last executing test programs:

20m14.155065452s ago: executing program 4 (id=3076):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x2000)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x0, 0x1000000, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x2})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x28)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0x4, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x2, 0x3, 0x40, 0x0, 0x5}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x3512c2, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r5)

20m12.096299694s ago: executing program 4 (id=3082):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
creat(&(0x7f00000000c0)='./file0\x00', 0x4a)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000008000000000000000400000000000000100000000000000020"], 0x24, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000080)={{r0}, {@void, @max}})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10004, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}})
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1], 0x0)

20m8.751669041s ago: executing program 4 (id=3087):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00'}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x9]}, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x20000000}}, './file0\x00'})
sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

20m6.76200103s ago: executing program 4 (id=3090):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x0, 0x7})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6b)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x2, 0xd, 0x4, 0x3, 0x6, 0x8, 0x1b, 0x38, 0x1a4, 0x408, 0x4, 0x20, 0x1, 0x5, 0x8000, 0x200}, [{0x2, 0x3, 0x100, 0x3f7, 0x14, 0x80, 0x3, 0x200}]}, 0x58)
close(r2)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)

20m6.541657308s ago: executing program 4 (id=3092):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x1)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x4, 0x0, 0x0, 0xa00, 0x1e, 0x0, 0x8, 0x6e})
r2 = socket$qrtr(0x2a, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340))
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78)
stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400))
r8 = gettid()
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x81, 0x401, {0xffffffffffffffff}, {<r9=>0xffffffffffffffff}, 0x7, 0x18})
fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, <r12=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r12)
statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x1, &(0x7f0000000640))
sendmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r7, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r12, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0x78, 0x4000}}], 0x1, 0xc8015)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r13 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000000c0)=<r14=>0x0, &(0x7f00000003c0)=<r15=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r13, 0x47f6, 0x0, 0x0, 0x0, 0x0)

20m5.712725281s ago: executing program 4 (id=3097):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = io_uring_setup(0x2c4e, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x2000000}, 0x10)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0x1e, 0x6, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000180)="d639e41d3261d2607dc8e0f5269761613f8db171ce798f54ec8b7470eeed8afd509d08f92d5a3901ecd45f91f12fed9ea59c6562ace3f2377120c775d1302de89e87603664bee9179b8abbd353d1828cc76ab009ecaf25a066aefd9cc1d301bb10b298d1aba5309c08ea93bf4eeda301", 0x70, 0x80, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x1, r4, &(0x7f00000003c0)="86ec605b5cde02ca2c98476538bdcd0f2d0b4001bdd14fe4f635a4362e34bed5478e6daec3517820885718b7b086f3f92e98dec6dec5832be8cd96cbf85006afb881a25645986b3afb9e97d896af6d5052f8989597fbc47d432e6d55db1a99da6ebf00d3e082e35c21de7fc7016527928ec97642ebc9b468513e554aebe653f0a70e1639f88964e5f4a0779e002259c38bf5ba45bf2e30db7ffb0da076014a825b909483e8fb370cb04d7bca3d57a2eb9d21a3ff9e56b8e11273ce3fe0cae869f2429b1e6f0dad3e", 0xc8, 0xfffffffffffffffc, 0x0, 0x3}])
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
pread64(r1, 0x0, 0x0, 0x1)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0))
r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0)
r9 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2, 0x80802)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r9, 0x82000000)

20m5.312123164s ago: executing program 32 (id=3097):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = io_uring_setup(0x2c4e, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x2000000}, 0x10)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0x1e, 0x6, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000180)="d639e41d3261d2607dc8e0f5269761613f8db171ce798f54ec8b7470eeed8afd509d08f92d5a3901ecd45f91f12fed9ea59c6562ace3f2377120c775d1302de89e87603664bee9179b8abbd353d1828cc76ab009ecaf25a066aefd9cc1d301bb10b298d1aba5309c08ea93bf4eeda301", 0x70, 0x80, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x1, r4, &(0x7f00000003c0)="86ec605b5cde02ca2c98476538bdcd0f2d0b4001bdd14fe4f635a4362e34bed5478e6daec3517820885718b7b086f3f92e98dec6dec5832be8cd96cbf85006afb881a25645986b3afb9e97d896af6d5052f8989597fbc47d432e6d55db1a99da6ebf00d3e082e35c21de7fc7016527928ec97642ebc9b468513e554aebe653f0a70e1639f88964e5f4a0779e002259c38bf5ba45bf2e30db7ffb0da076014a825b909483e8fb370cb04d7bca3d57a2eb9d21a3ff9e56b8e11273ce3fe0cae869f2429b1e6f0dad3e", 0xc8, 0xfffffffffffffffc, 0x0, 0x3}])
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
pread64(r1, 0x0, 0x0, 0x1)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0))
r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0)
r9 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2, 0x80802)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r9, 0x82000000)

12m39.887153581s ago: executing program 2 (id=4649):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x1})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)

12m38.024171325s ago: executing program 2 (id=4659):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="364fa8f6333800000013002f0a2bbd70000000000007006800", @ANYRES32=r2, @ANYBLOB="400c00002570020018001a8009000100766c616e000000000800048004000380"], 0x38}, 0x1, 0x0, 0x0, 0x2404409c}, 0x40000)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xbd}]}, 0x10)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/tty/drivers\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setrlimit(0xb, &(0x7f0000000280)={0x100000001, 0x1})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x84202, 0x0)
sendfile(r6, r6, 0x0, 0x200000)

12m37.55395084s ago: executing program 2 (id=4664):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x38)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb4d, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, 0x0, 0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000040)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1)
setsockopt$inet_udp_int(r6, 0x11, 0x67, 0x0, 0x0)
sendmmsg$inet(r8, &(0x7f0000000600), 0x0, 0x408c4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x40081)
socket$netlink(0x10, 0x3, 0x0)

12m35.191253579s ago: executing program 2 (id=4678):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001800), r1)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402178006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0006000000640000000004000280080003009f00f755e9bcc175146591a1965ef90ec5867be241bfcf91623752892b7ef92b984ab9a91c35335df7d4accc62bd969473edb53bce2f7494b7b727ca4a56b740b2cb83a14b4c58a89fbaa1897c079076eb732c5e41eb2ec5b0b1ce5e40e45eaf40260272052f975100de301c74cc0b741ca5561f68650883798f25eec92ea1648eb60e2e4631cac7020cc092b1165c6239a9701c44", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0x0)

12m33.717842265s ago: executing program 2 (id=4682):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xa00}, 0x4000)

12m32.518649003s ago: executing program 2 (id=4686):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x10, 0xffffffffffffffff, 0x28f43000)
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x4})
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004805, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @mcast1, 0xffff8003}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r3, 0x0, 0xfdef)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

12m32.273170037s ago: executing program 33 (id=4686):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x10, 0xffffffffffffffff, 0x28f43000)
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x4})
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004805, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @mcast1, 0xffff8003}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r3, 0x0, 0xfdef)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

11m27.15043218s ago: executing program 0 (id=4917):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000500)={0x2, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0xc, "8f"}], 0x28}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
flock(0xffffffffffffffff, 0x6)
openat$mice(0xffffffffffffff9c, &(0x7f0000000940), 0x402)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14)
sendto$inet6(r3, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
umount2(0x0, 0xd)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x9}}, 0x4, 0x3, 0x10001, 0x94, 0x2c, 0xf, 0x1}, &(0x7f00000004c0)=0x9c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0)
r6 = open$dir(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x581700, 0x40)
mkdirat(r6, &(0x7f0000000340)='./file2\x00', 0x40)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@subj_type={'subj_type', 0x3d, 'fsuuid'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@uid_lt}, {@obj_user={'obj_user', 0x3d, '/dev/input/mice\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x36, 0x64, 0x32, 0x32, 0x33, 0x63], 0x2d, [0x36, 0x63, 0x62, 0x63], 0x2d, [0x30, 0x30, 0x39, 0x63], 0x2d, [0x62, 0x35, 0x64, 0x31], 0x2d, [0x31, 0x66, 0x37, 0x66, 0x63, 0x65, 0x37, 0x33]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x35, 0x62, 0x66, 0x32, 0x66, 0x35, 0xd0], 0x2d, [0x30, 0x61, 0x39, 0x33], 0x2d, [0x33, 0x62, 0x31, 0x32], 0x2d, [0x39, 0x66, 0x34, 0x66], 0x2d, [0x34, 0x36, 0x37, 0x30, 0x58, 0x36, 0x65, 0x35]}}}, {@dont_measure}, {@seclabel}], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186)

11m25.065888454s ago: executing program 0 (id=4924):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000004)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5})

11m24.952515405s ago: executing program 0 (id=4926):
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x7ffffffffffffffe)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000000a0104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c000180140001"], 0x8c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd8a62000)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x804}}}, 0x7)
syz_open_dev$dvb_demux(&(0x7f0000000000), 0x7, 0x5a1001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa}}]}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

11m21.215954679s ago: executing program 0 (id=4939):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10)

11m21.110264245s ago: executing program 0 (id=4940):
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0x7ff7fffd)

11m21.07251668s ago: executing program 0 (id=4941):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x140) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8) (async)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r3}, 0x20)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async, rerun: 32)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xf445, 0x2}) (rerun: 32)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}) (async)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async)
write$P9_RVERSION(r9, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8)

11m4.387505337s ago: executing program 34 (id=4941):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x140) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8) (async)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r3}, 0x20)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async, rerun: 32)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xf445, 0x2}) (rerun: 32)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}) (async)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async)
write$P9_RVERSION(r9, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8)

4m59.83783325s ago: executing program 1 (id=6239):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x36, 0x2)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103", @ANYRES64=r0, @ANYRES32=0x0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001080)={0x24, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000004400)={0x0, 0x3, 0xc, @string={0xc, 0x3, "4c515919419b952740e4"}}, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x2, 0x200, 0x2})

4m55.109125978s ago: executing program 1 (id=6249):
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f00007f1000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r4, 0x40000)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$uac1(0x0, 0x11a, &(0x7f0000000e00)=ANY=[], &(0x7f0000000380)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x7f, 0x9, 0xaf, 0x10, 0x4}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}}) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async)
syz_usb_control_io$uac1(r5, &(0x7f0000000540)={0x14, &(0x7f00000005c0)={0x0, 0x22, 0x102, {0x102, 0x10, "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"}}, &(0x7f0000000700)={0x0, 0x3, 0x77, @string={0x77, 0x3, "16db5df2017abfaa0ef159231af40a31ea8f4f495e5ecbe77c0f80d37258fc2ce2b441a273cef32c31bb1b79c0b9fc929a803309b52f82032cf68e66e55a5de464e02d77a96105633c644a89e08e910b78aa6fbf901bdc7f8975b10f189ae3cd4228c6488f6796560f53a5a4d573989714107a9ef7"}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000480)=ANY=[], &(0x7f0000000800)={0x0, 0xa, 0x1, 0xb5}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a80)={0x20, 0x81, 0x3, "0c3887"}, &(0x7f0000000900)={0x20, 0x82, 0x2, 'Z['}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="208302006310599ab2de4cbc670000e935bd0325b3eadf003d28d25d06e4c6977429da06c26473a0e4fcd8b015cb0687edb3e4658f06a73b95a3e2900904fc7edfe2729eb068b97a615c66d6896489eb5468fde354fe04a62c27381eedf13ca665824290d1039871837ef08223af9daf21f95126f7f60c1e74c52993a98c500ac1f6be49880df552da56a889fa4943b24a18847eda8fdf70e4bf77c99c1cc08929e5572beed6f9ac3993d010af64b4d0bc7c6e8e50e09cf5f8020db408c8da949d2ab7dce4d00c2933b6d4db6f549ba2c90d0c3119f741210a7af05c8e379370ab784e6a0d43ec3b7540"], &(0x7f00000001c0)=ANY=[@ANYBLOB="2084fb620e9e60a0c2e69f20faf1d6e7856e865f697dcbe063556351274710275c8d8b417fedac05d1a13e194be1269d7547bf391c0decbe23eab1c192d219e06e93d27f34b5e37c578bda17bbb822fa763f9a34"], &(0x7f0000000b00)={0x20, 0x85, 0x3, 'QEt'}})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0054, &(0x7f0000000d40)={[], [{@obj_role={'obj_role', 0x3d, '7'}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, '-+\x95{&}(@'}}, {@euid_eq={'euid', 0x3d, r7}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot}, {@smackfstransmute={'smackfstransmute', 0x3d, '$/'}}]}) (async)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000e00)={0x20, 0x12, 0xf3, "a86e40fc91e552cd3cd6095e53d5c1db5935dc0ac47f8509c641999bc5630f9798f603c8d387b61ee76c2899659d040f6f5a4f06c8a18c7df893d35e737d48ce2db0a427b36dc642d5ca44ee52468f235e1bb0ee48d3f9004e7aa490782169d814faf58cec94327d14918f96dba53a982bc3993c26b078b47d6a5394ad4f3aace63a17c4c392d62560dc1c9b457d16bd213a648b474332a59b14790b71672be1999a6c088ef87e11e0542faa354b14cb4afe7d313f3cbf2a606a927ac0a762cf6f476d6fce5d405ded86b9d08f628b1a175d8766fe7486b41182a150b998bcee8ae402331f9723f5cef938f1bef07ebdf2d25a"}, 0x0, 0x0, 0x0, 0x0, 0x0})

4m54.798466323s ago: executing program 1 (id=6253):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x4000000000000, 0x0, 0x4000}, 0x0)

4m50.487926812s ago: executing program 1 (id=6266):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x7)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x28)
r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

4m49.766271407s ago: executing program 1 (id=6267):
shutdown(0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x4200064f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={r4, &(0x7f0000000200)='\x00', 0x20000, &(0x7f0000000280)={@align=0xe2c, {0x3aa, 0x9, 0x400, 0xfffffffffffffe00}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9}) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={<r5=>r4, &(0x7f0000000200)='\x00', 0x20000, &(0x7f0000000280)={@align=0xe2c, {0x3aa, 0x9, 0x400, 0xfffffffffffffe00}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x3000}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x6, @private2, 0x7}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, @in6={0xa, 0x0, 0xffff, @mcast1, 0x1}, @in6={0xa, 0x4e1d, 0xfffffff4, @local, 0x22c}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @broadcast}], 0xdc)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0) (async)
r6 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000400)={0x40000018}) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000400)={0x40000018})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9cf6, 0x80, 0x3, 0x288}, &(0x7f0000000240), &(0x7f0000000040)) (async)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9cf6, 0x80, 0x3, 0x288}, &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001})
writev(r9, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
r10 = socket$igmp(0x2, 0x3, 0x2)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44880}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r12, &(0x7f0000000040), 0xe09)
bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x9, 0x1, 0x3, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x9, 0x1, 0x3, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10)

4m49.146826584s ago: executing program 1 (id=6270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x800000080000000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000000000)

4m48.823373282s ago: executing program 35 (id=6270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x800000080000000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000000000)

19.030591776s ago: executing program 5 (id=7261):
mkdirat(0xffffffffffffffff, 0x0, 0x120)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
madvise(&(0x7f0000ad3000/0x11000)=nil, 0x11000, 0x13)
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000500)="5b8d621f5ee6df16833b2002f7ebbb2319da1d7df8cd1f98ddf3ba6526412d176768503ce58c5bb207788d4e03810a84c355a23348444f0a416033f592a13397427d3bc9e8a10311dfb96d345eea999e71448bcc35fe598fc43611bd67fb22cbad6e74316653e5565deb4641b8f9dec9bc0bda88b65ca5adde33bc77d7778101", 0x80)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0xdd0845ef, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

15.745603902s ago: executing program 5 (id=7266):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f80000001d0001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0)

14.380995776s ago: executing program 3 (id=7275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0205647, &(0x7f0000000940)={0xf010002, @vbi={0x0, 0x5, 0x6, 0x32435750, [0x1, 0x3], [0x1, 0x2], 0x13a}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000005000/0x1000)=nil)

12.210841885s ago: executing program 3 (id=7280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0205647, &(0x7f0000000940)={0xf010002, @vbi={0x0, 0x5, 0x6, 0x32435750, [0x1, 0x3], [0x1, 0x2], 0x13a}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000005000/0x1000)=nil)
socket$inet6_udplite(0xa, 0x2, 0x88)
listen(0xffffffffffffffff, 0x2)

10.064260158s ago: executing program 6 (id=7282):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x6c5d01bc}, 0x1c) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0)=0x39e9a8c1, 0x4) (async, rerun: 64)
r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7, 0x80000) (rerun: 64)
landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x20}) (async)
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})
syz_emit_ethernet(0xe, &(0x7f0000000200)={@broadcast, @multicast, @void, {@generic={0x88f7}}}, 0x0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005ffc702011071002d6fd0102030109022b00010002000009048b"], 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

8.063630249s ago: executing program 3 (id=7285):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x0) (async, rerun: 32)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@deltaction={0x70, 0x31, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x70}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}, 0x1, 0x4000}, 0x0) (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25047c0000080001800400dd8008000380040001807417b80854a6cb4c4fc977a1169687c63f4aa5799b90f24cbe2ea30410a116d0de3c4a0b9b6784c3397c5d2af07c87ce486fcc75d3b2196820a4d2c6d7ffe2e5e19ccaabf2f212cc8702d068b482a93128077246d1ad13c12c266c5f14a813b30f2c6fa93a2ce1acfcf9104bd3763a7323c8a3b0bc9a63c716ad6ed63b416b7f07fe54057cc82acf9705b12e60adb598ba7144a6049fa9cde1fd9cac11aee7d52144192af8c45828ced88d9f5efbe4bf35238bfe0abc3a709dde3516"], 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (rerun: 64)

7.910031277s ago: executing program 6 (id=7286):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = io_uring_setup(0x44a2, &(0x7f0000000000)={0x0, 0xbf12, 0x4000, 0x0, 0x1a})
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
sendmmsg$unix(r3, &(0x7f00000019c0)=[{{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x8000)

7.353059929s ago: executing program 6 (id=7287):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
fallocate(r1, 0x0, 0x9, 0x10001)
copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x4b13000000000000)

7.146129028s ago: executing program 6 (id=7288):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84)
sendto$inet6(r1, &(0x7f0000000000)="895c", 0x2, 0x40000, &(0x7f0000000040)={0xa, 0x4e23, 0xec0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000e80)="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", 0x1b0}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400102"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

7.142645946s ago: executing program 3 (id=7289):
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000080)={0x6, 0x1, 0x4, 0x0, 0x3})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x47, 0xffffffffffffffff, 0x4}, 0x38)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4d)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3100, 0x1, 0x40024e}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16})
io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x8c42, 0x0, 0x2}, 0x18)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r10, 0x40045542, &(0x7f00000002c0)=0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000002060500000000000000000304000000ecff03006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000980c00018008000140ffffffff0800064000006d2305000500020000000500010006000000"], 0x68}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000280)=0x8)

7.07599173s ago: executing program 8 (id=7291):
syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400400)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000102}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfd, {0x80, 0x10, 0x10, 0x50, 0xfe, 0x3, 0xfd, 0xa, 0x1100}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004840}, 0x8000)
r1 = getpid()
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x1, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x3f00000000000000, 0x0)
close(0xffffffffffffffff)
syz_clone3(&(0x7f0000001240)={0x200202000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000880)=0x2)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r4, 0x0, 0x20)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0xc, 0x3, 0x47, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x80000133, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x1000, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x11, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ec, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0xb9, 0xce7, 0x2, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x3286, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.058691383s ago: executing program 5 (id=7292):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x20, 0x11, 0x43d, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)

5.15018209s ago: executing program 8 (id=7293):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x434ac0, 0x0)
write$rfkill(r4, &(0x7f0000000180)={0x8, 0x3, 0x2, 0x1}, 0x8) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="0f30c7442400302b0000c7442402d9220000c7442406000000000f011c2467430fc7b108000000c422c5bcf20f3066ba4200ecb98a0a00000f328fc93099d38fc978e222c461f970b20040000008", 0xfffffffffffffd2f}], 0x1, 0x68, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

4.363492387s ago: executing program 8 (id=7294):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000a96000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x77fe3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000a8e000/0x13000)=nil)
syz_clone(0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.226477082s ago: executing program 7 (id=7295):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600200065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x404c050}, 0x8040)

4.110075608s ago: executing program 5 (id=7296):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x15a660a7d95d92ad) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x15a660a7d95d92ad)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0)
recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
move_mount(r4, &(0x7f0000000140)='.\x00', r3, &(0x7f0000000300)='./file0\x00', 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x220)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20)
socket$caif_seqpacket(0x25, 0x5, 0x3) (async)
r6 = socket$caif_seqpacket(0x25, 0x5, 0x3)
getpid() (async)
getpid()
setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0xffffffffffffffff, 0x38)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x20330000}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r7=>r6, {0x20330000}}, './file0\x00'})
ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000080)) (async)
ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000080))
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r8, 0x800448d7, 0x0)

4.017357549s ago: executing program 7 (id=7297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x2802, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.978240747s ago: executing program 8 (id=7298):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={<r2=>0x0}, &(0x7f0000000100)=0x8)
sendmmsg$inet_sctp(r1, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f00000001c0)=[@init={0x18, 0x84, 0x0, {0x40, 0xb, 0x101, 0xff}}, @sndrcv={0x30, 0x84, 0x1, {0x5606, 0x7, 0x8003, 0x8, 0x1, 0xb, 0x7ff, 0x0, r2}}], 0x48, 0x40010}], 0x1, 0x240000c0)
bind$can_raw(r0, &(0x7f00000000c0), 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4)

3.902528938s ago: executing program 5 (id=7299):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}, 0x1, 0xffc3}, 0x0)

3.901814403s ago: executing program 7 (id=7300):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setuid(0xee01)
setgroups(0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x50, &(0x7f0000000040)=0x1, 0xfff0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x40, 0x3, 0x18, 0x9, 0x80, 0x9, 0x4, 0x2, <r3=>0x0}, &(0x7f0000000040)=0x20) (async)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffdfe})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4) (async)
ptrace$peeksig(0x1a, r4, 0x0, &(0x7f0000000040)) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r3, @in={{0x2, 0x4c22, @remote}}, 0x5, 0x2000, 0x6, 0x0, 0x54, 0x0, 0xd}, 0x9c)

3.775607678s ago: executing program 8 (id=7301):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000040)
mkdir(0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x200048c4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x400000000000000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

3.754948365s ago: executing program 7 (id=7302):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
fsopen(0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb42bfa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa03972917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c7526052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72f", 0xb0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x8040010)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2, 0x0, 0x0, 0xf5000000}, 0x50)

2.300574816s ago: executing program 8 (id=7303):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000d80), 0x109201, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x20000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0xfffffffffffffffa, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x48000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

2.126791619s ago: executing program 3 (id=7304):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e3d3970323030302c003bbd628c6002bf1dfe63acca960b07aafbdf55b786fd05f3c3141d9fde52ba1a4ae1696b34df42704971858896a5ad7cb0140293a2680b732ec90c79fb8ee598c74bcd3d1c6373e4e8211118f0a169b126dd0d2172aa9395639565bf40"])
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16], 0x15)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

2.126073613s ago: executing program 6 (id=7305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0205647, &(0x7f0000000940)={0xf010002, @vbi={0x0, 0x5, 0x6, 0x32435750, [0x1, 0x3], [0x1, 0x2], 0x13a}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000005000/0x1000)=nil)

1.935928115s ago: executing program 5 (id=7306):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000003940)=0x10)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000003980)={0x9, 0x4, 0x0, 0xfffffffd, 0x4, "9fe074c27de56e638031e88f19fa52087cfdcf"})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}}, 0x4040)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x80)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b)

1.899723956s ago: executing program 7 (id=7307):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10d4}, 0x20044800)
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
r1 = socket$inet(0x2, 0x1, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x3, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x6000000, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000540)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x4}, 0x80, 0x0}, 0x10040800)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)

12.879194ms ago: executing program 36 (id=7306):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000003940)=0x10)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000003980)={0x9, 0x4, 0x0, 0xfffffffd, 0x4, "9fe074c27de56e638031e88f19fa52087cfdcf"})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}}, 0x4040)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x80)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b)

1.340699ms ago: executing program 7 (id=7309):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x38}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002300010324bd7002fadbdf250100000056836ae60d58c916c70bee87cd03475bcadff9b2eb9a2f6534913f6b22f394b45f723ad1d7ce3ca5df1c52c0ef83fe78917144d8c8dfafd6"], 0x14}, 0x1, 0xa6ffffff}, 0xc004)

369.727µs ago: executing program 6 (id=7310):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197"], 0x1c}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000006800090326bd7000000000000a0003000000000014000600ac1414aa00000000000000000000000004000400eac66129a5a4dcb7bbe3ebe162561d7adab86dde42e0c8926a720de510af5093fc9a430f0600000037817db58530d768a0c5db2d1348749dba9c661386bab66c2ea901000000e5e191e034e5cced1f37eae182ec92f1a9d0df06027ff9f8aa13048c6452cda55230ca68549aa65d401ba0e481d447a88a2af421302447bbd0a796acbdd4776aa5798d0eecf9f7d89af975726b5716072a05f84757319647b295cfd8000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00')
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
r2 = io_uring_setup(0x4031, &(0x7f0000000240)={0x0, 0x400008d6, 0x4000, 0x2, 0xd3})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default us'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000040)
syz_emit_ethernet(0xf2, &(0x7f00000007c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0xe, 0x6, "c02e51", 0xbc, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, {[@routing={0x91255d0c93ccdc26, 0xe, 0x0, 0x0, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @private1]}, @routing={0x0, 0x6, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}]}], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x5d, 0x0, @void}}}}}}}}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000)
pipe(0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100004000", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
syz_io_uring_setup(0x6031, &(0x7f00000000c0)={0x0, 0x409b, 0x2000, 0x1, 0x40196, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000340))

0s ago: executing program 3 (id=7311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d000100"], 0xcc}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @private}, "000088beffff0000"}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xb00, 0x0, 0x3}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

820.930990][T25320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1820.981833][T29771] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1821.031537][T29771] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1821.047807][T29771] bridge_slave_0: entered allmulticast mode
[ 1821.070015][T29771] bridge_slave_0: entered promiscuous mode
[ 1821.090070][T29771] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1821.107700][T29771] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1821.142218][T29771] bridge_slave_1: entered allmulticast mode
[ 1821.159597][T29771] bridge_slave_1: entered promiscuous mode
[ 1821.256920][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6316'.
[ 1821.447551][T25320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1821.465855][   T30] audit: type=1400 audit(2000000599.647:3121): avc:  denied  { map } for  pid=29794 comm="syz.5.6317" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1821.664519][T29771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1821.677761][T29771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1821.758789][T24906] Bluetooth: hci6: command tx timeout
[ 1822.165650][T29771] team0: Port device team_slave_0 added
[ 1822.196328][T29771] team0: Port device team_slave_1 added
[ 1822.232536][T29771] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1822.239986][T29771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1822.269666][T29771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1822.284358][T29771] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1822.291749][T29771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1822.343412][T29771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1822.606149][T29771] hsr_slave_0: entered promiscuous mode
[ 1822.623483][T29771] hsr_slave_1: entered promiscuous mode
[ 1822.638619][T29771] debugfs: 'hsr0' already exists in 'hsr'
[ 1822.651350][T29771] Cannot create hsr debugfs directory
[ 1822.793514][ T5878] usb 8-1: new low-speed USB device number 23 using dummy_hcd
[ 1823.965392][T24906] Bluetooth: hci6: command tx timeout
[ 1824.030483][ T5878] usb 8-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1824.038910][ T5878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1824.049131][ T5878] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1824.058389][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1824.068896][ T5878] usb 8-1: config 0 descriptor??
[ 1824.550149][T25320] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1824.624559][T25320] bond0 (unregistering): Released all slaves
[ 1824.859058][T25320] tipc: Left network mode
[ 1825.041231][T29829] bond3: Removing last ns target with arp_interval on
[ 1825.924472][T21838] usb 8-1: USB disconnect, device number 23
[ 1826.029152][  T794] usb 7-1: new low-speed USB device number 21 using dummy_hcd
[ 1826.188762][T24906] Bluetooth: hci6: command tx timeout
[ 1826.194289][  T794] usb 7-1: device descriptor read/64, error -71
[ 1826.204016][T29771] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1826.215192][T29771] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1826.239682][T29771] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1826.271953][T29771] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1826.377355][T25320] hsr_slave_0: left promiscuous mode
[ 1826.409327][T25320] hsr_slave_1: left promiscuous mode
[ 1826.477131][  T794] usb 7-1: new low-speed USB device number 22 using dummy_hcd
[ 1826.541019][T25320] veth1_macvtap: left promiscuous mode
[ 1826.577082][T25320] veth0_macvtap: left promiscuous mode
[ 1827.064887][  T794] usb 7-1: device descriptor read/64, error -71
[ 1828.085129][   T30] audit: type=1400 audit(2000000605.830:3122): avc:  denied  { unmount } for  pid=24902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1828.088942][  T794] usb usb7-port1: attempt power cycle
[ 1828.413246][T24906] Bluetooth: hci6: command tx timeout
[ 1828.462467][T29875] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1828.540098][T24906] Bluetooth: hci1: unknown advertising packet type: 0x75
[ 1828.540165][T24906] Bluetooth: hci1: Malformed LE Event: 0x02
[ 1828.647464][  T794] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[ 1828.673912][  T794] usb 7-1: device descriptor read/8, error -71
[ 1828.860419][T29881] /dev/nullb0: Can't open blockdev
[ 1829.548847][T29892] kvm: kvm [29891]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ffffffffd
[ 1829.573487][   T29] lo speed is unknown, defaulting to 1000
[ 1829.582984][   T29] syz0: Port: 1 Link DOWN
[ 1829.741745][T29771] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1829.783639][T29771] 8021q: adding VLAN 0 to HW filter on device team0
[ 1829.820900][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1829.828097][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1829.893417][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1829.900597][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1829.983886][T29897] nbd7: detected capacity change from 0 to 112
[ 1830.114866][T29905] block nbd7: shutting down sockets
[ 1830.134275][    C0] blk_print_req_error: 10 callbacks suppressed
[ 1830.134318][    C0] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1830.150030][    C0] buffer_io_error: 10 callbacks suppressed
[ 1830.150047][    C0] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1830.199504][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1830.236875][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1830.255881][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1830.523137][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1830.555419][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1830.589201][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1830.608057][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1830.639574][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1831.613903][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1831.623816][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1831.632019][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1831.642137][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1831.649968][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1831.659900][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1832.694759][T22834] ldm_validate_partition_table(): Disk read failed.
[ 1832.701524][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1832.711060][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1832.718878][T22834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1832.728420][T22834] Buffer I/O error on dev nbd7, logical block 0, async page read
[ 1834.164534][T22834] Dev nbd7: unable to read RDB block 0
[ 1834.205937][T22834]  nbd7: unable to read partition table
[ 1834.276971][T29771] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1834.373936][T22834] ldm_validate_partition_table(): Disk read failed.
[ 1834.396012][T22834] Dev nbd7: unable to read RDB block 0
[ 1834.431325][T22834]  nbd7: unable to read partition table
[ 1834.451998][T29930] tipc: Started in network mode
[ 1834.481842][T29930] tipc: Node identity 8acf71b0633d, cluster identity 4711
[ 1834.506141][T29930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1834.579531][T29933] syzkaller0: entered promiscuous mode
[ 1834.613805][T29933] syzkaller0: entered allmulticast mode
[ 1834.631848][T29771] veth0_vlan: entered promiscuous mode
[ 1834.638395][T25320] IPVS: stop unused estimator thread 0...
[ 1834.665653][T29930] tipc: Resetting bearer <eth:syzkaller0>
[ 1834.802139][T29771] veth1_vlan: entered promiscuous mode
[ 1834.948271][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6348'.
[ 1835.045572][T29929] tipc: Resetting bearer <eth:syzkaller0>
[ 1835.139562][T29929] tipc: Disabling bearer <eth:syzkaller0>
[ 1835.204556][T29771] veth0_macvtap: entered promiscuous mode
[ 1835.262653][T29771] veth1_macvtap: entered promiscuous mode
[ 1835.326130][   T30] audit: type=1400 audit(2000000612.602:3123): avc:  denied  { connect } for  pid=29956 comm="syz.6.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1835.332105][T29771] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1835.371678][   T30] audit: type=1400 audit(2000000612.640:3124): avc:  denied  { ioctl } for  pid=29956 comm="syz.6.6351" path="socket:[119393]" dev="sockfs" ino=119393 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1835.386863][T29771] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1835.617610][   T30] audit: type=1400 audit(2000000612.864:3125): avc:  denied  { listen } for  pid=29962 comm="syz.8.6352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1835.648806][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1835.696690][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1836.985229][T25320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1837.048990][T25320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1837.160494][T29991] FAULT_INJECTION: forcing a failure.
[ 1837.160494][T29991] name failslab, interval 1, probability 0, space 0, times 0
[ 1837.447782][T29991] CPU: 1 UID: 0 PID: 29991 Comm: syz.7.6360 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1837.447804][T29991] Tainted: [L]=SOFTLOCKUP
[ 1837.447808][T29991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1837.447815][T29991] Call Trace:
[ 1837.447820][T29991]  <TASK>
[ 1837.447824][T29991]  dump_stack_lvl+0x100/0x190
[ 1837.447848][T29991]  should_fail_ex.cold+0x5/0xa
[ 1837.447863][T29991]  should_failslab+0xc2/0x120
[ 1837.447881][T29991]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1837.447896][T29991]  ? do_getname+0x35/0x390
[ 1837.447912][T29991]  do_getname+0x35/0x390
[ 1837.447927][T29991]  user_path_at+0x26/0x60
[ 1837.447945][T29991]  __x64_sys_mount+0x1fb/0x310
[ 1837.447959][T29991]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1837.447982][T29991]  do_syscall_64+0x106/0xf80
[ 1837.447993][T29991]  ? clear_bhb_loop+0x40/0x90
[ 1837.448007][T29991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.448019][T29991] RIP: 0033:0x7f01e119c799
[ 1837.448030][T29991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1837.448041][T29991] RSP: 002b:00007f01e1fd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1837.448052][T29991] RAX: ffffffffffffffda RBX: 00007f01e1415fa0 RCX: 00007f01e119c799
[ 1837.448060][T29991] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[ 1837.448066][T29991] RBP: 00007f01e1fd7090 R08: 0000200000000180 R09: 0000000000000000
[ 1837.448073][T29991] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1837.448080][T29991] R13: 00007f01e1416038 R14: 00007f01e1415fa0 R15: 00007ffdb4e823f8
[ 1837.448094][T29991]  </TASK>
[ 1837.729312][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1837.766718][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1837.813377][T25320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1837.862650][T25320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1838.501366][T30015] SET target dimension over the limit!
[ 1838.751898][T30010] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6312'.
[ 1838.773887][T30010] netlink: 'syz.3.6312': attribute type 2 has an invalid length.
[ 1839.666699][   T36] bond1 (unregistering): Released all slaves
[ 1839.718325][   T36] smc: removing net device bond0 with user defined pnetid SYZ2
[ 1839.747816][   T36] bond0 (unregistering): Released all slaves
[ 1839.785042][   T36] bond2 (unregistering): Released all slaves
[ 1840.019604][   T36] : left promiscuous mode
[ 1840.240021][   T30] audit: type=1326 audit(2000000617.204:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.263874][   T30] audit: type=1326 audit(2000000617.204:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.549042][   T30] audit: type=1326 audit(2000000617.204:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.580740][   T30] audit: type=1326 audit(2000000617.204:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.606126][   T30] audit: type=1326 audit(2000000617.204:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.631993][   T30] audit: type=1326 audit(2000000617.204:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.656642][   T30] audit: type=1326 audit(2000000617.204:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.681156][   T30] audit: type=1326 audit(2000000617.204:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.714167][   T30] audit: type=1326 audit(2000000617.204:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.811045][   T30] audit: type=1326 audit(2000000617.204:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.864489][   T30] audit: type=1326 audit(2000000617.429:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1840.908533][   T30] audit: type=1326 audit(2000000617.429:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1841.514274][   T30] audit: type=1326 audit(2000000617.429:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1841.656494][T30088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6371'.
[ 1841.937501][   T30] audit: type=1326 audit(2000000617.476:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1842.106774][   T30] audit: type=1326 audit(2000000617.476:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1842.221425][   T30] audit: type=1326 audit(2000000617.476:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1842.397885][   T30] audit: type=1326 audit(2000000617.523:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30052 comm="syz.3.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2cedd9c502 code=0x7ffc0000
[ 1843.058989][   T36] hsr_slave_0: left promiscuous mode
[ 1843.352478][   T36] hsr_slave_1: left promiscuous mode
[ 1843.370856][T24906] Bluetooth: hci1: hardware error 0x00
[ 1844.662861][   T36] team0 (unregistering): Port device batadv1 removed
[ 1844.683978][   T36] pimreg (unregistering): left allmulticast mode
[ 1844.972753][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1845.038442][   T36] team0 (unregistering): Port device C removed
[ 1845.060987][T21841] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1845.719601][T21841] usb 4-1: Using ep0 maxpacket: 16
[ 1845.730940][T21841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1845.752554][T21841] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[ 1845.761905][T21841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1845.787042][T21841] usb 4-1: config 0 descriptor??
[ 1845.797138][T30140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1845.807518][T21841] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1846.728299][   T36] IPVS: stop unused estimator thread 0...
[ 1846.801616][T24906] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1846.907469][T30171] F2FS-fs: Conflicting test_dummy_encryption options
[ 1847.270621][T30175] input: syz0 as /devices/virtual/input/input63
[ 1847.364692][T30178] netlink: 'syz.6.6394': attribute type 1 has an invalid length.
[ 1847.389140][T30178] netlink: 'syz.6.6394': attribute type 1 has an invalid length.
[ 1847.398349][T30178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6394'.
[ 1848.068584][    T9] usb 4-1: USB disconnect, device number 84
[ 1848.158840][   T30] kauditd_printk_skb: 37 callbacks suppressed
[ 1848.158857][   T30] audit: type=1326 audit(2000000624.613:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.400528][   T30] audit: type=1326 audit(2000000624.622:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.441811][T30195] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6398'.
[ 1848.450986][T30194] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[ 1848.467905][T30195] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6398'.
[ 1848.487538][   T30] audit: type=1326 audit(2000000624.622:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.571417][   T30] audit: type=1326 audit(2000000624.622:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.624164][   T30] audit: type=1326 audit(2000000624.622:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.662853][T30201] syzkaller0: entered promiscuous mode
[ 1848.668326][T30201] syzkaller0: entered allmulticast mode
[ 1848.703444][   T30] audit: type=1326 audit(2000000624.622:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.712917][T30202] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1848.728266][   T30] audit: type=1326 audit(2000000624.622:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.758262][   T30] audit: type=1326 audit(2000000624.622:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.782630][   T30] audit: type=1326 audit(2000000624.622:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.812835][   T30] audit: type=1326 audit(2000000624.622:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30188 comm="syz.3.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2cedd9c799 code=0x7ffc0000
[ 1848.869470][T30202] team0: Port device batadv1 added
[ 1851.169742][T30240] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6414'.
[ 1851.905403][T30261] fuse: Unknown parameter ''
[ 1857.148138][T30291] batman_adv: batadv0: Adding interface: macsec1
[ 1857.190043][T30291] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1857.351951][T30291] batman_adv: batadv0: Interface activated: macsec1
[ 1857.907636][T30291] 9p: Could not find request transport: fdˆ§ª©
[ 1857.925041][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 1857.925058][   T30] audit: type=1326 audit(2000000633.752:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.5.6430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x0
[ 1858.573116][T30328] netlink: 'syz.6.6436': attribute type 1 has an invalid length.
[ 1858.601226][T30328] bond4: entered promiscuous mode
[ 1858.607018][T30328] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1858.698657][    T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1858.935507][T30333] lo speed is unknown, defaulting to 1000
[ 1858.941590][T30333] lo speed is unknown, defaulting to 1000
[ 1858.950968][T30333] lo speed is unknown, defaulting to 1000
[ 1859.008773][T30333] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1859.161815][T30333] lo speed is unknown, defaulting to 1000
[ 1859.176124][T30333] lo speed is unknown, defaulting to 1000
[ 1859.190318][T30333] lo speed is unknown, defaulting to 1000
[ 1859.205097][T30333] lo speed is unknown, defaulting to 1000
[ 1859.219490][T30333] lo speed is unknown, defaulting to 1000
[ 1859.234891][T30333] lo speed is unknown, defaulting to 1000
[ 1859.249205][T30333] lo speed is unknown, defaulting to 1000
[ 1859.365153][    T9] usb 6-1: Using ep0 maxpacket: 8
[ 1859.997659][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1860.289257][    T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1860.298362][    T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[ 1860.307463][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1860.326597][    T9] usb 6-1: config 0 descriptor??
[ 1860.429560][T30295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1860.830005][   T29] libceph: connect (1)[c::]:6789 error -13
[ 1860.840379][   T29] libceph: mon0 (1)[c::]:6789 connect error
[ 1861.574530][   T29] libceph: connect (1)[c::]:6789 error -13
[ 1861.580546][   T29] libceph: mon0 (1)[c::]:6789 connect error
[ 1861.663678][   T29] usb 6-1: USB disconnect, device number 60
[ 1861.694582][T30374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6448'.
[ 1861.766391][T30376] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6449'.
[ 1861.797311][T30376] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6449'.
[ 1861.833142][T30376] netlink: 19 bytes leftover after parsing attributes in process `syz.5.6449'.
[ 1861.873968][T30360] ceph: No mds server is up or the cluster is laggy
[ 1862.348358][T30389] bond1: Removing last ns target with arp_interval on
[ 1862.996535][T30406] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1863.011222][T30406] Error validating options; rc = [-22]
[ 1869.552267][   T30] audit: type=1326 audit(2000000644.584:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1869.595123][   T30] audit: type=1326 audit(2000000644.584:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd08d5cfce code=0x7ffc0000
[ 1869.624246][ T5878] IPVS: starting estimator thread 0...
[ 1869.634744][   T30] audit: type=1326 audit(2000000644.593:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1869.763417][T30466] IPVS: using max 44 ests per chain, 105600 per kthread
[ 1869.765588][T30471] SET target dimension over the limit!
[ 1869.815788][T30471] binfmt_misc: register: failed to install interpreter file ./file0
[ 1870.112637][   T30] audit: type=1326 audit(2000000644.593:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1870.215309][   T30] audit: type=1326 audit(2000000644.593:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1870.363395][   T30] audit: type=1326 audit(2000000644.593:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1870.498981][   T30] audit: type=1326 audit(2000000644.593:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1870.593885][   T30] audit: type=1326 audit(2000000644.593:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd08d5cfce code=0x7ffc0000
[ 1870.812734][   T30] audit: type=1326 audit(2000000644.602:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1871.310811][   T30] audit: type=1326 audit(2000000644.602:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.5.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 1871.862226][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1871.868506][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1873.542300][T30491] Cannot find add_set index 0 as target
[ 1873.556454][T30491] binfmt_misc: register: failed to install interpreter file ./file0
[ 1873.920137][T30508] kAFS: unable to lookup cell 'ÿ'
[ 1873.932185][T30508] kAFS: unable to lookup cell '(,c¾Ì'
[ 1874.111545][T30516] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1875.523604][T30549] syzkaller0: entered promiscuous mode
[ 1875.552297][T30549] syzkaller0: entered allmulticast mode
[ 1877.009726][T30568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input64
[ 1878.016590][    T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1878.178568][    T9] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1878.193457][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1878.227217][    T9] usb 7-1: config 0 descriptor??
[ 1878.279765][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1878.626306][    T9] gp8psk: usb in 128 operation failed.
[ 1878.626822][T30591] netlink: 280 bytes leftover after parsing attributes in process `syz.5.6513'.
[ 1878.632355][    T9] gp8psk: usb in 137 operation failed.
[ 1878.652159][T30591] netlink: 280 bytes leftover after parsing attributes in process `syz.5.6513'.
[ 1878.688721][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1878.711796][    T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1878.738517][    T9] usb 7-1: media controller created
[ 1878.783023][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1878.840388][    T9] gp8psk_fe: Frontend attached
[ 1878.857883][    T9] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1878.886001][    T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1879.024478][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1879.047494][    T9] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1879.100432][T30600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1879.141847][T30600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1879.231605][T30597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1879.454922][T30613] netlink: 'syz.3.6517': attribute type 1 has an invalid length.
[ 1879.746188][T30617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1880.006890][T30628] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[ 1880.013435][T30628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1880.029630][T30628] vhci_hcd vhci_hcd.0: Device attached
[ 1880.211241][T30629] vhci_hcd: connection closed
[ 1880.211446][T25322] vhci_hcd vhci_hcd.7: stop threads
[ 1880.229965][T25322] vhci_hcd vhci_hcd.7: release socket
[ 1880.695733][T25322] vhci_hcd vhci_hcd.7: disconnect device
[ 1880.729394][  T794] usb 7-1: USB disconnect, device number 25
[ 1880.753751][T21838] usb 48-1: enqueue for inactive port 0
[ 1881.170697][  T794] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1881.298758][T30652] netlink: 'syz.5.6530': attribute type 1 has an invalid length.
[ 1881.326828][T30651] openvswitch: netlink: VXLAN extension message has 16 unknown bytes.
[ 1881.326961][T21838] usb usb48-port1: attempt power cycle
[ 1882.137371][T21838] usb usb48-port1: unable to enumerate USB device
[ 1882.587661][T30692] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6543'.
[ 1884.498059][T21831] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1884.883183][T21831] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1884.913569][T30689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30689 comm=syz.8.6543
[ 1884.931554][T21831] usb 7-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40
[ 1884.974287][T21831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1885.020599][T21831] usb 7-1: Product: syz
[ 1885.024822][T21831] usb 7-1: Manufacturer: syz
[ 1885.050929][T21831] usb 7-1: SerialNumber: syz
[ 1885.542770][  T794] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1885.745948][  T794] usb 4-1: Using ep0 maxpacket: 16
[ 1885.763216][  T794] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1885.790316][  T794] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1885.821123][  T794] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[ 1886.156785][  T794] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=89.94
[ 1886.172597][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1886.193691][  T794] usb 4-1: Product: syz
[ 1886.211472][  T794] usb 4-1: Manufacturer: syz
[ 1886.223837][  T794] usb 4-1: SerialNumber: syz
[ 1886.459936][T21831] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1886.481662][  T794] usb 4-1: USB disconnect, device number 85
[ 1886.494595][T21831] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1887.191231][T21831] usb 7-1: USB disconnect, device number 26
[ 1887.454024][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1887.454038][   T30] audit: type=1400 audit(2000000661.374:3228): avc:  denied  { ioctl } for  pid=30735 comm="syz.6.6554" path="socket:[123226]" dev="sockfs" ino=123226 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1888.113386][T30743] rdma_op ffff8880343839f0 conn xmit_rdma 0000000000000000
[ 1888.817866][T30755] FAULT_INJECTION: forcing a failure.
[ 1888.817866][T30755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1888.846645][T30755] CPU: 0 UID: 0 PID: 30755 Comm: syz.8.6561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1888.846674][T30755] Tainted: [L]=SOFTLOCKUP
[ 1888.846681][T30755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1888.846690][T30755] Call Trace:
[ 1888.846696][T30755]  <TASK>
[ 1888.846703][T30755]  dump_stack_lvl+0x100/0x190
[ 1888.846734][T30755]  should_fail_ex.cold+0x5/0xa
[ 1888.846756][T30755]  _copy_from_iter+0x1f4/0x1690
[ 1888.846784][T30755]  ? __pfx__copy_from_iter+0x10/0x10
[ 1888.846811][T30755]  ? skb_put+0x17/0x180
[ 1888.846833][T30755]  ? skb_put+0xa2/0x180
[ 1888.846857][T30755]  netlink_sendmsg+0x808/0xda0
[ 1888.846884][T30755]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1888.846907][T30755]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1888.846932][T30755]  ____sys_sendmsg+0xa54/0xc30
[ 1888.846957][T30755]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1888.846991][T30755]  ___sys_sendmsg+0x190/0x1e0
[ 1888.847016][T30755]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1888.847070][T30755]  __sys_sendmsg+0x170/0x220
[ 1888.847089][T30755]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1888.847122][T30755]  do_syscall_64+0x106/0xf80
[ 1888.847141][T30755]  ? clear_bhb_loop+0x40/0x90
[ 1888.847163][T30755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.847182][T30755] RIP: 0033:0x7fbcab19c799
[ 1888.847197][T30755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1888.847213][T30755] RSP: 002b:00007fbcac0b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1888.847231][T30755] RAX: ffffffffffffffda RBX: 00007fbcab416090 RCX: 00007fbcab19c799
[ 1888.847241][T30755] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003
[ 1888.847251][T30755] RBP: 00007fbcac0b9090 R08: 0000000000000000 R09: 0000000000000000
[ 1888.847261][T30755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1888.847271][T30755] R13: 00007fbcab416128 R14: 00007fbcab416090 R15: 00007fff3ed4d918
[ 1888.847296][T30755]  </TASK>
[ 1892.232678][   T30] audit: type=1400 audit(2000000665.817:3229): avc:  denied  { getopt } for  pid=30781 comm="syz.7.6569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1892.384950][T21831] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1892.446084][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6571'.
[ 1892.510832][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6571'.
[ 1892.579859][T21831] usb 4-1: Using ep0 maxpacket: 16
[ 1892.603647][T21831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1892.648426][T21831] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1892.681051][T21831] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1892.718823][T21831] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1893.217595][T21831] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1893.227601][T21831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1893.236130][T21831] usb 4-1: Product: syz
[ 1893.241686][T21831] usb 4-1: Manufacturer: syz
[ 1893.246391][T21831] usb 4-1: SerialNumber: syz
[ 1893.267677][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6571'.
[ 1893.277816][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6571'.
[ 1894.231158][T21831] usb 4-1: 0:2 : does not exist
[ 1894.605264][T21841] hid-generic 0005:0006:5504.001B: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 1894.774855][T30811] fido_id[30811]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory
[ 1894.963817][T30784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1894.987898][T30784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1895.059578][T30814] 9p: Could not find request transport: unyô‰Tß‚¾ 4¶-¾¦}x
[ 1895.394579][T30828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1895.448933][T30832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6579'.
[ 1895.460648][T30828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1895.646027][T30830] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6575'.
[ 1895.672016][T30832] bridge_slave_1: left allmulticast mode
[ 1895.677580][T21831] usb 4-1: USB disconnect, device number 86
[ 1895.716535][T30832] bridge_slave_1: left promiscuous mode
[ 1895.750219][T30832] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1895.762851][T30832] bridge_slave_0: left allmulticast mode
[ 1895.868102][T30832] bridge_slave_0: left promiscuous mode
[ 1895.880744][T30832] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1896.549350][T30843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6577'.
[ 1898.222848][   T30] audit: type=1800 audit(2000000671.439:3230): pid=30851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.6584" name="/" dev="fuse" ino=9 res=0 errno=0
[ 1900.526415][T30899] FAULT_INJECTION: forcing a failure.
[ 1900.526415][T30899] name (null), interval 1, probability 0, space 0, times 1
[ 1900.539115][T30899] CPU: 1 UID: 0 PID: 30899 Comm: syz.3.6597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1900.539144][T30899] Tainted: [L]=SOFTLOCKUP
[ 1900.539150][T30899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1900.539161][T30899] Call Trace:
[ 1900.539167][T30899]  <TASK>
[ 1900.539174][T30899]  dump_stack_lvl+0x100/0x190
[ 1900.539208][T30899]  should_fail_ex.cold+0x5/0xa
[ 1900.539231][T30899]  null_queue_rq+0x24d/0xfb0
[ 1900.539258][T30899]  null_queue_rqs+0xe9/0x2f0
[ 1900.539279][T30899]  ? __pfx_null_queue_rqs+0x10/0x10
[ 1900.539301][T30899]  ? __pfx___schedule+0x10/0x10
[ 1900.539332][T30899]  __blk_mq_flush_list+0x9a/0xc0
[ 1900.539355][T30899]  blk_mq_dispatch_queue_requests+0x184/0x7c0
[ 1900.539373][T30899]  ? irqentry_exit+0x180/0x670
[ 1900.539394][T30899]  blk_mq_flush_plug_list+0x1f2/0x600
[ 1900.539417][T30899]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 1900.539439][T30899]  ? __blk_flush_plug+0x73/0x4b0
[ 1900.539468][T30899]  __blk_flush_plug+0x2c4/0x4b0
[ 1900.539503][T30899]  ? __pfx___blk_flush_plug+0x10/0x10
[ 1900.539537][T30899]  __submit_bio+0x584/0x6c0
[ 1900.539565][T30899]  ? __pfx___submit_bio+0x10/0x10
[ 1900.539605][T30899]  ? submit_bio_noacct_nocheck+0x562/0xc10
[ 1900.539631][T30899]  submit_bio_noacct_nocheck+0x562/0xc10
[ 1900.539662][T30899]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 1900.539692][T30899]  ? submit_bio_noacct+0xa63/0x2010
[ 1900.539719][T30899]  ? submit_bio_noacct_nocheck+0xc/0xc10
[ 1900.539750][T30899]  submit_bio_noacct+0xd17/0x2010
[ 1900.539783][T30899]  submit_bio_wait+0x110/0x250
[ 1900.539802][T30899]  ? __pfx_submit_bio_wait+0x10/0x10
[ 1900.539826][T30899]  ? ocfs2_merge_rec_left+0x720/0x24a0
[ 1900.539853][T30899]  __blkdev_direct_IO_simple+0x49c/0x890
[ 1900.539877][T30899]  ? __pfx___blkdev_direct_IO_simple+0x10/0x10
[ 1900.539895][T30899]  ? __pfx___schedule+0x10/0x10
[ 1900.539924][T30899]  ? __pfx_submit_bio_wait_endio+0x10/0x10
[ 1900.539947][T30899]  ? irqentry_exit+0x180/0x670
[ 1900.539975][T30899]  ? ktime_get_coarse_real_ts64_mg+0x249/0x300
[ 1900.540003][T30899]  ? ktime_get_coarse_real_ts64_mg+0x254/0x300
[ 1900.540035][T30899]  blkdev_direct_IO+0xc76/0x1fb0
[ 1900.540055][T30899]  ? current_time+0x29f/0x3b0
[ 1900.540077][T30899]  ? __pfx_current_time+0x10/0x10
[ 1900.540108][T30899]  ? __pfx_blkdev_direct_IO+0x10/0x10
[ 1900.540126][T30899]  ? atime_needs_update+0x8b/0x6b0
[ 1900.540152][T30899]  ? touch_atime+0xa5/0x7a0
[ 1900.540174][T30899]  ? filemap_write_and_wait_range.part.0+0xea/0x110
[ 1900.540201][T30899]  blkdev_read_iter+0x225/0x4f0
[ 1900.540224][T30899]  copy_splice_read+0x4ba/0xb90
[ 1900.540248][T30899]  ? __pfx_copy_splice_read+0x10/0x10
[ 1900.540268][T30899]  ? look_up_lock_class+0x64/0x120
[ 1900.540290][T30899]  ? lockdep_init_map_type+0x5c/0x250
[ 1900.540310][T30899]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 1900.540339][T30899]  ? __pfx_filemap_splice_read+0x10/0x10
[ 1900.540363][T30899]  do_splice_read+0x2bd/0x370
[ 1900.540380][T30899]  ? splice_direct_to_actor+0xc3/0xa30
[ 1900.540400][T30899]  splice_direct_to_actor+0x2a1/0xa30
[ 1900.540420][T30899]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1900.540442][T30899]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1900.540459][T30899]  ? kvm_sched_clock_read+0x11/0x20
[ 1900.540483][T30899]  do_splice_direct+0x174/0x240
[ 1900.540502][T30899]  ? __pfx_do_splice_direct+0x10/0x10
[ 1900.540517][T30899]  ? avc_policy_seqno+0x9/0x20
[ 1900.540541][T30899]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1900.540570][T30899]  ? bpf_lsm_file_permission+0x9/0x10
[ 1900.540594][T30899]  ? security_file_permission+0x76/0x210
[ 1900.540617][T30899]  ? rw_verify_area+0xce/0x6d0
[ 1900.540646][T30899]  do_sendfile+0xadc/0xe20
[ 1900.540676][T30899]  ? __pfx_do_sendfile+0x10/0x10
[ 1900.540710][T30899]  __x64_sys_sendfile64+0x1d8/0x220
[ 1900.540729][T30899]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1900.540756][T30899]  do_syscall_64+0x106/0xf80
[ 1900.540773][T30899]  ? clear_bhb_loop+0x40/0x90
[ 1900.540794][T30899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1900.540813][T30899] RIP: 0033:0x7f2cedd9c799
[ 1900.540829][T30899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1900.540845][T30899] RSP: 002b:00007f2ceec5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1900.540863][T30899] RAX: ffffffffffffffda RBX: 00007f2cee016180 RCX: 00007f2cedd9c799
[ 1900.540875][T30899] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[ 1900.540885][T30899] RBP: 00007f2ceec5e090 R08: 0000000000000000 R09: 0000000000000000
[ 1900.540895][T30899] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[ 1900.540905][T30899] R13: 00007f2cee016218 R14: 00007f2cee016180 R15: 00007fff481cabe8
[ 1900.540930][T30899]  </TASK>
[ 1901.146112][T30902] sit1: entered allmulticast mode
[ 1901.233294][T24906] Bluetooth: hci2: command 0x0406 tx timeout
[ 1902.501533][   T30] audit: type=1400 audit(2000000675.452:3231): avc:  denied  { read } for  pid=30913 comm="syz.8.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1902.691252][T21841] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[ 1902.877030][T21841] usb 7-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1902.896471][T21841] usb 7-1: config 0 has an invalid interface number: 21 but max is 0
[ 1902.905798][T21841] usb 7-1: config 0 has no interface number 0
[ 1902.912966][T21841] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1902.923175][T21841] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1902.933493][T21841] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1902.942671][T21841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1902.953902][T21841] usb 7-1: config 0 descriptor??
[ 1903.775883][T21841] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input65
[ 1903.894373][T21841] input: failed to attach handler kbd to device input65, error: -5
[ 1904.259965][   T30] audit: type=1400 audit(2000000677.089:3232): avc:  denied  { read } for  pid=30958 comm="syz.8.6614" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1904.509830][   T30] audit: type=1400 audit(2000000677.332:3233): avc:  denied  { write } for  pid=30961 comm="syz.8.6615" lport=58829 faddr=::ffff:172.30.0.9 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1905.754588][T30990] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1906.032334][T21841] usb 7-1: USB disconnect, device number 27
[ 1906.939618][T31007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6623'.
[ 1906.949141][T31007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6623'.
[ 1906.958966][T31007] netlink: 'syz.5.6623': attribute type 14 has an invalid length.
[ 1906.967880][T31007] netlink: 'syz.5.6623': attribute type 13 has an invalid length.
[ 1908.003375][T28517] null_blk: rq ffff8880277b0480 timed out
[ 1908.009874][T28517] blk_print_req_error: 27 callbacks suppressed
[ 1908.009892][T28517] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1
[ 1908.317332][T31038] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1908.401318][T31042] FAULT_INJECTION: forcing a failure.
[ 1908.401318][T31042] name failslab, interval 1, probability 0, space 0, times 0
[ 1908.414261][T31042] CPU: 1 UID: 0 PID: 31042 Comm: syz.5.6641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1908.414281][T31042] Tainted: [L]=SOFTLOCKUP
[ 1908.414285][T31042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1908.414292][T31042] Call Trace:
[ 1908.414296][T31042]  <TASK>
[ 1908.414301][T31042]  dump_stack_lvl+0x100/0x190
[ 1908.414329][T31042]  should_fail_ex.cold+0x5/0xa
[ 1908.414344][T31042]  ? tomoyo_encode2+0xfb/0x3c0
[ 1908.414357][T31042]  should_failslab+0xc2/0x120
[ 1908.414375][T31042]  __kmalloc_noprof+0xe0/0x850
[ 1908.414394][T31042]  tomoyo_encode2+0xfb/0x3c0
[ 1908.414408][T31042]  tomoyo_encode+0x29/0x50
[ 1908.414421][T31042]  tomoyo_mount_acl+0x14c/0x8b0
[ 1908.414432][T31042]  ? is_bpf_text_address+0x8a/0x1a0
[ 1908.414448][T31042]  ? bpf_ksym_find+0x128/0x1c0
[ 1908.414466][T31042]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1908.414483][T31042]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[ 1908.414494][T31042]  ? kernel_text_address+0x8d/0x100
[ 1908.414507][T31042]  ? unwind_get_return_address+0x59/0xa0
[ 1908.414534][T31042]  ? tomoyo_domain+0xb2/0x150
[ 1908.414548][T31042]  ? tomoyo_profile+0x47/0x60
[ 1908.414564][T31042]  tomoyo_mount_permission+0x214/0x460
[ 1908.414576][T31042]  ? tomoyo_mount_permission+0x1f6/0x460
[ 1908.414589][T31042]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1908.414610][T31042]  security_sb_mount+0xdd/0x270
[ 1908.414630][T31042]  path_mount+0x158/0x23d0
[ 1908.414646][T31042]  ? __pfx_path_mount+0x10/0x10
[ 1908.414658][T31042]  ? lockdep_hardirqs_on+0x78/0x100
[ 1908.414672][T31042]  ? putname+0xb1/0x110
[ 1908.414682][T31042]  ? kmem_cache_free+0x124/0x6a0
[ 1908.414700][T31042]  ? __x64_sys_mount+0x293/0x310
[ 1908.414712][T31042]  __x64_sys_mount+0x293/0x310
[ 1908.414725][T31042]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1908.414743][T31042]  do_syscall_64+0x106/0xf80
[ 1908.414754][T31042]  ? clear_bhb_loop+0x40/0x90
[ 1908.414768][T31042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1908.414780][T31042] RIP: 0033:0x7fbd08d9c799
[ 1908.414790][T31042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1908.414800][T31042] RSP: 002b:00007fbd09c64028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1908.414812][T31042] RAX: ffffffffffffffda RBX: 00007fbd09015fa0 RCX: 00007fbd08d9c799
[ 1908.414819][T31042] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[ 1908.414826][T31042] RBP: 00007fbd09c64090 R08: 0000200000000180 R09: 0000000000000000
[ 1908.414833][T31042] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1908.414839][T31042] R13: 00007fbd09016038 R14: 00007fbd09015fa0 R15: 00007ffe9ab63e18
[ 1908.414854][T31042]  </TASK>
[ 1909.150788][   T30] audit: type=1400 audit(2000000681.672:3234): avc:  denied  { getattr } for  pid=31043 comm="syz.7.6642" lport=46562 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1909.211108][   T30] audit: type=1400 audit(2000000681.719:3235): avc:  denied  { getopt } for  pid=31043 comm="syz.7.6642" lport=46562 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1909.589276][T31059] syzkaller0: entered promiscuous mode
[ 1909.594779][T31059] syzkaller0: entered allmulticast mode
[ 1909.889304][T31061] netlink: 'syz.7.6648': attribute type 2 has an invalid length.
[ 1910.333695][T31078] loop6: detected capacity change from 0 to 2640
[ 1910.343911][T30377] buffer_io_error: 27 callbacks suppressed
[ 1910.343922][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.447586][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.455813][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.464304][   T30] audit: type=1800 audit(2000000682.898:3236): pid=31067 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6649" name="/" dev="fuse" ino=9 res=0 errno=0
[ 1910.484909][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.492754][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.500969][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.509095][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.570437][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.593588][T30377] ldm_validate_partition_table(): Disk read failed.
[ 1910.644366][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.726522][T30377] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1910.798344][T30377] Dev loop6: unable to read RDB block 0
[ 1910.978713][T30377]  loop6: unable to read partition table
[ 1910.994955][T31078] ldm_validate_partition_table(): Disk read failed.
[ 1911.016479][T31078] Dev loop6: unable to read RDB block 0
[ 1911.029315][T31078]  loop6: unable to read partition table
[ 1911.035947][T31078] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1911.223674][T31092] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1911.647035][T31097] fuse: Unknown parameter '0x0000000000000004'
[ 1912.393316][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6659'.
[ 1912.402498][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6659'.
[ 1913.930609][T31127] input: syz1 as /devices/virtual/input/input67
[ 1913.998639][T31127] input: syz0 as /devices/virtual/input/input66
[ 1916.788707][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6686'.
[ 1916.802451][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6686'.
[ 1917.008393][   T30] audit: type=1804 audit(2000000689.015:3237): pid=31183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.6688" name="/newroot/80/file0" dev="tmpfs" ino=436 res=1 errno=0
[ 1918.257974][T31197] Bluetooth: MGMT ver 1.23
[ 1918.603196][T31202] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1920.610959][ T5130] Bluetooth: hci2: unexpected event for opcode 0x2005
[ 1920.896860][T21838] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1920.989975][T31228] rdma_op ffff8880553bc1f0 conn xmit_rdma 0000000000000000
[ 1921.275626][T21838] usb 6-1: Using ep0 maxpacket: 8
[ 1921.509528][T31233] FAULT_INJECTION: forcing a failure.
[ 1921.509528][T31233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1921.523819][T31233] CPU: 0 UID: 0 PID: 31233 Comm: syz.6.6704 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1921.523846][T31233] Tainted: [L]=SOFTLOCKUP
[ 1921.523851][T31233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1921.523857][T31233] Call Trace:
[ 1921.523861][T31233]  <TASK>
[ 1921.523866][T31233]  dump_stack_lvl+0x100/0x190
[ 1921.523888][T31233]  should_fail_ex.cold+0x5/0xa
[ 1921.523902][T31233]  _copy_to_user+0x32/0xd0
[ 1921.523919][T31233]  simple_read_from_buffer+0xcb/0x170
[ 1921.523939][T31233]  proc_fail_nth_read+0x1af/0x230
[ 1921.523954][T31233]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1921.523971][T31233]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1921.523986][T31233]  vfs_read+0x1e4/0xb30
[ 1921.524004][T31233]  ? __pfx_vfs_read+0x10/0x10
[ 1921.524020][T31233]  ? __fget_files+0x215/0x3d0
[ 1921.524034][T31233]  ? __fget_files+0x21f/0x3d0
[ 1921.524048][T31233]  ksys_read+0x12a/0x250
[ 1921.524064][T31233]  ? __pfx_ksys_read+0x10/0x10
[ 1921.524084][T31233]  do_syscall_64+0x106/0xf80
[ 1921.524096][T31233]  ? clear_bhb_loop+0x40/0x90
[ 1921.524109][T31233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1921.524121][T31233] RIP: 0033:0x7f675955cfce
[ 1921.524131][T31233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1921.524141][T31233] RSP: 002b:00007f675a4affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1921.524152][T31233] RAX: ffffffffffffffda RBX: 00007f675a4b06c0 RCX: 00007f675955cfce
[ 1921.524160][T31233] RDX: 000000000000000f RSI: 00007f675a4b00a0 RDI: 0000000000000005
[ 1921.524166][T31233] RBP: 00007f675a4b0090 R08: 0000000000000000 R09: 0000000000000000
[ 1921.524178][T31233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1921.524184][T31233] R13: 00007f6759816128 R14: 00007f6759816090 R15: 00007ffc978bf688
[ 1921.524199][T31233]  </TASK>
[ 1921.816010][T21838] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1921.860577][T21838] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1921.923379][T21838] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1921.935241][T21838] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 20000, setting to 1024
[ 1921.972933][T31239] netlink: 'syz.8.6705': attribute type 1 has an invalid length.
[ 1922.072715][T21838] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1922.146560][T21838] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1922.160943][T21838] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1922.190331][T21838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.557024][T31249] FAULT_INJECTION: forcing a failure.
[ 1922.557024][T31249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1922.575203][T21838] usb 6-1: usb_control_msg returned -32
[ 1922.580810][T21838] usbtmc 6-1:16.0: can't read capabilities
[ 1922.606955][T31249] CPU: 0 UID: 0 PID: 31249 Comm: syz.8.6708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1922.606988][T31249] Tainted: [L]=SOFTLOCKUP
[ 1922.606994][T31249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1922.607004][T31249] Call Trace:
[ 1922.607010][T31249]  <TASK>
[ 1922.607017][T31249]  dump_stack_lvl+0x100/0x190
[ 1922.607046][T31249]  should_fail_ex.cold+0x5/0xa
[ 1922.607067][T31249]  _copy_from_iter+0x1f4/0x1690
[ 1922.607088][T31249]  ? __asan_memset+0x23/0x50
[ 1922.607109][T31249]  ? __pfx__copy_from_iter+0x10/0x10
[ 1922.607125][T31249]  ? __pfx___alloc_skb+0x10/0x10
[ 1922.607149][T31249]  netlink_sendmsg+0x808/0xda0
[ 1922.607164][T31249]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1922.607176][T31249]  ? __might_fault+0xa0/0x140
[ 1922.607196][T31249]  ____sys_sendmsg+0xa54/0xc30
[ 1922.607211][T31249]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1922.607231][T31249]  ___sys_sendmsg+0x190/0x1e0
[ 1922.607247][T31249]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1922.607279][T31249]  __sys_sendmsg+0x170/0x220
[ 1922.607290][T31249]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1922.607309][T31249]  do_syscall_64+0x106/0xf80
[ 1922.607322][T31249]  ? clear_bhb_loop+0x40/0x90
[ 1922.607336][T31249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1922.607348][T31249] RIP: 0033:0x7fbcab19c799
[ 1922.607358][T31249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1922.607369][T31249] RSP: 002b:00007fbcac0b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1922.607380][T31249] RAX: ffffffffffffffda RBX: 00007fbcab416090 RCX: 00007fbcab19c799
[ 1922.607387][T31249] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003
[ 1922.607394][T31249] RBP: 00007fbcac0b9090 R08: 0000000000000000 R09: 0000000000000000
[ 1922.607401][T31249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1922.607407][T31249] R13: 00007fbcab416128 R14: 00007fbcab416090 R15: 00007fff3ed4d918
[ 1922.607422][T31249]  </TASK>
[ 1923.049423][T31251] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0
[ 1923.079031][  T794] usb 6-1: USB disconnect, device number 61
[ 1924.964635][T31273] netlink: 'syz.5.6715': attribute type 1 has an invalid length.
[ 1925.297195][T31273] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1925.816485][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[ 1925.833733][T31295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6722'.
[ 1925.846632][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[ 1926.063081][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[ 1926.089281][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[ 1926.141007][T31304] 9p: Could not find request transport: unyô‰Tß‚¾ 4¶-¾¦}x
[ 1926.525119][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[ 1926.541912][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[ 1927.076499][T31331] trusted_key: encrypted_key: insufficient parameters specified
[ 1927.095200][   T30] audit: type=1400 audit(2000000698.435:3238): avc:  denied  { read } for  pid=31328 comm="syz.5.6731" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1927.137807][   T30] audit: type=1400 audit(2000000698.435:3239): avc:  denied  { open } for  pid=31328 comm="syz.5.6731" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1927.315200][T31334] FAULT_INJECTION: forcing a failure.
[ 1927.315200][T31334] name failslab, interval 1, probability 0, space 0, times 0
[ 1927.471623][T31334] CPU: 1 UID: 0 PID: 31334 Comm: syz.6.6733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1927.471656][T31334] Tainted: [L]=SOFTLOCKUP
[ 1927.471664][T31334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1927.471675][T31334] Call Trace:
[ 1927.471682][T31334]  <TASK>
[ 1927.471690][T31334]  dump_stack_lvl+0x100/0x190
[ 1927.471723][T31334]  should_fail_ex.cold+0x5/0xa
[ 1927.471747][T31334]  should_failslab+0xc2/0x120
[ 1927.471775][T31334]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1927.471810][T31334]  ? zswap_store+0xc42/0x29d0
[ 1927.471836][T31334]  zswap_store+0xc42/0x29d0
[ 1927.471855][T31334]  ? smp_call_function_many_cond+0x1201/0x1500
[ 1927.471887][T31334]  ? __pfx_should_flush_tlb+0x10/0x10
[ 1927.471919][T31334]  ? __pfx_zswap_store+0x10/0x10
[ 1927.471938][T31334]  ? do_raw_spin_lock+0x128/0x260
[ 1927.471958][T31334]  ? find_held_lock+0x2b/0x80
[ 1927.471981][T31334]  ? folio_free_swap+0x3d9/0xb50
[ 1927.472007][T31334]  ? folio_free_swap+0x3d9/0xb50
[ 1927.472035][T31334]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1927.472054][T31334]  ? _raw_spin_unlock+0x28/0x50
[ 1927.472080][T31334]  ? folio_free_swap+0x39/0xb50
[ 1927.472112][T31334]  swap_writeout+0x49d/0x12b0
[ 1927.472141][T31334]  shrink_folio_list+0x5c4a/0x6000
[ 1927.472178][T31334]  ? __lock_acquire+0x4a5/0x2630
[ 1927.472208][T31334]  ? __pfx_shrink_folio_list+0x10/0x10
[ 1927.472231][T31334]  ? __lock_acquire+0x440/0x2630
[ 1927.472271][T31334]  ? lock_acquire+0x1cf/0x380
[ 1927.472299][T31334]  ? find_held_lock+0x2b/0x80
[ 1927.472326][T31334]  ? mark_held_locks+0x40/0x70
[ 1927.472378][T31334]  ? __lock_acquire+0x4a5/0x2630
[ 1927.472411][T31334]  reclaim_folio_list+0xdc/0x600
[ 1927.472437][T31334]  ? __pfx_reclaim_folio_list+0x10/0x10
[ 1927.472471][T31334]  ? lru_gen_update_size+0x431/0xe40
[ 1927.472500][T31334]  ? lru_gen_del_folio+0x382/0x5f0
[ 1927.472524][T31334]  reclaim_pages+0x428/0x5e0
[ 1927.472550][T31334]  ? __pfx_reclaim_pages+0x10/0x10
[ 1927.472572][T31334]  ? find_held_lock+0x2b/0x80
[ 1927.472595][T31334]  ? madvise_cold_or_pageout_pte_range+0xb49/0x2720
[ 1927.472622][T31334]  madvise_cold_or_pageout_pte_range+0x1635/0x2720
[ 1927.472655][T31334]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[ 1927.472683][T31334]  ? css_rstat_updated+0x1ce/0x5a0
[ 1927.472711][T31334]  ? stack_trace_save+0x8e/0xc0
[ 1927.472739][T31334]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[ 1927.472761][T31334]  walk_pgd_range+0xc04/0x1eb0
[ 1927.472813][T31334]  ? __pfx_walk_pgd_range+0x10/0x10
[ 1927.472840][T31334]  ? folios_put_refs+0x66d/0x840
[ 1927.472869][T31334]  __walk_page_range+0x163/0x820
[ 1927.472908][T31334]  walk_page_range_vma_unsafe+0x209/0x8f0
[ 1927.472939][T31334]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[ 1927.472971][T31334]  ? find_held_lock+0x2b/0x80
[ 1927.472993][T31334]  ? mlock_drain_local+0x254/0x4e0
[ 1927.473015][T31334]  ? mlock_drain_local+0x254/0x4e0
[ 1927.473044][T31334]  walk_page_range_vma+0x63/0x90
[ 1927.473072][T31334]  madvise_pageout+0x259/0x540
[ 1927.473103][T31334]  ? __pfx_madvise_pageout+0x10/0x10
[ 1927.473144][T31334]  ? is_bpf_text_address+0x8a/0x1a0
[ 1927.473177][T31334]  madvise_vma_behavior+0x3e6/0x3050
[ 1927.473201][T31334]  ? __pfx_madvise_vma_behavior+0x10/0x10
[ 1927.473221][T31334]  ? mas_prev_setup.constprop.0+0xb6/0x9c0
[ 1927.473245][T31334]  ? mas_prev+0x9b/0xf0
[ 1927.473265][T31334]  ? __pfx_mas_prev+0x10/0x10
[ 1927.473293][T31334]  ? find_vma_prev+0xd8/0x150
[ 1927.473310][T31334]  ? _kstrtoull+0x13c/0x1f0
[ 1927.473328][T31334]  ? __pfx_find_vma_prev+0x10/0x10
[ 1927.473362][T31334]  madvise_walk_vmas+0x2fe/0xa90
[ 1927.473387][T31334]  ? __pfx_madvise_walk_vmas+0x10/0x10
[ 1927.473415][T31334]  madvise_do_behavior+0x1ea/0x510
[ 1927.473437][T31334]  ? __pfx_madvise_do_behavior+0x10/0x10
[ 1927.473457][T31334]  ? down_read+0x13b/0x460
[ 1927.473491][T31334]  do_madvise+0x195/0x240
[ 1927.473510][T31334]  ? __pfx_do_madvise+0x10/0x10
[ 1927.473528][T31334]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1927.473568][T31334]  ? ksys_write+0x1ac/0x250
[ 1927.473596][T31334]  ? __pfx_ksys_write+0x10/0x10
[ 1927.473628][T31334]  __x64_sys_madvise+0xa9/0x110
[ 1927.473647][T31334]  ? lockdep_hardirqs_on+0x78/0x100
[ 1927.473667][T31334]  do_syscall_64+0x106/0xf80
[ 1927.473685][T31334]  ? clear_bhb_loop+0x40/0x90
[ 1927.473709][T31334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1927.473729][T31334] RIP: 0033:0x7f675959c799
[ 1927.473745][T31334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1927.473764][T31334] RSP: 002b:00007f675a4d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 1927.473784][T31334] RAX: ffffffffffffffda RBX: 00007f6759815fa0 RCX: 00007f675959c799
[ 1927.473802][T31334] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[ 1927.473814][T31334] RBP: 00007f675a4d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1927.473825][T31334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1927.473837][T31334] R13: 00007f6759816038 R14: 00007f6759815fa0 R15: 00007ffc978bf688
[ 1927.473864][T31334]  </TASK>
[ 1928.720522][T31356] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6736'.
[ 1928.773397][   T30] audit: type=1400 audit(2000000699.987:3240): avc:  denied  { listen } for  pid=31349 comm="syz.7.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1928.968015][T21831] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1929.153051][T21831] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1929.188807][T21831] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1929.205940][T21831] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40
[ 1929.215992][T31364] loop6: detected capacity change from 0 to 524288000
[ 1929.257247][T21831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1929.304198][T21831] usb 4-1: Product: syz
[ 1929.318932][T21831] usb 4-1: Manufacturer: syz
[ 1929.344224][T21831] usb 4-1: SerialNumber: syz
[ 1929.829599][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6737'.
[ 1930.162764][T31372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6743'.
[ 1930.253657][T31372] netlink: 'syz.6.6743': attribute type 12 has an invalid length.
[ 1930.284434][T21831] usbhid 4-1:1.0: can't add hid device: -71
[ 1930.303213][T21831] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 1930.336236][T31372] netlink: 'syz.6.6743': attribute type 7 has an invalid length.
[ 1930.424056][T21831] usb 4-1: USB disconnect, device number 87
[ 1931.067235][T31385] xfrm0 speed is unknown, defaulting to 1000
[ 1931.108945][T31385] lo speed is unknown, defaulting to 1000
[ 1933.446239][T31413] netlink: 'syz.8.6753': attribute type 9 has an invalid length.
[ 1933.462436][T31411] bridge_slave_0: left allmulticast mode
[ 1933.468124][T31411] bridge_slave_0: left promiscuous mode
[ 1933.485590][T31413] __nla_validate_parse: 2 callbacks suppressed
[ 1933.485606][T31413] netlink: 160168 bytes leftover after parsing attributes in process `syz.8.6753'.
[ 1933.505304][T31411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1933.559714][T31411] bridge_slave_1: left allmulticast mode
[ 1933.568253][T31411] bridge_slave_1: left promiscuous mode
[ 1933.574192][T31411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1933.583531][T31416] binder: 31414:31416 ioctl 400c620e 200000000100 returned -22
[ 1933.587580][T31420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6754'.
[ 1933.613716][T31411] bond0: (slave bond_slave_0): Releasing backup interface
[ 1933.624537][T31411] bond0: (slave bond_slave_1): Releasing backup interface
[ 1933.655690][T31411] team0: Port device team_slave_0 removed
[ 1933.695776][T31411] team0: Port device team_slave_1 removed
[ 1933.702622][T31411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1933.710859][T31411] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1933.720886][T31411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1933.729647][T31411] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1933.743854][T31411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1933.771411][T31418] team0: No ports can be present during mode change
[ 1933.813150][T31420] team0 (unregistering): Port device batadv1 removed
[ 1933.859312][T31425] FAULT_INJECTION: forcing a failure.
[ 1933.859312][T31425] name failslab, interval 1, probability 0, space 0, times 0
[ 1933.875130][T31425] CPU: 1 UID: 0 PID: 31425 Comm: syz.5.6756 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1933.875160][T31425] Tainted: [L]=SOFTLOCKUP
[ 1933.875166][T31425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1933.875177][T31425] Call Trace:
[ 1933.875183][T31425]  <TASK>
[ 1933.875190][T31425]  dump_stack_lvl+0x100/0x190
[ 1933.875224][T31425]  should_fail_ex.cold+0x5/0xa
[ 1933.875246][T31425]  should_failslab+0xc2/0x120
[ 1933.875274][T31425]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1933.875298][T31425]  ? skb_clone+0x190/0x400
[ 1933.875320][T31425]  skb_clone+0x190/0x400
[ 1933.875338][T31425]  netlink_deliver_tap+0xaed/0xcc0
[ 1933.875363][T31425]  netlink_unicast+0x70c/0x870
[ 1933.875387][T31425]  ? __pfx_netlink_unicast+0x10/0x10
[ 1933.875405][T31425]  ? __alloc_skb+0x5b7/0x710
[ 1933.875434][T31425]  ? __pfx_nf_tables_abort+0x10/0x10
[ 1933.875458][T31425]  netlink_ack+0x655/0xb80
[ 1933.875485][T31425]  nfnetlink_rcv_batch+0x1d5c/0x2880
[ 1933.875520][T31425]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1933.875541][T31425]  ? find_held_lock+0x2b/0x80
[ 1933.875574][T31425]  ? avc_has_perm_noaudit+0x145/0x3b0
[ 1933.875616][T31425]  ? __nla_parse+0x40/0x60
[ 1933.875635][T31425]  nfnetlink_rcv+0x3bd/0x440
[ 1933.875656][T31425]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1933.875679][T31425]  netlink_unicast+0x5aa/0x870
[ 1933.875698][T31425]  ? __pfx_netlink_unicast+0x10/0x10
[ 1933.875723][T31425]  netlink_sendmsg+0x8b0/0xda0
[ 1933.875743][T31425]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1933.875759][T31425]  ? __might_fault+0xa0/0x140
[ 1933.875785][T31425]  ____sys_sendmsg+0xa54/0xc30
[ 1933.875806][T31425]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1933.875835][T31425]  ___sys_sendmsg+0x190/0x1e0
[ 1933.875855][T31425]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1933.875901][T31425]  __sys_sendmsg+0x170/0x220
[ 1933.875916][T31425]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1933.875943][T31425]  do_syscall_64+0x106/0xf80
[ 1933.875958][T31425]  ? clear_bhb_loop+0x40/0x90
[ 1933.875983][T31425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1933.875998][T31425] RIP: 0033:0x7fbd08d9c799
[ 1933.876012][T31425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1933.876027][T31425] RSP: 002b:00007fbd09c64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1933.876043][T31425] RAX: ffffffffffffffda RBX: 00007fbd09015fa0 RCX: 00007fbd08d9c799
[ 1933.876053][T31425] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1933.876063][T31425] RBP: 00007fbd09c64090 R08: 0000000000000000 R09: 0000000000000000
[ 1933.876073][T31425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1933.876082][T31425] R13: 00007fbd09016038 R14: 00007fbd09015fa0 R15: 00007ffe9ab63e18
[ 1933.876105][T31425]  </TASK>
[ 1934.358984][T31436] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6757'.
[ 1934.368870][T31432] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6759'.
[ 1934.648937][   T30] audit: type=1400 audit(2000000705.525:3241): avc:  denied  { getopt } for  pid=31446 comm="syz.6.6762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1934.843596][T31454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6765'.
[ 1936.349113][T31468] input: syz1 as /devices/virtual/input/input68
[ 1936.405358][T31468] netlink: 'syz.3.6767': attribute type 10 has an invalid length.
[ 1936.429890][T31474] netlink: 'syz.6.6772': attribute type 1 has an invalid length.
[ 1936.453457][T31468] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1936.487453][T31468] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1936.507588][T31468] bond0: (slave lo): Enslaving as an active interface with an up link
[ 1936.541075][T31474] bond5: entered promiscuous mode
[ 1936.549550][T31474] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1936.575955][T31480] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1936.632247][T31477] bond5: (slave bridge1): making interface the new active one
[ 1936.665647][T31477] bridge1: entered promiscuous mode
[ 1936.682738][T31477] bond5: (slave bridge1): Enslaving as an active interface with an up link
[ 1937.748260][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1937.754581][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1938.345114][T31503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1938.381451][T31503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=31503 comm=syz.6.6782
[ 1938.394678][   T30] audit: type=1400 audit(2000000709.014:3242): avc:  denied  { ioctl } for  pid=31498 comm="syz.6.6782" path="socket:[126632]" dev="sockfs" ino=126632 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1938.399029][T31505] netlink: 'syz.3.6783': attribute type 4 has an invalid length.
[ 1940.858674][T31523] SET target dimension over the limit!
[ 1941.092887][T31519] binfmt_misc: register: failed to install interpreter file ./file0
[ 1941.337036][  T794] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1942.903200][T25320] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1943.007278][T25320] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1943.018011][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1943.046959][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1943.078862][  T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1943.113431][  T794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1943.132181][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1943.154274][  T794] usb 4-1: config 0 descriptor??
[ 1943.540734][T31552] xt_hashlimit: size too large, truncated to 1048576
[ 1943.918642][  T794] usbhid 4-1:0.0: can't add hid device: -71
[ 1943.934898][  T794] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1943.999492][  T794] usb 4-1: USB disconnect, device number 88
[ 1944.311022][T31571] input: syz0 as /devices/virtual/input/input69
[ 1944.570138][T31584] IPv6: sit1: Disabled Multicast RS
[ 1945.090920][ T5130] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1945.095424][T24906] Bluetooth: hci0: command 0x1003 tx timeout
[ 1945.722101][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6808'.
[ 1945.758639][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6808'.
[ 1947.398821][T31637] syzkaller0: entered promiscuous mode
[ 1947.462693][T31637] syzkaller0: entered allmulticast mode
[ 1948.556127][T31652] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6821'.
[ 1949.861978][T31654] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6823'.
[ 1951.064620][   T30] audit: type=1400 audit(2000000720.332:3243): avc:  denied  { setopt } for  pid=31671 comm="syz.5.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1953.724731][T31700] syzkaller0: entered promiscuous mode
[ 1953.755401][T31700] syzkaller0: entered allmulticast mode
[ 1954.700539][T31710] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1955.117670][T31717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1955.160726][   T30] audit: type=1400 audit(2000000724.682:3244): avc:  denied  { setopt } for  pid=31716 comm="syz.6.6843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1957.736758][T31738] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1960.891760][T31759] binder_alloc: 31758: binder_alloc_buf, no vma
[ 1962.654097][T31782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[ 1962.660652][T31782] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1962.721737][T31782] vhci_hcd vhci_hcd.0: Device attached
[ 1963.044477][T31793] netlink: 'syz.8.6862': attribute type 10 has an invalid length.
[ 1963.055185][T31793] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1963.067340][T31793] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1963.107821][T31797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6865'.
[ 1963.121829][T31783] vhci_hcd: connection closed
[ 1963.122406][T14451] vhci_hcd vhci_hcd.3: stop threads
[ 1963.127892][T31797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6865'.
[ 1963.133269][T14451] vhci_hcd vhci_hcd.3: release socket
[ 1963.141972][T21838] usb 40-1: SetAddress Request (6) to port 0
[ 1963.154730][T14451] vhci_hcd vhci_hcd.3: disconnect device
[ 1963.155211][T21838] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 1963.171862][T31791] xfrm0 speed is unknown, defaulting to 1000
[ 1963.179267][T31791] lo speed is unknown, defaulting to 1000
[ 1963.220731][T21838] usb 40-1: enqueue for inactive port 0
[ 1963.778501][T21838] usb usb40-port1: attempt power cycle
[ 1964.699622][T21838] usb usb40-port1: unable to enumerate USB device
[ 1964.760383][T21841] usb 6-1: new low-speed USB device number 62 using dummy_hcd
[ 1964.906120][T21841] usb 6-1: device descriptor read/64, error -71
[ 1965.244782][T31833] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1965.256328][T21841] usb 6-1: new low-speed USB device number 63 using dummy_hcd
[ 1965.412281][T21841] usb 6-1: device descriptor read/64, error -71
[ 1965.534341][T21841] usb usb6-port1: attempt power cycle
[ 1965.777969][T31842] fuse: Unknown parameter '000000000000000000050x0000000000000005'
[ 1965.916274][T21841] usb 6-1: new low-speed USB device number 64 using dummy_hcd
[ 1965.945193][T31844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6879'.
[ 1965.991831][T21841] usb 6-1: device descriptor read/8, error -71
[ 1966.267754][T21841] usb 6-1: new low-speed USB device number 65 using dummy_hcd
[ 1966.450323][T21841] usb 6-1: device descriptor read/8, error -71
[ 1966.591274][T21841] usb usb6-port1: unable to enumerate USB device
[ 1966.636658][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6884'.
[ 1966.670950][T31858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6885'.
[ 1966.702056][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6884'.
[ 1967.099782][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6884'.
[ 1967.119769][T31869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6888'.
[ 1967.138349][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6884'.
[ 1967.236032][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6884'.
[ 1967.498530][   T30] audit: type=1400 audit(2000000736.253:3245): avc:  denied  { read } for  pid=31878 comm="syz.8.6893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1967.694725][T30724] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1967.960748][T30724] usb 4-1: Using ep0 maxpacket: 16
[ 1967.981922][T30724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1967.999429][T30724] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[ 1969.030123][T30724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1969.039719][T30724] usb 4-1: config 0 descriptor??
[ 1969.046773][T30724] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1971.009936][T21841] usb 4-1: USB disconnect, device number 89
[ 1971.324708][T19136] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1971.556457][T19136] usb 7-1: Using ep0 maxpacket: 16
[ 1971.569748][T19136] usb 7-1: config index 0 descriptor too short (expected 67, got 36)
[ 1971.623695][T21841] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1971.719916][T19136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1971.760321][T19136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1971.795227][T19136] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 1971.849339][T19136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1971.879800][T19136] usb 7-1: config 0 descriptor??
[ 1971.891574][T21841] usb 4-1: Using ep0 maxpacket: 32
[ 1971.898396][T21841] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 1971.907185][T21841] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1971.944277][T21841] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1971.981602][T21841] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1972.002991][T21841] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1972.012772][T31926] __nla_validate_parse: 1 callbacks suppressed
[ 1972.012788][T31926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6907'.
[ 1972.023789][T21841] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1972.040937][T21841] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1972.049521][T21841] usb 4-1: Product: syz
[ 1972.062824][T21841] usb 4-1: Manufacturer: syz
[ 1972.067577][T21841] usb 4-1: SerialNumber: syz
[ 1972.084633][T31926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6907'.
[ 1972.086209][T21841] usb 4-1: config 0 descriptor??
[ 1972.210319][T21841] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1972.221630][T21841] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1972.792091][T31907] netlink: 'syz.6.6899': attribute type 1 has an invalid length.
[ 1972.800130][T31907] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6899'.
[ 1972.848855][   T30] audit: type=1400 audit(2000000741.248:3246): avc:  denied  { setopt } for  pid=31906 comm="syz.6.6899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1972.854852][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1972.967569][T31914] netlink: 'syz.3.6901': attribute type 10 has an invalid length.
[ 1973.044960][T31934] netlink: 'syz.3.6901': attribute type 10 has an invalid length.
[ 1973.071741][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.090066][T31934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6901'.
[ 1973.105267][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.171302][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.179672][T31934] batadv0: entered promiscuous mode
[ 1973.192498][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.215654][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.226751][T31934] batadv0: entered allmulticast mode
[ 1973.232573][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.248128][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.248891][T31934] bridge0: port 1(batadv0) entered blocking state
[ 1973.265059][T31934] bridge0: port 1(batadv0) entered disabled state
[ 1973.280540][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.319119][T19136] apple 0003:05AC:0247.001C: unknown main item tag 0x0
[ 1973.336381][T31933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6908'.
[ 1973.368865][T14431] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1973.379046][T14431] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1973.404840][T19136] apple 0003:05AC:0247.001C: hidraw0: USB HID v0.00 Device [HID 05ac:0247] on usb-dummy_hcd.6-1/input0
[ 1973.473390][T19136] usb 7-1: USB disconnect, device number 28
[ 1973.543412][T31943] fido_id[31943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1974.383304][T31957] netlink: 182184 bytes leftover after parsing attributes in process `syz.6.6912'.
[ 1974.586078][T19136] usb 4-1: USB disconnect, device number 90
[ 1974.593382][T19136] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 1975.322551][T19136] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1975.875697][T31972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6918'.
[ 1976.381227][T19136] usb 4-1: device descriptor read/64, error -71
[ 1976.658801][T19136] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1976.883483][T19136] usb 4-1: device descriptor read/64, error -71
[ 1977.002208][T19136] usb usb4-port1: attempt power cycle
[ 1977.390286][T19136] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1977.514905][T19136] usb 4-1: device descriptor read/8, error -71
[ 1977.898915][T19136] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1977.954172][T19136] usb 4-1: device descriptor read/8, error -71
[ 1977.987903][T31995] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6925'.
[ 1978.563322][T19136] usb usb4-port1: unable to enumerate USB device
[ 1978.646498][T31999] tmpfs: Bad value for 'mpol'
[ 1979.029726][   T30] audit: type=1400 audit(2000000746.673:3247): avc:  denied  { mounton } for  pid=31993 comm="syz.7.6922" path="/syzcgroup/unified/syz7" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[ 1979.505959][T32004] netlink: 'syz.7.6927': attribute type 1 has an invalid length.
[ 1979.598853][T32004] bond0: entered promiscuous mode
[ 1979.610919][   T30] audit: type=1400 audit(2000000747.581:3248): avc:  denied  { append } for  pid=32010 comm="syz.5.6929" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1979.653604][T32004] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1979.723742][   T30] audit: type=1400 audit(2000000747.683:3249): avc:  denied  { read } for  pid=32010 comm="syz.5.6929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1980.160592][T32009] bond0: (slave bridge0): making interface the new active one
[ 1980.174762][T32018] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6931'.
[ 1980.187447][T32009] bridge0: entered promiscuous mode
[ 1980.218455][T32009] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1981.151427][T32038] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1981.672696][   T30] audit: type=1400 audit(2000000749.489:3250): avc:  denied  { module_load } for  pid=32023 comm="syz.6.6935" path="/517/bus" dev="tmpfs" ino=2731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 1981.760665][T32033] [U] 
[ 1982.474639][ T5130] Bluetooth: hci6: command tx timeout
[ 1982.479469][T32064] netlink: 'syz.7.6943': attribute type 4 has an invalid length.
[ 1982.487948][T32064] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6943'.
[ 1982.543275][T32063] Bluetooth: MGMT ver 1.23
[ 1983.000432][T32069] xfrm0 speed is unknown, defaulting to 1000
[ 1983.012937][T32069] lo speed is unknown, defaulting to 1000
[ 1984.120146][T32076] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6945'.
[ 1984.343070][   T29] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1984.666217][   T29] usb 6-1: device descriptor read/64, error -71
[ 1984.781532][T32088] SET target dimension over the limit!
[ 1984.801941][T32088] binfmt_misc: register: failed to install interpreter file ./file0
[ 1985.121100][   T29] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1985.286124][   T29] usb 6-1: device descriptor read/64, error -71
[ 1985.386868][T32105] /dev/nullb0: Can't open blockdev
[ 1985.415524][   T29] usb usb6-port1: attempt power cycle
[ 1985.858843][   T30] audit: type=1326 audit(2000000753.240:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.034563][   T29] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1986.217088][   T29] usb 6-1: device descriptor read/8, error -71
[ 1986.226347][   T30] audit: type=1326 audit(2000000753.240:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.265481][   T30] audit: type=1326 audit(2000000753.249:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.369889][   T30] audit: type=1326 audit(2000000753.249:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.407033][   T30] audit: type=1326 audit(2000000753.249:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.421348][T32119] netlink: 'syz.6.6957': attribute type 10 has an invalid length.
[ 1986.431452][   T30] audit: type=1326 audit(2000000753.249:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.470136][   T30] audit: type=1326 audit(2000000753.249:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.483496][T32119] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6957'.
[ 1986.493929][   T30] audit: type=1326 audit(2000000753.249:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.535053][   T29] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1986.556640][   T30] audit: type=1326 audit(2000000753.249:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.600173][   T29] usb 6-1: device descriptor read/8, error -71
[ 1986.621323][   T30] audit: type=1326 audit(2000000753.249:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32107 comm="syz.6.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675959c799 code=0x7ffc0000
[ 1986.643511][T32120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6957'.
[ 1986.718936][   T29] usb usb6-port1: unable to enumerate USB device
[ 1988.597058][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6963'.
[ 1988.612674][T32149] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6963'.
[ 1988.642303][   T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1989.059615][T32156] netlink: 'syz.6.6967': attribute type 11 has an invalid length.
[ 1989.359274][T19136] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1989.532748][T19136] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1989.545552][T19136] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1989.610231][T19136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1989.632283][T19136] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1989.658101][T19136] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1989.668848][T19136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1989.701943][T19136] usb 7-1: Product: syz
[ 1989.706131][T19136] usb 7-1: Manufacturer: syz
[ 1989.710712][T19136] usb 7-1: SerialNumber: syz
[ 1989.737710][T19136] usb 7-1: config 0 descriptor??
[ 1989.767153][T19136] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected
[ 1989.788616][T19136] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1989.811673][T19136] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 1991.999156][T32186] netlink: 280 bytes leftover after parsing attributes in process `syz.8.6975'.
[ 1992.057358][T21841] usb 7-1: USB disconnect, device number 29
[ 1992.079800][T32186] netlink: 280 bytes leftover after parsing attributes in process `syz.8.6975'.
[ 1992.112608][T21841] garmin_gps 7-1:0.0: device disconnected
[ 1994.244862][T21841] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[ 1994.405217][T21841] usb 6-1: Invalid ep0 maxpacket: 32
[ 1994.544208][T21841] usb 6-1: new low-speed USB device number 71 using dummy_hcd
[ 1994.662571][T32176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1994.726115][T21841] usb 6-1: Invalid ep0 maxpacket: 32
[ 1994.756530][T21841] usb usb6-port1: attempt power cycle
[ 1994.865089][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6985'.
[ 1994.947480][T32216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6984'.
[ 1995.151964][T21841] usb 6-1: new low-speed USB device number 72 using dummy_hcd
[ 1995.178640][T21841] usb 6-1: Invalid ep0 maxpacket: 32
[ 1995.677389][T21841] usb 6-1: new low-speed USB device number 73 using dummy_hcd
[ 1995.700906][T21841] usb 6-1: Invalid ep0 maxpacket: 32
[ 1995.712317][T21841] usb usb6-port1: unable to enumerate USB device
[ 1995.829069][T32228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7960 sclass=netlink_route_socket pid=32228 comm=syz.7.6988
[ 1996.561627][T32238] pimreg: entered allmulticast mode
[ 1996.568377][T32238] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1996.895570][T32250] fuse: Unknown parameter '0x0000000000000004'
[ 1997.294967][T32247] xfrm0 speed is unknown, defaulting to 1000
[ 1997.332306][T32247] lo speed is unknown, defaulting to 1000
[ 1999.160615][T32279] /dev/nullb0: Can't open blockdev
[ 2002.112452][T32305] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 2002.885937][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2003.072197][T32318] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7016'.
[ 2003.134507][   T30] kauditd_printk_skb: 32 callbacks suppressed
[ 2003.134524][   T30] audit: type=1400 audit(2000000769.581:3293): avc:  denied  { append } for  pid=32317 comm="syz.7.7016" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 2003.197436][   T30] audit: type=1400 audit(2000000769.581:3294): avc:  denied  { map } for  pid=32317 comm="syz.7.7016" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 2003.300034][   T30] audit: type=1326 audit(2000000769.619:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2003.371618][   T30] audit: type=1326 audit(2000000769.619:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2003.423654][   T30] audit: type=1326 audit(2000000769.619:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2003.492276][   T30] audit: type=1326 audit(2000000769.619:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2003.564620][   T30] audit: type=1326 audit(2000000769.619:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2004.133114][   T30] audit: type=1326 audit(2000000769.619:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2004.195409][   T30] audit: type=1326 audit(2000000769.619:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2004.239205][   T30] audit: type=1326 audit(2000000769.619:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32320 comm="syz.5.7017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fbd08d9c799 code=0x7ffc0000
[ 2005.570270][T32355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7026'.
[ 2005.598587][T32355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7026'.
[ 2005.619792][T32355] netlink: 'syz.6.7026': attribute type 14 has an invalid length.
[ 2005.662426][T19136] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 2005.908495][T19136] usb 4-1: Using ep0 maxpacket: 32
[ 2005.921254][T19136] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 2005.951118][T19136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2006.012249][T19136] usb 4-1: config 0 descriptor??
[ 2006.406344][T19136] as10x_usb: device has been detected
[ 2006.428788][T19136] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 2006.479983][T19136] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 2006.539051][T19136] as10x_usb: error during firmware upload part1
[ 2006.545949][T19136] Registered device nBox DVB-T Dongle
[ 2006.552418][T19136] usb 4-1: USB disconnect, device number 95
[ 2006.608058][T19136] Unregistered device nBox DVB-T Dongle
[ 2006.611091][T19136] as10x_usb: device has been disconnected
[ 2006.790899][T32366] 0: reclassify loop, rule prio 0, protocol 800
[ 2008.605467][T32379] syzkaller0: left allmulticast mode
[ 2008.620133][T32379] geneve2: left allmulticast mode
[ 2008.669386][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7036'.
[ 2012.440448][T32448] ip6erspan0: entered promiscuous mode
[ 2012.460162][T32448] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7051'.
[ 2012.469833][T32448] 0·: renamed from hsr0
[ 2012.855959][T32448] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2012.866508][T32448] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2012.876731][T32448] 0·: entered allmulticast mode
[ 2012.881587][T32448] hsr_slave_0: entered allmulticast mode
[ 2012.887202][T32448] hsr_slave_1: entered allmulticast mode
[ 2012.894124][T32448] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[ 2012.989881][T32449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7052'.
[ 2016.107250][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 2016.107271][   T30] audit: type=1800 audit(2000000780.937:3361): pid=32486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7061" name="/" dev="fuse" ino=9 res=0 errno=0
[ 2018.131170][   T30] audit: type=1800 audit(2000000783.388:3362): pid=32495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.7062" name="/" dev="fuse" ino=9 res=0 errno=0
[ 2022.337696][ T5130] Bluetooth: hci3: unexpected event for opcode 0x080c
[ 2022.363054][   T30] audit: type=1400 audit(2000000787.569:3363): avc:  denied  { ioctl } for  pid=32523 comm="syz.6.7073" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 2025.089936][T32549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7078'.
[ 2027.941716][T24906] Bluetooth: hci6: command 0x0406 tx timeout
[ 2029.431931][T32564] netlink: 256 bytes leftover after parsing attributes in process `syz.8.7084'.
[ 2029.608593][T32572] syzkaller1: entered promiscuous mode
[ 2029.615577][T32572] syzkaller1: entered allmulticast mode
[ 2029.624459][   T30] audit: type=1400 audit(2000000794.360:3364): avc:  denied  { ioctl } for  pid=32571 comm="syz.5.7088" path="socket:[131471]" dev="sockfs" ino=131471 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2029.652378][   T30] audit: type=1400 audit(2000000794.379:3365): avc:  denied  { nlmsg_read } for  pid=32571 comm="syz.5.7088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2029.742450][   T30] audit: type=1400 audit(2000000794.472:3366): avc:  denied  { listen } for  pid=32567 comm="syz.3.7086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2029.776393][   T30] audit: type=1400 audit(2000000794.491:3367): avc:  denied  { accept } for  pid=32567 comm="syz.3.7086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2029.913097][T32584] xt_hashlimit: size too large, truncated to 1048576
[ 2029.953937][T32587] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7091'.
[ 2031.192105][T32604] macvlan2: entered promiscuous mode
[ 2031.225089][T32604] macvlan3: entered promiscuous mode
[ 2035.057271][T32627] Cannot find add_set index 0 as target
[ 2035.133065][T32627] binfmt_misc: register: failed to install interpreter file ./file0
[ 2035.225839][T32630] xt_hashlimit: size too large, truncated to 1048576
[ 2035.717574][T32656] netlink: 'syz.3.7111': attribute type 1 has an invalid length.
[ 2035.757633][T32656] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2035.770387][T32656] macvlan3: entered promiscuous mode
[ 2035.775689][T32656] macvlan3: entered allmulticast mode
[ 2035.783208][T32656] bond2: (slave macvlan3): Opening slave failed
[ 2035.927561][   T29] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 2036.142226][   T29] usb 6-1: Using ep0 maxpacket: 8
[ 2036.152929][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2036.167607][   T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2036.219593][   T29] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[ 2036.219623][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2036.228511][   T29] usb 6-1: config 0 descriptor??
[ 2036.995398][T32681] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[ 2037.107556][T32679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2037.413624][   T29] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 2037.456146][T32691] netlink: 280 bytes leftover after parsing attributes in process `syz.8.7123'.
[ 2037.467333][T32691] netlink: 280 bytes leftover after parsing attributes in process `syz.8.7123'.
[ 2037.581222][T32693] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7124'.
[ 2037.595258][   T29] usb 4-1: Using ep0 maxpacket: 16
[ 2037.608566][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2037.626800][   T29] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 2037.638705][   T29] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[ 2037.658345][   T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=89.94
[ 2037.673625][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2037.675793][T32694] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7124'.
[ 2037.702931][   T29] usb 4-1: Product: syz
[ 2037.707207][   T29] usb 4-1: Manufacturer: syz
[ 2037.711872][   T29] usb 4-1: SerialNumber: syz
[ 2037.715166][T32694] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 2037.715166][T32694]    program syz.8.7124 not setting count and/or reply_len properly
[ 2037.748888][T32694] program syz.8.7124 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2037.962666][   T29] usb 4-1: USB disconnect, device number 96
[ 2038.611857][T32706] siw: device registration error -23
[ 2039.025728][   T29] usb 6-1: USB disconnect, device number 74
[ 2039.115106][T32708] ipvlan0: entered promiscuous mode
[ 2039.122774][T32708] ipvlan0: entered allmulticast mode
[ 2039.131294][T32708] veth0_vlan: entered allmulticast mode
[ 2039.144326][T32708] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[ 2039.617725][   T30] audit: type=1400 audit(2000000803.714:3368): avc:  denied  { unmount } for  pid=28938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 2040.264474][   T30] audit: type=1400 audit(2000000804.313:3369): avc:  denied  { accept } for  pid=32731 comm="syz.5.7137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2041.926101][T32748] syzkaller0: entered promiscuous mode
[ 2041.946375][T32748] syzkaller0: entered allmulticast mode
[ 2042.829745][T32714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2043.675191][  T303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7149'.
[ 2043.862796][  T306] Invalid ELF header type: 3 != 1
[ 2043.869155][   T30] audit: type=1400 audit(2000000807.680:3370): avc:  denied  { module_load } for  pid=305 comm="syz.5.7152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 2046.772883][  T340] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 2047.073064][  T349] tipc: Enabling of bearer <eth:veth0_macvtap> rejected, already enabled
[ 2048.182490][  T358] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 2049.729275][   T30] audit: type=1400 audit(2000000813.152:3371): avc:  denied  { map } for  pid=370 comm="syz.7.7171" path="/dev/video5" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 2049.804059][   T30] audit: type=1400 audit(2000000813.152:3372): avc:  denied  { execute } for  pid=370 comm="syz.7.7171" path="/dev/video5" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 2050.099234][  T381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7174'.
[ 2050.526584][  T371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7171'.
[ 2052.094966][  T399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7179'.
[ 2053.150118][T19136] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 2053.526498][T19136] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 2053.541853][T19136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2053.651665][T19136] usb 4-1: Product: syz
[ 2053.662450][T19136] usb 4-1: Manufacturer: syz
[ 2053.673409][T19136] usb 4-1: SerialNumber: syz
[ 2053.707981][T19136] usb 4-1: config 0 descriptor??
[ 2054.951247][T19136] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[ 2054.972780][T19136] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 2054.986581][T19136] usb 4-1: USB disconnect, device number 97
[ 2055.255368][  T430] rdma_op ffff8880939a89f0 conn xmit_rdma 0000000000000000
[ 2055.651771][   T30] audit: type=1400 audit(2000000818.699:3373): avc:  denied  { map } for  pid=433 comm="syz.6.7191" path="socket:[134178]" dev="sockfs" ino=134178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2055.693554][   T30] audit: type=1400 audit(2000000818.708:3374): avc:  denied  { read accept } for  pid=433 comm="syz.6.7191" path="socket:[134178]" dev="sockfs" ino=134178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2056.552511][  T440] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7191'.
[ 2057.547958][  T448] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=52250 sclass=netlink_xfrm_socket pid=448 comm=syz.6.7191
[ 2057.605525][  T456] kAFS: unable to lookup cell 'Þ({^ú@'
[ 2058.773752][   T29] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 2058.903537][  T468] binder: 467:468 ioctl c01064ac 200000000200 returned -22
[ 2059.045243][   T29] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2059.682387][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2059.690454][   T29] usb 6-1: Product: syz
[ 2059.696180][   T29] usb 6-1: Manufacturer: syz
[ 2059.701161][   T29] usb 6-1: SerialNumber: syz
[ 2059.716318][   T29] usb 6-1: config 0 descriptor??
[ 2061.170571][   T29] usb 6-1: Firmware version (0.0) predates our first public release.
[ 2061.193583][   T29] usb 6-1: Please update to version 0.2 or newer
[ 2061.526255][   T29] usb 6-1: USB disconnect, device number 75
[ 2061.755854][  T507] vivid-000: disconnect
[ 2062.463544][   T30] audit: type=1400 audit(2000000825.060:3375): avc:  denied  { getopt } for  pid=521 comm="syz.5.7216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2062.609173][   T30] audit: type=1326 audit(2000000825.078:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2062.686664][   T30] audit: type=1326 audit(2000000825.097:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2062.748746][   T30] audit: type=1326 audit(2000000825.097:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2062.898685][  T535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7218'.
[ 2062.937037][   T30] audit: type=1326 audit(2000000825.097:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2063.004085][  T535] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 2063.026416][  T535] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 2063.066091][   T30] audit: type=1326 audit(2000000825.097:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2063.234386][   T30] audit: type=1326 audit(2000000825.097:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2063.265985][  T545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7222'.
[ 2063.354793][   T30] audit: type=1326 audit(2000000825.097:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2064.044577][   T30] audit: type=1326 audit(2000000825.097:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2064.186765][  T554] tmpfs: Unknown parameter 'mp'
[ 2064.215107][   T30] audit: type=1326 audit(2000000825.097:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.7.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f01e119c799 code=0x7ffc0000
[ 2064.974494][T30724] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2065.155782][T30724] usb 6-1: device descriptor read/64, error -71
[ 2065.412687][T30724] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 2065.700897][T30724] usb 6-1: device descriptor read/64, error -71
[ 2065.818738][T30724] usb usb6-port1: attempt power cycle
[ 2066.235489][T30724] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2066.255170][T21831] hid_parser_main: 149 callbacks suppressed
[ 2066.255182][T21831] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[ 2066.270791][T30724] usb 6-1: device descriptor read/8, error -71
[ 2066.288881][T21831] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2066.537282][T30724] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 2066.578054][T30724] usb 6-1: device descriptor read/8, error -71
[ 2066.904984][T30724] usb usb6-port1: unable to enumerate USB device
[ 2067.250483][  T595] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2067.932115][  T587] [U] 
[ 2068.503304][  T614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7238'.
[ 2068.569608][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2068.621583][  T615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7240'.
[ 2070.372801][   T29] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 2070.540355][T21831] kernel read not supported for file task/562/attr/fscreate (pid: 21831 comm: kworker/0:6)
[ 2070.643499][   T29] usb 6-1: Using ep0 maxpacket: 16
[ 2070.654639][   T29] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 2070.672106][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2070.685393][   T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2070.708775][   T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2070.722939][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2070.731087][   T29] usb 6-1: Product: syz
[ 2070.736270][   T29] usb 6-1: Manufacturer: syz
[ 2070.740916][   T29] usb 6-1: SerialNumber: syz
[ 2071.012728][  T647] netlink: 256 bytes leftover after parsing attributes in process `syz.8.7250'.
[ 2071.093471][  T648] overlay: Unknown parameter 'func'
[ 2071.243838][   T29] usb 6-1: 0:2 : does not exist
[ 2072.330864][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 2072.330880][   T30] audit: type=1400 audit(2000000833.366:3410): avc:  denied  { watch } for  pid=646 comm="syz.3.7249" path="/170/bus/file1" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2072.582630][   T29] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[ 2072.597660][   T30] audit: type=1400 audit(2000000834.311:3411): avc:  denied  { watch_sb watch_reads } for  pid=646 comm="syz.3.7249" path="/170/bus/file1" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2072.806925][   T29] usb 6-1: USB disconnect, device number 80
[ 2073.645442][  T688] xfrm0 speed is unknown, defaulting to 1000
[ 2073.658487][  T688] lo speed is unknown, defaulting to 1000
[ 2074.524133][  T691] netlink: 160 bytes leftover after parsing attributes in process `syz.7.7262'.
[ 2076.498366][  T691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7262'.
[ 2076.696314][  T702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7266'.
[ 2076.807238][  T704] /dev/nullb0: Can't open blockdev
[ 2076.827459][  T704] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7265'.
[ 2077.337549][  T708] 9p: Could not find request transport: unyô‰Tß‚¾ 4¶-¾¦}x
[ 2077.431614][   T30] audit: type=1400 audit(2000000839.081:3412): avc:  denied  { watch } for  pid=715 comm="syz.3.7267" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 2077.853772][  T726] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.7274'.
[ 2077.874516][  T726] netlink: ct family unspecified
[ 2082.870077][T21841] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[ 2085.869593][T19136] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 2086.134867][T21841] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 2087.311460][T19136] usb 4-1: Using ep0 maxpacket: 16
[ 2087.726744][T19136] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 2087.737457][T21841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2087.749413][T19136] usb 4-1: config 0 has no interface number 0
[ 2087.761596][T19136] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2087.773373][T21841] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2087.775009][T19136] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2087.802099][T19136] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2087.804139][T21841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2087.811944][T19136] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2087.830643][T19136] usb 4-1: Product: syz
[ 2087.834828][T19136] usb 4-1: SerialNumber: syz
[ 2087.852354][T21841] usb 7-1: config 0 descriptor??
[ 2087.852362][T19136] usb 4-1: config 0 descriptor??
[ 2087.856353][T19136] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input71
[ 2088.168671][  T801] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2088.348148][  T809] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7289'.
[ 2090.029342][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.036520][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.043672][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.054155][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.061331][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.068575][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.075705][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.082832][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.089934][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.097062][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2090.114285][T19136] usb 4-1: USB disconnect, device number 98
[ 2090.121521][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2090.135254][T21841] usbhid 7-1:0.0: can't add hid device: -71
[ 2090.152105][T21841] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2090.172037][T19136] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2090.230209][T21841] usb 7-1: USB disconnect, device number 31
[ 2091.354620][  T837] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2091.586543][T14429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2092.166755][T14429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2092.355223][  T846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 2092.365446][T14429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2092.384659][  T846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 2092.446066][T24906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2092.456367][T24906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2092.467576][T24906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2092.487597][T24906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2092.497607][T24906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2092.508078][  T846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 2092.545302][  T846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 2092.568592][T14429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2092.735059][  T847] xfrm0 speed is unknown, defaulting to 1000
[ 2092.763602][  T847] lo speed is unknown, defaulting to 1000
[ 2092.766385][  T846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 2092.779103][  T846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[ 2093.630653][  T871] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7303'.
[ 2093.864555][  T875] siw: device registration error -23
[ 2093.876101][  T875] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 2094.428992][T14429] batman_adv: batadv0: Interface deactivated: gretap1
[ 2094.501619][  T879] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.7315'.
[ 2094.516730][   T30] audit: type=1400 audit(2000000855.058:3413): avc:  denied  { setattr } for  pid=886 comm="syz.3.7317" name="TIPC" dev="sockfs" ino=136423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2094.601558][  T890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7316'.
[ 2094.781296][ T5130] Bluetooth: hci0: command tx timeout
[ 2095.253752][T14429] batman_adv: batadv0: Removing interface: gretap1
[ 2095.308535][T14429] bond0 (unregistering): Released all slaves
[ 2095.327058][T14429] bond1 (unregistering): Released all slaves
[ 2095.346985][T14429] bond2 (unregistering): Released all slaves
[ 2095.363381][T14429] bond3 (unregistering): Released all slaves
[ 2095.389882][  T847] chnl_net:caif_netlink_parms(): no params data found
[ 2096.333188][  T847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2096.346268][  T847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2096.591415][  T847] bridge_slave_0: entered allmulticast mode
[ 2096.716329][  T847] bridge_slave_0: entered promiscuous mode
[ 2096.871519][  T847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2096.882119][  T847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2096.897863][  T847] bridge_slave_1: entered allmulticast mode
[ 2096.918381][  T847] bridge_slave_1: entered promiscuous mode
[ 2096.966147][ T5130] Bluetooth: hci0: command tx timeout
[ 2097.061947][  T847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2097.127663][  T847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2097.296656][T14429] hsr_slave_0: left promiscuous mode
[ 2097.315377][T14429] hsr_slave_1: left promiscuous mode
[ 2097.328165][T14429] veth1_macvtap: left promiscuous mode
[ 2097.333683][T14429] veth0_macvtap: left promiscuous mode
[ 2097.868263][  T847] team0: Port device team_slave_0 added
[ 2097.882436][  T847] team0: Port device team_slave_1 added
[ 2097.925283][  T847] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2097.932511][  T847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2097.995532][  T847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2098.030499][  T847] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2098.037464][  T847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2098.072216][  T847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2098.175274][  T847] hsr_slave_0: entered promiscuous mode
[ 2098.206628][  T847] hsr_slave_1: entered promiscuous mode
[ 2098.245105][  T847] debugfs: 'hsr0' already exists in 'hsr'
[ 2098.253976][  T847] Cannot create hsr debugfs directory
[ 2098.331233][T14429] IPVS: stop unused estimator thread 0...
[ 2098.648629][  T847] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2098.663351][  T847] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2098.674327][  T847] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2098.689870][  T847] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2098.792746][  T847] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2098.818533][  T847] 8021q: adding VLAN 0 to HW filter on device team0
[ 2098.829742][  T834] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2098.836838][  T834] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2098.855928][T14434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2098.863038][T14434] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2099.052462][  T847] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2099.194781][ T5130] Bluetooth: hci0: command tx timeout
[ 2099.220469][  T847] veth0_vlan: entered promiscuous mode
[ 2099.234018][  T847] veth1_vlan: entered promiscuous mode
[ 2099.253632][  T847] veth0_macvtap: entered promiscuous mode
[ 2099.262945][  T847] veth1_macvtap: entered promiscuous mode
[ 2099.278297][  T847] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2099.290592][  T847] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2099.302588][   T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2099.311802][   T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2099.321515][   T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2099.334081][   T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2099.429523][T14429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2099.437948][T14429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2099.465791][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2099.473871][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2101.408719][ T5130] Bluetooth: hci0: command tx timeout
[ 2134.261867][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2199.934342][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2210.880603][T13974] kworker/0:1 (13974) used greatest stack depth: 16296 bytes left
[ 2224.050319][T24906] Bluetooth: hci0: command 0x0406 tx timeout
[ 2265.617541][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 2331.301261][ T1295] ieee802154 phy1 wpan1: encryption failed: -22