last executing test programs:

15.835924693s ago: executing program 0 (id=344):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x5, 0x5, 0x8, 0xf9f, 0x7, 0x4f, 0x4, 0x5, 0x2, 0x45b2, 0x3, 0xaf, 0xffffffff, 0x6, 0x2a], 0xe000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1f3)

15.765629671s ago: executing program 0 (id=346):
io_uring_setup(0x4007, &(0x7f0000000040)={0x0, 0xc8a1, 0x80000, 0x8, 0xc1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x10000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x1000, 0x10000, &(0x7f0000ff0000/0x10000)=nil, 0x0, r6})
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
io_uring_setup(0x4007, &(0x7f0000000040)={0x0, 0xc8a1, 0x80000, 0x8, 0xc1}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x10000, 0x1}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x1000, 0x10000, &(0x7f0000ff0000/0x10000)=nil, 0x0, r6}) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) (async)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)

15.23642787s ago: executing program 0 (id=357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
recvfrom$inet6(r1, 0x0, 0x0, 0x40010000, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x4) (async)
recvfrom$inet6(r1, 0x0, 0x0, 0x40010000, 0x0, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r5, 0x0) (async)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0) (async)

14.739081263s ago: executing program 0 (id=363):
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x1, 0x4)
chdir(&(0x7f0000000100)='./file0\x00')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
personality(0x400000)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="0221000304000000000000000077f591153ae22e2500000002000100"/40], 0x20}}, 0x20000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x210082, 0x0)
ioctl$TUNSETIFF(r3, 0x40086610, 0x0)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/214, 0xd6)

14.659183552s ago: executing program 0 (id=364):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000014c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x8, "608d4bcb387fe7"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000440)={0xfffffffffffffffd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {0x0, r5}], 0x7, "43d5c8574e591a"}) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x2}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001440)={{r8, 0xc, 0x7, 0x0, 0x1ff, 0x7, 0xdeed, 0x2, 0x0, 0xffffffff, 0x6, 0x1, 0x3ff, 0x8a0, 0x81}, 0x8, [0x0]})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x9})
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x248000, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r11, 0x8002af76, &(0x7f00000000c0)) (async)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x2, 0x2, 0x77, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

9.338000455s ago: executing program 0 (id=419):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) (async)
read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) (async)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)

9.195676163s ago: executing program 32 (id=419):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020) (async)
read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) (async)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)

5.037287277s ago: executing program 2 (id=478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="5400000010000104000000000000000000000000000000008cffffff000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0)

4.969673471s ago: executing program 2 (id=480):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)

4.58980388s ago: executing program 1 (id=489):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x51)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x28012, r0, 0x0)
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})

4.350068854s ago: executing program 3 (id=494):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_delrule={0x1c, 0x21, 0x300, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x20, 0xb, 0xf1, 0x0, 0x0, 0x6, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0020011}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4048091)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))

4.34969766s ago: executing program 1 (id=495):
syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1fc)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x8000)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x23)
write(r2, &(0x7f0000000500)='active', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, <r5=>0x0})
mmap(&(0x7f00001c7000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r5})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0xea369000)
fchmod(r3, 0x80)
recvfrom$unix(r3, &(0x7f00000000c0)=""/95, 0x5f, 0x2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00002b000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000062c000000000000c1334d04000280040003"], 0x64}}, 0x0)
write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x31004000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4.349527193s ago: executing program 3 (id=496):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x254802, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0)
ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000040))

4.269196931s ago: executing program 3 (id=497):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x1b8, 0x1a, 0x633, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in=@local, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0xb7, 0x2, {{'ecb(cipher_null)\x00'}, 0x378, "bc4c6bd29d87ceeb65141fd445cb3e79017b9812c38081accab6da6851e0aef03898954cf26b724c4caa7e129c82bfe4f43b858e4f90a5e5561ebaa16c57ad7f8ffa03f68f0650d027b57b0f2967e451737f79427abc24922a0198bbdc574980a5d76874dcbbed3cffe80cae65571b"}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0x80ff}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180861)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78)
fcntl$addseals(r3, 0x409, 0x4)
pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, 0xb, 0x40, 0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x169, 0x1a, 0x633, 0x1, 0x25dfdbfd, {{@in=@empty, @in=@local, 0x4e24, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_init_delay={0x8, 0x27, 0x42}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000004}, 0x200080d4)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xa9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x70bd24, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000000)=<r12=>0x0)
bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, r12, 0xffffffffffffffff, 0x1, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r14)
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000000580)=<r16=>0x0)
sendmsg$NFC_CMD_SE_IO(r14, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028bd7000fcdbdf2ad083251b00000008", @ANYRES32=r16, @ANYBLOB="08001500010000000a0019009855f824bee00000"], 0x30}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r4, 0x0, {0x0, 0x0, 0x0, 0x4000000007, 0x404000000ff, 0x0, 0x0, 0x19, 0xc, "faf98317e5a114996acc96e3dfd42038bd3fe37d58128b25f5ab60c9e6d680f985881a7beda9d69098c8b534466c5111fd8a0f3500000200", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc06000000000000000000000000000000000200", [0x2002, 0x206]}})
ioctl$BLKRRPART(r1, 0x125f, 0x0)

4.089889843s ago: executing program 1 (id=498):
r0 = getuid()
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {<r3=>0xee01, 0xee01}}, './file0\x00'})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=<r4=>0x0)
r5 = fcntl$getown(0xffffffffffffffff, 0x9)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x3, r0, r1, r3, 0xee00, 0x1e2, 0x1b4}, 0x6c6, 0x8, 0x80000000, 0x8, r4, r5, 0xc69})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1f}], 0x2c)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000280)=0x71c9c64d)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r6=>r2, {0x4}}, './file0\x00'})
ioctl$PTP_ENABLE_PPS(r6, 0x40043d04, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/hibernate_compression_threads', 0x202001, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, r3, &(0x7f0000000340))
read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020)
io_setup(0x80000001, &(0x7f0000002400)=<r8=>0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
io_cancel(r8, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0xb, r9, &(0x7f0000002440)="83b8d1e1ce18a2f0fdf507deb8d553357e806c877d6cefa80da9a7eeb79100f21820eccd53ff85b05e3899fcd8192fe2bc1addbf597249ec00a313fc69d5696a687ef2683f3d373cef4608cceda1b5bdc47b3839c6bf18958d65b7ce", 0x5c, 0x5, 0x0, 0x0, r6}, &(0x7f0000002500))
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000002540)={0x4, <r10=>r2, 0x2})
accept4$inet6(r10, &(0x7f0000002580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000025c0)=0x1c, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000002600)={0x40, 0x8000, {r4}, {r0}, 0x0, 0x6})
ioctl$TCFLSH(r2, 0x540b, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x3c)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000002640)={0x0, 0x8})
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r10, 0x21, &(0x7f0000002680)={0x0, 0xd658, 0x200, 0x1, 0x10d, 0x0, r2}, 0x1)
ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000002700)={<r11=>0x0})
ioctl$DRM_IOCTL_DMA(r10, 0xc0406429, &(0x7f0000002840)={r11, 0x6, &(0x7f0000002740)=[0x1b7, 0x2, 0x2, 0x8, 0xf, 0x6], &(0x7f0000002780)=[0x8, 0x10, 0x5, 0x2, 0xd6a4c36, 0x7fff, 0x7], 0x0, 0x8, 0x5, &(0x7f00000027c0)=[0x4, 0x80000001, 0x5, 0x41, 0x33f2, 0x6, 0xf17c, 0x10], &(0x7f0000002800)=[0x3ff, 0x1, 0x7]})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002880), 0x10000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x3)
stat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900))
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000002a00)={0x5, 0x8000, 0x8, 0x800}, 0x10)

4.089649548s ago: executing program 1 (id=499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000200)='tcp\x00', 0x4)
write(0xffffffffffffffff, &(0x7f0000000300)='127.0.0.1\x00', 0xa)
symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/test\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00')
io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="3d47b000e0ab4f6b1a57850ca65b9f03e60dba95aec855b01dd46f601acbbb9b3256e3115972dcfd5ea897a422be981ac5323688dfac8b899274f890ee529aa64a92f12a27575cb42f3508f060bad2fdd2a53aaa7c834f0888f5bdd03d43da90ccaf878c7ca67349adf2bb8b7b2128af96eb692aadb558534c1b85089eb835646ae3e1687a78df7108a47f3580b1b900f22dc855b154c29278bcaa95beceabcd6c1e6d9fbd4b8d752823af5cc8643971bce9095d13a85bce4e4b4fd3cfadd08b496239b935f95e94a3f3051f1089f795", 0xd0, 0x6, 0x0, 0x3}])
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e0000000110001"], 0xe0}, 0x1, 0x0, 0x0, 0x4042090}, 0x850)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x8c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x1672fc6833f3564b)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')

3.56010729s ago: executing program 2 (id=500):
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x105)
mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x1000001, 0x11, r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r2, &(0x7f0000000280)=[{'VOLUME', @val={' \'', 'Line'}}, {'VOLUME', @void}], 0x2a)
close(r2)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x40fff, 0x4)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x20, &(0x7f0000000180)='.log\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000ff00000108000f"], 0x74}}, 0x0)

3.558247891s ago: executing program 2 (id=501):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r0, 0xc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
timer_create(0x7, 0x0, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_ima(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080), &(0x7f00000020c0)=ANY=[], 0x2, 0x1)
llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28)
setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "60549d932b45fc49", "9cf08593b6c981755478ea7bee87a7c4", "149962a8", "5085b7ed0a2d0e79"}, 0x28)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
timer_settime(r5, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f00))

1.228175475s ago: executing program 2 (id=504):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_delrule={0x6c, 0x21, 0x10, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10001}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_1\x00'}, @FRA_FLOW={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_FLOW={0x8, 0xb, 0x800}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080)

1.226789381s ago: executing program 4 (id=505):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @link_local})
write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x11, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1c9, '\x00', [@generic={0x12, 0xe47, "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"}]}], "ab00204cf3b5df7b000000000000000000000027f3075f84cad8be538e28acd24184307d343e5ab1044a798cd61b0210f9ba068bc128235e47de0a4044027444dbfa69f591578171c6ef1441997a89878970ab74bd4396e0d599d725fae76f74447a5b278e1e9465b46d8799331429de1d5c66e585dfb7cd62166049037eb70c"}}}}}}, 0xfce)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x2015})

1.22667907s ago: executing program 1 (id=506):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006)

1.2265655s ago: executing program 3 (id=507):
setns(0xc9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="1c0012800e00014069703665727370616e"], 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)

1.225603395s ago: executing program 2 (id=508):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)

1.158794229s ago: executing program 1 (id=509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x2c, 0x10, 0x1, 0x70bd28, 0x25df9bf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_IFALIASn={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd8845}, 0x4000000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x6c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6f, 0x1, 0x7fff, 0x1, 0xa43]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa50b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x76babe80cdb8671e}, 0x2000c001)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) (async)
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x3b) (async)
setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x3b)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00')
open_by_handle_at(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r5], 0x0) (async)
open_by_handle_at(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r5], 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x18) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
lseek(r8, 0x10001, 0x3)
write$tun(r8, &(0x7f0000000400)={@val={0x0, 0xf9}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @local, @void, {@x25={0x805, {0x3, 0x2, 0xff, "77f757a4ae4070362dfb3da8623941a8cdadd828c5c4f1623b7350698c2604ce141282e06b778df943b88791a41a4df570d0b26e092217c8f77740b1e3b0a0d20059d3ae79d2be2e65cd19235e7387eb4e5b93651f548681f8cb9bd5a9c9d3e9c7d1aa47f3f12d00d2bbb890bdac7e9dce5a1e711eafd91171d1395dfade5a900d09923c3736d411e3"}}}}}, 0x9e) (async)
write$tun(r8, &(0x7f0000000400)={@val={0x0, 0xf9}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @local, @void, {@x25={0x805, {0x3, 0x2, 0xff, "77f757a4ae4070362dfb3da8623941a8cdadd828c5c4f1623b7350698c2604ce141282e06b778df943b88791a41a4df570d0b26e092217c8f77740b1e3b0a0d20059d3ae79d2be2e65cd19235e7387eb4e5b93651f548681f8cb9bd5a9c9d3e9c7d1aa47f3f12d00d2bbb890bdac7e9dce5a1e711eafd91171d1395dfade5a900d09923c3736d411e3"}}}}}, 0x9e)
read$dsp(r7, &(0x7f0000000140)=""/52, 0x34)
preadv2(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f00000001c0)=""/76, 0x4c}], 0x2, 0x88aa, 0x7fffffff, 0x2)

1.05556981s ago: executing program 4 (id=510):
setuid(0xee01)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)

1.054967449s ago: executing program 3 (id=511):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) (async)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) (async, rerun: 64)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
ptrace(0x10, r2) (async)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async, rerun: 32)
wait4(r2, &(0x7f0000000040), 0x20000000, &(0x7f0000000280)) (async, rerun: 32)
lseek(r1, 0x0, 0x4) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a0006"], 0x6c}}, 0x0) (rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x49, 0x400, 0x2, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendfile(r1, r1, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) (async)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0x5, 0x2})

1.054736152s ago: executing program 4 (id=512):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) (rerun: 32)
close(r3) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[<r4=>0x0, 0x0, 0x0], 0x3}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000380)={0x0, 0x0, <r5=>0x0}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000400)={0x2, 0x0, &(0x7f00000003c0)=[<r6=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000440)={r4, r5, r6, 0x7, 0x4, 0x3, 0x3ff, 0xff, 0x1, 0xfffffffc, 0x7, 0x7}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r7=>0xffffffffffffffff})
ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f00000001c0)={0x0, r2, r7, 0x7, 0x7, '\x00', {0x1000, 0x2, 0x31, 0x4, 0x5, 0x208, 0x3, 0x1, {0x1, 0x8001}, {0x4, 0x3}, {0x7ff, 0x6}, 0x9, 0x1000004, 0xffff, 0x81, 0x401, 0x1, 0xad, 0x0, 0x8, 0x3, '\x00', 0x8, 0x6, 0x7f, 0x1}}) (async, rerun: 64)
capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5}) (rerun: 64)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7, <r8=>0xffffffffffffffff}) (async)
r9 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x100)
close(r9) (async, rerun: 64)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xff, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="270302", 0x3}], 0x1}, 0x4005)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="1100070038b6bcce119dc6e866b0da75ca0000732201c1cae4d71ba2675c27217e8ae200"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
ppoll(&(0x7f00000000c0)=[{r8, 0x6000}], 0x1, 0x0, 0x0, 0x0) (async)
r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x235, 0x4, 0x12, 0x3}, {0x5, 0x8, 0x0, 0xc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
close_range(r13, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x5230, &(0x7f0000000080)={0x0, 0xcc1a, 0x10803, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) (async, rerun: 64)
landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x6d, 0x0) (rerun: 64)

241.910214ms ago: executing program 3 (id=513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000800000000080000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0)

169.9523ms ago: executing program 4 (id=514):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000800), 0x0)

119.444542ms ago: executing program 4 (id=515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffc69}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r11=>0x0}) (async)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r13 = dup(r12)
write$UHID_INPUT(r13, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async)
r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000340)="67362e36660f3a0ead03000000000f2025f30f7fd3660fdc4e00baa100ed66b8003000000f23d80f21f86635c00000e00f23f80f01c50fc72a650f01ee0f0d27", 0x40}], 0x1, 0x17, &(0x7f0000000480)=[@efer={0x2, 0x3400}, @dstype3={0x7, 0x4}], 0x2) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', 0x0, 0x0, 0x1)

0s ago: executing program 4 (id=516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0x7, 0xfff1}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880)

0s ago: executing program 3 (id=517):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)={<r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01864c1, &(0x7f0000000040)={r3}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)={<r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000100)={<r6=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000140)=[r6, r6], &(0x7f0000000180)=[0xffff], 0x1, 0x2, 0x7}) (async)
r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000000)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01864c1, &(0x7f0000000040)={r8}) (async)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000040)={<r10=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000002c0)=[r10], 0x0, 0x1}) (async)
r11 = syz_open_dev$dri(&(0x7f0000000440), 0x5, 0x48640)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000000)={<r12=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r11, 0xc01864c1, &(0x7f0000000140)={r12})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)={<r13=>0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000440)={<r14=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000500)={<r15=>0x0})
r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r16, 0xc00864bf, &(0x7f0000000040)={<r17=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r16, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000002c0)=[r17], 0x0, 0x1})
r18 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r18, 0xc00864bf, &(0x7f0000000040)={<r19=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r18, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000002c0)=[r19], 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(0xffffffffffffffff, 0xc0186449, &(0x7f00000006c0)={0x0, 0x0, {0x28, 0x5, &(0x7f00000005c0)=[{0x8, 0xf7ab85a0, 0x11fee359a1ce8640, 0x1ff, 0x0, {0x10, 0x1, &(0x7f0000000140)=[{0x80000000, 0x0, 0x3}]}}, {0x7, 0x4d5080c0, 0x346ea70047fef700, 0x401, 0x0, {0x10, 0x7, &(0x7f0000000240)=[{0x1, 0x0, 0x1}, {0x80000000, 0x0, 0x4e}, {0x80000000, 0x0, 0x5}, {0xff}, {0x1, 0x0, 0xfffffffffffffffe}, {0x80000000, 0x0, 0xf}, {0x1, 0x0, 0x800}]}}, {0x4, 0x12216770, 0x7a49e86516615d80, 0xcf0c, 0x0, {0x10, 0x7, &(0x7f0000000380)=[{0xff, 0x0, 0x7}, {0xff, r1}, {0x0, r3, 0x8}, {0x80000000, 0x0, 0xd1}, {0x0, r4, 0x101}, {0x1, r6, 0x5}, {0x0, r8, 0x7}]}}, {0x72, 0x660c6ad8, 0x545f012a81bafa00, 0x8, 0x0, {0x10, 0x6, &(0x7f0000000480)=[{0x1, r10, 0x5}, {0xff, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0xff, r12, 0xffffffffffff0000}, {0x1, r13, 0x97c2}, {0x1, r14, 0xfffffffffffffff9}]}}, {0xc, 0x11ee1dd8, 0x9a9118e43e88d80, 0x7, 0x0, {0x10, 0x5, &(0x7f0000000540)=[{0x1, r15, 0x80}, {0xff, r17, 0xd7b}, {0xff, 0x0, 0x7fffffff}, {0xff, r19, 0x6}, {0x0, 0x0, 0x1}]}}]}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a80)={0x64, 0x0, &(0x7f00000008c0)=[@increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

oot:sysadm_r:sysadm_t tclass=capability permissive=1
[   48.692229][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.692787][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.692945][ T5728] bridge_slave_0: entered allmulticast mode
[   48.693708][ T5728] bridge_slave_0: entered promiscuous mode
[   48.707080][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.707123][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.707272][ T5736] bridge_slave_0: entered allmulticast mode
[   48.709369][ T5736] bridge_slave_0: entered promiscuous mode
[   48.722622][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.722667][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.722751][ T5728] bridge_slave_1: entered allmulticast mode
[   48.723517][ T5728] bridge_slave_1: entered promiscuous mode
[   48.738997][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.739042][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.739097][ T5736] bridge_slave_1: entered allmulticast mode
[   48.739930][ T5736] bridge_slave_1: entered promiscuous mode
[   48.760416][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.787002][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.794543][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.794653][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.795143][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.795203][ T5732] bridge_slave_0: entered allmulticast mode
[   48.795922][ T5732] bridge_slave_0: entered promiscuous mode
[   48.823933][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.831843][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.831942][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.832024][ T5732] bridge_slave_1: entered allmulticast mode
[   48.833196][ T5732] bridge_slave_1: entered promiscuous mode
[   48.842360][ T5728] team0: Port device team_slave_0 added
[   48.842474][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.842564][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.843360][ T5737] bridge_slave_0: entered allmulticast mode
[   48.844094][ T5737] bridge_slave_0: entered promiscuous mode
[   48.857000][ T5728] team0: Port device team_slave_1 added
[   48.865412][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.865487][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.865647][ T5737] bridge_slave_1: entered allmulticast mode
[   48.866458][ T5737] bridge_slave_1: entered promiscuous mode
[   48.869503][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.871240][ T5736] team0: Port device team_slave_0 added
[   48.872352][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.901334][ T5736] team0: Port device team_slave_1 added
[   48.926925][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.941826][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.941837][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.941850][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.944071][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.944080][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.944093][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.945305][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.953244][ T5732] team0: Port device team_slave_0 added
[   48.955404][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.955416][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.955428][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.956295][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.956303][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.956315][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.977514][ T5732] team0: Port device team_slave_1 added
[   48.978516][ T5737] team0: Port device team_slave_0 added
[   48.980079][ T5737] team0: Port device team_slave_1 added
[   49.028739][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.028750][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.028762][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.029893][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.029902][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.029914][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.042858][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.042874][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.042894][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.059876][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.059933][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.059955][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.064702][ T5728] hsr_slave_0: entered promiscuous mode
[   49.065313][ T5728] hsr_slave_1: entered promiscuous mode
[   49.071635][ T5736] hsr_slave_0: entered promiscuous mode
[   49.072393][ T5736] hsr_slave_1: entered promiscuous mode
[   49.073008][ T5736] debugfs: 'hsr0' already exists in 'hsr'
[   49.073076][ T5736] Cannot create hsr debugfs directory
[   49.131991][ T5732] hsr_slave_0: entered promiscuous mode
[   49.132920][ T5732] hsr_slave_1: entered promiscuous mode
[   49.133474][ T5732] debugfs: 'hsr0' already exists in 'hsr'
[   49.133491][ T5732] Cannot create hsr debugfs directory
[   49.156821][ T5737] hsr_slave_0: entered promiscuous mode
[   49.157727][ T5737] hsr_slave_1: entered promiscuous mode
[   49.158307][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[   49.158325][ T5737] Cannot create hsr debugfs directory
[   49.519345][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.525746][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.526178][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.531088][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.531607][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.536615][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.538149][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.542653][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.595550][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   49.599706][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.600692][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   49.604196][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.608198][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   49.611719][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.614710][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   49.618607][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.678506][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.681417][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.688967][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.693199][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.693890][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.697103][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.710216][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.713298][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.739958][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.771089][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.773986][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.774351][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.776660][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.782760][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.786091][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.801950][ T5728] 8021q: adding VLAN 0 to HW filter on device team0
[   49.802093][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.807050][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.821869][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.821937][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.823152][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.823201][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.893972][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.943880][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   49.956449][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.956533][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.975810][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.975895][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.981195][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.990161][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.016478][ T5736] 8021q: adding VLAN 0 to HW filter on device team0
[   50.017282][ T5732] 8021q: adding VLAN 0 to HW filter on device team0
[   50.039981][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.040067][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.042826][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.042910][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.057215][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.057263][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.068705][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.068752][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.108180][ T5742] Bluetooth: hci1: command tx timeout
[   50.118062][ T5742] Bluetooth: hci3: command tx timeout
[   50.118195][ T5742] Bluetooth: hci2: command tx timeout
[   50.118262][ T5742] Bluetooth: hci0: command tx timeout
[   50.230694][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.282104][ T5728] veth0_vlan: entered promiscuous mode
[   50.293331][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.294191][ T5728] veth1_vlan: entered promiscuous mode
[   50.344436][ T5728] veth0_macvtap: entered promiscuous mode
[   50.345250][ T5737] veth0_vlan: entered promiscuous mode
[   50.354610][ T5728] veth1_macvtap: entered promiscuous mode
[   50.358042][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.366601][ T5737] veth1_vlan: entered promiscuous mode
[   50.383157][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.393983][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.397295][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.454242][ T5732] veth0_vlan: entered promiscuous mode
[   50.458533][ T5737] veth0_macvtap: entered promiscuous mode
[   50.463210][ T5732] veth1_vlan: entered promiscuous mode
[   50.475995][ T5737] veth1_macvtap: entered promiscuous mode
[   50.536772][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.536786][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.544849][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.546787][ T5736] veth0_vlan: entered promiscuous mode
[   50.553993][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.573357][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.573373][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.581465][ T5736] veth1_vlan: entered promiscuous mode
[   50.586334][ T5732] veth0_macvtap: entered promiscuous mode
[   50.589148][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.591774][ T5732] veth1_macvtap: entered promiscuous mode
[   50.619421][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.635407][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.641066][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.655379][ T5736] veth0_macvtap: entered promiscuous mode
[   50.657881][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.666697][ T5736] veth1_macvtap: entered promiscuous mode
[   50.699731][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.699750][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.721174][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.722436][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.722452][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.724003][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.741599][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.741913][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.772942][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.772954][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.823951][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.823970][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.860185][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.860190][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.860203][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.860227][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.880031][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880255][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880275][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880293][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880645][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880665][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880682][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880699][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880717][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880734][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880751][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.880769][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.083564][ T5894] xt_connbytes: Forcing CT accounting to be enabled
[   51.083604][ T5894] Cannot find set identified by id 0 to match
[   51.188173][ T5894] syzkaller0: entered promiscuous mode
[   51.188186][ T5894] syzkaller0: entered allmulticast mode
[   51.290656][ T5894] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   51.383807][ T5904] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10'.
[   51.453258][ T5914] Bluetooth: MGMT ver 1.23
[   51.453287][ T5914] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[   51.568160][ T1017] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   51.717768][ T1017] usb 6-1: Using ep0 maxpacket: 8
[   51.718859][ T1017] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   51.719959][ T1017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 113, changing to 10
[   51.719977][ T1017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34633, setting to 1024
[   51.719997][ T1017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.724053][ T1017] usb 6-1: config 0 descriptor??
[   51.725787][ T5907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   51.812652][ T5933] binder: binder_mmap: 5931 200000000000-200000200000 bad vm_flags failed -1
[   51.859259][ T5936] lapbether: lapb_data_request error - 4
[   51.862888][ T5939] FAULT_INJECTION: forcing a failure.
[   51.862888][ T5939] name failslab, interval 1, probability 0, space 0, times 1
[   51.862918][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) 
[   51.862937][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   51.862946][ T5939] Call Trace:
[   51.862952][ T5939]  <TASK>
[   51.862958][ T5939]  dump_stack_lvl+0x100/0x190
[   51.862988][ T5939]  should_fail_ex.cold+0x5/0xa
[   51.863032][ T5939]  should_failslab+0xc2/0x120
[   51.863054][ T5939]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   51.863073][ T5939]  ? __alloc_skb+0x5b7/0x710
[   51.863090][ T5939]  ? __alloc_skb+0x140/0x710
[   51.863112][ T5939]  __alloc_skb+0x140/0x710
[   51.863128][ T5939]  ? __alloc_skb+0x5b7/0x710
[   51.863145][ T5939]  ? __pfx___alloc_skb+0x10/0x10
[   51.863170][ T5939]  alloc_skb_with_frags+0xdd/0x760
[   51.863192][ T5939]  ? __lock_acquire+0x5c0/0x1f40
[   51.863211][ T5939]  ? __lock_acquire+0x5c0/0x1f40
[   51.863230][ T5939]  sock_alloc_send_pskb+0x801/0x980
[   51.863256][ T5939]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[   51.863275][ T5939]  ? raw_sendmsg+0x14c/0x880
[   51.863297][ T5939]  ? find_held_lock+0x2b/0x80
[   51.863318][ T5939]  ? raw_sendmsg+0x14c/0x880
[   51.863339][ T5939]  ? raw_sendmsg+0x14c/0x880
[   51.863360][ T5939]  ? __local_bh_enable_ip+0xa5/0x120
[   51.863382][ T5939]  raw_sendmsg+0x3d7/0x880
[   51.863413][ T5939]  ? __pfx_raw_sendmsg+0x10/0x10
[   51.863434][ T5939]  ? selinux_socket_sendmsg+0x198/0x2f0
[   51.863457][ T5939]  sock_write_iter+0x53a/0x5b0
[   51.863481][ T5939]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[   51.863502][ T5939]  ? __pfx_sock_write_iter+0x10/0x10
[   51.863531][ T5939]  ? bpf_lsm_file_permission+0x9/0x10
[   51.863552][ T5939]  ? security_file_permission+0x76/0x210
[   51.863573][ T5939]  ? rw_verify_area+0xce/0x6d0
[   51.863600][ T5939]  vfs_write+0x6af/0x1050
[   51.863618][ T5939]  ? __pfx_sock_write_iter+0x10/0x10
[   51.863645][ T5939]  ? __pfx_vfs_write+0x10/0x10
[   51.863659][ T5939]  ? find_held_lock+0x2b/0x80
[   51.863697][ T5939]  ksys_write+0x1f8/0x250
[   51.863714][ T5939]  ? __pfx_ksys_write+0x10/0x10
[   51.863742][ T5939]  do_syscall_64+0x123/0x790
[   51.863770][ T5939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.863792][ T5939] RIP: 0033:0x7f71f299e159
[   51.863808][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.863823][ T5939] RSP: 002b:00007f71f380d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   51.863839][ T5939] RAX: ffffffffffffffda RBX: 00007f71f2c25fa0 RCX: 00007f71f299e159
[   51.863848][ T5939] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[   51.863858][ T5939] RBP: 00007f71f380d090 R08: 0000000000000000 R09: 0000000000000000
[   51.863867][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.863875][ T5939] R13: 00007f71f2c26038 R14: 00007f71f2c25fa0 R15: 00007ffedfa4eb38
[   51.863894][ T5939]  </TASK>
[   51.949786][ T1017] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   51.981846][ T5944] netlink: 220 bytes leftover after parsing attributes in process `syz.0.17'.
[   52.073425][ T5951] loop0: detected capacity change from 0 to 4096
[   52.140203][ T5951] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   52.140221][ T5951] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   52.140289][ T5951]  loop0:
[   52.154413][ T5905] 9p: Bad value for 'version'
[   52.156205][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.156590][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.168993][   T35] usb 6-1: USB disconnect, device number 2
[   52.188130][ T5735] Bluetooth: hci0: command tx timeout
[   52.188162][ T5735] Bluetooth: hci2: command tx timeout
[   52.188246][ T5742] Bluetooth: hci1: command tx timeout
[   52.567697][ T5964] hid-generic 0003:0627:0001.0001: pid 5964 passed too short report
[   52.780143][ T5972] syzkaller0: entered promiscuous mode
[   52.780165][ T5972] syzkaller0: entered allmulticast mode
[   52.913268][ T5982] xt_connbytes: Forcing CT accounting to be enabled
[   52.913281][ T5982] Cannot find set identified by id 0 to match
[   52.926649][   T43] kauditd_printk_skb: 112 callbacks suppressed
[   52.926667][   T43] audit: type=1400 audit(1789512837.224:280): avc:  denied  { create } for  pid=5979 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   52.947816][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   52.947855][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   52.947879][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   52.947904][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   52.968832][ T5982] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   52.981633][   T43] audit: type=1400 audit(1789512837.284:281): avc:  denied  { read write } for  pid=5983 comm="syz.3.32" name="0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   52.981926][   T43] audit: type=1400 audit(1789512837.284:282): avc:  denied  { open } for  pid=5983 comm="syz.3.32" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   52.983476][   T43] audit: type=1400 audit(1789512837.284:283): avc:  denied  { create } for  pid=5983 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.984016][   T43] audit: type=1400 audit(1789512837.284:284): avc:  denied  { setopt } for  pid=5983 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.050070][   T43] audit: type=1400 audit(1789512837.354:285): avc:  denied  { setopt } for  pid=5992 comm="syz.3.35" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.148125][ T5742] Bluetooth: hci3: command tx timeout
[   53.267669][ T5103] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   53.388040][   T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   53.428208][ T5103] usb 6-1: Using ep0 maxpacket: 8
[   53.428763][ T5103] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   53.429599][ T5103] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   53.429613][ T5103] usb 6-1: config 0 has no interface number 0
[   53.429630][ T5103] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   53.429642][ T5103] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   53.429654][ T5103] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   53.429667][ T5103] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   53.429687][ T5103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.431639][ T5103] usb 6-1: config 0 descriptor??
[   53.439897][ T5103] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   53.557702][   T35] usb 7-1: Using ep0 maxpacket: 8
[   53.558210][   T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   53.559146][   T35] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   53.559168][   T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   53.559179][   T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   53.559191][   T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   53.559202][   T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   53.559220][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.727670][ T1016] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   53.771231][   T35] usb 7-1: GET_CAPABILITIES returned 0
[   53.771256][   T35] usbtmc 7-1:16.0: can't read capabilities
[   53.887743][ T1016] usb 5-1: Using ep0 maxpacket: 8
[   53.889071][ T1016] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   53.890238][ T1016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 174, changing to 11
[   53.890263][ T1016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58697, setting to 1024
[   53.890297][ T1016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.893546][ T1016] usb 5-1: config 0 descriptor??
[   53.895252][ T6001] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   54.032441][   T43] audit: type=1400 audit(1789512838.334:286): avc:  denied  { read append } for  pid=6004 comm="syz.3.38" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   54.032778][   T43] audit: type=1400 audit(1789512838.334:287): avc:  denied  { open } for  pid=6004 comm="syz.3.38" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   54.277737][ T5742] Bluetooth: hci1: command tx timeout
[   54.277773][ T5742] Bluetooth: hci2: command tx timeout
[   54.874722][ T6005] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   54.876068][ T6005] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   54.880641][ T6005] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   54.888763][ T6005] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   54.888825][ T6005] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   54.891132][ T6005] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   54.897027][ T6005] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   54.897290][ T6005] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   54.903054][ T6005] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   54.907520][ T6005] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   54.909325][ T6005] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   54.910577][ T6005] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   55.032693][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.40'.
[   55.036280][ T6014] Zero length message leads to an empty skb
[   55.037417][ T6014] ieee802154 phy0 wpan0: encryption failed: -22
[   55.097057][   T43] audit: type=1400 audit(1789512839.394:288): avc:  denied  { write } for  pid=6018 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.098046][   T43] audit: type=1400 audit(1789512839.404:289): avc:  denied  { read } for  pid=6018 comm="syz.3.42" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   55.306134][ T6029] syzkaller0: entered promiscuous mode
[   55.306219][ T6029] syzkaller0: entered allmulticast mode
[   55.312991][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'.
[   55.711731][   T62] usb 6-1: USB disconnect, device number 3
[   55.712086][ T1016] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2
[   55.713356][ T6000] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -19
[   55.713424][   T50] usb 7-1: USB disconnect, device number 2
[   55.743720][   T62] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[   55.753652][ T1016] usb 5-1: USB disconnect, device number 2
[   56.307299][ T6034] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   56.307890][ T6034] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   56.308192][ T6034] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   56.308353][ T6034] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   56.341776][ T6048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   56.377237][ T6055] macvtap1: entered allmulticast mode
[   56.377259][ T6055] bond0: entered allmulticast mode
[   56.377271][ T6055] bond_slave_0: entered allmulticast mode
[   56.377286][ T6055] bond_slave_1: entered allmulticast mode
[   56.377366][ T6055] bond_slave_0: entered promiscuous mode
[   56.377398][ T6055] bond_slave_1: entered promiscuous mode
[   56.379483][ T6055] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   56.386223][ T6055] bond0: left allmulticast mode
[   56.386242][ T6055] bond_slave_0: left allmulticast mode
[   56.386257][ T6055] bond_slave_1: left allmulticast mode
[   56.420652][ T1016] bond_slave_0: left promiscuous mode
[   56.420677][ T1016] bond_slave_1: left promiscuous mode
[   56.420896][ T6045] ieee802154 phy0 wpan0: encryption failed: -22
[   56.578427][ T6066] syzkaller0: entered promiscuous mode
[   56.578454][ T6066] syzkaller0: entered allmulticast mode
[   56.584304][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.57'.
[   56.587124][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.588089][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.608715][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.608773][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.608802][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.608829][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.609916][ T6066] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   56.680722][   T62] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   56.805253][ T6077] netlink: 164 bytes leftover after parsing attributes in process `syz.3.61'.
[   56.829915][   T62] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   56.831243][   T62] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.831266][   T62] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   56.831279][   T62] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   56.831290][   T62] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   56.831309][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.840963][ T6058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   56.841016][ T6058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   56.842848][   T62] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[   56.844028][   T62] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[   56.844076][   T62] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[   56.848074][   T50] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   56.858994][   T62] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   56.861811][   T62] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[   56.861851][   T62] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[   56.863554][   T62] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   56.878075][ T6083] loop0: detected capacity change from 0 to 4096
[   56.931369][ T6083] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   56.931394][ T6083] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   56.931433][ T6083]  loop0:
[   56.968556][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.65'.
[   56.999318][   T50] usb 7-1: not running at top speed; connect to a high speed hub
[   56.999348][   T50] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[   57.002550][   T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.004427][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.004446][   T50] usb 7-1: Product: syz
[   57.004458][   T50] usb 7-1: Manufacturer: syz
[   57.004468][   T50] usb 7-1: SerialNumber: syz
[   57.013222][   T50] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected
[   57.013445][   T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[   57.013497][   T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[   57.014469][   T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[   57.016038][   T50] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[   57.017362][   T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[   57.019967][   T50] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[   57.021614][   T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4
[   57.027107][   T50] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB4
[   57.028465][   T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[   57.029532][   T50] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB5
[   57.199191][ T6102] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   57.199279][ T6102] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   57.199357][ T6102] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   57.199420][ T6102] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   57.312826][ T5103] usb 6-1: USB disconnect, device number 4
[   57.318151][   T62] usb 7-1: USB disconnect, device number 3
[   57.323480][   T62] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[   57.329822][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'.
[   57.329841][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'.
[   57.343380][ T5103] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   57.344256][   T62] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[   57.345490][   T62] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4
[   57.347116][   T62] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5
[   57.350221][   T62] keyspan 7-1:1.0: device disconnected
[   57.365675][ T5103] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   57.368003][ T5103] keyspan 6-1:1.0: device disconnected
[   57.486506][ T6120] loop0: detected capacity change from 0 to 4096
[   57.540289][ T6120] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   57.540312][ T6120] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   57.540430][ T6120]  loop0:
[   57.929407][   T43] kauditd_printk_skb: 34 callbacks suppressed
[   57.929421][   T43] audit: type=1400 audit(1789512842.234:324): avc:  denied  { create } for  pid=6136 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   57.929446][   T43] audit: type=1400 audit(1789512842.234:325): avc:  denied  { sys_admin } for  pid=6136 comm="syz.1.79" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   58.135842][   T43] audit: type=1400 audit(1789512842.434:326): avc:  denied  { unlink } for  pid=6134 comm="syz.2.80" name="#1" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   58.187337][   T43] audit: type=1400 audit(1789512842.484:327): avc:  denied  { sys_module } for  pid=6143 comm="syz.3.81" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   58.220586][ T6144] lapbether: lapb_data_request error - 4
[   58.325471][ T6153] loop0: detected capacity change from 0 to 4096
[   58.370444][ T6153] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   58.370466][ T6153] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   58.370500][ T6153]  loop0:
[   58.408918][   T43] audit: type=1400 audit(1789512842.714:328): avc:  denied  { listen } for  pid=6154 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.508736][   T43] audit: type=1400 audit(1789512842.814:329): avc:  denied  { unmount } for  pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   58.510023][   T43] audit: type=1400 audit(1789512842.814:330): avc:  denied  { unmount } for  pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   58.587798][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.587825][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.587850][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.587876][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.750132][ T6142] overlayfs: statfs failed on './file0'
[   58.821149][   T43] audit: type=1400 audit(1789512843.124:331): avc:  denied  { create } for  pid=6170 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.824249][   T43] audit: type=1400 audit(1789512843.124:332): avc:  denied  { read write } for  pid=6170 comm="syz.2.92" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   58.824402][   T43] audit: type=1400 audit(1789512843.124:333): avc:  denied  { open } for  pid=6170 comm="syz.2.92" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   58.851216][ T6171] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5
[   58.919230][   T62] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   59.073763][   T62] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   59.081533][   T62] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.081572][   T62] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   59.081591][   T62] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   59.081609][   T62] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   59.081634][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.096983][ T6165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   59.097090][ T6165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   59.106489][   T62] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[   59.112004][   T62] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[   59.112060][   T62] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[   59.115592][   T62] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   59.116638][   T62] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[   59.116672][   T62] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[   59.118904][   T62] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   59.180267][ T6194] netlink: 'syz.0.99': attribute type 3 has an invalid length.
[   59.180280][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   59.231104][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[   59.231157][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[   59.231180][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[   59.231201][ T5742] Bluetooth: hci0: command 0x0419 tx timeout
[   59.371187][ T6207] 9pnet_virtio: no channels available for device syz
[   59.410974][ T6207] bond0: invalid NS target ff00:: specified for addition
[   59.410991][ T6207] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[   59.531802][ T5877] usb 8-1: USB disconnect, device number 2
[   59.542119][ T5877] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   59.553376][ T5877] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   59.554791][ T5877] keyspan 8-1:1.0: device disconnected
[   59.567362][ T6212] ALSA: seq fatal error: cannot create timer (-22)
[   59.570602][ T6212] ieee802154 phy0 wpan0: encryption failed: -22
[   59.660975][ T1171] Bluetooth: hci4: Frame reassembly failed (-84)
[   59.684355][ T6220] tipc: Started in network mode
[   59.684382][ T6220] tipc: Node identity 080211, cluster identity 4711
[   59.685865][ T6220] tipc: Enabled bearer <eth:wlan0>, priority 11
[   59.687844][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'.
[   59.687866][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'.
[   59.881300][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.881781][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.951804][ T6227] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   60.238855][ T6236] netlink: 'syz.3.111': attribute type 2 has an invalid length.
[   60.239642][ T6236] overlayfs: missing 'lowerdir'
[   60.298148][ T6238] IPVS: Scheduler module ip_vs_ not found
[   60.685290][ T6255] loop0: detected capacity change from 0 to 4096
[   60.693500][   T35] tipc: Node number set to 134353152
[   60.715584][ T6257] netlink: 100 bytes leftover after parsing attributes in process `syz.1.125'.
[   60.723101][ T5742] Bluetooth: hci2: unexpected event for opcode 0x2042
[   60.742611][ T6257] netlink: 52 bytes leftover after parsing attributes in process `syz.1.125'.
[   60.778061][ T6255] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   60.778082][ T6255] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   60.778111][ T6255]  loop0:
[   61.019702][ T6266] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   61.023105][ T6266] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   61.023238][ T6266] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   61.023408][ T6266] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   61.159466][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   61.311022][    T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   61.311897][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.311921][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   61.311933][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   61.311944][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   61.311962][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.313847][ T6264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   61.313896][ T6264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   61.317401][    T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[   61.319233][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[   61.319267][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[   61.323208][    T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   61.323939][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[   61.323978][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[   61.328825][    T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   61.707656][ T5729] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   61.707670][ T5742] Bluetooth: hci4: command 0xfc11 tx timeout
[   61.762857][   T42] usb 5-1: USB disconnect, device number 4
[   61.765708][   T42] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   61.774969][   T42] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   61.775308][   T42] keyspan 5-1:1.0: device disconnected
[   61.820097][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'.
[   61.900952][ T6289] loop0: detected capacity change from 0 to 4096
[   61.934601][ T6289] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   61.934617][ T6289] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   61.934642][ T6289]  loop0:
[   61.981796][ T6298] netlink: 164 bytes leftover after parsing attributes in process `syz.1.132'.
[   62.008678][ T6295] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   62.008763][ T6295] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   62.008835][ T6295] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   62.008929][ T6295] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   62.056828][ T1171] nvmet: connect request for invalid subsystem testsubsys!
[   62.057405][ T6299] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   62.327696][ T2319] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   62.409668][ T6309] overlayfs: missing 'lowerdir'
[   62.457719][ T2319] usb 7-1: device descriptor read/64, error -71
[   62.664482][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'.
[   62.664506][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'.
[   62.664519][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   62.667931][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.667970][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.667996][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.668022][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.717739][ T2319] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   62.843758][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   62.857760][ T2319] usb 7-1: device descriptor read/64, error -71
[   62.969460][ T2319] usb usb7-port1: attempt power cycle
[   63.134874][ T6306] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   63.135014][ T6306] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   63.135115][ T6306] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   63.135194][ T6306] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   63.189338][ T6330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.142'.
[   63.192416][   T43] kauditd_printk_skb: 53 callbacks suppressed
[   63.192427][   T43] audit: type=1400 audit(1789512847.494:387): avc:  denied  { ioctl } for  pid=6329 comm="syz.3.142" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   63.205116][   T43] audit: type=1400 audit(1789512847.504:388): avc:  denied  { connect } for  pid=6329 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   63.205429][   T43] audit: type=1400 audit(1789512847.504:389): avc:  denied  { mounton } for  pid=6329 comm="syz.3.142" path="/proc/115/cgroup" dev="proc" ino=11886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   63.206002][ T6335] =======================================================
[   63.206002][ T6335] WARNING: The mand mount option has been deprecated and
[   63.206002][ T6335]          and is ignored by this kernel. Remove the mand
[   63.206002][ T6335]          option from the mount to silence this warning.
[   63.206002][ T6335] =======================================================
[   63.206047][   T43] audit: type=1400 audit(1789512847.504:390): avc:  denied  { remount } for  pid=6329 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   63.260351][ T6341] syzkaller0: entered promiscuous mode
[   63.260367][ T6341] syzkaller0: entered allmulticast mode
[   63.277742][   T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.277783][   T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.277810][   T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.277838][   T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.311860][ T6338] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   63.312023][ T6338] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   63.312142][ T6338] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   63.312257][ T6338] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   63.318421][ T2319] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   63.351831][ T2319] usb 7-1: device descriptor read/8, error -71
[   63.396779][   T43] audit: type=1400 audit(1789512847.694:391): avc:  denied  { read write } for  pid=6346 comm="syz.0.146" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.397023][   T43] audit: type=1400 audit(1789512847.694:392): avc:  denied  { open } for  pid=6346 comm="syz.0.146" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.414683][   T43] audit: type=1400 audit(1789512847.714:393): avc:  denied  { create } for  pid=6346 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   63.414991][   T43] audit: type=1400 audit(1789512847.714:394): avc:  denied  { bind } for  pid=6346 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   63.415381][   T43] audit: type=1400 audit(1789512847.714:395): avc:  denied  { accept } for  pid=6346 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   63.415819][   T43] audit: type=1400 audit(1789512847.714:396): avc:  denied  { setopt } for  pid=6346 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   63.470764][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.501049][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.597619][ T2319] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   63.605891][ T6354] syzkaller0: left promiscuous mode
[   63.605904][ T6354] syzkaller0: left allmulticast mode
[   63.630696][ T2319] usb 7-1: device descriptor read/8, error -71
[   63.659240][ T6357] jffs2: notice: (6357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   63.672269][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.672308][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.672342][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.672370][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.725352][ T6361] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved
[   63.725377][ T6361] bond0: option slaves: unable to set because the bond device is up
[   63.734442][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   63.748337][ T2319] usb usb7-port1: unable to enumerate USB device
[   63.786440][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'.
[   63.937864][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.954526][ T5103] bridge0: entered promiscuous mode
[   63.991269][ T6378] lapbether: lapb_data_request error - 4
[   64.527625][ T6386] loop0: detected capacity change from 0 to 4096
[   64.580801][ T6363] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   64.580998][ T6363] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   64.581143][ T6363] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   64.581274][ T6363] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   64.584403][ T6386] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   64.584426][ T6386] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   64.586757][ T6386]  loop0:
[   64.686542][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'.
[   64.853693][ T6406] netlink: 'syz.1.166': attribute type 10 has an invalid length.
[   64.881550][ T6413] lapbether: lapb_data_request error - 4
[   65.062759][ T6420] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET)
[   65.473838][ T6441] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   65.473856][ T6441] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   65.474943][ T6441] vhci_hcd vhci_hcd.0: Device attached
[   65.647745][ T5103] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   65.707658][ T5103] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[   65.750046][ T6415] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   65.750236][ T6415] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   65.750374][ T6415] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   65.750510][ T6415] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   65.753236][ T6442] vhci_hcd: connection reset by peer
[   65.758802][   T13] vhci_hcd vhci_hcd.2: stop threads
[   65.759181][   T13] vhci_hcd vhci_hcd.2: release socket
[   65.759819][   T13] vhci_hcd vhci_hcd.2: disconnect device
[   65.791508][ T6447] syzkaller0: left promiscuous mode
[   65.791522][ T6447] syzkaller0: left allmulticast mode
[   65.853771][ T6449] lapbether: lapb_data_request error - 4
[   65.998184][ T2319] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   66.149271][ T2319] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   66.153100][ T2319] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   66.153119][ T2319] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   66.153137][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.157506][ T6432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   66.165909][ T2319] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   66.287249][ T6469] capability: warning: `syz.3.187' uses 32-bit capabilities (legacy support in use)
[   66.371486][   T62] usb 6-1: USB disconnect, device number 5
[   66.481866][ T6479] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   66.481988][ T6479] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   66.482068][ T6479] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   66.482151][ T6479] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   66.929151][ T6525] __nla_validate_parse: 4 callbacks suppressed
[   66.929166][ T6525] netlink: 164 bytes leftover after parsing attributes in process `syz.2.200'.
[   67.120922][ T6534] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   67.121070][ T6534] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   67.121137][ T6534] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   67.121205][ T6534] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   67.147608][   T42] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[   67.214410][ T6551] netlink: 164 bytes leftover after parsing attributes in process `syz.2.206'.
[   67.415061][   T42] libceph: mon0 (1)[c::]:6789 socket error on write
[   67.485500][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.725956][ T6568] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   67.726022][ T6567] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   67.802733][ T5735] Bluetooth: hci1: unexpected event for opcode 0x041c
[   67.935411][ T6541] ceph: No mds server is up or the cluster is laggy
[   67.942155][   T42] libceph: mon0 (1)[c::]:6789 socket error on write
[   68.058887][ T6590] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   68.062029][ T6590] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   68.662103][ T6580] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   68.662283][ T6580] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   68.662420][ T6580] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   68.662554][ T6580] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   68.766536][ T6603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.799932][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.799978][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.800008][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.800039][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.870195][   T43] kauditd_printk_skb: 50 callbacks suppressed
[   68.870212][   T43] audit: type=1400 audit(1789512853.174:447): avc:  denied  { prog_run } for  pid=6609 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.967672][   T62] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   69.070068][   T43] audit: type=1400 audit(1789512853.374:448): avc:  denied  { getopt } for  pid=6617 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   69.109201][ T6624] netlink: 164 bytes leftover after parsing attributes in process `syz.1.230'.
[   69.126962][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'.
[   69.128213][   T62] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   69.133785][   T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.133800][   T62] usb 7-1: Product: syz
[   69.133807][   T62] usb 7-1: Manufacturer: syz
[   69.133814][   T62] usb 7-1: SerialNumber: syz
[   69.176819][   T43] audit: type=1400 audit(1789512853.474:449): avc:  denied  { firmware_load } for  pid=25 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   69.194870][   T25] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   69.421360][ T6635] syzkaller0: entered allmulticast mode
[   69.463824][ T6637] netlink: 164 bytes leftover after parsing attributes in process `syz.3.235'.
[   69.517176][ T6643] libceph: secret too big 3051
[   69.594536][   T43] audit: type=1400 audit(1789512853.894:450): avc:  denied  { ioctl } for  pid=6647 comm="syz.1.240" path="socket:[14016]" dev="sockfs" ino=14016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   69.595104][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   69.595735][ T6648] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:32789
[   69.633584][   T62] usb 7-1: USB disconnect, device number 8
[   69.806907][ T6659] syzkaller0: entered promiscuous mode
[   69.806923][ T6659] syzkaller0: entered allmulticast mode
[   69.830178][   T43] audit: type=1400 audit(1789512854.134:451): avc:  denied  { create } for  pid=6660 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   69.831491][   T43] audit: type=1400 audit(1789512854.134:452): avc:  denied  { write } for  pid=6660 comm="syz.1.244" path="socket:[14498]" dev="sockfs" ino=14498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   69.832604][   T43] audit: type=1400 audit(1789512854.134:453): avc:  denied  { name_bind 0x1000000 } for  pid=6660 comm="syz.1.244" path="socket:[14499]" dev="sockfs" ino=14499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   69.836634][ T6663] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   70.177023][ T6686] netlink: 164 bytes leftover after parsing attributes in process `syz.2.245'.
[   70.271074][   T25] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[   70.271189][   T25] ath9k_htc: Failed to initialize the device
[   70.272345][   T62] usb 7-1: ath9k_htc: USB layer deinitialized
[   70.667685][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[   70.667711][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[   70.667783][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout
[   70.708166][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'.
[   70.817732][ T5103] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   70.859593][ T6702] 9p: Bad value for 'rfdno'
[   70.859744][ T6703] 9p: Bad value for 'rfdno'
[   70.970485][ T5141] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   70.970500][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   70.970527][ T5141]  loop0:
[   71.006368][ T6711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.250'.
[   71.123770][ T5729] Bluetooth: hci2: unexpected event for opcode 0x0c24
[   71.156526][  T850] cfg80211: failed to load regulatory.db
[   71.159044][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[   71.159159][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[   71.186086][   T43] audit: type=1400 audit(1789512855.484:454): avc:  denied  { create } for  pid=6718 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.188800][   T43] audit: type=1400 audit(1789512855.494:455): avc:  denied  { bind } for  pid=6718 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.190121][   T43] audit: type=1400 audit(1789512855.494:456): avc:  denied  { ioctl } for  pid=6718 comm="syz.1.254" path="socket:[14083]" dev="sockfs" ino=14083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.627753][ T5729] Bluetooth: hci0: command 0x0419 tx timeout
[   71.627911][ T6641] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   72.503647][ T6641] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   72.503953][ T6641] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   72.504058][ T6641] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   72.611949][ T6726] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   72.612153][ T6726] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   72.612296][ T6726] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   72.612482][ T6726] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   72.641151][ T6737] netlink: 'syz.2.260': attribute type 21 has an invalid length.
[   72.641166][ T6737] netlink: 128 bytes leftover after parsing attributes in process `syz.2.260'.
[   72.688997][ T6741] 9p: Bad value for 'rfdno'
[   72.689513][ T6741] xt_TCPMSS: Only works on TCP SYN packets
[   72.696362][ T6742] netlink: 'syz.2.260': attribute type 21 has an invalid length.
[   72.696375][ T6742] netlink: 128 bytes leftover after parsing attributes in process `syz.2.260'.
[   72.703955][ T6737] netlink: 'syz.2.260': attribute type 5 has an invalid length.
[   72.703968][ T6737] netlink: 'syz.2.260': attribute type 6 has an invalid length.
[   72.703975][ T6737] netlink: 3 bytes leftover after parsing attributes in process `syz.2.260'.
[   72.704482][ T6742] netlink: 'syz.2.260': attribute type 5 has an invalid length.
[   72.704494][ T6742] netlink: 'syz.2.260': attribute type 6 has an invalid length.
[   72.704500][ T6742] netlink: 3 bytes leftover after parsing attributes in process `syz.2.260'.
[   72.836175][ T6751] netlink: 164 bytes leftover after parsing attributes in process `syz.0.263'.
[   72.900166][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.900205][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.900238][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.900264][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.958748][ T6756] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   73.031234][ T6761] nvme_tcp: queue 0: failed to receive icresp, error -104
[   73.096937][ T6773] random: crng reseeded on system resumption
[   73.250386][ T6778] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.250488][ T6778] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   73.250569][ T6778] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   73.250685][ T6778] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   73.311269][ T6789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'.
[   73.312101][ T6789] netlink: 604 bytes leftover after parsing attributes in process `syz.2.270'.
[   73.372824][ T6792] can0: slcan on ttyS3.
[   73.432884][ T6792] can0 (unregistered): slcan off ttyS3.
[   73.521637][ T6797] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[   73.522484][ T6801] netlink: 'syz.1.273': attribute type 21 has an invalid length.
[   73.522503][ T6801] netlink: 128 bytes leftover after parsing attributes in process `syz.1.273'.
[   73.522558][ T6801] netlink: 'syz.1.273': attribute type 5 has an invalid length.
[   73.522571][ T6801] netlink: 'syz.1.273': attribute type 6 has an invalid length.
[   73.522580][ T6801] netlink: 3 bytes leftover after parsing attributes in process `syz.1.273'.
[   73.524415][ T6801] netlink: 'syz.1.273': attribute type 21 has an invalid length.
[   73.524431][ T6801] netlink: 128 bytes leftover after parsing attributes in process `syz.1.273'.
[   73.605852][ T6809] tmpfs: Unknown parameter '����0x0000000000000000-�fK��%�j�e�@1T]��M�'
[   73.620776][ T6803] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.621577][ T6803] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   73.621737][ T6803] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   73.621877][ T6803] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   73.828473][ T6823] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.828553][ T6823] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   73.828615][ T6823] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   73.828676][ T6823] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   73.871814][ T6829] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.903105][   T43] kauditd_printk_skb: 21 callbacks suppressed
[   73.903124][   T43] audit: type=1400 audit(1789512858.204:478): avc:  denied  { write } for  pid=6824 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   73.908765][   T43] audit: type=1400 audit(1789512858.214:479): avc:  denied  { module_load } for  pid=6824 comm="syz.3.284" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[   73.909285][ T6834] kernel read not supported for file /policy (pid: 6834 comm: syz.3.284)
[   73.947924][ T6820] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.957729][ T6820] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   73.958500][ T6820] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   73.959246][ T6820] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   74.103183][   T43] audit: type=1400 audit(1789512858.404:480): avc:  denied  { name_bind } for  pid=6849 comm="syz.0.290" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   74.154596][ T6846] FAULT_INJECTION: forcing a failure.
[   74.154596][ T6846] name failslab, interval 1, probability 0, space 0, times 0
[   74.154641][ T6846] CPU: 3 UID: 0 PID: 6846 Comm: syz.1.289 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   74.154658][ T6846] Tainted: [L]=SOFTLOCKUP
[   74.154662][ T6846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.154668][ T6846] Call Trace:
[   74.154673][ T6846]  <TASK>
[   74.154678][ T6846]  dump_stack_lvl+0x100/0x190
[   74.154710][ T6846]  should_fail_ex.cold+0x5/0xa
[   74.154727][ T6846]  should_failslab+0xc2/0x120
[   74.154745][ T6846]  kmem_cache_alloc_noprof+0x92/0x6a0
[   74.154757][ T6846]  ? security_file_alloc+0x34/0x2c0
[   74.154773][ T6846]  security_file_alloc+0x34/0x2c0
[   74.154786][ T6846]  init_file+0x95/0x480
[   74.154802][ T6846]  alloc_empty_file+0x79/0x1c0
[   74.154817][ T6846]  alloc_file_pseudo+0x183/0x290
[   74.154832][ T6846]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   74.154847][ T6846]  ? alloc_fd+0x471/0x7a0
[   74.154862][ T6846]  ? do_raw_spin_unlock+0x145/0x1e0
[   74.154892][ T6846]  __anon_inode_getfile+0xe8/0x280
[   74.154906][ T6846]  anon_inode_getfile_fmode+0x37/0xa0
[   74.154918][ T6846]  do_signalfd4+0x1ed/0x480
[   74.154930][ T6846]  __x64_sys_signalfd4+0x14b/0x1d0
[   74.154941][ T6846]  ? ksys_write+0x1ac/0x250
[   74.154952][ T6846]  ? __pfx___x64_sys_signalfd4+0x10/0x10
[   74.154967][ T6846]  do_syscall_64+0x123/0x790
[   74.154988][ T6846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.154999][ T6846] RIP: 0033:0x7f9a6c59e159
[   74.155008][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.155018][ T6846] RSP: 002b:00007f9a6d436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121
[   74.155030][ T6846] RAX: ffffffffffffffda RBX: 00007f9a6c825fa0 RCX: 00007f9a6c59e159
[   74.155038][ T6846] RDX: 0000000000000008 RSI: 0000200000000140 RDI: ffffffffffffffff
[   74.155045][ T6846] RBP: 00007f9a6c63503b R08: 0000000000000000 R09: 0000000000000000
[   74.155053][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.155060][ T6846] R13: 00007f9a6c826038 R14: 00007f9a6c825fa0 R15: 00007ffd743880b8
[   74.155074][ T6846]  </TASK>
[   74.299763][ T6867] xt_REDIRECT: bad rangesize 26624.
[   74.324258][   T43] audit: type=1400 audit(1789512858.624:481): avc:  denied  { ioctl } for  pid=6866 comm="syz.3.296" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   74.327840][ T6870] FAULT_INJECTION: forcing a failure.
[   74.327840][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   74.327868][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.2.298 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   74.327892][ T6870] Tainted: [L]=SOFTLOCKUP
[   74.327900][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   74.327909][ T6870] Call Trace:
[   74.327914][ T6870]  <TASK>
[   74.327920][ T6870]  dump_stack_lvl+0x100/0x190
[   74.327940][ T6870]  should_fail_ex.cold+0x5/0xa
[   74.327956][ T6870]  _copy_from_user+0x2e/0xd0
[   74.327968][ T6870]  copy_msghdr_from_user+0x9f/0x4c0
[   74.327994][ T6870]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   74.328014][ T6870]  ? lock_acquire+0x1d1/0x380
[   74.328026][ T6870]  ? get_pid_task+0x2a/0x250
[   74.328042][ T6870]  ___sys_sendmsg+0x106/0x1e0
[   74.328059][ T6870]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.328076][ T6870]  ? get_pid_task+0x106/0x250
[   74.328095][ T6870]  ? find_held_lock+0x2b/0x80
[   74.328118][ T6870]  __sys_sendmsg+0x160/0x210
[   74.328132][ T6870]  ? __pfx___sys_sendmsg+0x10/0x10
[   74.328152][ T6870]  do_syscall_64+0x123/0x790
[   74.328172][ T6870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.328184][ T6870] RIP: 0033:0x7f13e499e159
[   74.328193][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.328203][ T6870] RSP: 002b:00007f13e5943028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.328214][ T6870] RAX: ffffffffffffffda RBX: 00007f13e4c25fa0 RCX: 00007f13e499e159
[   74.328221][ T6870] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003
[   74.328227][ T6870] RBP: 00007f13e5943090 R08: 0000000000000000 R09: 0000000000000000
[   74.328233][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.328239][ T6870] R13: 00007f13e4c26038 R14: 00007f13e4c25fa0 R15: 00007ffd64c7fcf8
[   74.328252][ T6870]  </TASK>
[   74.356840][   T43] audit: type=1400 audit(1789512858.654:482): avc:  denied  { write } for  pid=6866 comm="syz.3.296" name="sched" dev="tracefs" ino=13226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   74.364742][   T43] audit: type=1400 audit(1789512858.664:483): avc:  denied  { create } for  pid=6866 comm="syz.3.296" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1
[   74.365625][   T43] audit: type=1400 audit(1789512858.664:484): avc:  denied  { read write } for  pid=6866 comm="syz.3.296" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   74.365848][   T43] audit: type=1400 audit(1789512858.664:485): avc:  denied  { open } for  pid=6866 comm="syz.3.296" path="/92/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   74.391744][   T43] audit: type=1400 audit(1789512858.694:486): avc:  denied  { map } for  pid=6871 comm="syz.0.297" path="socket:[13228]" dev="sockfs" ino=13228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.408038][   T43] audit: type=1400 audit(1789512858.704:487): avc:  denied  { write } for  pid=6877 comm="syz.2.299" name="usb_gadget" dev="configfs" ino=6547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   74.567651][ T5103] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   74.720702][ T5103] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   74.723360][ T5103] usb 8-1: unable to read config index 0 descriptor/start: -71
[   74.723391][ T5103] usb 8-1: can't read configurations, error -71
[   76.027685][ T5729] Bluetooth: hci3: command 0x0c1a tx timeout
[   76.027720][ T5729] Bluetooth: hci2: command 0x0c1a tx timeout
[   76.027741][ T5729] Bluetooth: hci1: command 0x0c1a tx timeout
[   76.507663][ T6875] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   76.507753][ T5735] Bluetooth: hci0: command 0x0419 tx timeout
[   77.326850][ T6875] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.326999][ T6875] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.327071][ T6875] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   77.420883][ T6900] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[   77.448230][ T6903] kAFS: No cell specified
[   77.453213][ T6903] fuseblk: Unknown parameter 'smackfshat'
[   77.456479][ T6904] FAULT_INJECTION: forcing a failure.
[   77.456479][ T6904] name failslab, interval 1, probability 0, space 0, times 0
[   77.456499][ T6904] CPU: 3 UID: 0 PID: 6904 Comm: syz.0.308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   77.456514][ T6904] Tainted: [L]=SOFTLOCKUP
[   77.456519][ T6904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.456525][ T6904] Call Trace:
[   77.456529][ T6904]  <TASK>
[   77.456533][ T6904]  dump_stack_lvl+0x100/0x190
[   77.456555][ T6904]  should_fail_ex.cold+0x5/0xa
[   77.456571][ T6904]  should_failslab+0xc2/0x120
[   77.456589][ T6904]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   77.456607][ T6904]  ? __alloc_skb+0x5b7/0x710
[   77.456644][ T6904]  ? __alloc_skb+0x140/0x710
[   77.456666][ T6904]  __alloc_skb+0x140/0x710
[   77.456683][ T6904]  ? __alloc_skb+0x5b7/0x710
[   77.456702][ T6904]  ? __pfx___alloc_skb+0x10/0x10
[   77.456721][ T6904]  netlink_alloc_large_skb+0x69/0x150
[   77.456735][ T6904]  netlink_sendmsg+0x680/0xda0
[   77.456754][ T6904]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.456768][ T6904]  ? selinux_socket_sendmsg+0x198/0x2f0
[   77.456783][ T6904]  ____sys_sendmsg+0xa4d/0xbe0
[   77.456798][ T6904]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.456811][ T6904]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.456830][ T6904]  ? lock_acquire+0x1d1/0x380
[   77.456842][ T6904]  ? get_pid_task+0x2a/0x250
[   77.456859][ T6904]  ___sys_sendmsg+0x190/0x1e0
[   77.456877][ T6904]  ? __pfx____sys_sendmsg+0x10/0x10
[   77.456894][ T6904]  ? get_pid_task+0x106/0x250
[   77.456913][ T6904]  ? find_held_lock+0x2b/0x80
[   77.456937][ T6904]  __sys_sendmsg+0x160/0x210
[   77.456951][ T6904]  ? __pfx___sys_sendmsg+0x10/0x10
[   77.456972][ T6904]  do_syscall_64+0x123/0x790
[   77.456988][ T6904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.457000][ T6904] RIP: 0033:0x7f71f299e159
[   77.457009][ T6904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.457020][ T6904] RSP: 002b:00007f71f380d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.457031][ T6904] RAX: ffffffffffffffda RBX: 00007f71f2c25fa0 RCX: 00007f71f299e159
[   77.457038][ T6904] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003
[   77.457044][ T6904] RBP: 00007f71f380d090 R08: 0000000000000000 R09: 0000000000000000
[   77.457050][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.457057][ T6904] R13: 00007f71f2c26038 R14: 00007f71f2c25fa0 R15: 00007ffedfa4eb38
[   77.457071][ T6904]  </TASK>
[   77.505816][ T6907] jffs2: notice: (6907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   77.521672][ T6907] warning: `syz.2.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.680641][ T6921] __nla_validate_parse: 8 callbacks suppressed
[   77.680655][ T6921] netlink: 164 bytes leftover after parsing attributes in process `syz.3.314'.
[   77.856799][ T6924] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.857009][ T6924] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.857139][ T6924] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.857260][ T6924] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   78.235443][ T6962] loop0: detected capacity change from 0 to 4096
[   78.269599][ T6964] validate_nla: 4 callbacks suppressed
[   78.269619][ T6964] netlink: 'syz.0.326': attribute type 16 has an invalid length.
[   78.269632][ T6964] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.326'.
[   78.288553][ T6959] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   78.288701][ T6959] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   78.288808][ T6959] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   78.288879][ T6959] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   78.299406][ T6962] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   78.299430][ T6962] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   78.299475][ T6962]  loop0:
[   78.449853][ T6973] Bluetooth: hci0: invalid len left 7, exp >= 18
[   78.960962][   T43] kauditd_printk_skb: 21 callbacks suppressed
[   78.960976][   T43] audit: type=1400 audit(1789512863.264:509): avc:  denied  { read } for  pid=6985 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   78.962666][ T6986] syzkaller0: entered promiscuous mode
[   78.963673][ T6986] netlink: 'syz.3.335': attribute type 14 has an invalid length.
[   79.024369][   T43] audit: type=1400 audit(1789512863.324:510): avc:  denied  { read write } for  pid=6989 comm="syz.3.336" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   79.024399][   T43] audit: type=1400 audit(1789512863.324:511): avc:  denied  { open } for  pid=6989 comm="syz.3.336" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   79.024418][   T43] audit: type=1400 audit(1789512863.324:512): avc:  denied  { create } for  pid=6989 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   79.024435][   T43] audit: type=1400 audit(1789512863.324:513): avc:  denied  { setopt } for  pid=6989 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   79.024455][   T43] audit: type=1400 audit(1789512863.324:514): avc:  denied  { map } for  pid=6989 comm="syz.3.336" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   79.024625][   T43] audit: type=1400 audit(1789512863.324:515): avc:  denied  { execute } for  pid=6989 comm="syz.3.336" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   79.045679][ T6990] input: syz0 as /devices/virtual/input/input6
[   79.065414][   T43] audit: type=1400 audit(1789512863.364:516): avc:  denied  { read } for  pid=5126 comm="acpid" name="event2" dev="devtmpfs" ino=2972 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.065456][   T43] audit: type=1400 audit(1789512863.364:517): avc:  denied  { open } for  pid=5126 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=2972 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.065490][   T43] audit: type=1400 audit(1789512863.364:518): avc:  denied  { ioctl } for  pid=5126 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=2972 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.236192][ T6998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.338'.
[   79.255749][ T6998] evm: overlay not supported
[   79.308420][ T7004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   79.308527][ T7004] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   79.308623][ T7004] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   79.365559][ T7014] loop0: detected capacity change from 0 to 4096
[   79.401832][ T7014] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   79.401857][ T7014] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   79.401901][ T7014]  loop0:
[   79.479446][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   79.480480][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   79.484310][ T7019] netlink: 'syz.0.341': attribute type 2 has an invalid length.
[   79.568938][ T7036] netlink: 52 bytes leftover after parsing attributes in process `syz.2.345'.
[   79.750639][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'.
[   79.961071][ T5837] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   80.120553][ T5837] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   80.121502][ T5837] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.121540][ T5837] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   80.121560][ T5837] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   80.121578][ T5837] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   80.121607][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.124454][ T7049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   80.124519][ T7049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   80.151415][ T5735] Bluetooth: hci2: unexpected event for opcode 0x2035
[   80.159334][ T5837] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[   80.160470][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[   80.160504][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[   80.165117][ T5837] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   80.165869][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[   80.165902][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[   80.170385][ T5837] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   80.230541][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'.
[   80.230560][ T7082] nbd: must specify at least one socket
[   80.336968][ T7095] loop0: detected capacity change from 0 to 4096
[   80.347611][ T5735] Bluetooth: hci0: command 0x0419 tx timeout
[   80.352359][ T2319] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   80.352375][ T2319] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   80.453520][ T7095] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   80.453535][ T7095] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   80.453559][ T7095]  loop0:
[   80.498906][ T5837] usb 7-1: USB disconnect, device number 9
[   80.503594][ T5837] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   80.518339][ T5837] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   80.518712][ T5837] keyspan 7-1:1.0: device disconnected
[   80.646862][ T7101] mmap: syz.0.363 (7101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   80.837699][ T5843] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   80.989537][ T5843] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   80.991041][ T5843] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   80.991064][ T5843] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   80.993193][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.993212][ T5843] usb 8-1: Product: syz
[   80.993224][ T5843] usb 8-1: Manufacturer: syz
[   80.993235][ T5843] usb 8-1: SerialNumber: syz
[   80.998166][ T7099] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   80.998249][ T7099] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   80.999674][ T5843] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   80.999688][ T5843] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   80.999719][ T5843] usbserial_generic 8-1:1.0: generic converter detected
[   81.006849][ T5843] usb 8-1: generic converter now attached to ttyUSB0
[   81.215988][ T5843] usb 8-1: USB disconnect, device number 5
[   81.223884][ T5843] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   81.224406][ T5843] usbserial_generic 8-1:1.0: device disconnected
[   81.357671][   T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   81.388588][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.388613][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout
[   81.390133][ T2319] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   81.390156][ T2319] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   81.455100][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[   81.473310][ T7126] process 'syz.2.372' launched './file2' with NULL argv: empty string added
[   81.507645][   T42] usb 6-1: Using ep0 maxpacket: 8
[   81.508218][   T42] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   81.510853][   T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 253, changing to 11
[   81.510869][   T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024
[   81.510888][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.514772][   T42] usb 6-1: config 0 descriptor??
[   81.515211][ T7112] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   81.587985][ T7135] syzkaller0: left promiscuous mode
[   81.587999][ T7135] syzkaller0: left allmulticast mode
[   81.667447][ T7142] loop0: detected capacity change from 0 to 4096
[   81.727724][   T42] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   81.734443][ T7142] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   81.734459][ T7142] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   81.734486][ T7142]  loop0:
[   81.822300][ T7144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   81.848801][ T7144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   81.929907][ T5837] usb 6-1: USB disconnect, device number 6
[   82.559104][ T7166] netlink: 'syz.1.381': attribute type 2 has an invalid length.
[   82.559123][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.381'.
[   82.976492][ T7030] IPVS: starting estimator thread 0...
[   83.003722][ T7190] syzkaller0: left promiscuous mode
[   83.003748][ T7190] syzkaller0: left allmulticast mode
[   83.027774][   T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.027815][   T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.027844][   T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.027872][   T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.077711][ T7187] IPVS: using max 44 ests per chain, 105600 per kthread
[   83.094211][ T7193] kvm [7192]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   83.094793][ T7193] kvm [7192]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   83.166288][ T7197] ipvlan2: entered allmulticast mode
[   83.166329][ T7197] virt_wifi0: entered allmulticast mode
[   83.171900][ T7197] batman_adv: batadv0: Adding interface: ipvlan2
[   83.171915][ T7197] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.171942][ T7197] batman_adv: batadv0: Interface activated: ipvlan2
[   83.311008][   T62] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   83.376429][ T7207] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   83.470283][   T62] usb 8-1: Using ep0 maxpacket: 8
[   83.472677][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout
[   83.472842][ T2319] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   83.472855][ T2319] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[   83.476275][   T62] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   83.477404][   T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.477443][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.481534][   T62] usb 8-1: config 0 descriptor??
[   83.667676][ T5843] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   83.697051][   T62] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   83.827661][ T5843] usb 6-1: Using ep0 maxpacket: 8
[   83.828563][ T5843] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[   83.829692][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.829727][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   83.829748][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.831942][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   83.831961][ T5843] usb 6-1: Product: syz
[   83.831973][ T5843] usb 6-1: Manufacturer: syz
[   83.831985][ T5843] usb 6-1: SerialNumber: syz
[   83.835599][ T5843] usb 6-1: config 0 descriptor??
[   83.897721][ T5843] rc_core: IR keymap rc-imon-rsc not found
[   83.897825][ T5843] Registered IR keymap rc-empty
[   83.901391][ T5843] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   83.903159][ T5843] input: iMON Station as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input8
[   84.016613][   T43] kauditd_printk_skb: 34 callbacks suppressed
[   84.016631][   T43] audit: type=1400 audit(1789512868.314:553): avc:  denied  { write } for  pid=7222 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.056833][ T5837] usb 6-1: USB disconnect, device number 7
[   84.122132][   T43] audit: type=1400 audit(1789512868.424:554): avc:  denied  { write } for  pid=7227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.174346][   T43] audit: type=1400 audit(1789512868.474:555): avc:  denied  { call } for  pid=7232 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   84.195776][   T43] audit: type=1400 audit(1789512868.494:556): avc:  denied  { write } for  pid=7237 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.591008][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[   84.600771][ T5837] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   84.647284][ T7253] hfsplus: unable to find HFS+ superblock
[   84.749944][ T5837] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   84.750993][ T5837] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.751017][ T5837] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   84.751030][ T5837] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   84.751041][ T5837] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   84.751061][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.753618][ T7247] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   84.753674][ T7247] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   84.756065][ T5837] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[   84.757449][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[   84.757510][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[   84.802308][ T5837] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   84.805968][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[   84.806036][ T5837] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[   84.822908][ T5837] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   84.988559][ T7265] gadgetfs: bound to dummy_udc driver
[   85.070073][   T35] usb 7-1: USB disconnect, device number 10
[   85.088368][   T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   85.101516][   T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   85.102196][   T35] keyspan 7-1:1.0: device disconnected
[   85.194420][   T43] audit: type=1400 audit(1789512869.494:557): avc:  denied  { unmount } for  pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   85.300160][ T7275] netlink: 164 bytes leftover after parsing attributes in process `syz.1.407'.
[   85.398945][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout
[   85.400432][ T2319] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[   85.400446][ T2319] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[   85.429736][ T5141] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   85.429757][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   85.429784][ T5141]  loop0:
[   85.553210][ T2319] tipc: Resetting bearer <eth:wlan0>
[   85.688139][   T43] audit: type=1400 audit(1789512869.994:558): avc:  denied  { ioctl } for  pid=7286 comm="syz.2.411" path="socket:[18689]" dev="sockfs" ino=18689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   85.690815][   T43] audit: type=1400 audit(1789512869.994:559): avc:  denied  { block_suspend } for  pid=7286 comm="syz.2.411" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   85.815771][ T7299] netlink: 'syz.1.414': attribute type 32 has an invalid length.
[   85.868471][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.868493][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.907309][ T7307] netlink: 164 bytes leftover after parsing attributes in process `syz.2.416'.
[   86.043785][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.043867][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.090869][    T9] usb 8-1: USB disconnect, device number 6
[   86.137414][   T43] audit: type=1400 audit(1789512870.434:560): avc:  denied  { append } for  pid=7313 comm="syz.1.420" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   86.185566][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.185587][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.217437][   T43] audit: type=1400 audit(1789512870.514:561): avc:  denied  { execute } for  pid=7316 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   86.218193][   T43] audit: type=1400 audit(1789512870.524:562): avc:  denied  { execute_no_trans } for  pid=7316 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   86.272692][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.272715][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.280928][ T7322] Bluetooth: MGMT ver 1.23
[   86.289214][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.291358][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.292174][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.292546][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.293443][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.305180][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.306935][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.307106][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.307245][ T5141] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[   86.307259][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   86.307290][ T5141]  loop0:
[   86.307509][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.309249][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.467276][   T13] bridge_slave_1: left allmulticast mode
[   86.467298][   T13] bridge_slave_1: left promiscuous mode
[   86.467970][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.477699][ T5103] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   86.483128][   T13] bridge_slave_0: left allmulticast mode
[   86.483143][   T13] bridge_slave_0: left promiscuous mode
[   86.484162][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.628483][ T5103] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   86.629340][ T5103] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.629374][ T5103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.639109][ T5103] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[   86.639335][ T5103] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[   86.639385][ T5103] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[   86.647441][ T5103] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[   86.647501][ T5103] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[   86.661733][ T5103] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   86.666459][ T5103] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[   86.666517][ T5103] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[   86.678956][ T5103] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   86.751738][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.755680][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.756779][   T13] bond0 (unregistering): Released all slaves
[   86.773534][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2
[   86.971210][ T5843] usb 6-1: USB disconnect, device number 8
[   86.984231][ T5843] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   87.039488][ T5843] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   87.039766][ T5843] keyspan 6-1:1.0: device disconnected
[   87.060723][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3
[   87.119359][   T13] hsr_slave_0: left promiscuous mode
[   87.119893][   T13] hsr_slave_1: left promiscuous mode
[   87.120262][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.120279][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.121204][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.121214][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.127155][   T13] veth1_macvtap: left promiscuous mode
[   87.127184][   T13] veth0_macvtap: left promiscuous mode
[   87.127231][   T13] veth1_vlan: left promiscuous mode
[   87.127276][   T13] veth0_vlan: left promiscuous mode
[   87.179198][ T7374] comedi comedi1: das16m1: I/O base address or length out of range
[   87.321492][   T13] team0 (unregistering): Port device team_slave_1 removed
[   87.340156][   T13] team0 (unregistering): Port device team_slave_0 removed
[   87.682841][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.682931][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.683007][ T7323] bridge_slave_0: entered allmulticast mode
[   87.686199][ T7323] bridge_slave_0: entered promiscuous mode
[   87.687522][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.704873][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.704965][ T7323] bridge_slave_1: entered allmulticast mode
[   87.713876][ T7323] bridge_slave_1: entered promiscuous mode
[   87.749141][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4
[   87.758392][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.762487][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.790110][ T7323] team0: Port device team_slave_0 added
[   87.793527][ T7323] team0: Port device team_slave_1 added
[   87.795875][ T7408] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   87.829941][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.829959][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.829981][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.836085][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.836102][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.836123][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.881155][ T7323] hsr_slave_0: entered promiscuous mode
[   87.881768][ T7323] hsr_slave_1: entered promiscuous mode
[   87.988556][ T7323] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.990951][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.991851][ T7323] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.012799][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.013953][ T7323] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.016941][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.017442][ T7323] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.026495][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.030409][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5
[   88.050469][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.050539][ T7323] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.051594][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.051641][ T7323] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.052944][ T7429] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0)
[   88.052961][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.055803][ T7429] Trying to write to read-only block-device nullb0
[   88.092770][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.100936][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.101353][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.107174][ T7323] 8021q: adding VLAN 0 to HW filter on device team0
[   88.121219][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.121346][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.125315][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.125439][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.287850][ T5843] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   88.296935][ T7450] syz.2.444 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   88.348099][ T5735] Bluetooth: hci0: command tx timeout
[   88.429195][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.438722][ T5843] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   88.440746][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.440771][ T5843] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   88.440784][ T5843] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   88.440796][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   88.440816][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.447738][ T7425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   88.447841][ T7425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   88.451347][ T5843] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[   88.452153][ T5843] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[   88.452186][ T5843] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[   88.454625][ T5843] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   88.455695][ T5843] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[   88.455756][ T5843] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[   88.469485][ T5843] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   88.666357][ T7323] veth0_vlan: entered promiscuous mode
[   88.674461][ T7323] veth1_vlan: entered promiscuous mode
[   88.695292][ T7323] veth0_macvtap: entered promiscuous mode
[   88.700943][ T7323] veth1_macvtap: entered promiscuous mode
[   88.716511][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.721809][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.724934][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.725073][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.792876][   T35] usb 6-1: USB disconnect, device number 9
[   88.817639][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.817667][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.839033][   T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   88.840476][   T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   88.840987][   T35] keyspan 6-1:1.0: device disconnected
[   88.875704][ T7037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.875718][ T7037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.910465][ T7037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.910478][ T7037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.918995][ T7489] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[   88.925549][ T7489] loop7: detected capacity change from 0 to 7
[   88.974071][ T7489] Dev loop7: unable to read RDB block 7
[   88.974098][ T7489]  loop7: unable to read partition table
[   88.974255][ T7489] loop7: partition table beyond EOD, truncated
[   88.974308][ T7489] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   89.023965][   T43] kauditd_printk_skb: 19 callbacks suppressed
[   89.023978][   T43] audit: type=1400 audit(1789512873.324:582): avc:  denied  { write } for  pid=5737 comm="syz-executor" name="138" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.025186][   T43] audit: type=1400 audit(1789512873.324:583): avc:  denied  { remove_name } for  pid=5737 comm="syz-executor" name="sys" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.025487][   T43] audit: type=1400 audit(1789512873.324:584): avc:  denied  { write } for  pid=5737 comm="syz-executor" name="138" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.025776][   T43] audit: type=1400 audit(1789512873.324:585): avc:  denied  { write } for  pid=5737 comm="syz-executor" name="138" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.026027][   T43] audit: type=1400 audit(1789512873.324:586): avc:  denied  { write } for  pid=5737 comm="syz-executor" name="138" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.029826][   T43] audit: type=1400 audit(1789512873.334:587): avc:  denied  { write } for  pid=5737 comm="syz-executor" name="138" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.030159][   T43] audit: type=1400 audit(1789512873.334:588): avc:  denied  { rmdir } for  pid=5737 comm="syz-executor" name="138" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   89.055566][ T7497] netlink: 'syz.4.455': attribute type 32 has an invalid length.
[   89.123237][   T43] audit: type=1400 audit(1789512873.424:589): avc:  denied  { write } for  pid=7498 comm="syz.3.456" name="functions" dev="configfs" ino=13230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   89.125723][   T43] audit: type=1400 audit(1789512873.424:590): avc:  denied  { write } for  pid=7498 comm="syz.3.456" name="configs" dev="configfs" ino=13231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   89.127749][   T43] audit: type=1400 audit(1789512873.424:591): avc:  denied  { write } for  pid=7498 comm="syz.3.456" name="c.1" dev="configfs" ino=19353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   89.251724][ T7509] No control pipe specified
[   89.415921][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'.
[   89.415956][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.467'.
[   89.421962][ T7524] geneve3: entered promiscuous mode
[   89.421981][ T7524] geneve3: entered allmulticast mode
[   89.478725][ T5843] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   89.648435][ T5843] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   89.649522][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.649545][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.649561][ T5843] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   89.649590][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.658615][ T5843] usb 9-1: config 0 descriptor??
[   90.072997][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073031][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073048][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073066][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073083][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073100][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073117][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073135][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073153][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.073170][ T5843] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   90.089193][ T5843] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   90.309450][ T7533] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   90.309538][ T7533] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   90.312971][ T7533] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   90.568860][ T7568] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   90.707766][ T1016] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   90.750651][ T7589] xt_REDIRECT: bad rangesize 26624.
[   90.861289][ T1016] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   90.862181][ T1016] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.862203][ T1016] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   90.862216][ T1016] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   90.862227][ T1016] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   90.862246][ T1016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.864501][ T7562] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   90.864552][ T7562] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   90.868448][ T1016] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[   90.878781][ T1016] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[   90.880808][ T1016] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[   90.881922][ T1016] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   90.882893][ T1016] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[   90.882926][ T1016] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[   90.891759][ T1016] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   91.001859][ T7604] TCP: TCP_TX_DELAY enabled
[   91.135745][ T7614] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[   91.196655][ T2319] usb 7-1: USB disconnect, device number 11
[   91.219835][ T2319] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   91.232508][ T2319] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   91.234526][ T2319] keyspan 7-1:1.0: device disconnected
[   91.370133][ T7507] usb 9-1: string descriptor 0 read error: -2
[   91.510007][ T5843] usb 9-1: reset high-speed USB device number 2 using dummy_hcd
[   91.647648][ T5843] usb 9-1: device descriptor read/64, error -32
[   91.824494][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   91.824528][ T7635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'.
[   91.829768][ T7635] geneve2: entered promiscuous mode
[   91.829787][ T7635] geneve2: entered allmulticast mode
[   91.909851][ T5843] usb 9-1: reset high-speed USB device number 2 using dummy_hcd
[   92.038112][ T5843] usb 9-1: device descriptor read/64, error -32
[   92.287715][ T5843] usb 9-1: reset high-speed USB device number 2 using dummy_hcd
[   92.320487][ T5843] usb 9-1: device descriptor read/8, error -71
[   92.590371][ T5735] Bluetooth: hci0: command 0x040f tx timeout
[   93.221162][   T62] usb 9-1: USB disconnect, device number 2
[   94.108742][ T7613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   94.152794][ T7652] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[   94.192451][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'.
[   94.215844][ T7661] ip6erspan0: entered promiscuous mode
[   94.247747][ T7665] bridge_slave_0: left allmulticast mode
[   94.247772][ T7665] bridge_slave_0: left promiscuous mode
[   94.250870][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.260005][ T7665] bridge_slave_1: left allmulticast mode
[   94.260029][ T7665] bridge_slave_1: left promiscuous mode
[   94.260198][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.275868][ T7665] bond0: (slave bond_slave_0): Releasing backup interface
[   94.285589][ T7665] bond0: (slave bond_slave_1): Releasing backup interface
[   94.294091][ T7665] team0: Port device team_slave_0 removed
[   94.305267][ T7665] team0: Port device team_slave_1 removed
[   94.305706][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.305718][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.309933][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.309946][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.311852][ T7665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.316442][ T7674] capability: warning: `syz.4.512' uses deprecated v2 capabilities in a way that may be insecure
[   94.321395][   T43] kauditd_printk_skb: 13 callbacks suppressed
[   94.321410][   T43] audit: type=1400 audit(1789512878.624:605): avc:  denied  { read } for  pid=7671 comm="syz.4.512" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   94.321667][   T43] audit: type=1400 audit(1789512878.624:606): avc:  denied  { open } for  pid=7671 comm="syz.4.512" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   94.322775][ T7666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.375358][   T43] audit: type=1400 audit(1789512878.674:607): avc:  denied  { sqpoll } for  pid=7671 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   94.424730][ T7673] netlink: 'syz.3.511': attribute type 6 has an invalid length.
[   94.424747][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'.
[   94.457649][   T62] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[   94.552228][ T7676] cgroup: fork rejected by pids controller in /syz4
[   94.597973][ T5843] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   94.603033][ T7678] cgroup: fork rejected by pids controller in /syz3
[   94.628071][   T62] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   94.628865][   T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.628889][   T62] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   94.628902][   T62] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[   94.628913][   T62] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   94.628932][   T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.630710][ T7660] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   94.630809][ T7660] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   94.631773][   T62] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[   94.634886][   T62] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[   94.634921][   T62] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[   94.635829][   T62] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   94.636490][   T62] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[   94.636522][   T62] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[   94.637172][   T62] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   94.669620][ T5735] Bluetooth: hci0: command 0x040f tx timeout
[   94.769800][ T5843] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   94.772960][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.772976][ T5843] usb 6-1: Product: syz
[   94.772983][ T5843] usb 6-1: Manufacturer: syz
[   94.772990][ T5843] usb 6-1: SerialNumber: syz
[   94.958166][   T42] usb 7-1: USB disconnect, device number 12
[   94.972536][   T42] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   94.981255][   T42] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   94.981901][   T42] keyspan 7-1:1.0: device disconnected
[   95.266027][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'.
[   95.290287][ T7803] geneve1: entered allmulticast mode
[   95.463474][   T43] audit: type=1
** replaying previous printk message **
[   95.463474][   T43] audit: type=1400 audit(1789512879.764:608): avc:  denied  { append } for  pid=7812 comm="syz.3.517" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   95.469194][ T7813] ------------[ cut here ]------------
[   95.469205][ T7813] 1
[   95.469210][ T7813] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2137/0x3300, CPU#3: syz.3.517/7813
[   95.484688][ T7813] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   95.486061][ T7813] CPU: 3 UID: 0 PID: 7813 Comm: syz.3.517 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.489661][ T7813] Tainted: [L]=SOFTLOCKUP
[   95.491020][ T7813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.494170][ T7813] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300
[   95.496295][ T7813] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d a2 93 bb 0e 00 0f 85 9d e2 ff ff c6 05 95 93 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7
[   95.502380][ T7813] RSP: 0018:ffffc90003f8f6c0 EFLAGS: 00010246
[   95.504301][ T7813] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   95.507002][ T7813] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0
[   95.509638][ T7813] RBP: 0000000000000015 R08: 0000000000000000 R09: 0000000000000009
[   95.512123][ T7813] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
[   95.514634][ T7813] R13: 1ffff920007f1f34 R14: 0000000000000000 R15: 1ffff920007f1ef2
[   95.517157][ T7813] FS:  00007fcd9f7f66c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000
[   95.520450][ T7813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.522876][ T7813] CR2: 0000000000000000 CR3: 0000000055d27000 CR4: 0000000000352ef0
[   95.525491][ T7813] Call Trace:
[   95.526657][ T7813]  <TASK>
[   95.527658][ T7813]  ? lock_acquire+0x1d1/0x380
[   95.529209][ T7813]  ? unwind_next_frame+0xbd/0x2090
[   95.531032][ T7813]  ? lock_acquire+0x1d1/0x380
[   95.532643][ T7813]  ? is_bpf_text_address+0x25/0x1a0
[   95.534318][ T7813]  ? find_held_lock+0x2b/0x80
[   95.535906][ T7813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   95.537990][ T7813]  ? bpf_ksym_find+0x128/0x1c0
[   95.539625][ T7813]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   95.541661][ T7813]  ? is_bpf_text_address+0x94/0x1a0
[   95.543739][ T7813]  ? kernel_text_address+0x8d/0x100
[   95.545817][ T7813]  ? __kernel_text_address+0xd/0x30
[   95.547931][ T7813]  ? unwind_get_return_address+0x59/0xa0
[   95.550132][ T7813]  ? arch_stack_walk+0xa6/0xf0
[   95.552096][ T7813]  ? tomoyo_path_number_perm+0x46d/0x580
[   95.555145][ T7813]  ? stack_trace_save+0x8e/0xc0
[   95.557093][ T7813]  ? __pfx_stack_trace_save+0x10/0x10
[   95.559440][ T7813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   95.561834][ T7813]  ? policy_nodemask+0xed/0x4f0
[   95.563777][ T7813]  alloc_pages_mpol+0x201/0x550
[   95.565715][ T7813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   95.567893][ T7813]  ? security_file_ioctl+0xd3/0x230
[   95.569947][ T7813]  ? do_syscall_64+0x123/0x790
[   95.571862][ T7813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.574755][ T7813]  ___kmalloc_large_node+0xe8/0x130
[   95.576835][ T7813]  ? avc_has_extended_perms+0x201/0x1080
[   95.579531][ T7813]  __kmalloc_large_node_noprof+0x1c/0x70
[   95.581993][ T7813]  __kmalloc_noprof+0x5a8/0x840
[   95.584114][ T7813]  ? drm_syncobj_array_find+0x34/0x3a0
[   95.586433][ T7813]  drm_syncobj_array_find+0x34/0x3a0
[   95.588814][ T7813]  drm_syncobj_query_ioctl+0x25d/0xa90
[   95.591194][ T7813]  ? lock_acquire+0x1d1/0x380
[   95.593174][ T7813]  ? drm_dev_enter+0x53/0x170
[   95.595168][ T7813]  ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[   95.597807][ T7813]  ? find_held_lock+0x2b/0x80
[   95.599832][ T7813]  ? drm_dev_exit+0x41/0x60
[   95.601735][ T7813]  ? drm_dev_exit+0x41/0x60
[   95.603672][ T7813]  drm_ioctl_kernel+0x1f3/0x3e0
[   95.605686][ T7813]  ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[   95.608240][ T7813]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[   95.610431][ T7813]  drm_ioctl+0x5e6/0xc60
[   95.612278][ T7813]  ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[   95.614815][ T7813]  ? __pfx_drm_ioctl+0x10/0x10
[   95.616822][ T7813]  ? __fget_files+0x34/0x3d0
[   95.619207][ T7813]  ? selinux_file_ioctl+0x13b/0x290
[   95.621564][ T7813]  ? selinux_file_ioctl+0xb6/0x290
[   95.623688][ T7813]  ? __pfx_drm_ioctl+0x10/0x10
[   95.625659][ T7813]  __x64_sys_ioctl+0x18e/0x210
[   95.627760][ T7813]  do_syscall_64+0x123/0x790
[   95.629720][ T7813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.632195][ T7813] RIP: 0033:0x7fcda159e159
[   95.634086][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.641815][ T7813] RSP: 002b:00007fcd9f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.645087][ T7813] RAX: ffffffffffffffda RBX: 00007fcda1825fa0 RCX: 00007fcda159e159
[   95.648359][ T7813] RDX: 0000200000000240 RSI: 00000000c01864cb RDI: 0000000000000009
[   95.651522][ T7813] RBP: 00007fcda163503b R08: 0000000000000000 R09: 0000000000000000
[   95.654218][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.656797][ T7813] R13: 00007fcda1826038 R14: 00007fcda1825fa0 R15: 00007ffe502bd578
[   95.659366][ T7813]  </TASK>
[   95.660358][ T7813] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   95.662649][ T7813] CPU: 3 UID: 0 PID: 7813 Comm: syz.3.517 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.666021][ T7813] Tainted: [L]=SOFTLOCKUP
[   95.667419][ T7813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.670585][ T7813] Call Trace:
[   95.671657][ T7813]  <TASK>
[   95.672637][ T7813]  dump_stack_lvl+0x100/0x190
[   95.674178][ T7813]  vpanic+0x553/0x970
[   95.675466][ T7813]  ? __pfx_vpanic+0x10/0x10
[   95.676930][ T7813]  panic+0xd1/0xe0
[   95.678147][ T7813]  ? __pfx_panic+0x10/0x10
[   95.679602][ T7813]  check_panic_on_warn.cold+0x19/0x34
[   95.681304][ T7813]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   95.683309][ T7813]  __warn.cold+0x191/0x318
[   95.684901][ T7813]  __report_bug+0x30f/0x440
[   95.686503][ T7813]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   95.688542][ T7813]  ? __pfx___report_bug+0x10/0x10
[   95.690206][ T7813]  ? kernel_text_address+0x8d/0x100
[   95.691891][ T7813]  ? __kernel_text_address+0xd/0x30
[   95.693609][ T7813]  ? unwind_get_return_address+0x59/0xa0
[   95.695499][ T7813]  ? arch_stack_walk+0xa6/0xf0
[   95.697041][ T7813]  ? __lock_acquire+0x5c0/0x1f40
[   95.698625][ T7813]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   95.700567][ T7813]  report_bug+0xb3/0x220
[   95.701963][ T7813]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   95.703914][ T7813]  handle_bug+0x16a/0x2a0
[   95.705327][ T7813]  exc_invalid_op+0x17/0x50
[   95.706826][ T7813]  asm_exc_invalid_op+0x1a/0x20
[   95.708361][ T7813] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300
[   95.710496][ T7813] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d a2 93 bb 0e 00 0f 85 9d e2 ff ff c6 05 95 93 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7
[   95.716573][ T7813] RSP: 0018:ffffc90003f8f6c0 EFLAGS: 00010246
[   95.718523][ T7813] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   95.720781][ T7813] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0
[   95.723293][ T7813] RBP: 0000000000000015 R08: 0000000000000000 R09: 0000000000000009
[   95.725823][ T7813] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
[   95.728306][ T7813] R13: 1ffff920007f1f34 R14: 0000000000000000 R15: 1ffff920007f1ef2
[   95.730807][ T7813]  ? lock_acquire+0x1d1/0x380
[   95.732322][ T7813]  ? unwind_next_frame+0xbd/0x2090
[   95.733921][ T7813]  ? lock_acquire+0x1d1/0x380
[   95.735424][ T7813]  ? is_bpf_text_address+0x25/0x1a0
[   95.737098][ T7813]  ? find_held_lock+0x2b/0x80
[   95.738618][ T7813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   95.740607][ T7813]  ? bpf_ksym_find+0x128/0x1c0
[   95.742150][ T7813]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   95.744140][ T7813]  ? is_bpf_text_address+0x94/0x1a0
[   95.745794][ T7813]  ? kernel_text_address+0x8d/0x100
[   95.747569][ T7813]  ? __kernel_text_address+0xd/0x30
[   95.749262][ T7813]  ? unwind_get_return_address+0x59/0xa0
[   95.750958][ T7813]  ? arch_stack_walk+0xa6/0xf0
[   95.752524][ T7813]  ? tomoyo_path_number_perm+0x46d/0x580
[   95.754290][ T7813]  ? stack_trace_save+0x8e/0xc0
[   95.755802][ T7813]  ? __pfx_stack_trace_save+0x10/0x10
[   95.757449][ T7813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   95.759297][ T7813]  ? policy_nodemask+0xed/0x4f0
[   95.760897][ T7813]  alloc_pages_mpol+0x201/0x550
[   95.762446][ T7813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   95.764137][ T7813]  ? security_file_ioctl+0xd3/0x230
[   95.765805][ T7813]  ? do_syscall_64+0x123/0x790
[   95.767293][ T7813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.769136][ T7813]  ___kmalloc_large_node+0xe8/0x130
[   95.770748][ T7813]  ? avc_has_extended_perms+0x201/0x1080
[   95.772480][ T7813]  __kmalloc_large_node_noprof+0x1c/0x70
[   95.774197][ T7813]  __kmalloc_noprof+0x5a8/0x840
[   95.775693][ T7813]  ? drm_syncobj_array_find+0x34/0x3a0
[   95.777368][ T7813]  drm_syncobj_array_find+0x34/0x3a0
[   95.779004][ T7813]  drm_syncobj_query_ioctl+0x25d/0xa90
[   95.780677][ T7813]  ? lock_acquire+0x1d1/0x380
[   95.782133][ T7813]  ? drm_dev_enter+0x53/0x170
[   95.783583][ T7813]  ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[   95.785424][ T7813]  ? find_held_lock+0x2b/0x80
[   95.786918][ T7813]  ? drm_dev_exit+0x41/0x60
[   95.788359][ T7813]  ? drm_dev_exit+0x41/0x60
[   95.789775][ T7813]  drm_ioctl_kernel+0x1f3/0x3e0
[   95.791286][ T7813]  ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[   95.793168][ T7813]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[   95.794825][ T7813]  drm_ioctl+0x5e6/0xc60
[   95.796158][ T7813]  ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[   95.797963][ T7813]  ? __pfx_drm_ioctl+0x10/0x10
[   95.799484][ T7813]  ? __fget_files+0x34/0x3d0
[   95.800924][ T7813]  ? selinux_file_ioctl+0x13b/0x290
[   95.802497][ T7813]  ? selinux_file_ioctl+0xb6/0x290
[   95.804120][ T7813]  ? __pfx_drm_ioctl+0x10/0x10
[   95.805607][ T7813]  __x64_sys_ioctl+0x18e/0x210
[   95.807169][ T7813]  do_syscall_64+0x123/0x790
[   95.808635][ T7813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.810428][ T7813] RIP: 0033:0x7fcda159e159
[   95.811809][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.817716][ T7813] RSP: 002b:00007fcd9f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.820523][ T7813] RAX: ffffffffffffffda RBX: 00007fcda1825fa0 RCX: 00007fcda159e159
[   95.823337][ T7813] RDX: 0000200000000240 RSI: 00000000c01864cb RDI: 0000000000000009
[   95.826162][ T7813] RBP: 00007fcda163503b R08: 0000000000000000 R09: 0000000000000000
[   95.828604][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.831009][ T7813] R13: 00007fcda1826038 R14: 00007fcda1825fa0 R15: 00007ffe502bd578
[   95.833461][ T7813]  </TASK>
[   95.835136][ T7813] Kernel Offset: disabled
[   95.836532][ T7813] Rebooting in 86400 seconds..