][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.353286][ T5829] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   67.382535][ T5829] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   67.392019][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.399417][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.416455][ T5829] usb 4-1: config 0 descriptor??
[   67.641121][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.675383][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.813104][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.831680][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.047966][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.058931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.314980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   68.324158][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   68.418497][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   68.519765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   68.528696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   68.580531][ T5837] Bluetooth: hci1: command tx timeout
[   68.586132][ T5839] Bluetooth: hci3: command tx timeout
[   68.592270][ T5838] Bluetooth: hci4: command tx timeout
[   68.592561][ T5840] Bluetooth: hci0: command tx timeout
[   68.606044][ T5825] Bluetooth: hci2: command tx timeout
[   69.175838][ T5946] netlink: 'syz.4.12': attribute type 1 has an invalid length.
[   69.525998][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   69.753494][   T30] kauditd_printk_skb: 33 callbacks suppressed
[   69.753507][   T30] audit: type=1400 audit(1743491918.836:154): avc:  denied  { map_read map_write } for  pid=5950 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   69.819505][ T5871] usb 4-1: USB disconnect, device number 2
[   69.832971][   T30] audit: type=1400 audit(1743491918.916:155): avc:  denied  { allowed } for  pid=5951 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   69.903725][   T30] audit: type=1400 audit(1743491918.986:156): avc:  denied  { create } for  pid=5951 comm="syz.4.14" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   70.344362][ T5959] (syz.2.15,5959,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   70.357075][   T30] audit: type=1400 audit(1743491918.986:157): avc:  denied  { map } for  pid=5951 comm="syz.4.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   70.402632][ T5959] (syz.2.15,5959,1):ocfs2_fill_super:1177 ERROR: status = -22
[   70.918708][   T30] audit: type=1400 audit(1743491918.986:158): avc:  denied  { read write } for  pid=5951 comm="syz.4.14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   70.946292][   T30] audit: type=1400 audit(1743491919.476:159): avc:  denied  { create } for  pid=5950 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.316855][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[   71.323580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[   71.390121][   T30] audit: type=1400 audit(1743491919.476:160): avc:  denied  { write } for  pid=5950 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.500207][   T30] audit: type=1400 audit(1743491919.486:161): avc:  denied  { connect } for  pid=5950 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.541712][ T5976] Zero length message leads to an empty skb
[   72.305817][   T30] audit: type=1400 audit(1743491919.486:162): avc:  denied  { name_connect } for  pid=5950 comm="syz.0.1" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   72.987275][   T30] audit: type=1400 audit(1743491920.766:163): avc:  denied  { create } for  pid=5971 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   74.121748][ T5993] netlink: 'syz.3.23': attribute type 1 has an invalid length.
[   74.885191][ T6002] bridge0: port 3(netdevsim2) entered blocking state
[   74.894391][ T6002] bridge0: port 3(netdevsim2) entered disabled state
[   74.904578][ T6002] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   74.932943][ T6002] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[   74.991639][ T6002] bridge0: port 3(netdevsim2) entered blocking state
[   74.998669][ T6002] bridge0: port 3(netdevsim2) entered forwarding state
[   75.225563][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.358097][   T30] audit: type=1400 audit(1743491924.426:164): avc:  denied  { create } for  pid=6005 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.422317][   T30] audit: type=1400 audit(1743491924.436:165): avc:  denied  { write } for  pid=6005 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.448054][   T30] audit: type=1400 audit(1743491924.476:166): avc:  denied  { ioctl } for  pid=6012 comm="syz.2.32" path="socket:[7799]" dev="sockfs" ino=7799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   75.474969][ T6017] netlink: 'syz.3.30': attribute type 1 has an invalid length.
[   75.484444][   T30] audit: type=1400 audit(1743491924.476:167): avc:  denied  { read write } for  pid=6014 comm="syz.1.31" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   75.510977][   T30] audit: type=1400 audit(1743491924.476:168): avc:  denied  { open } for  pid=6014 comm="syz.1.31" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   75.536532][   T30] audit: type=1400 audit(1743491924.476:169): avc:  denied  { block_suspend } for  pid=6005 comm="syz.4.28" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   75.579183][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.595537][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   75.610881][ T5904] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   75.621195][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.639376][ T5904] usb 1-1: config 0 descriptor??
[   75.663135][   T30] audit: type=1400 audit(1743491924.736:170): avc:  denied  { read } for  pid=6014 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   75.717108][   T30] audit: type=1400 audit(1743491924.736:171): avc:  denied  { write } for  pid=6014 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   75.736676][   T30] audit: type=1400 audit(1743491924.736:172): avc:  denied  { setopt } for  pid=6014 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   76.098325][ T6023] syz.2.33: attempt to access beyond end of device
[   76.098325][ T6023] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[   76.111651][ T6023] FAT-fs (loop5): unable to read boot sector
[   76.621792][   T30] audit: type=1400 audit(1743491925.166:173): avc:  denied  { create } for  pid=6018 comm="syz.2.33" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   77.327738][ T6031] netlink: 'syz.4.36': attribute type 1 has an invalid length.
[   78.697458][ T5904] usb 1-1: USB disconnect, device number 2
[   79.517544][ T6051] block nbd4: NBD_DISCONNECT
[   79.524889][ T6051] block nbd4: Send disconnect failed -107
[   79.545793][ T6051] block nbd4: Disconnected due to user request.
[   79.552065][ T6051] block nbd4: shutting down sockets
[   79.813929][ T6060] syz.2.45: attempt to access beyond end of device
[   79.813929][ T6060] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[   79.827175][ T6060] FAT-fs (loop5): unable to read boot sector
[   80.385398][ T6067] bridge0: port 3(netdevsim2) entered blocking state
[   80.392836][ T6067] bridge0: port 3(netdevsim2) entered disabled state
[   80.402388][ T6067] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   80.432731][ T6067] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   80.491816][ T6065] block nbd0: NBD_DISCONNECT
[   80.505778][ T6065] block nbd0: Send disconnect failed -107
[   80.511573][ T6065] block nbd0: Disconnected due to user request.
[   80.533833][ T6065] block nbd0: shutting down sockets
[   80.550453][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   80.550469][   T30] audit: type=1400 audit(1743491929.636:187): avc:  denied  { create } for  pid=6050 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   80.772035][ T6073] netlink: 'syz.3.49': attribute type 1 has an invalid length.
[   80.833357][ T6067] bridge0: port 3(netdevsim2) entered blocking state
[   80.840480][ T6067] bridge0: port 3(netdevsim2) entered forwarding state
[   81.621890][   T24] cfg80211: failed to load regulatory.db
[   81.778146][   T30] audit: type=1400 audit(1743491930.866:188): avc:  denied  { mount } for  pid=6079 comm="syz.2.51" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[   81.864396][   T30] audit: type=1400 audit(1743491930.896:189): avc:  denied  { setopt } for  pid=6079 comm="syz.2.51" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   82.187772][   T30] audit: type=1400 audit(1743491930.896:190): avc:  denied  { connect } for  pid=6079 comm="syz.2.51" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   82.297513][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.473668][   T30] audit: type=1400 audit(1743491932.556:191): avc:  denied  { name_bind } for  pid=6100 comm="syz.2.57" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   83.923476][ T6113] syz.1.59: attempt to access beyond end of device
[   83.923476][ T6113] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[   83.936854][ T6113] FAT-fs (loop3): unable to read boot sector
[   84.010004][ T6114] syz.4.60: attempt to access beyond end of device
[   84.010004][ T6114] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[   84.022951][ T6114] FAT-fs (loop9): unable to read boot sector
[   84.767868][   T30] audit: type=1400 audit(1743491933.856:192): avc:  denied  { read } for  pid=6092 comm="syz.0.56" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.165806][   T30] audit: type=1400 audit(1743491933.856:193): avc:  denied  { open } for  pid=6092 comm="syz.0.56" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.269321][   T30] audit: type=1400 audit(1743491934.856:194): avc:  denied  { ioctl } for  pid=6092 comm="syz.0.56" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   86.596762][   T30] audit: type=1400 audit(1743491935.686:195): avc:  denied  { write } for  pid=6120 comm="syz.1.62" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   86.621723][ T6123] netlink: 'syz.4.61': attribute type 1 has an invalid length.
[   86.736871][ T6125] sp0: Synchronizing with TNC
[   86.744808][ T6125] sp0: Found TNC
[   86.811459][   T30] audit: type=1400 audit(1743491935.896:196): avc:  denied  { search } for  pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.750572][   T30] audit: type=1400 audit(1743491936.836:197): avc:  denied  { create } for  pid=6139 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   88.939389][ T6157] block nbd2: NBD_DISCONNECT
[   88.944070][ T6157] block nbd2: Send disconnect failed -107
[   88.964986][ T6157] block nbd2: Disconnected due to user request.
[   88.993308][ T6157] block nbd2: shutting down sockets
[   89.570372][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'.
[   90.270811][   T30] audit: type=1400 audit(1743491939.356:198): avc:  denied  { append } for  pid=6170 comm="syz.3.77" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   90.578674][ T6178] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   90.600163][   T30] audit: type=1400 audit(1743491939.676:199): avc:  denied  { create } for  pid=6170 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   90.793824][   T30] audit: type=1400 audit(1743491939.686:200): avc:  denied  { create } for  pid=6170 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   91.399446][ T5825] Bluetooth: hci4: ACL packet for unknown connection handle 0
[   91.517136][ T6191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.929070][   T30] audit: type=1400 audit(1743491941.006:201): avc:  denied  { read write } for  pid=6197 comm="syz.1.84" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   91.980055][   T30] audit: type=1400 audit(1743491941.006:202): avc:  denied  { open } for  pid=6197 comm="syz.1.84" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   92.056430][   T30] audit: type=1400 audit(1743491941.106:203): avc:  denied  { read } for  pid=6197 comm="syz.1.84" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   92.080615][   T30] audit: type=1400 audit(1743491941.106:204): avc:  denied  { open } for  pid=6197 comm="syz.1.84" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   92.337796][ T6205] bridge0: port 4(netdevsim0) entered blocking state
[   92.345724][ T6205] bridge0: port 4(netdevsim0) entered disabled state
[   92.353821][ T6205] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   92.366925][ T6205] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   92.376747][ T6205] bridge0: port 4(netdevsim0) entered blocking state
[   92.383798][ T6205] bridge0: port 4(netdevsim0) entered forwarding state
[   92.671101][   T30] audit: type=1400 audit(1743491941.416:205): avc:  denied  { ioctl } for  pid=6202 comm="syz.3.85" path="socket:[9262]" dev="sockfs" ino=9262 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   93.145686][   T30] audit: type=1400 audit(1743491942.206:206): avc:  denied  { create } for  pid=6207 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.208564][   T30] audit: type=1400 audit(1743491942.216:207): avc:  denied  { ioctl } for  pid=6207 comm="syz.3.86" path="socket:[9265]" dev="sockfs" ino=9265 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.256131][   T30] audit: type=1400 audit(1743491942.326:208): avc:  denied  { create } for  pid=6211 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.296344][   T30] audit: type=1400 audit(1743491942.326:209): avc:  denied  { bind } for  pid=6211 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.332825][ T6219] FAULT_INJECTION: forcing a failure.
[   93.332825][ T6219] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   93.335527][   T30] audit: type=1400 audit(1743491942.326:210): avc:  denied  { listen } for  pid=6211 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.397739][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.3.89 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) 
[   93.397770][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   93.397781][ T6219] Call Trace:
[   93.397788][ T6219]  <TASK>
[   93.397796][ T6219]  dump_stack_lvl+0x16c/0x1f0
[   93.397830][ T6219]  should_fail_ex+0x512/0x640
[   93.397858][ T6219]  _copy_from_user+0x2e/0xd0
[   93.397885][ T6219]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[   93.397916][ T6219]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   93.397953][ T6219]  ipv6_mcast_join_leave+0xd6/0x1e0
[   93.397981][ T6219]  ? __pfx_ipv6_mcast_join_leave+0x10/0x10
[   93.398027][ T6219]  ? __local_bh_enable_ip+0xa4/0x120
[   93.398054][ T6219]  ? lockdep_hardirqs_on+0x7c/0x110
[   93.398086][ T6219]  do_ipv6_setsockopt+0x282c/0x4420
[   93.398121][ T6219]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[   93.398148][ T6219]  ? avc_has_perm_noaudit+0x117/0x3b0
[   93.398177][ T6219]  ? avc_has_perm_noaudit+0x149/0x3b0
[   93.398202][ T6219]  ? avc_has_perm+0x11a/0x1c0
[   93.398222][ T6219]  ? __pfx_avc_has_perm+0x10/0x10
[   93.398255][ T6219]  ? sock_has_perm+0x259/0x2f0
[   93.398280][ T6219]  ? __pfx_sock_has_perm+0x10/0x10
[   93.398303][ T6219]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[   93.398334][ T6219]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[   93.398362][ T6219]  ? proc_fail_nth_write+0x9f/0x250
[   93.398394][ T6219]  ? ipv6_setsockopt+0xcb/0x170
[   93.398420][ T6219]  ipv6_setsockopt+0xcb/0x170
[   93.398450][ T6219]  udpv6_setsockopt+0x7d/0xd0
[   93.398472][ T6219]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   93.398504][ T6219]  do_sock_setsockopt+0x221/0x470
[   93.398539][ T6219]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   93.398585][ T6219]  __sys_setsockopt+0x1a0/0x230
[   93.398615][ T6219]  __x64_sys_setsockopt+0xbd/0x160
[   93.398637][ T6219]  ? do_syscall_64+0x91/0x260
[   93.398663][ T6219]  ? lockdep_hardirqs_on+0x7c/0x110
[   93.398688][ T6219]  do_syscall_64+0xcd/0x260
[   93.398718][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.398736][ T6219] RIP: 0033:0x7f9b9058d169
[   93.398751][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.398773][ T6219] RSP: 002b:00007f9b9130c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.398792][ T6219] RAX: ffffffffffffffda RBX: 00007f9b907a5fa0 RCX: 00007f9b9058d169
[   93.398805][ T6219] RDX: 000000000000002d RSI: 0000000000000029 RDI: 0000000000000003
[   93.398815][ T6219] RBP: 00007f9b9130c090 R08: 0000000000000108 R09: 0000000000000000
[   93.398827][ T6219] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[   93.398838][ T6219] R13: 0000000000000000 R14: 00007f9b907a5fa0 R15: 00007ffef04c7b48
[   93.398864][ T6219]  </TASK>
[   94.131623][ T6230] block nbd0: NBD_DISCONNECT
[   94.626223][ T6230] block nbd0: Send disconnect failed -107
[   94.643323][ T6230] block nbd0: Disconnected due to user request.
[   94.669392][ T6230] block nbd0: shutting down sockets
[   94.803491][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.166190][ T5872] usb 2-1: Using ep0 maxpacket: 8
[   95.189103][ T5872] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   95.223278][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.249420][ T5872] usb 2-1: config 0 descriptor??
[   95.507252][ T6246] syz.3.96: attempt to access beyond end of device
[   95.507252][ T6246] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[   95.520528][ T6246] FAT-fs (loop7): unable to read boot sector
[   95.855205][ T5872] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   96.586619][ T6229] netlink: 'syz.1.92': attribute type 1 has an invalid length.
[   96.883512][ T6258] block device autoloading is deprecated and will be removed.
[   97.035570][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.224516][   T30] kauditd_printk_skb: 21 callbacks suppressed
[   97.224531][   T30] audit: type=1326 audit(1743491946.306:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68c78d169 code=0x7ffc0000
[   97.266308][ T5829] usb 4-1: Using ep0 maxpacket: 8
[   97.284892][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   97.429673][ T5829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   97.458945][   T30] audit: type=1326 audit(1743491946.306:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68c78d169 code=0x7ffc0000
[   97.622302][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   97.632809][ T5829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[   97.642682][ T5829] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.656228][ T5829] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   97.665282][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.780358][ T5829] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[   97.780556][   T30] audit: type=1400 audit(1743491946.866:234): avc:  denied  { write } for  pid=6280 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.981378][   T30] audit: type=1400 audit(1743491947.066:235): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   98.506105][   T30] audit: type=1400 audit(1743491947.556:236): avc:  denied  { ioctl } for  pid=6257 comm="syz.3.99" path="socket:[8748]" dev="sockfs" ino=8748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   98.507871][ T6263] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   98.924205][   T30] audit: type=1400 audit(1743491947.876:237): avc:  denied  { bind } for  pid=6283 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   99.067607][ T6263] batman_adv: batadv0: Adding interface: ip6gretap1
[   99.173102][ T6263] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.260057][ T6263] batman_adv: batadv0: Interface activated: ip6gretap1
[   99.321269][ T5872] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   99.368652][ T5872] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   99.433428][ T5872] asix 2-1:0.0: probe with driver asix failed with error -71
[   99.474507][ T5872] usb 2-1: USB disconnect, device number 3
[   99.523630][   T30] audit: type=1400 audit(1743491948.606:238): avc:  denied  { bind } for  pid=6287 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   99.606099][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'.
[   99.643689][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'.
[  100.105781][   T30] audit: type=1400 audit(1743491948.626:239): avc:  denied  { setopt } for  pid=6287 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  100.126991][   T30] audit: type=1400 audit(1743491948.626:240): avc:  denied  { create } for  pid=6287 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  100.150566][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.106'.
[  100.165523][   T30] audit: type=1400 audit(1743491948.636:241): avc:  denied  { setopt } for  pid=6287 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  100.410198][ T5829] usb 4-1: USB disconnect, device number 3
[  100.510938][ T6316] syz.1.110: attempt to access beyond end of device
[  100.510938][ T6316] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  100.524226][ T6316] FAT-fs (loop3): unable to read boot sector
[  101.500442][ T5904] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  101.748162][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  101.775663][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  101.841316][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  101.955978][ T5904] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  101.965174][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.974633][ T5904] usb 5-1: Product: syz
[  101.978972][ T5904] usb 5-1: Manufacturer: syz
[  101.983647][ T5904] usb 5-1: SerialNumber: syz
[  101.992627][ T5904] usb 5-1: config 0 descriptor??
[  102.297607][ T6340] netlink: 100 bytes leftover after parsing attributes in process `syz.3.116'.
[  102.588774][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  102.588785][   T30] audit: type=1400 audit(1743491951.676:252): avc:  denied  { write } for  pid=6341 comm="syz.0.117" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  102.634217][ T6329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  102.659607][ T6329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  102.679489][ T5904] usb 5-1: ucan: probing device on interface #0
[  102.855621][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.940388][   T30] audit: type=1400 audit(1743491952.026:253): avc:  denied  { setattr } for  pid=6346 comm="syz.1.118" name="SCTP" dev="sockfs" ino=8977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  103.013740][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'.
[  103.086419][   T10] usb 1-1: Using ep0 maxpacket: 8
[  103.095106][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'.
[  103.110557][ T5904] usb 5-1: ucan: failed to retrieve device info
[  103.122750][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.123830][ T5904] usb 5-1: ucan: probe failed; try to update the device firmware
[  103.148105][ T6345] netlink: 'syz.3.119': attribute type 1 has an invalid length.
[  103.165768][ T6345] netlink: 10 bytes leftover after parsing attributes in process `syz.3.119'.
[  103.176855][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  103.198698][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  103.271038][   T10] usb 1-1: SerialNumber: syz
[  103.275241][ T5904] usb 5-1: USB disconnect, device number 2
[  103.285017][   T10] usb 1-1: config 0 descriptor??
[  103.299217][   T10] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  103.313667][   T10] usb 1-1: Failed to create links for entity 255
[  103.334799][   T10] usb 1-1: Failed to register entities (-22).
[  103.467811][ T5840] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  103.806225][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[  103.823783][   T30] audit: type=1400 audit(1743491952.906:254): avc:  denied  { write } for  pid=6341 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  103.954389][  T972] usb 1-1: USB disconnect, device number 3
[  104.219548][   T30] audit: type=1400 audit(1743491953.306:255): avc:  denied  { create } for  pid=6364 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  105.117293][   T30] audit: type=1400 audit(1743491954.136:256): avc:  denied  { ioctl } for  pid=6377 comm="syz.2.129" path="/dev/radio0" dev="devtmpfs" ino=955 ioctlcmd=0x5625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  105.208094][   T30] audit: type=1400 audit(1743491954.136:257): avc:  denied  { create } for  pid=6377 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.480537][   T30] audit: type=1400 audit(1743491954.136:258): avc:  denied  { ioctl } for  pid=6377 comm="syz.2.129" path="socket:[9591]" dev="sockfs" ino=9591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.602010][   T30] audit: type=1400 audit(1743491954.606:259): avc:  denied  { connect } for  pid=6380 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  105.665049][ T5839] Bluetooth: Unexpected continuation frame (len 12)
[  105.824494][   T30] audit: type=1400 audit(1743491954.906:260): avc:  denied  { connect } for  pid=6389 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  105.896076][   T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  106.035702][   T10] usb 1-1: device descriptor read/64, error -71
[  106.065603][  T972] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  106.175525][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.195774][  T972] usb 3-1: device descriptor read/64, error -71
[  106.275676][   T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  106.336062][ T5829] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  106.347573][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.369361][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.383829][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.402163][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.424361][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.425317][   T10] usb 1-1: device descriptor read/64, error -71
[  106.438311][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.445534][  T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.449606][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.475240][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.489172][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.497209][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.512502][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.526170][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.534434][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.554537][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.565954][   T10] usb usb1-port1: attempt power cycle
[  106.567943][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.579606][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.598904][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.610674][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.626312][  T972] usb 3-1: device descriptor read/64, error -71
[  106.633139][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.644697][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.659739][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.674466][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.686344][ T5829] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.699422][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.709522][ T5829] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  106.722365][ T5829] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  106.738517][  T972] usb usb3-port1: attempt power cycle
[  106.743717][ T5829] usb 4-1: Product: syz
[  106.748640][ T5829] usb 4-1: Manufacturer: syz
[  106.753376][ T5829] usb 4-1: SerialNumber: syz
[  106.771444][ T5829] usb 4-1: config 0 descriptor??
[  106.799212][ T5829] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  106.930664][   T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  106.991007][   T10] usb 1-1: device descriptor read/8, error -71
[  107.004072][   T47] usb 4-1: USB disconnect, device number 4
[  107.043973][   T47] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  107.086092][  T972] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  107.106844][  T972] usb 3-1: device descriptor read/8, error -71
[  107.195738][ T5829] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  107.245814][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  107.275601][   T10] usb 1-1: device descriptor read/8, error -71
[  107.348804][  T972] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  107.365547][ T5829] usb 2-1: Using ep0 maxpacket: 8
[  107.372145][ T5829] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  107.386276][   T10] usb usb1-port1: unable to enumerate USB device
[  107.394813][ T5829] usb 2-1: config 179 has no interface number 0
[  107.395825][  T972] usb 3-1: device descriptor read/8, error -71
[  107.402942][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  107.421785][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  107.438400][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  107.446790][ T6386] Set syz1 is full, maxelem 65536 reached
[  107.456968][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  107.470548][ T5829] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  107.503745][ T5829] usb 2-1: config 179 interface 65 has no altsetting 0
[  107.511921][ T5829] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  107.523521][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.532457][ T5839] Bluetooth: hci4: command 0x0405 tx timeout
[  107.541478][  T972] usb usb3-port1: unable to enumerate USB device
[  107.553513][ T5829] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5
[  107.579490][   T30] audit: type=1400 audit(1743491956.666:261): avc:  denied  { read } for  pid=5181 comm="acpid" name="js0" dev="devtmpfs" ino=2751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.630457][   T30] audit: type=1400 audit(1743491956.666:262): avc:  denied  { open } for  pid=5181 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  108.029867][ T6398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.137'.
[  108.073445][   T30] audit: type=1400 audit(1743491957.156:263): avc:  denied  { ioctl } for  pid=6397 comm="syz.1.137" path="socket:[9072]" dev="sockfs" ino=9072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  108.103770][ T6398] netlink: 300 bytes leftover after parsing attributes in process `syz.1.137'.
[  108.138908][ T5829] usb 2-1: USB disconnect, device number 4
[  108.144805][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  108.171732][ T5829] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  108.172642][   T30] audit: type=1400 audit(1743491957.186:264): avc:  denied  { write } for  pid=6397 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  108.860256][ T6419] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.200795][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.379611][   T30] audit: type=1400 audit(1743491958.456:265): avc:  denied  { write } for  pid=6429 comm="syz.1.149" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  109.419469][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.422170][   T30] audit: type=1400 audit(1743491958.466:266): avc:  denied  { ioctl } for  pid=6429 comm="syz.1.149" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  109.459906][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  109.492657][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.502096][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.523224][ T5872] usb 4-1: config 0 descriptor??
[  109.541398][   T30] audit: type=1400 audit(1743491958.626:267): avc:  denied  { open } for  pid=6436 comm="syz.2.150" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  109.622763][ T5872] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  109.820876][   T30] audit: type=1326 audit(1743491958.906:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.2.150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7e958d169 code=0x0
[  110.085154][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  110.162986][   T30] audit: type=1326 audit(1743491959.246:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e958d169 code=0x7fc00000
[  110.193312][   T30] audit: type=1326 audit(1743491959.276:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa7e958d169 code=0x7fc00000
[  110.220231][   T30] audit: type=1326 audit(1743491959.276:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e958d169 code=0x7fc00000
[  110.265625][   T10] usb 5-1: Using ep0 maxpacket: 8
[  110.272729][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  110.284681][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  110.313632][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  110.450180][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  110.464771][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  110.478385][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  110.487733][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  110.499455][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  110.515978][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  110.786516][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  111.075294][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  111.082847][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  111.094172][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.154039][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  111.198301][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  111.244606][   T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  111.263328][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.286010][   T10] usb 5-1: Product: syz
[  111.298126][   T10] usb 5-1: Manufacturer: syz
[  111.309372][   T10] usb 5-1: SerialNumber: syz
[  111.534416][   T10] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  111.559084][   T10] usb 5-1: USB disconnect, device number 3
[  111.790925][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  111.962349][ T5872] usb 4-1: USB disconnect, device number 5
[  112.118777][ T5871] usb 2-1: Using ep0 maxpacket: 8
[  112.144929][ T5871] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  112.159021][ T5871] usb 2-1: config 0 has no interface number 0
[  112.675664][ T5871] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.708083][ T5871] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  112.719984][ T5871] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  112.739701][ T5871] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  112.746252][   T30] kauditd_printk_skb: 273 callbacks suppressed
[  112.746266][   T30] audit: type=1400 audit(1743491961.826:545): avc:  denied  { ioctl } for  pid=6481 comm="syz.4.163" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  112.755384][ T5871] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  112.800144][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.810395][ T6482] input: syz1 as /devices/virtual/input/input6
[  112.810761][ T5871] usb 2-1: config 0 descriptor??
[  112.828278][ T5871] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  112.843282][   T30] audit: type=1400 audit(1743491961.926:546): avc:  denied  { ioctl } for  pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2768 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.952299][ T6482] fuse: Unknown parameter ''
[  112.966733][   T30] audit: type=1400 audit(1743491962.036:547): avc:  denied  { append } for  pid=6481 comm="syz.4.163" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.044868][ T5840] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  113.111374][   T30] audit: type=1400 audit(1743491962.056:548): avc:  denied  { mount } for  pid=6488 comm="syz.3.166" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  113.147104][ T6486] syzkaller0: entered promiscuous mode
[  113.157666][   T30] audit: type=1400 audit(1743491962.056:549): avc:  denied  { mounton } for  pid=6488 comm="syz.3.166" path="/36/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  113.197009][ T6486] syzkaller0: entered allmulticast mode
[  113.283872][   T24] usb 2-1: USB disconnect, device number 5
[  113.283880][    C0] ldusb 2-1:0.55: usb_submit_urb failed (-19)
[  113.328408][   T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  113.340107][   T30] audit: type=1400 audit(1743491962.056:550): avc:  denied  { mount } for  pid=6488 comm="syz.3.166" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  113.525574][   T30] audit: type=1400 audit(1743491962.056:551): avc:  denied  { create } for  pid=6488 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  113.574143][   T30] audit: type=1400 audit(1743491962.056:552): avc:  denied  { bind } for  pid=6488 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  113.856994][   T30] audit: type=1400 audit(1743491962.096:553): avc:  denied  { rename } for  pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  114.000340][   T30] audit: type=1400 audit(1743491962.096:554): avc:  denied  { unlink } for  pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  115.178077][ T5871] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  115.400485][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.415599][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  115.505493][ T6522] syz.4.175: attempt to access beyond end of device
[  115.505493][ T6522] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  115.518742][ T6522] FAT-fs (loop9): unable to read boot sector
[  115.900117][ T5871] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.925523][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.937635][ T6520] (syz.1.174,6520,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  115.950791][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.957639][ T6520] (syz.1.174,6520,1):ocfs2_fill_super:1177 ERROR: status = -22
[  115.969552][ T5871] usb 4-1: config 0 descriptor??
[  115.979414][ T5871] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  116.156445][ T5872] usb 3-1: Using ep0 maxpacket: 16
[  116.173365][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.210111][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.248366][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  116.304045][ T5872] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  116.313524][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.337977][ T5872] usb 3-1: config 0 descriptor??
[  116.759436][ T5872] microsoft 0003:045E:07DA.0001: item 0 4 0 11 parsing failed
[  116.779062][ T5872] microsoft 0003:045E:07DA.0001: parse failed
[  116.793497][ T5872] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22
[  116.963507][ T5874] usb 3-1: USB disconnect, device number 6
[  117.422968][ T6534] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[  117.772671][ T6543] syz.1.181: attempt to access beyond end of device
[  117.772671][ T6543] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  117.787505][ T6543] FAT-fs (loop3): unable to read boot sector
[  118.141389][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  118.141406][   T30] audit: type=1400 audit(1743491967.226:563): avc:  denied  { accept } for  pid=6530 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.181575][ T5840] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  118.236238][ T5874] usb 4-1: USB disconnect, device number 6
[  118.744947][   T30] audit: type=1400 audit(1743491967.826:564): avc:  denied  { ioctl } for  pid=6551 comm="syz.2.185" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  118.967249][ T6557] fuse: Bad value for 'group_id'
[  118.972236][ T6557] fuse: Bad value for 'group_id'
[  119.014432][   T30] audit: type=1400 audit(1743491968.056:565): avc:  denied  { mounton } for  pid=6551 comm="syz.2.185" path="/42/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  119.065815][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  119.088616][   T30] audit: type=1400 audit(1743491968.176:566): avc:  denied  { read } for  pid=6555 comm="syz.1.186" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  119.133011][   T30] audit: type=1400 audit(1743491968.176:567): avc:  denied  { open } for  pid=6555 comm="syz.1.186" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  119.260829][ T5873] usb 4-1: Using ep0 maxpacket: 32
[  119.572791][ T5873] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  119.582396][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.590767][ T5873] usb 4-1: Product: syz
[  119.596441][ T5873] usb 4-1: Manufacturer: syz
[  119.601139][ T5873] usb 4-1: SerialNumber: syz
[  119.610192][ T5873] usb 4-1: config 0 descriptor??
[  119.627781][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  119.649994][   T30] audit: type=1400 audit(1743491968.736:568): avc:  denied  { read } for  pid=5490 comm="dhcpcd" name="n102" dev="tmpfs" ino=2612 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  119.676402][   T30] audit: type=1400 audit(1743491968.736:569): avc:  denied  { open } for  pid=5490 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=2612 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  119.701354][   T30] audit: type=1400 audit(1743491968.736:570): avc:  denied  { getattr } for  pid=5490 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=2612 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  119.766472][   T30] audit: type=1400 audit(1743491968.856:571): avc:  denied  { ioctl } for  pid=6559 comm="syz.4.187" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.793121][   T30] audit: type=1400 audit(1743491968.856:572): avc:  denied  { read } for  pid=6568 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  119.900508][   T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  120.012533][ T6571] (syz.0.188,6571,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  120.022079][ T6571] (syz.0.188,6571,0):ocfs2_fill_super:1177 ERROR: status = -22
[  120.075672][   T47] usb 5-1: Using ep0 maxpacket: 16
[  120.089483][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  120.102284][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41553, setting to 1024
[  120.122632][   T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  120.139391][   T47] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  120.149032][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.171531][   T47] usb 5-1: config 0 descriptor??
[  120.226428][ T5874] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  120.319387][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[  120.404411][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  120.446295][ T5874] usb 2-1: config 0 has no interface number 0
[  120.452482][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  120.461374][ T5873] gspca_ov534_9: reg_w failed -71
[  120.464302][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  120.537954][ T5874] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  120.595093][   T47] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input7
[  120.622303][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.639975][ T5874] usb 2-1: config 0 descriptor??
[  120.654212][ T6576] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  120.675382][   T47] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  120.682804][ T5874] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  120.835608][ T5873] gspca_ov534_9: Unknown sensor 0000
[  120.835713][ T5873] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  120.891515][ T5873] usb 4-1: USB disconnect, device number 7
[  121.117526][ T6596] ubi31: attaching mtd0
[  121.296167][   T47] usb 2-1: USB disconnect, device number 6
[  121.296309][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  121.314861][ T6596] ubi31: scanning is finished
[  121.319744][ T6596] ubi31: empty MTD device detected
[  122.220924][ T6596] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  122.230764][ T6596] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  122.238960][ T6596] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  122.248449][ T6596] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  122.258765][ T6596] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  122.267455][ T6596] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  122.277156][ T6596] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4204620354
[  122.292547][ T6596] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  122.308553][ T6607] ubi31: background thread "ubi_bgt31d" started, PID 6607
[  122.482793][ T5874] usb 5-1: USB disconnect, device number 4
[  122.675689][ T5872] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  123.265540][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  123.273682][ T5872] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  123.284567][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.292627][ T5872] usb 4-1: Product: syz
[  123.298261][ T5872] usb 4-1: Manufacturer: syz
[  123.302855][ T5872] usb 4-1: SerialNumber: syz
[  123.312315][ T5872] usb 4-1: config 0 descriptor??
[  123.320742][ T5872] gspca_main: sq930x-2.14.0 probing 2770:930c
[  123.325553][   T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  123.497705][   T47] usb 3-1: device descriptor read/64, error -71
[  123.658986][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  123.659001][   T30] audit: type=1400 audit(1743491972.746:589): avc:  denied  { getopt } for  pid=6622 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  123.749943][ T6625] syz.0.195: attempt to access beyond end of device
[  123.749943][ T6625] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  123.763091][ T6625] FAT-fs (loop1): unable to read boot sector
[  124.201129][ T5872] gspca_sq930x: ucbus_write failed -110
[  124.206859][ T5872] sq930x 4-1:0.0: probe with driver sq930x failed with error -110
[  124.223862][   T30] audit: type=1400 audit(1743491973.306:590): avc:  denied  { ioctl } for  pid=6622 comm="syz.1.196" path="socket:[9987]" dev="sockfs" ino=9987 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  124.305620][   T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  124.466023][   T47] usb 3-1: device descriptor read/64, error -71
[  124.582435][   T47] usb usb3-port1: attempt power cycle
[  125.095531][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.117473][   T47] usb 3-1: device descriptor read/8, error -71
[  125.365804][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  125.488912][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.536990][   T47] usb 3-1: device descriptor read/8, error -71
[  125.611034][   T30] audit: type=1400 audit(1743491974.696:591): avc:  denied  { write } for  pid=6641 comm="syz.2.200" path="socket:[10008]" dev="sockfs" ino=10008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  125.655776][ T5872] usb 1-1: Using ep0 maxpacket: 16
[  125.667653][   T47] usb usb3-port1: unable to enumerate USB device
[  125.698265][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.723639][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.751835][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.785386][ T5872] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.794690][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.883121][ T5872] usb 1-1: config 0 descriptor??
[  126.168533][   T30] audit: type=1400 audit(1743491975.236:592): avc:  denied  { name_bind } for  pid=6644 comm="syz.1.201" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  126.571972][   T47] usb 4-1: USB disconnect, device number 8
[  126.572173][ T5872] usbhid 1-1:0.0: can't add hid device: -71
[  126.609230][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  126.685793][ T5872] usb 1-1: USB disconnect, device number 8
[  126.729707][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  126.750766][   T30] audit: type=1400 audit(1743491975.826:593): avc:  denied  { ioctl } for  pid=6660 comm="syz.3.207" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10044 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  126.751306][ T6647] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET)
[  126.803968][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.824729][   T30] audit: type=1400 audit(1743491975.906:594): avc:  denied  { read } for  pid=6660 comm="syz.3.207" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  126.838156][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.873737][   T30] audit: type=1400 audit(1743491975.906:595): avc:  denied  { open } for  pid=6660 comm="syz.3.207" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  126.873780][   T30] audit: type=1400 audit(1743491975.916:596): avc:  denied  { ioctl } for  pid=6660 comm="syz.3.207" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  126.917182][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.335655][ T5872] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.359924][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'.
[  128.102336][ T5872] usb 1-1: Using ep0 maxpacket: 32
[  128.118924][ T5840] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  128.124129][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.143221][ T5872] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  128.152525][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.182780][ T5872] usb 1-1: Product: syz
[  128.264008][ T5872] usb 1-1: Manufacturer: syz
[  128.273338][ T5872] usb 1-1: SerialNumber: syz
[  128.280336][ T5872] usb 1-1: config 0 descriptor??
[  128.308035][ T5840] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  128.318048][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  128.514648][ T5872] usb 1-1: USB disconnect, device number 9
[  128.932776][   T30] audit: type=1400 audit(1743491978.016:597): avc:  denied  { setopt } for  pid=6699 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  129.265531][   T30] audit: type=1400 audit(1743491978.346:598): avc:  denied  { getopt } for  pid=6704 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.267596][   T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  129.373373][ T6717] FAULT_INJECTION: forcing a failure.
[  129.373373][ T6717] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  129.390131][ T6717] CPU: 0 UID: 0 PID: 6717 Comm: syz.3.220 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) 
[  129.390155][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  129.390165][ T6717] Call Trace:
[  129.390170][ T6717]  <TASK>
[  129.390177][ T6717]  dump_stack_lvl+0x16c/0x1f0
[  129.390206][ T6717]  should_fail_ex+0x512/0x640
[  129.390231][ T6717]  should_fail_alloc_page+0xe7/0x130
[  129.390259][ T6717]  prepare_alloc_pages+0x3c2/0x610
[  129.390279][ T6717]  ? down_write+0x14d/0x200
[  129.390306][ T6717]  __alloc_frozen_pages_noprof+0x18f/0x2370
[  129.390335][ T6717]  ? process_measurement+0x1e7/0x2360
[  129.390367][ T6717]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  129.390401][ T6717]  ? __lock_acquire+0x5ca/0x1ba0
[  129.390426][ T6717]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  129.390447][ T6717]  ? policy_nodemask+0xea/0x4e0
[  129.390475][ T6717]  alloc_pages_mpol+0x1fb/0x550
[  129.390501][ T6717]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  129.390533][ T6717]  alloc_pages_noprof+0x131/0x390
[  129.390558][ T6717]  __pud_alloc+0x39/0x690
[  129.390581][ T6717]  __handle_mm_fault+0x99c/0x2a50
[  129.390611][ T6717]  ? __pfx___handle_mm_fault+0x10/0x10
[  129.390647][ T6717]  ? find_vma+0xbf/0x140
[  129.390664][ T6717]  ? __pfx_find_vma+0x10/0x10
[  129.390684][ T6717]  handle_mm_fault+0x404/0xae0
[  129.390710][ T6717]  do_user_addr_fault+0x7a9/0x1430
[  129.390736][ T6717]  exc_page_fault+0x5c/0xc0
[  129.390758][ T6717]  asm_exc_page_fault+0x26/0x30
[  129.390773][ T6717] RIP: 0010:rep_movs_alternative+0xf/0x70
[  129.390791][ T6717] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66
[  129.390805][ T6717] RSP: 0018:ffffc90005887d60 EFLAGS: 00050202
[  129.390819][ T6717] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000004
[  129.390828][ T6717] RDX: fffff52000b10fbc RSI: 0000200000000080 RDI: ffffc90005887de0
[  129.390838][ T6717] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000b10fbc
[  129.390847][ T6717] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  129.390855][ T6717] R13: ffffc90005887de0 R14: 0000000000000000 R15: 0000000000000065
[  129.390878][ T6717]  _copy_from_user+0x98/0xd0
[  129.390901][ T6717]  do_sock_getsockopt+0x5f4/0x800
[  129.390920][ T6717]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  129.390934][ T6717]  ? __fget_files+0x204/0x3c0
[  129.390968][ T6717]  __sys_getsockopt+0x12f/0x260
[  129.390994][ T6717]  __x64_sys_getsockopt+0xbd/0x160
[  129.391014][ T6717]  ? do_syscall_64+0x91/0x260
[  129.391036][ T6717]  ? lockdep_hardirqs_on+0x7c/0x110
[  129.391057][ T6717]  do_syscall_64+0xcd/0x260
[  129.391082][ T6717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.391098][ T6717] RIP: 0033:0x7f9b9058d169
[  129.391111][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.391125][ T6717] RSP: 002b:00007f9b9130c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  129.391140][ T6717] RAX: ffffffffffffffda RBX: 00007f9b907a5fa0 RCX: 00007f9b9058d169
[  129.391150][ T6717] RDX: 0000000000000006 RSI: 0000000000000065 RDI: 0000000000000003
[  129.391159][ T6717] RBP: 00007f9b9130c090 R08: 0000200000000080 R09: 0000000000000000
[  129.391168][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.391177][ T6717] R13: 0000000000000000 R14: 00007f9b907a5fa0 R15: 00007ffef04c7b48
[  129.391200][ T6717]  </TASK>
[  129.745287][   T47] usb 3-1: device descriptor read/64, error -71
[  130.265569][   T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  130.275106][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'.
[  130.415557][   T47] usb 3-1: device descriptor read/64, error -71
[  130.461977][ T5840] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  130.536405][   T47] usb usb3-port1: attempt power cycle
[  130.766743][ T6742] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  130.838608][ T6741] Process accounting resumed
[  130.935600][   T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  130.979014][   T47] usb 3-1: device descriptor read/8, error -71
[  130.992383][   T30] audit: type=1400 audit(1743491980.076:599): avc:  denied  { connect } for  pid=6722 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  131.064617][   T30] audit: type=1400 audit(1743491980.106:600): avc:  denied  { name_connect } for  pid=6722 comm="syz.0.222" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  131.120267][   T30] audit: type=1400 audit(1743491980.106:601): avc:  denied  { write } for  pid=6722 comm="syz.0.222" lport=33850 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  131.225530][ T5873] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  131.233337][   T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  131.271864][   T47] usb 3-1: device descriptor read/8, error -71
[  131.382931][   T30] audit: type=1400 audit(1743491980.466:602): avc:  denied  { bind } for  pid=6746 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.406591][ T6747] Bluetooth: MGMT ver 1.23
[  131.438933][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.555117][   T47] usb usb3-port1: unable to enumerate USB device
[  131.621386][ T5873] usb 2-1: config 0 has no interfaces?
[  131.713899][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  131.783967][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.932404][ T5873] usb 2-1: config 0 descriptor??
[  132.159403][   T30] audit: type=1400 audit(1743491980.496:603): avc:  denied  { write } for  pid=6746 comm="syz.3.229" path="socket:[11287]" dev="sockfs" ino=11287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  132.249795][   T30] audit: type=1400 audit(1743491980.516:604): avc:  denied  { append } for  pid=6746 comm="syz.3.229" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  132.342759][   T30] audit: type=1400 audit(1743491980.646:605): avc:  denied  { write } for  pid=6746 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  132.451126][ T5829] usb 2-1: USB disconnect, device number 7
[  132.657805][ T6760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.734295][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  132.760481][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  132.837619][   T30] audit: type=1400 audit(1743491981.806:606): avc:  denied  { setopt } for  pid=6755 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  133.087335][ T6767] block nbd4: NBD_DISCONNECT
[  133.093546][ T6767] block nbd4: Send disconnect failed -107
[  133.100836][ T6767] block nbd4: Disconnected due to user request.
[  133.108964][ T6767] block nbd4: shutting down sockets
[  133.289243][ T6772] veth1: entered promiscuous mode
[  133.298824][ T6771] veth1: left promiscuous mode
[  133.927196][ T5840] Bluetooth: Unexpected continuation frame (len 12)
[  133.974222][ T5840] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  134.031721][   T30] audit: type=1400 audit(1743491983.116:607): avc:  denied  { connect } for  pid=6782 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  136.008668][   T30] audit: type=1400 audit(1743491985.086:608): avc:  denied  { read } for  pid=6794 comm="syz.0.242" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  136.220881][   T30] audit: type=1400 audit(1743491985.086:609): avc:  denied  { open } for  pid=6794 comm="syz.0.242" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  136.251142][   T30] audit: type=1400 audit(1743491985.156:610): avc:  denied  { write } for  pid=6794 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  136.592579][   T30] audit: type=1400 audit(1743491985.336:611): avc:  denied  { getopt } for  pid=6799 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  136.612377][   T30] audit: type=1400 audit(1743491985.336:612): avc:  denied  { name_connect } for  pid=6799 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  136.633616][   T30] audit: type=1400 audit(1743491985.366:613): avc:  denied  { ioctl } for  pid=6782 comm="syz.2.240" path="socket:[10651]" dev="sockfs" ino=10651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  136.659217][   T30] audit: type=1400 audit(1743491985.406:614): avc:  denied  { bind } for  pid=6782 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  137.046260][ T6807] block nbd1: NBD_DISCONNECT
[  137.070239][ T6807] block nbd1: Send disconnect failed -107
[  137.107947][ T6807] block nbd1: Disconnected due to user request.
[  137.123388][ T6807] block nbd1: shutting down sockets
[  137.635614][ T5829] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  138.066807][ T5829] usb 1-1: config 0 has no interfaces?
[  138.094927][ T5829] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  138.143210][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.428157][ T5829] usb 1-1: Product: syz
[  138.445386][ T5829] usb 1-1: Manufacturer: syz
[  138.455320][ T5829] usb 1-1: SerialNumber: syz
[  138.473643][ T5829] usb 1-1: config 0 descriptor??
[  138.844792][   T30] audit: type=1400 audit(1743491987.926:615): avc:  denied  { create } for  pid=6827 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  138.900805][  T972] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  139.089220][  T972] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  139.136724][  T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.144818][  T972] usb 5-1: Product: syz
[  139.150680][  T972] usb 5-1: Manufacturer: syz
[  139.155274][  T972] usb 5-1: SerialNumber: syz
[  139.162037][  T972] usb 5-1: config 0 descriptor??
[  139.743624][ T5873] usb 5-1: USB disconnect, device number 5
[  139.779935][ T5840] Bluetooth: Unexpected continuation frame (len 12)
[  140.028698][   T24] usb 1-1: USB disconnect, device number 10
[  140.068815][ T5840] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  140.095735][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  140.215920][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  140.216028][   T47] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  140.274001][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.286799][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.329224][ T5829] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  140.338830][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.363780][ T5829] usb 4-1: config 0 descriptor??
[  140.387315][   T47] usb 3-1: device descriptor read/64, error -71
[  140.402439][ T5873] usb 2-1: device descriptor read/64, error -71
[  140.551135][ T5840] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  140.746292][   T47] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  140.746360][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  140.949234][ T5829] sony 0003:054C:024B.0003: unexpected long global item
[  140.975071][ T5829] sony 0003:054C:024B.0003: parse failed
[  140.993672][ T5829] sony 0003:054C:024B.0003: probe with driver sony failed with error -22
[  141.022528][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[  141.032436][ T6860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.263'.
[  141.085622][   T47] usb 3-1: device descriptor read/64, error -71
[  141.092233][ T5873] usb 2-1: device descriptor read/64, error -71
[  141.143380][ T6865] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  141.154488][ T6865] block nbd0: NBD_DISCONNECT
[  141.160729][ T6865] block nbd0: Send disconnect failed -107
[  141.167356][ T6865] block nbd0: Disconnected due to user request.
[  141.174378][ T6865] block nbd0: shutting down sockets
[  141.192556][  T972] usb 4-1: USB disconnect, device number 9
[  141.205911][   T47] usb usb3-port1: attempt power cycle
[  141.211689][ T5873] usb usb2-port1: attempt power cycle
[  141.576894][   T47] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  141.584524][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  141.606299][   T47] usb 3-1: device descriptor read/8, error -71
[  141.612523][ T5873] usb 2-1: device descriptor read/8, error -71
[  141.734685][ T6873] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  141.742962][ T6873] PKCS7: Only support pkcs7_signedData type
[  141.865614][   T47] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  141.873350][ T5873] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  141.909332][   T47] usb 3-1: device descriptor read/8, error -71
[  141.921100][ T5873] usb 2-1: device descriptor read/8, error -71
[  141.955528][ T6878] loop9: detected capacity change from 0 to 7
[  141.963073][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  141.971150][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  141.979062][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  141.987113][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  141.995004][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  142.002935][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  142.011278][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  142.019218][ T6878] ldm_validate_partition_table(): Disk read failed.
[  142.025993][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  142.033894][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  142.041861][ T6878] Buffer I/O error on dev loop9, logical block 0, async page read
[  142.051387][ T6878] Dev loop9: unable to read RDB block 0
[  142.057170][ T6878]  loop9: unable to read partition table
[  142.062946][ T6878] loop9: partition table beyond EOD, truncated
[  142.069142][ T6878] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  142.069142][ T6878] 
Uªÿÿÿÿÿÿ) failed (rc=-5)
[  142.090711][   T47] usb usb3-port1: unable to enumerate USB device
[  142.097977][ T5873] usb usb2-port1: unable to enumerate USB device
[  142.305642][   T30] audit: type=1400 audit(1743491991.216:616): avc:  denied  { search } for  pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.997354][ T5840] Bluetooth: Unexpected continuation frame (len 12)
[  143.033495][   T30] audit: type=1400 audit(1743491992.116:617): avc:  denied  { sqpoll } for  pid=6881 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  143.582325][   T30] audit: type=1400 audit(1743491992.666:618): avc:  denied  { watch } for  pid=6881 comm="syz.1.270" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  143.641305][   T30] audit: type=1400 audit(1743491992.666:619): avc:  denied  { watch_sb watch_reads } for  pid=6881 comm="syz.1.270" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  145.336040][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  145.487707][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.500620][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  145.513998][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.523316][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.533329][ T5872] usb 2-1: config 0 descriptor??
[  145.541031][ T5872] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  157.437918][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  157.462082][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  157.471589][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  157.479465][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  157.487758][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  157.497897][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  157.498259][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  157.513611][   T30] audit: type=1400 audit(1743492006.596:620): avc:  denied  { mounton } for  pid=6900 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  157.515381][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  157.550544][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  157.563435][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  157.570936][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  157.580636][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  157.588930][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  157.600042][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  157.600075][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  157.751380][ T6900] chnl_net:caif_netlink_parms(): no params data found
[  157.882664][ T6902] chnl_net:caif_netlink_parms(): no params data found
[  157.891646][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.901406][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.909290][ T6900] bridge_slave_0: entered allmulticast mode
[  157.917433][ T6900] bridge_slave_0: entered promiscuous mode
[  157.934462][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.941671][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.948952][ T6900] bridge_slave_1: entered allmulticast mode
[  157.955558][ T6900] bridge_slave_1: entered promiscuous mode
[  158.006916][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.035240][ T6903] chnl_net:caif_netlink_parms(): no params data found
[  158.046652][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.103133][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.112149][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.120239][ T6902] bridge_slave_0: entered allmulticast mode
[  158.127852][ T6902] bridge_slave_0: entered promiscuous mode
[  158.137445][ T6900] team0: Port device team_slave_0 added
[  158.147238][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.154436][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.161902][ T6902] bridge_slave_1: entered allmulticast mode
[  158.169304][ T6902] bridge_slave_1: entered promiscuous mode
[  158.190953][ T6900] team0: Port device team_slave_1 added
[  158.242720][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.294688][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.331265][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.338984][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.370068][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.396054][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  158.405032][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  158.416171][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  158.429519][ T6902] team0: Port device team_slave_0 added
[  158.429985][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  158.438995][ T6902] team0: Port device team_slave_1 added
[  158.445076][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  158.448850][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.462419][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.490883][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.527238][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.535493][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.542762][ T6903] bridge_slave_0: entered allmulticast mode
[  158.549917][ T6903] bridge_slave_0: entered promiscuous mode
[  158.558106][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.565191][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.572508][ T6903] bridge_slave_1: entered allmulticast mode
[  158.579599][ T6903] bridge_slave_1: entered promiscuous mode
[  158.587235][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.594260][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.620483][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.633976][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.641088][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.667076][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.730018][ T6900] hsr_slave_0: entered promiscuous mode
[  158.737924][ T6900] hsr_slave_1: entered promiscuous mode
[  158.743836][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.751452][ T6900] Cannot create hsr debugfs directory
[  158.758773][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.789639][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.816510][ T6902] hsr_slave_0: entered promiscuous mode
[  158.822574][ T6902] hsr_slave_1: entered promiscuous mode
[  158.828627][ T6902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.837716][ T6902] Cannot create hsr debugfs directory
[  158.869594][ T6903] team0: Port device team_slave_0 added
[  158.900007][ T6903] team0: Port device team_slave_1 added
[  158.969149][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.976615][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.002643][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.025863][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.032826][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.059997][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.139393][ T6903] hsr_slave_0: entered promiscuous mode
[  159.147831][ T6903] hsr_slave_1: entered promiscuous mode
[  159.153817][ T6903] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.161462][ T6903] Cannot create hsr debugfs directory
[  159.293277][ T6925] chnl_net:caif_netlink_parms(): no params data found
[  159.415850][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.422991][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.430639][ T6925] bridge_slave_0: entered allmulticast mode
[  159.437531][ T6925] bridge_slave_0: entered promiscuous mode
[  159.444587][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.455595][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.462761][ T6925] bridge_slave_1: entered allmulticast mode
[  159.470607][ T6925] bridge_slave_1: entered promiscuous mode
[  159.513750][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.525660][   T55] Bluetooth: hci2: command tx timeout
[  159.532074][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.581838][ T6925] team0: Port device team_slave_0 added
[  159.595397][ T6925] team0: Port device team_slave_1 added
[  159.620369][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.627449][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.653652][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.666979][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.673918][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.685658][   T55] Bluetooth: hci5: command tx timeout
[  159.700796][ T5838] Bluetooth: hci6: command tx timeout
[  159.706559][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.744405][ T6925] hsr_slave_0: entered promiscuous mode
[  159.750620][ T6925] hsr_slave_1: entered promiscuous mode
[  159.756694][ T6925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.765067][ T6925] Cannot create hsr debugfs directory
[  160.321985][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  160.331634][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  160.341306][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  160.349178][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  160.356986][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  160.463434][ T6934] chnl_net:caif_netlink_parms(): no params data found
[  160.485884][   T55] Bluetooth: hci7: command tx timeout
[  160.532149][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.539410][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.546960][ T6934] bridge_slave_0: entered allmulticast mode
[  160.553538][ T6934] bridge_slave_0: entered promiscuous mode
[  160.561706][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.568972][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.576218][ T6934] bridge_slave_1: entered allmulticast mode
[  160.583938][ T6934] bridge_slave_1: entered promiscuous mode
[  160.606359][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.618309][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.644677][ T6934] team0: Port device team_slave_0 added
[  160.654473][ T6934] team0: Port device team_slave_1 added
[  160.674762][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.682946][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.709115][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.721046][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.728174][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.755869][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.788923][ T6934] hsr_slave_0: entered promiscuous mode
[  160.795122][ T6934] hsr_slave_1: entered promiscuous mode
[  160.801284][ T6934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.809163][ T6934] Cannot create hsr debugfs directory
[  161.606338][   T55] Bluetooth: hci2: command tx timeout
[  161.765907][ T5838] Bluetooth: hci6: command tx timeout
[  161.771961][   T55] Bluetooth: hci5: command tx timeout
[  162.406621][   T55] Bluetooth: hci8: command tx timeout
[  162.565588][   T55] Bluetooth: hci7: command tx timeout
[  163.685696][   T55] Bluetooth: hci2: command tx timeout
[  163.845726][   T55] Bluetooth: hci5: command tx timeout
[  163.846376][ T5838] Bluetooth: hci6: command tx timeout
[  164.495630][ T5838] Bluetooth: hci8: command tx timeout
[  164.645643][ T5838] Bluetooth: hci7: command tx timeout
[  165.765704][ T5838] Bluetooth: hci2: command tx timeout
[  165.925565][ T5838] Bluetooth: hci6: command tx timeout
[  165.925621][   T55] Bluetooth: hci5: command tx timeout
[  166.565666][   T55] Bluetooth: hci8: command tx timeout
[  166.725840][   T55] Bluetooth: hci7: command tx timeout
[  168.645761][   T55] Bluetooth: hci8: command tx timeout
[  186.005664][ T5822] Bluetooth: hci1: command 0x0406 tx timeout
[  186.005746][ T5830] Bluetooth: hci4: command 0x0405 tx timeout
[  186.015008][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  186.022726][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  194.172875][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.179273][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  217.598489][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  217.612462][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  217.625873][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  217.633714][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  217.641363][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  217.686262][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  217.696658][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  217.705068][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  217.718061][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  217.731365][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  217.776982][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  217.785989][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  217.794066][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  217.807119][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  217.814937][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  218.020608][ T6947] chnl_net:caif_netlink_parms(): no params data found
[  218.068628][ T6950] chnl_net:caif_netlink_parms(): no params data found
[  218.140415][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.150239][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.157883][ T6947] bridge_slave_0: entered allmulticast mode
[  218.164673][ T6947] bridge_slave_0: entered promiscuous mode
[  218.183897][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.191374][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.199053][ T6947] bridge_slave_1: entered allmulticast mode
[  218.206326][ T6947] bridge_slave_1: entered promiscuous mode
[  218.268167][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.290807][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.339281][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.346990][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.354225][ T6950] bridge_slave_0: entered allmulticast mode
[  218.361974][ T6950] bridge_slave_0: entered promiscuous mode
[  218.392539][ T6953] chnl_net:caif_netlink_parms(): no params data found
[  218.403992][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.422743][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.430985][ T6950] bridge_slave_1: entered allmulticast mode
[  218.448554][ T6950] bridge_slave_1: entered promiscuous mode
[  218.465029][ T6947] team0: Port device team_slave_0 added
[  218.511660][ T6947] team0: Port device team_slave_1 added
[  218.558537][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.599497][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  218.600566][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.617393][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  218.631662][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  218.641490][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  218.650446][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  218.681115][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.688387][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.714892][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.727825][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.734775][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.762041][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.777552][ T6950] team0: Port device team_slave_0 added
[  218.810540][ T6950] team0: Port device team_slave_1 added
[  218.828103][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.835234][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.843541][ T6953] bridge_slave_0: entered allmulticast mode
[  218.850631][ T6953] bridge_slave_0: entered promiscuous mode
[  218.882901][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.895011][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.902875][ T6953] bridge_slave_1: entered allmulticast mode
[  218.910555][ T6953] bridge_slave_1: entered promiscuous mode
[  218.934655][ T6947] hsr_slave_0: entered promiscuous mode
[  218.940860][ T6947] hsr_slave_1: entered promiscuous mode
[  218.949056][ T6947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.956904][ T6947] Cannot create hsr debugfs directory
[  218.975746][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.982708][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.010835][ T6950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.024965][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.032155][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.060270][ T6950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.082212][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.095238][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.177714][ T6953] team0: Port device team_slave_0 added
[  219.201663][ T6953] team0: Port device team_slave_1 added
[  219.249499][ T6950] hsr_slave_0: entered promiscuous mode
[  219.257103][ T6950] hsr_slave_1: entered promiscuous mode
[  219.263137][ T6950] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.270898][ T6950] Cannot create hsr debugfs directory
[  219.280584][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.288002][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.314014][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.346228][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.353206][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.380323][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.462496][ T6953] hsr_slave_0: entered promiscuous mode
[  219.468664][ T6953] hsr_slave_1: entered promiscuous mode
[  219.474537][ T6953] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.482645][ T6953] Cannot create hsr debugfs directory
[  219.667185][ T6971] chnl_net:caif_netlink_parms(): no params data found
[  219.700966][ T5840] Bluetooth: hci9: command tx timeout
[  219.750005][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.757190][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.765297][ T6971] bridge_slave_0: entered allmulticast mode
[  219.772706][ T6971] bridge_slave_0: entered promiscuous mode
[  219.776898][ T5840] Bluetooth: hci10: command tx timeout
[  219.781379][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.791706][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.798973][ T6971] bridge_slave_1: entered allmulticast mode
[  219.805649][ T6971] bridge_slave_1: entered promiscuous mode
[  219.830989][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.841977][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.856967][ T5840] Bluetooth: hci11: command tx timeout
[  219.880114][ T6971] team0: Port device team_slave_0 added
[  219.891408][ T6971] team0: Port device team_slave_1 added
[  219.940135][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.947569][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.974946][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.992385][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.999437][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.025622][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.079157][ T6971] hsr_slave_0: entered promiscuous mode
[  220.089440][ T6971] hsr_slave_1: entered promiscuous mode
[  220.096278][ T6971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.103850][ T6971] Cannot create hsr debugfs directory
[  220.562319][ T5837] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  220.574268][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  220.582468][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  220.593697][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  220.602440][ T5837] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  220.731617][ T6983] chnl_net:caif_netlink_parms(): no params data found
[  220.735652][ T5837] Bluetooth: hci12: command tx timeout
[  220.793546][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.802260][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.811134][ T6983] bridge_slave_0: entered allmulticast mode
[  220.818271][ T6983] bridge_slave_0: entered promiscuous mode
[  220.831835][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.838987][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.847413][ T6983] bridge_slave_1: entered allmulticast mode
[  220.854115][ T6983] bridge_slave_1: entered promiscuous mode
[  220.879531][ T6983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.892268][ T6983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.932584][ T6983] team0: Port device team_slave_0 added
[  220.944059][ T6983] team0: Port device team_slave_1 added
[  220.970379][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.982389][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.010082][ T6983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.030767][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.040700][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.071429][ T6983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.135065][ T6983] hsr_slave_0: entered promiscuous mode
[  221.141579][ T6983] hsr_slave_1: entered promiscuous mode
[  221.148137][ T6983] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.155771][ T6983] Cannot create hsr debugfs directory
[  221.765713][ T5837] Bluetooth: hci9: command tx timeout
[  221.845624][ T5837] Bluetooth: hci10: command tx timeout
[  221.925802][ T5837] Bluetooth: hci11: command tx timeout
[  222.655648][ T5837] Bluetooth: hci13: command tx timeout
[  222.815822][ T5837] Bluetooth: hci12: command tx timeout
[  223.855586][ T5837] Bluetooth: hci9: command tx timeout
[  223.925687][ T5837] Bluetooth: hci10: command tx timeout
[  224.005800][ T5837] Bluetooth: hci11: command tx timeout
[  224.725881][ T5837] Bluetooth: hci13: command tx timeout
[  224.885916][ T5837] Bluetooth: hci12: command tx timeout
[  225.925916][ T5837] Bluetooth: hci9: command tx timeout
[  226.005745][ T5837] Bluetooth: hci10: command tx timeout
[  226.095593][ T5837] Bluetooth: hci11: command tx timeout
[  226.805708][ T5837] Bluetooth: hci13: command tx timeout
[  226.965639][ T5837] Bluetooth: hci12: command tx timeout
[  228.885540][ T5837] Bluetooth: hci13: command tx timeout
[  255.608312][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  255.614623][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  277.591396][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  277.601179][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  277.609655][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  277.618132][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  277.626757][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  277.744275][ T6998] chnl_net:caif_netlink_parms(): no params data found
[  277.793465][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.800791][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.808643][ T6998] bridge_slave_0: entered allmulticast mode
[  277.816080][ T6998] bridge_slave_0: entered promiscuous mode
[  277.823899][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.849114][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.865735][ T6998] bridge_slave_1: entered allmulticast mode
[  277.872870][ T6998] bridge_slave_1: entered promiscuous mode
[  277.961274][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.989378][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.061571][ T6998] team0: Port device team_slave_0 added
[  278.088456][ T6998] team0: Port device team_slave_1 added
[  278.112343][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  278.130722][ T5837] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  278.141062][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  278.149335][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  278.158906][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  278.161553][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.173907][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.200391][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.215204][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.222232][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.255341][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.266638][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  278.275141][ T5837] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  278.296238][ T5837] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  278.304532][ T5837] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  278.317868][ T5837] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  278.343218][ T6998] hsr_slave_0: entered promiscuous mode
[  278.349800][ T6998] hsr_slave_1: entered promiscuous mode
[  278.356295][ T6998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.363852][ T6998] Cannot create hsr debugfs directory
[  278.597299][ T7010] chnl_net:caif_netlink_parms(): no params data found
[  278.725036][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.733446][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.742575][ T7010] bridge_slave_0: entered allmulticast mode
[  278.752960][ T7010] bridge_slave_0: entered promiscuous mode
[  278.773769][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.780901][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.788568][ T7010] bridge_slave_1: entered allmulticast mode
[  278.795149][ T7010] bridge_slave_1: entered promiscuous mode
[  278.802251][ T7012] chnl_net:caif_netlink_parms(): no params data found
[  278.869324][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.917227][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.074330][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  279.083451][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  279.092697][ T7010] team0: Port device team_slave_0 added
[  279.095864][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  279.101293][ T7010] team0: Port device team_slave_1 added
[  279.112123][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.116385][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  279.119760][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.127317][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  279.133608][ T7012] bridge_slave_0: entered allmulticast mode
[  279.148024][ T7012] bridge_slave_0: entered promiscuous mode
[  279.175259][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.182530][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.189940][ T7012] bridge_slave_1: entered allmulticast mode
[  279.197211][ T7012] bridge_slave_1: entered promiscuous mode
[  279.232510][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.239826][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.267216][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.307450][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.314429][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.340689][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.362333][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.374328][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.431713][ T7012] team0: Port device team_slave_0 added
[  279.439909][ T7012] team0: Port device team_slave_1 added
[  279.451100][ T7010] hsr_slave_0: entered promiscuous mode
[  279.457878][ T7010] hsr_slave_1: entered promiscuous mode
[  279.465342][ T7010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.473044][ T7010] Cannot create hsr debugfs directory
[  279.521410][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.531399][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.558546][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.573570][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.580767][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.608397][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.686289][ T5837] Bluetooth: hci14: command tx timeout
[  279.698931][ T7012] hsr_slave_0: entered promiscuous mode
[  279.705209][ T7012] hsr_slave_1: entered promiscuous mode
[  279.711612][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.719784][ T7012] Cannot create hsr debugfs directory
[  279.899474][ T7027] chnl_net:caif_netlink_parms(): no params data found
[  279.991557][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.000322][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.007887][ T7027] bridge_slave_0: entered allmulticast mode
[  280.014477][ T7027] bridge_slave_0: entered promiscuous mode
[  280.022900][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.030127][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.037539][ T7027] bridge_slave_1: entered allmulticast mode
[  280.044193][ T7027] bridge_slave_1: entered promiscuous mode
[  280.085137][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.097938][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.131772][ T7027] team0: Port device team_slave_0 added
[  280.143339][ T7027] team0: Port device team_slave_1 added
[  280.169234][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.176260][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.203692][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.221675][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.228748][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.254814][ T5837] Bluetooth: hci15: command tx timeout
[  280.260875][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.304960][ T7027] hsr_slave_0: entered promiscuous mode
[  280.311931][ T7027] hsr_slave_1: entered promiscuous mode
[  280.318465][ T7027] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.326884][ T7027] Cannot create hsr debugfs directory
[  280.405845][ T5837] Bluetooth: hci16: command tx timeout
[  281.209707][ T5837] Bluetooth: hci17: command tx timeout
[  281.458246][ T5836] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  281.468349][ T5836] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  281.476870][ T5836] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  281.488005][ T5836] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  281.498065][ T5836] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  281.622282][ T7038] chnl_net:caif_netlink_parms(): no params data found
[  281.671938][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.679107][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.686831][ T7038] bridge_slave_0: entered allmulticast mode
[  281.694022][ T7038] bridge_slave_0: entered promiscuous mode
[  281.701723][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.710144][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.719489][ T7038] bridge_slave_1: entered allmulticast mode
[  281.727167][ T7038] bridge_slave_1: entered promiscuous mode
[  281.750262][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.761434][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.775993][ T5836] Bluetooth: hci14: command tx timeout
[  281.793038][ T7038] team0: Port device team_slave_0 added
[  281.801644][ T7038] team0: Port device team_slave_1 added
[  281.825218][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.832724][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.859565][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.871968][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.879324][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.905646][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.944446][ T7038] hsr_slave_0: entered promiscuous mode
[  281.950742][ T7038] hsr_slave_1: entered promiscuous mode
[  281.957415][ T7038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.964982][ T7038] Cannot create hsr debugfs directory
[  282.335652][ T5836] Bluetooth: hci15: command tx timeout
[  282.496085][ T5836] Bluetooth: hci16: command tx timeout
[  283.288743][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  283.288767][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  283.294786][ T5836] Bluetooth: hci8: command 0x0406 tx timeout
[  283.301098][ T5822] Bluetooth: hci7: command 0x0406 tx timeout
[  283.307727][ T5836] Bluetooth: hci17: command tx timeout
[  283.312820][ T5136] Bluetooth: hci6: command 0x0406 tx timeout
[  283.526001][ T5840] Bluetooth: hci18: command tx timeout
[  283.855857][ T5840] Bluetooth: hci14: command tx timeout
[  284.405700][ T5840] Bluetooth: hci15: command tx timeout
[  284.575588][ T5840] Bluetooth: hci16: command tx timeout
[  285.375583][ T5840] Bluetooth: hci17: command tx timeout
[  285.605607][ T5840] Bluetooth: hci18: command tx timeout
[  285.926010][ T5840] Bluetooth: hci14: command tx timeout
[  286.485806][ T5840] Bluetooth: hci15: command tx timeout
[  286.645607][ T5840] Bluetooth: hci16: command tx timeout
[  287.445494][ T5840] Bluetooth: hci17: command tx timeout
[  287.685781][ T5840] Bluetooth: hci18: command tx timeout
[  289.765872][ T5840] Bluetooth: hci18: command tx timeout
[  302.335703][   T31] INFO: task syz.0.264:6865 blocked for more than 143 seconds.
[  302.343286][   T31]       Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0
[  302.351083][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  302.368661][   T31] task:syz.0.264       state:D stack:26480 pid:6865  tgid:6864  ppid:5824   task_flags:0x400140 flags:0x00004004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  302.385550][   T31] Call Trace:
[  302.395457][   T31]  <TASK>
[  302.398433][   T31]  __schedule+0x116f/0x5de0
[  302.409648][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  302.414621][   T31]  ? __pfx___schedule+0x10/0x10
[  302.422309][   T31]  ? find_held_lock+0x2b/0x80
[  302.450364][   T31]  ? schedule+0x2d7/0x3a0
[  302.454846][   T31]  schedule+0xe7/0x3a0
[  302.465473][   T31]  schedule_timeout+0x257/0x290
[  302.470386][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  302.484828][   T31]  ? mark_held_locks+0x49/0x80
[  302.490065][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  302.495288][   T31]  __wait_for_common+0x2fc/0x4e0
[  302.500334][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  302.506641][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  302.512124][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  302.517465][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  302.523302][   T31]  __flush_workqueue+0x3e2/0x1230
[  302.529545][   T31]  ? __pfx__dev_warn+0x10/0x10
[  302.534310][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  302.540151][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  302.545195][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  302.551069][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  302.556496][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  302.562326][   T31]  nbd_disconnect_and_put+0x9b/0x1c0
[  302.567728][   T31]  nbd_genl_disconnect+0x396/0x570
[  302.573094][   T31]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  302.578882][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  302.586409][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  302.593782][   T31]  genl_family_rcv_msg_doit+0x206/0x2f0
[  302.599410][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  302.606687][   T31]  ? genl_get_cmd+0x194/0x580
[  302.611417][   T31]  ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  302.617579][   T31]  ? kmalloc_reserve+0x18b/0x2c0
[  302.622522][   T31]  ? __radix_tree_lookup+0x21f/0x2c0
[  302.627882][   T31]  genl_rcv_msg+0x55c/0x800
[  302.632398][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.637497][   T31]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  302.643143][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  302.648283][   T31]  netlink_rcv_skb+0x16a/0x440
[  302.653158][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.658511][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.663841][   T31]  ? __pfx_down_read+0x10/0x10
[  302.668646][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  302.673938][   T31]  genl_rcv+0x28/0x40
[  302.678009][   T31]  netlink_unicast+0x53a/0x7f0
[  302.682795][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  302.688254][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  302.693040][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.698586][   T31]  ____sys_sendmsg+0xa95/0xc70
[  302.703360][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  302.709875][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.715181][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  302.721092][   T31]  ___sys_sendmsg+0x134/0x1d0
[  302.726061][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.731391][   T31]  ? populate_seccomp_data+0x190/0x540
[  302.736950][   T31]  __sys_sendmsg+0x16d/0x220
[  302.741561][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  302.746743][   T31]  ? __secure_computing+0x28e/0x3b0
[  302.751947][   T31]  do_syscall_64+0xcd/0x260
[  302.756538][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.762431][   T31] RIP: 0033:0x7f8a0978d169
[  302.766866][   T31] RSP: 002b:00007f8a0a6a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.775286][   T31] RAX: ffffffffffffffda RBX: 00007f8a099a5fa0 RCX: 00007f8a0978d169
[  302.783348][   T31] RDX: 0000000020000004 RSI: 00002000000001c0 RDI: 0000000000000006
[  302.791395][   T31] RBP: 00007f8a0980e2a0 R08: 0000000000000000 R09: 0000000000000000
[  302.799463][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.807747][   T31] R13: 0000000000000000 R14: 00007f8a099a5fa0 R15: 00007ffc9fe98d98
[  302.816672][   T31]  </TASK>
[  302.819711][   T31] INFO: task syz.4.266:6870 blocked for more than 143 seconds.
[  302.827323][   T31]       Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0
[  302.834684][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  302.843389][   T31] task:syz.4.266       state:D stack:28584 pid:6870  tgid:6869  ppid:5828   task_flags:0x400040 flags:0x00000004
[  302.855364][   T31] Call Trace:
[  302.858694][   T31]  <TASK>
[  302.861611][   T31]  __schedule+0x116f/0x5de0
[  302.866168][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  302.871138][   T31]  ? __pfx___schedule+0x10/0x10
[  302.876069][   T31]  ? find_held_lock+0x2b/0x80
[  302.880730][   T31]  ? schedule+0x2d7/0x3a0
[  302.885062][   T31]  schedule+0xe7/0x3a0
[  302.889313][   T31]  schedule_preempt_disabled+0x13/0x30
[  302.894780][   T31]  __mutex_lock+0x6c7/0xb90
[  302.899438][   T31]  ? genl_rcv_msg+0x577/0x800
[  302.904162][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  302.909306][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  302.915349][   T31]  ? __dev_queue_xmit+0x896/0x43e0
[  302.920711][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  302.926069][   T31]  ? __dev_queue_xmit+0x896/0x43e0
[  302.931184][   T31]  ? __radix_tree_lookup+0x21f/0x2c0
[  302.936512][   T31]  ? genl_rcv_msg+0x577/0x800
[  302.941191][   T31]  genl_rcv_msg+0x577/0x800
[  302.945754][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.950786][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[  302.956232][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  302.961196][   T31]  netlink_rcv_skb+0x16a/0x440
[  302.966337][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.971388][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.976762][   T31]  ? __pfx_down_read+0x10/0x10
[  302.981598][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  302.986960][   T31]  genl_rcv+0x28/0x40
[  302.990944][   T31]  netlink_unicast+0x53a/0x7f0
[  302.995758][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  303.001050][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  303.005845][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.011160][   T31]  __sys_sendto+0x495/0x510
[  303.016721][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  303.021773][   T31]  ? reacquire_held_locks+0xcd/0x1f0
[  303.027264][   T31]  ? do_user_addr_fault+0xde3/0x1430
[  303.032566][   T31]  __x64_sys_sendto+0xe0/0x1c0
[  303.037378][   T31]  ? do_syscall_64+0x91/0x260
[  303.042061][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.047395][   T31]  do_syscall_64+0xcd/0x260
[  303.051904][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.057827][   T31] RIP: 0033:0x7fa68c78effc
[  303.062239][   T31] RSP: 002b:00007fa68d61fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  303.070701][   T31] RAX: ffffffffffffffda RBX: 00007fa68d61ffc0 RCX: 00007fa68c78effc
[  303.078731][   T31] RDX: 0000000000000020 RSI: 00007fa68d620010 RDI: 0000000000000004
[  303.086737][   T31] RBP: 0000000000000000 R08: 00007fa68d61ff14 R09: 000000000000000c
[  303.094694][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  303.102722][   T31] R13: 00007fa68d61ff68 R14: 00007fa68d620010 R15: 0000000000000000
[  303.110719][   T31]  </TASK>
[  303.113742][   T31] INFO: task syz.3.268:6877 blocked for more than 144 seconds.
[  303.122455][   T31]       Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0
[  303.130154][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  303.139344][   T31] task:syz.3.268       state:D stack:25624 pid:6877  tgid:6874  ppid:5827   task_flags:0x400140 flags:0x00004004
[  303.151488][   T31] Call Trace:
[  303.154776][   T31]  <TASK>
[  303.157778][   T31]  __schedule+0x116f/0x5de0
[  303.162285][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  303.167350][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  303.172315][   T31]  ? __pfx___schedule+0x10/0x10
[  303.177354][   T31]  ? find_held_lock+0x2b/0x80
[  303.182698][   T31]  ? schedule+0x2d7/0x3a0
[  303.187159][   T31]  schedule+0xe7/0x3a0
[  303.191269][   T31]  schedule_preempt_disabled+0x13/0x30
[  303.196887][   T31]  __mutex_lock+0x6c7/0xb90
[  303.201405][   T31]  ? genl_rcv_msg+0x577/0x800
[  303.206207][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  303.211237][   T31]  ? __dev_queue_xmit+0x896/0x43e0
[  303.216371][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  303.222231][   T31]  ? __radix_tree_lookup+0x21f/0x2c0
[  303.227660][   T31]  ? genl_rcv_msg+0x577/0x800
[  303.232342][   T31]  genl_rcv_msg+0x577/0x800
[  303.236950][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.242148][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.247276][   T31]  ? netlink_rcv_skb+0xca/0x440
[  303.252134][   T31]  netlink_rcv_skb+0x16a/0x440
[  303.257023][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.262053][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.267425][   T31]  ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0
[  303.274012][   T31]  ? __pfx_down_read+0x10/0x10
[  303.278861][   T31]  genl_rcv+0x28/0x40
[  303.282836][   T31]  netlink_unicast+0x53a/0x7f0
[  303.288177][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  303.293506][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  303.298343][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.303631][   T31]  ? security_socket_sendmsg+0x3d/0x240
[  303.309296][   T31]  ? __sanitizer_cov_trace_pc+0x66/0x70
[  303.314846][   T31]  __sys_sendto+0x495/0x510
[  303.319430][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  303.325015][   T31]  ? __pfx___sys_socket+0x10/0x10
[  303.330155][   T31]  __x64_sys_sendto+0xe0/0x1c0
[  303.334917][   T31]  ? do_syscall_64+0x91/0x260
[  303.339641][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.344839][   T31]  do_syscall_64+0xcd/0x260
[  303.349415][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.355303][   T31] RIP: 0033:0x7f9b9058effc
[  303.359742][   T31] RSP: 002b:00007f9b8e3d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  303.368397][   T31] RAX: ffffffffffffffda RBX: 00007f9b8e3d3fc0 RCX: 00007f9b9058effc
[  303.376450][   T31] RDX: 0000000000000020 RSI: 00007f9b8e3d4010 RDI: 0000000000000008
[  303.384413][   T31] RBP: 0000000000000000 R08: 00007f9b8e3d3f14 R09: 000000000000000c
[  303.392509][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  303.400582][   T31] R13: 00007f9b8e3d3f68 R14: 00007f9b8e3d4010 R15: 0000000000000000
[  303.408648][   T31]  </TASK>
[  303.411711][   T31] INFO: task syz.2.269:6880 blocked for more than 144 seconds.
[  303.419364][   T31]       Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0
[  303.427395][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  303.436127][   T31] task:syz.2.269       state:D stack:27560 pid:6880  tgid:6879  ppid:5821   task_flags:0x400140 flags:0x00020004
[  303.448228][   T31] Call Trace:
[  303.451525][   T31]  <TASK>
[  303.454470][   T31]  __schedule+0x116f/0x5de0
[  303.459049][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  303.463986][   T31]  ? __pfx___schedule+0x10/0x10
[  303.468932][   T31]  ? find_held_lock+0x2b/0x80
[  303.473610][   T31]  ? schedule+0x2d7/0x3a0
[  303.478103][   T31]  schedule+0xe7/0x3a0
[  303.482172][   T31]  schedule_preempt_disabled+0x13/0x30
[  303.487728][   T31]  __mutex_lock+0x6c7/0xb90
[  303.492233][   T31]  ? genl_rcv_msg+0x577/0x800
[  303.496951][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  303.501976][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.507294][   T31]  ? __dev_queue_xmit+0x896/0x43e0
[  303.512400][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  303.517732][   T31]  ? __dev_queue_xmit+0x896/0x43e0
[  303.522836][   T31]  ? __radix_tree_lookup+0x21f/0x2c0
[  303.529079][   T31]  ? genl_rcv_msg+0x577/0x800
[  303.533791][   T31]  genl_rcv_msg+0x577/0x800
[  303.538423][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.543452][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[  303.548927][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  303.553866][   T31]  netlink_rcv_skb+0x16a/0x440
[  303.558663][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.563695][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.569089][   T31]  ? __pfx_down_read+0x10/0x10
[  303.573850][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  303.579196][   T31]  genl_rcv+0x28/0x40
[  303.583171][   T31]  netlink_unicast+0x53a/0x7f0
[  303.588095][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  303.593396][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  303.598221][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.603513][   T31]  __sys_sendto+0x495/0x510
[  303.608163][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  303.613192][   T31]  ? fd_install+0x225/0x750
[  303.617795][   T31]  ? __pfx___sys_socket+0x10/0x10
[  303.622817][   T31]  __x64_sys_sendto+0xe0/0x1c0
[  303.627683][   T31]  ? do_syscall_64+0x91/0x260
[  303.633133][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.638425][   T31]  do_syscall_64+0xcd/0x260
[  303.642930][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.648913][   T31] RIP: 0033:0x7fa7e958effc
[  303.653319][   T31] RSP: 002b:00007fa7ea347ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  303.661776][   T31] RAX: ffffffffffffffda RBX: 00007fa7ea347fc0 RCX: 00007fa7e958effc
[  303.669856][   T31] RDX: 000000000000001c RSI: 00007fa7ea348010 RDI: 0000000000000004
[  303.677879][   T31] RBP: 0000000000000000 R08: 00007fa7ea347f14 R09: 000000000000000c
[  303.686258][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  303.694237][   T31] R13: 00007fa7ea347f68 R14: 00007fa7ea348010 R15: 0000000000000000
[  303.702335][   T31]  </TASK>
[  303.705431][   T31] INFO: task syz.1.272:6892 blocked for more than 144 seconds.
[  303.712975][   T31]       Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0
[  303.720313][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  303.729037][   T31] task:syz.1.272       state:D stack:27528 pid:6892  tgid:6890  ppid:5818   task_flags:0x400140 flags:0x00004004
[  303.741731][   T31] Call Trace:
[  303.745018][   T31]  <TASK>
[  303.747985][   T31]  __schedule+0x116f/0x5de0
[  303.752476][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  303.757458][   T31]  ? __pfx___schedule+0x10/0x10
[  303.762330][   T31]  ? find_held_lock+0x2b/0x80
[  303.767241][   T31]  ? schedule+0x2d7/0x3a0
[  303.771574][   T31]  schedule+0xe7/0x3a0
[  303.775690][   T31]  schedule_preempt_disabled+0x13/0x30
[  303.781143][   T31]  __mutex_lock+0x6c7/0xb90
[  303.785689][   T31]  ? genl_rcv_msg+0x577/0x800
[  303.790372][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  303.795466][   T31]  ? stack_depot_save_flags+0x28/0xa50
[  303.800934][   T31]  ? kasan_save_stack+0x42/0x60
[  303.805907][   T31]  ? kasan_save_stack+0x33/0x60
[  303.810788][   T31]  ? kasan_save_track+0x14/0x30
[  303.815700][   T31]  ? __kasan_slab_alloc+0x89/0x90
[  303.820722][   T31]  ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  303.826874][   T31]  ? __radix_tree_lookup+0x21f/0x2c0
[  303.832160][   T31]  ? genl_rcv_msg+0x577/0x800
[  303.837653][   T31]  genl_rcv_msg+0x577/0x800
[  303.842163][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.847373][   T31]  ? irqentry_exit+0x3b/0x90
[  303.851990][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  303.856999][   T31]  netlink_rcv_skb+0x16a/0x440
[  303.861762][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.866876][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.872194][   T31]  ? __pfx_down_read+0x10/0x10
[  303.877016][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  303.882325][   T31]  genl_rcv+0x28/0x40
[  303.886354][   T31]  netlink_unicast+0x53a/0x7f0
[  303.891121][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  303.896454][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  303.901219][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.906571][   T31]  ? __sys_sendto+0x313/0x510
[  303.911254][   T31]  __sys_sendto+0x495/0x510
[  303.915870][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  303.920902][   T31]  ? xfd_validate_state+0x5d/0x180
[  303.926482][   T31]  ? rcu_is_watching+0x12/0xc0
[  303.931253][   T31]  __x64_sys_sendto+0xe0/0x1c0
[  303.936073][   T31]  ? do_syscall_64+0x91/0x260
[  303.941501][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.946835][   T31]  do_syscall_64+0xcd/0x260
[  303.951352][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.957287][   T31] RIP: 0033:0x7fe94bb8effc
[  303.961698][   T31] RSP: 002b:00007fe94c9ddec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  303.970139][   T31] RAX: ffffffffffffffda RBX: 00007fe94c9ddfc0 RCX: 00007fe94bb8effc
[  303.978157][   T31] RDX: 0000000000000028 RSI: 00007fe94c9de010 RDI: 000000000000000a
[  303.986430][   T31] RBP: 0000000000000000 R08: 00007fe94c9ddf14 R09: 000000000000000c
[  303.994408][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  304.002433][   T31] R13: 00007fe94c9ddf68 R14: 00007fe94c9de010 R15: 0000000000000000
[  304.010546][   T31]  </TASK>
[  304.013618][   T31] 
[  304.013618][   T31] Showing all locks held in the system:
[  304.021400][   T31] 1 lock held by khungtaskd/31:
[  304.026377][   T31]  #0: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  304.036293][   T31] 2 locks held by kworker/u8:3/53:
[  304.041922][   T31]  #0: ffff888144ea5948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  304.052641][   T31]  #1: ffffc90000bf7d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  304.064235][   T31] 2 locks held by getty/5572:
[  304.068964][   T31]  #0: ffff8880370d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  304.078785][   T31]  #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450
[  304.089042][   T31] 2 locks held by kworker/u9:3/5825:
[  304.094354][   T31]  #0: ffff88802600a948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  304.105096][   T31]  #1: ffffc90002f8fd18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  304.116298][   T31] 3 locks held by syz.0.264/6865:
[  304.121308][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.129536][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.138619][   T31]  #2: ffff888026006998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x26/0x1c0
[  304.149691][   T31] 2 locks held by syz.4.266/6870:
[  304.154719][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.162954][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.172146][   T31] 2 locks held by syz.3.268/6877:
[  304.177329][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.185627][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.194612][   T31] 2 locks held by syz.2.269/6880:
[  304.199702][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.207940][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.216983][   T31] 2 locks held by syz.1.272/6892:
[  304.221994][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.230226][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.240138][   T31] 2 locks held by syz-executor/6900:
[  304.246467][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.254671][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.263728][   T31] 2 locks held by syz-executor/6902:
[  304.269035][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.277308][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.286325][   T31] 2 locks held by syz-executor/6903:
[  304.291596][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.299825][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.308821][   T31] 2 locks held by syz-executor/6925:
[  304.314130][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.322352][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.331439][   T31] 2 locks held by syz-executor/6934:
[  304.336801][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.344983][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.354774][   T31] 2 locks held by syz-executor/6947:
[  304.360192][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.368440][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.377497][   T31] 2 locks held by syz-executor/6950:
[  304.382787][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.391056][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.400063][   T31] 2 locks held by syz-executor/6953:
[  304.405325][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.413710][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.422759][   T31] 2 locks held by syz-executor/6971:
[  304.428072][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.436327][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.445297][   T31] 2 locks held by syz-executor/6983:
[  304.451312][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.459588][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.468644][   T31] 2 locks held by syz-executor/6998:
[  304.473917][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.482190][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.491216][   T31] 2 locks held by syz-executor/7010:
[  304.496593][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.504781][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.513795][   T31] 2 locks held by syz-executor/7012:
[  304.519118][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.527344][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.536343][   T31] 2 locks held by syz-executor/7027:
[  304.541597][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.549800][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.559635][   T31] 2 locks held by syz-executor/7038:
[  304.564912][   T31]  #0: ffffffff901c3d50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  304.573129][   T31]  #1: ffffffff901c3e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800
[  304.582200][   T31] 
[  304.584513][   T31] =============================================
[  304.584513][   T31] 
[  304.592965][   T31] NMI backtrace for cpu 0
[  304.592979][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) 
[  304.592995][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  304.593002][   T31] Call Trace:
[  304.593007][   T31]  <TASK>
[  304.593013][   T31]  dump_stack_lvl+0x116/0x1f0
[  304.593039][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  304.593057][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  304.593075][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  304.593093][   T31]  watchdog+0xf70/0x12c0
[  304.593117][   T31]  ? __pfx_watchdog+0x10/0x10
[  304.593130][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  304.593153][   T31]  ? __kthread_parkme+0x19e/0x250
[  304.593179][   T31]  ? __pfx_watchdog+0x10/0x10
[  304.593196][   T31]  kthread+0x3c2/0x780
[  304.593214][   T31]  ? __pfx_kthread+0x10/0x10
[  304.593229][   T31]  ? __pfx_kthread+0x10/0x10
[  304.593246][   T31]  ? __pfx_kthread+0x10/0x10
[  304.593262][   T31]  ? __pfx_kthread+0x10/0x10
[  304.593278][   T31]  ? rcu_is_watching+0x12/0xc0
[  304.593299][   T31]  ? __pfx_kthread+0x10/0x10
[  304.593315][   T31]  ret_from_fork+0x45/0x80
[  304.593331][   T31]  ? __pfx_kthread+0x10/0x10
[  304.593349][   T31]  ret_from_fork_asm+0x1a/0x30
[  304.593384][   T31]  </TASK>
[  304.593390][   T31] Sending NMI from CPU 0 to CPUs 1:
[  304.725378][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20
[  304.727333][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  304.727347][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) 
[  304.727365][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  304.727374][   T31] Call Trace:
[  304.727380][   T31]  <TASK>
[  304.727386][   T31]  dump_stack_lvl+0x3d/0x1f0
[  304.727408][   T31]  panic+0x71c/0x800
[  304.727424][   T31]  ? __pfx_panic+0x10/0x10
[  304.727437][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  304.727456][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  304.727471][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  304.727487][   T31]  ? watchdog+0xdda/0x12c0
[  304.727504][   T31]  ? watchdog+0xdcd/0x12c0
[  304.727521][   T31]  watchdog+0xdeb/0x12c0
[  304.727540][   T31]  ? __pfx_watchdog+0x10/0x10
[  304.727554][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  304.727574][   T31]  ? __kthread_parkme+0x19e/0x250
[  304.727596][   T31]  ? __pfx_watchdog+0x10/0x10
[  304.727611][   T31]  kthread+0x3c2/0x780
[  304.727626][   T31]  ? __pfx_kthread+0x10/0x10
[  304.727639][   T31]  ? __pfx_kthread+0x10/0x10
[  304.727653][   T31]  ? __pfx_kthread+0x10/0x10
[  304.727668][   T31]  ? __pfx_kthread+0x10/0x10
[  304.727681][   T31]  ? rcu_is_watching+0x12/0xc0
[  304.727700][   T31]  ? __pfx_kthread+0x10/0x10
[  304.727715][   T31]  ret_from_fork+0x45/0x80
[  304.727730][   T31]  ? __pfx_kthread+0x10/0x10
[  304.727745][   T31]  ret_from_fork_asm+0x1a/0x30
[  304.727775][   T31]  </TASK>
[  304.878259][   T31] Kernel Offset: disabled
[  304.882560][   T31] Rebooting in 86400 seconds..