last executing test programs:

29.656587948s ago: executing program 3 (id=18):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0a056020"], 0xd)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x40000073, 0x0, 0x8}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000005c0)={0x10000000000000cf, 0x0, [{}]})
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff2}}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0)

28.849030151s ago: executing program 3 (id=31):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/net/bridge0/bridge/hash_elasticity\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/dir1\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000400)=@raw={0x80, 0x0, {'\x00'}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')
sendfile(r2, r2, 0x0, 0x1)

27.851808082s ago: executing program 3 (id=38):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x80) (async)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1)
write$tcp_mem(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000400000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000009500000000000000360a0300ffffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500"/120, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xf}, 0x94)

27.850494403s ago: executing program 3 (id=39):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0xd, 0x7, 0x9})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup2(r1, r1)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x5, 0x4})

27.78935959s ago: executing program 3 (id=40):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x266802, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$peeksig(0x4211, r4, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000240)='clear_refs\x00')
sendfile(r3, r5, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config\x00', 0x1ff)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x64)
ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0xfffffff8, 0x7f, 0x7fff, 0xb, 0x4f, "0c4181070001000000000000006ff88c6b00", 0x9, 0x2})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xa)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000280)={r3})
mount(0x0, &(0x7f00000009c0)='./config\x00', &(0x7f0000000a80)='configfs\x00', 0x0, 0x0)
rmdir(&(0x7f0000000a40)='./config/usb_gadget/g1\x00')

27.731054344s ago: executing program 3 (id=42):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x8, 0x1b}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x40)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x8, 0x1b}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) (async)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) (async)

24.330661741s ago: executing program 2 (id=72):
socket(0x1d, 0x2, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x2, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000580)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000007edbac26860a87fe932897"], 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000080)=ANY=[], 0x342)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'gre0\x00', 0x0})
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r4, 0x78)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000d5dce63aa8e5f4e600"/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7000000004449a50dff7cace3035db5e18849119cf1d4dbea76da354706919bc2c8f6c29b1efad5c4245e40031591717a03b3b8a4b270e25136acf06cde30af0ea35eb73475125598dc9a9ac52953cdba333727643819d780b48ff988dcdc88420f7573ae9a"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a00)={r5, &(0x7f0000000a40), &(0x7f0000000a80)=@tcp=r4}, 0x20)
sendto(r4, &(0x7f0000000ac0)="01", 0x1, 0x4004000, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="ffbfffffffffaaaaaaaaaaaa81004c00000b031700a002030000e7346cd6091a6606"], &(0x7f0000000100)={0x0, 0x1, [0x343, 0x2a3, 0x2e8, 0xa57]})
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x1000000, 0x109031, r3, 0x10000000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000200)={0x5, <r7=>r3, 0x1})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4002}, 0x20004001)
prlimit64(0x0, 0x7, &(0x7f0000000000)={0x1}, 0x0)
syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000138000480340001800b0001006e756d67656e000024000280080003400000000008000240fffff801080001400000000208040440000008000900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

24.142230428s ago: executing program 2 (id=73):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401)
fcntl$dupfd(r0, 0x406, r0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x56481)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x4004550d, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x4e22, 0x9e, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000380)=0x80000002, 0x4)
sendto$inet(r6, &(0x7f00000003c0)="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", 0xffffff5d, 0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050200000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)

21.652434281s ago: executing program 2 (id=76):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{<r1=>r0, &(0x7f0000000000)='\x00', 0x80, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x7]}, {0x6, 0x2, 0x7f}}, 0x9, &(0x7f0000000180), &(0x7f00000001c0)}, 0x4, &(0x7f0000000540)=[{0x2, 0x693e, &(0x7f0000000200)='/%//!@.!{+\'&+\x00', &(0x7f0000000240)="aa5b126e16d2d0634162edbe057e6cff74de0e93a529fd3c1578ddf6c2115f650dd01e14c1cdc132e09f3bbf7516f54330e4ffa205633b3c9a628e4112e0b7e6818739bea344a29d87068a1569db96051d9751cbad0c923fb4061ca64d411820506cb724c5761cf39eb08d1d6f3fd8b7af2033fc82b2cf799e7e87da9e02", 0x7e, 0x30}, {0x3, 0x80000001, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="b048795af2590e509ecb5064d03df944956ea437aa2dc08aecd42617229a11a83f1a5862a973a8d7b29f2af3c2becfa1e332d04c0a66d41b7c04a2a31c5e4451a34606094ecee32f35889589af5f807dc6c8ee3172b82f83c57e5a05abbad0c3ee5d62cce94a254d18e2332fa7f339de93", 0x71}, {0x2, 0x3ff, &(0x7f0000000380)='\\-.\x00', &(0x7f00000003c0)='+', 0x1, 0x20}, {0x1, 0x0, &(0x7f0000000400)='\x00', &(0x7f0000000440)="bfe30463292ceef5d27e275d7a9a058d8a75355dce87fed20d2838ffe96f4f42b537d084e8db319892884ffcc1e06ae732414345dd3efb0481e445788494b7ce718ff773da4c552f26fcf1d378932f7c2e27f7164a96b8e4a7c3e18641ffc490ff3a2927762360ba7998d94786a540d52f9d30cb886b4a50e86882c450059b028be73ab8add0708dab9e1a41abb7cf019753a8acac2318fe97404328dc1d2d182b2de76a3f7ea374190dd801a3a9be43ba32bf8b6c416696b84fb00e6dd3fabec668a2257f7f25011ac89b20f4f90527261bd2f8abc38714f060c9810b4650e97fb88a01fa9b6d16674fbd01f2223cc977b55239026445", 0xf7, 0x28}]})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={<r2=>0x0, @empty, @initdev}, &(0x7f00000006c0)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000006a0008012cbd7000fedbdf250a0000000000000008000500", @ANYRES32=r2, @ANYBLOB="08000180371093145fb3d90002080000"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x49a48a1e4fc92d84)
syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="5e45870dad5769aaaaaaaaaaaaaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa0400907801000000471000000000000000110000e0000002ac141415440c0051ac1414bb4e20fffc443c0001e00000010000000000000000000000007f00080100000000ac1e0001000000000000000000000800e000000200000000ac14140000000004be1b3ff1f05d8f5a312685b436324dedf6233e2c39e37ede8f54d791b8defd42ff6d91cab65424976b763d"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
clock_adjtime(0x17, &(0x7f0000000840)={0x101, 0x9, 0x379ee7, 0x728, 0x4000009, 0x0, 0x89, 0x3, 0x6, 0x7, 0xffffffff, 0x800, 0x800000006d, 0x2, 0x8001, 0xffffffffefffffff, 0x800000, 0x5, 0x8000e, 0x5, 0x200, 0x3, 0x11cb, 0xf, 0x40, 0x9})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000940)={0x2, 0x15, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0)
listen(r5, 0x5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000980)={0x2, 0x15, @loopback}, 0x10)
r7 = accept4(r5, 0x0, 0x0, 0x0)
r8 = getpid()
rt_tgsigqueueinfo(r8, 0x0, 0x1f, &(0x7f00000009c0)={0x16, 0x2, 0x2})
signalfd4(r7, &(0x7f0000000a40)={[0xfffffffffffffff7]}, 0x8, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
write(r7, &(0x7f0000000a80)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c)

20.360974252s ago: executing program 2 (id=97):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000340)='./file0\x00')
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000400)=0x2, 0xfffffffffffffff2, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x214000, 0x125)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x20842, 0x0)
creat(&(0x7f0000000480)='./file0\x00', 0x51)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x169802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/set_event\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)="25ae84d5f4b8b24f39e3752a1f88a3da23391c5db94676b616ac917535d26895bbc335d98fe2a8ab7403901607cbb1442e3bb54bf9e81ce3b18df758c807a94f6048ca3eaa4929addf14bacac45621ff2f58f477dac518c67731f677b3bef4fd2c8f779ac6c5a5dafb1487bedb12779a27732bb93d04ae84d3f6f9923f514a7ee7", 0x81)
faccessat2(r0, &(0x7f00000004c0)='./file0\x00', 0xa9, 0x1380)
readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/242, 0xf2}], 0x1)
io_setup(0x200, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000380)={0x0, 0x0, 0xa1, 0x1, 0x4, r1, &(0x7f00000003c0)="1d", 0xfdef, 0x801}])
write$P9_RLERRORu(r0, 0x0, 0x10)
ftruncate(r0, 0x7)

20.149561842s ago: executing program 2 (id=98):
r0 = socket$inet6(0xa, 0xa, 0x8cfe)
sendto$inet6(r0, &(0x7f0000000000)="9845feeea1b607660b4702d75e529914eefd762485665a971cc0fd27bb73db5ff3dcb42c140f974a8f08ae8e9d75ec5a4fc79fa924e69b51c848ae4ebffeaa1d4cef1c709437e15979f253031796392bea404f47ffe382721c9938035b3f88ddf502029b562b36e3c20825647c6e1ce3bccc444f704c1c88848957c8d01113b213c43d8f82be801e10db1ee7fc95e98e5f5cabc7f6b4daeb94b89209b211ae3b8296b0a53771f5ca41707d1a95f4f5825494b81c1011d3dcfb83cc7ec603902ffc76cba9cdf9da791cb0646dac7afb39d4cea85d12742934c8e1f5f746578e1fb9ca629a745f7c8108bd56d6cf3d", 0xee, 0x8410, &(0x7f0000000100)={0xa, 0x4e22, 0x548, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3b}, 0x1c)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x24040, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000001c0)={r2})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
quotactl_fd$Q_GETQUOTA(r1, 0x80000905, r3, &(0x7f0000000340))
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f00000003c0)={@empty, @private=0xa010101, 0x1, "a5ea5ccbe357a3467cb93bc783af674c1703efa421e6638aaaa44f8ed22f8a31", 0xf, 0x9, 0xe47d, 0x9}, 0x3c)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000480)=[0x0]})
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={<r4=>0x1, 0x93, 0x7, 0x80000001}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={r4, 0x5}, 0x8)
r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x3, 0x4080)
ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000600)={r2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000680)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000780)={&(0x7f00000006c0)=[<r7=>0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xdededede})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, <r8=>0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x4, 0x7})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, <r9=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000009c0)={&(0x7f0000000980)=[r6, r7, r8, r9], 0x4, 0x0, 0x0, <r10=>0xffffffffffffffff})
ioctl$XFS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000a00))
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002)
r11 = semget$private(0x0, 0x3, 0x92)
semop(r11, &(0x7f0000000a40)=[{0x3, 0x1, 0x1000}, {0x4, 0x7ff, 0x800}, {0x4, 0x6}], 0x3)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000b80)={&(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[<r12=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0xa, 0x4, 0x7, 0x1})
r13 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000bc0)={r4, 0x80000001}, &(0x7f0000000c00)=0x8)
ioctl$DRM_IOCTL_MODE_CURSOR(r10, 0xc01c64a3, &(0x7f0000000c40)={0x0, r12, 0x3, 0x7, 0x3, 0x1, 0x401})
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000c80)={0x0, r1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000cc0)={0x0, 0x0, r1})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=""/13)

19.812336243s ago: executing program 2 (id=100):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) (async)
mkdir(&(0x7f0000000140)='mnt\x00', 0xc5) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840)
mount(0x0, &(0x7f0000000180)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='mnt/ttyUSB0\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x20000297, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) (async)
r5 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001000)={'hsr0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000001040)="01154e0001000011221e445588fbca0100011606", 0x14, 0x2404480c, &(0x7f0000001080)={0x11, 0x10, r6, 0x0, 0x0, 0x0}, 0x14) (async)
r7 = mq_open(&(0x7f00000020c0)='%[\x8c({)@#{\x00', 0x40, 0x120, 0x0) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r9) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a20252dcc6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}}, 0x4000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
mq_getsetattr(r7, &(0x7f0000002140)={0x0, 0x7, 0x2, 0x5}, &(0x7f0000002180)) (async)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4})

19.780736231s ago: executing program 32 (id=100):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) (async)
mkdir(&(0x7f0000000140)='mnt\x00', 0xc5) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840)
mount(0x0, &(0x7f0000000180)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='mnt/ttyUSB0\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x20000297, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) (async)
r5 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001000)={'hsr0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000001040)="01154e0001000011221e445588fbca0100011606", 0x14, 0x2404480c, &(0x7f0000001080)={0x11, 0x10, r6, 0x0, 0x0, 0x0}, 0x14) (async)
r7 = mq_open(&(0x7f00000020c0)='%[\x8c({)@#{\x00', 0x40, 0x120, 0x0) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r9) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a20252dcc6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}}, 0x4000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
mq_getsetattr(r7, &(0x7f0000002140)={0x0, 0x7, 0x2, 0x5}, &(0x7f0000002180)) (async)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4})

11.879773996s ago: executing program 33 (id=42):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x8, 0x1b}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x40)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x8, 0x1b}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) (async)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) (async)

3.342403383s ago: executing program 4 (id=273):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000180), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000afa70010000704000000800000000000000000b50c01c90569810645c3309095346b1d4f2990a79d1366fb0377534042223c4374a6fa49b1da75126d495dd79ab7097a4de93c5a2a347a424bec318903000f3fa882e6ce4fbcfa2569a02c5d2de32a2c0a0ef6ace07d6ce35ff35495139ca3d456a426e669da03a4ffc760aaeb77e0b8afd8af42e9c017ce4325d2631a1cdd95e56e33d4dc9a3a8c8336295311bbc1d7585bb19ef559801807ff532c34c24fecbc", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a001400bbbbbbbbbbbb0000"], 0x40}}, 0x0)

3.191390908s ago: executing program 4 (id=276):
setns(0xc9, 0x0) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1f, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) (async, rerun: 32)
r3 = socket$inet(0x2, 0x2, 0x0) (rerun: 32)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r4, &(0x7f0000000200), 0x12)
listen(r4, 0x1) (async, rerun: 32)
write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000008050000010b007e0b0a42b820", @ANYBLOB="524c9bb3f4529a6d7e955c"], 0x97) (rerun: 32)

3.101044892s ago: executing program 4 (id=278):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002f40)=ANY=[@ANYRES16], 0x1c94}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)

3.01201643s ago: executing program 1 (id=279):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x101}]}}]}, 0x3c}}, 0x20004094) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfefa}, 0x1, 0x0, 0x0, 0x80}, 0x20004011) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.0116919s ago: executing program 4 (id=280):
r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000500)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0x2], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x7fff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0xa0201, 0x0) (async)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0xa0201, 0x0)
write$dsp(r1, &(0x7f00000007c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000800))
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x90}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}}, 0x6000000)

2.921229563s ago: executing program 1 (id=282):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
sched_setscheduler(0x0, 0x2, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

2.350310735s ago: executing program 1 (id=292):
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000200007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000002000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.350077794s ago: executing program 1 (id=293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x80}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x0, 0x25dfdb82}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f00080000000000000800000014000500fe80000000000000000000000000004214000600fe8000000000000000000000000000bb14000600fc0000000000000000000000000000000e0001"], 0x60}}, 0x20000080)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf2500000000", @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x300, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1b)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000080)={0x1, 0xffff7fff, 0xe9c})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000c00)={0x3, 0x2, 0x1000, 0x2000, &(0x7f000000c000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000400)={0x2, 0xd3ea}, &(0x7f0000000440)=0x8)
write(r6, &(0x7f0000000540)="6000000010000100010000000000000000000000000000000005000906000000616e3000000000340012800800010063616e002800098024000500208d07004006000000000000000000003fb2770000000000000000000000000006d77b51b320a7782ec463ead819642ab30c7313437f75965ccd0f25758c804dc72c919538e37a430b69bdfdf3871b1499f5c1c35c4f22cfdc68cc88f81c62f05ae6ae9b873124ecf585f9a46568d2c671", 0xac)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001480)=[@text16={0x10, &(0x7f00000014c0)="0f20c7f3f30f2331660f326766c7442400010000006766c7442402513c00006766c744240600000000670f011c240f01bb00000f080f2057b830008ee86766c74424007d0000006766c7442402950000006766c744240600000000670f011424f3dc89a8f4", 0x65}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000035c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.248297711s ago: executing program 1 (id=296):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00')
lseek(r1, 0x2000, 0x1) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000140))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r6, 0x3}, 0x18) (async)
sendmmsg$inet(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) (async)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (async)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x100, 0x0, 0x30a30b42, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x2372, 0x8bd3, 0x4, 0x7, 0x20], 0x26000, 0x216147}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.719321837s ago: executing program 0 (id=300):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x14a00, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r1, {<r5=>r1}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf545d4ac733651259800c000180080001000300000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x2401c001}, 0x88c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x802f, 0x8, 0x5, {{0x1f, 0x4, 0x0, 0x3a, 0x7c, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp_prespec={0x44, 0x24, 0xee, 0x3, 0xe, [{@local, 0x6}, {@multicast1, 0xdb}, {@multicast2, 0xfffffff7}, {@broadcast, 0x1}]}, @generic={0x106, 0x6, "9baa5fb0"}, @lsrr={0x83, 0x13, 0x7b, [@loopback, @empty, @local, @remote]}, @generic={0x86, 0x9, "ea1d11e7985240"}, @cipso={0x86, 0x1c, 0x1, [{0x7, 0x8, "4578f1270412"}, {0x6, 0x7, "e5191e79cb"}, {0x6, 0x7, "1c34d859df"}]}, @ra={0x94, 0x4}]}}}}})
socket$unix(0x1, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.71316292s ago: executing program 0 (id=301):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='ext3\x00', 0x121c060, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='ext3\x00', 0x121c060, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) (async)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) (async)

1.592414516s ago: executing program 0 (id=302):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x0, [0x2, 0x2, 0x100, 0x4000000, 0x4, 0x3, 0x7, 0x7]}) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x81, 0xffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x40, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})

1.592181256s ago: executing program 0 (id=303):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') (async)
syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000080)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x680, 0x0) (async)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6080, 0x0) (async)
io_submit(0x0, 0x0, 0x0) (async, rerun: 64)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) (async, rerun: 64)
close(r2) (async)
r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r3) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

1.466838735s ago: executing program 0 (id=305):
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000004100010026bd700000ccd900030100000f00000012000100002802e08a17503ca13e6d3e3627000004000280700003806c00038068001c"], 0xa0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x41, 0x0)
write$tcp_mem(r3, &(0x7f0000000580)={0x4, 0x20, 0x101, 0x20, 0x4}, 0x48)
sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r4=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x881)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x12, 0x2f, &(0x7f0000000200)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x60060480)

882.209448ms ago: executing program 4 (id=309):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) (async)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8)
listen(r2, 0x5)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x6, @local, 0x15, 0xfffffffd, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x6, @local, 0x15, 0xfffffffd, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000400)={0x2, 0x18, @remote}, 0x10)
write(r4, &(0x7f0000000200)='PAS', 0x3) (async)
write(r4, &(0x7f0000000200)='PAS', 0x3)
accept4(r2, 0x0, 0x0, 0x0) (async)
r5 = accept4(r2, 0x0, 0x0, 0x0)
r6 = getpid()
rt_tgsigqueueinfo(r6, 0x0, 0x1f, &(0x7f0000000240)={0x16, 0x2, 0x2})
signalfd4(r5, 0x0, 0x0, 0x0) (async)
signalfd4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000340), 0xfffffffffffffffc, 0x48b01)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000500)=@urb_type_iso={0x0, {0xb, 0x1}, 0x0, 0x24, &(0x7f0000000380)="0028e83483ea1a4baba125a77334f08e26c3970bfc146aa65aa81d4bfc8ae1", 0x1f, 0x1, 0xffff, 0x18, 0x401, 0x7, &(0x7f0000000880)="25972963fbf0a1166958f70fe0597056ee25850d585194b89737e2d987bfe628e6e75dee2a376f44a7a0b2758f2620bcea959d933ee4c17c0b10722bc25a87090d7233360861b66e95199aff4c7dcfe51d2a3ea3905fa9bbfae1b1850a19cd868ae6a443c23613b025c369d84e1b2f8cfd914ee916064de7606c14c3d74d70ea759d82e23c815a2767412f73ac3ad11d138662f96fdcdf07dad3ed33632f85ca4580023594a5f756f2", [{0x9a9, 0x3, 0x8000}, {0xfffffffb, 0x39, 0x4}, {0x2, 0x7, 0x5}, {0x3, 0xfffffff7, 0x3}, {0xa, 0xb000}, {0x40, 0x9, 0x8}, {0x1, 0xffff, 0x101}, {0x9, 0x2, 0x6}, {0x7, 0xfaab, 0x8001}, {0x4, 0x9, 0x80000001}, {0x200, 0x10001, 0x8000}, {0x7, 0x4, 0xffffffff}, {0xffffffff, 0x8, 0xfff}, {0x3938, 0x46f, 0x3a5360a0}, {0xdc2, 0x9, 0x5}, {0xc5, 0xe9c, 0x4}, {0x7, 0xe5, 0x8}, {0x3, 0xffff, 0x5}, {0x3000000, 0x6d, 0x2}, {0x80000001, 0x4, 0x4}, {0x4, 0x0, 0x5}, {0x0, 0x3, 0xe0}, {0x4, 0x92f, 0xff}, {0xfffffff8, 0x9, 0x9}]})
close_range(r7, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write(r5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000300)={0x3, 'nr0\x00', {0x9}, 0x1})
connect$inet(r9, &(0x7f00000002c0)={0x2, 0x1388, @loopback}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r11=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r11}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r11}, 0x94)

581.37869ms ago: executing program 0 (id=310):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{<r1=>r0, &(0x7f0000000000)='\x00', 0x80, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x7]}, {0x6, 0x2, 0x7f}}, 0x9, &(0x7f0000000180), &(0x7f00000001c0)}, 0x4, &(0x7f0000000540)=[{0x2, 0x693e, &(0x7f0000000200)='/%//!@.!{+\'&+\x00', &(0x7f0000000240)="aa5b126e16d2d0634162edbe057e6cff74de0e93a529fd3c1578ddf6c2115f650dd01e14c1cdc132e09f3bbf7516f54330e4ffa205633b3c9a628e4112e0b7e6818739bea344a29d87068a1569db96051d9751cbad0c923fb4061ca64d411820506cb724c5761cf39eb08d1d6f3fd8b7af2033fc82b2cf799e7e87da9e02", 0x7e, 0x30}, {0x3, 0x80000001, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="b048795af2590e509ecb5064d03df944956ea437aa2dc08aecd42617229a11a83f1a5862a973a8d7b29f2af3c2becfa1e332d04c0a66d41b7c04a2a31c5e4451a34606094ecee32f35889589af5f807dc6c8ee3172b82f83c57e5a05abbad0c3ee5d62cce94a254d18e2332fa7f339de93", 0x71}, {0x2, 0x3ff, &(0x7f0000000380)='\\-.\x00', &(0x7f00000003c0)='+', 0x1, 0x20}, {0x1, 0x0, &(0x7f0000000400)='\x00', &(0x7f0000000440)="bfe30463292ceef5d27e275d7a9a058d8a75355dce87fed20d2838ffe96f4f42b537d084e8db319892884ffcc1e06ae732414345dd3efb0481e445788494b7ce718ff773da4c552f26fcf1d378932f7c2e27f7164a96b8e4a7c3e18641ffc490ff3a2927762360ba7998d94786a540d52f9d30cb886b4a50e86882c450059b028be73ab8add0708dab9e1a41abb7cf019753a8acac2318fe97404328dc1d2d182b2de76a3f7ea374190dd801a3a9be43ba32bf8b6c416696b84fb00e6dd3fabec668a2257f7f25011ac89b20f4f90527261bd2f8abc38714f060c9810b4650e97fb88a01fa9b6d16674fbd01f2223cc977b55239026445", 0xf7, 0x28}]})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={<r2=>0x0, @empty, @initdev}, &(0x7f00000006c0)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000006a0008012cbd7000fedbdf250a0000000000000008000500", @ANYRES32=r2, @ANYBLOB="08000180371093145fb3d90002080000"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x49a48a1e4fc92d84)
syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="5e45870dad5769aaaaaaaaaaaaaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa0400907801000000471000000000000000110000e0000002ac141415440c0051ac1414bb4e20fffc443c0001e00000010000000000000000000000007f00080100000000ac1e0001000000000000000000000800e000000200000000ac14140000000004be1b3ff1f05d8f5a312685b436324dedf6233e2c39e37ede8f54d791b8defd42ff6d91cab65424976b763d"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
clock_adjtime(0x17, &(0x7f0000000840)={0x101, 0x9, 0x379ee7, 0x728, 0x4000009, 0x0, 0x89, 0x3, 0x6, 0x7, 0xffffffff, 0x800, 0x800000006d, 0x2, 0x8001, 0xffffffffefffffff, 0x800000, 0x5, 0x8000e, 0x5, 0x200, 0x3, 0x11cb, 0xf, 0x40, 0x9})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000940)={0x2, 0x15, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0)
listen(r5, 0x5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000980)={0x2, 0x15, @loopback}, 0x10)
r7 = accept4(r5, 0x0, 0x0, 0x0)
r8 = getpid()
rt_tgsigqueueinfo(r8, 0x0, 0x1f, &(0x7f00000009c0)={0x16, 0x2, 0x2})
signalfd4(r7, &(0x7f0000000a40)={[0xfffffffffffffff7]}, 0x8, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
write(r7, &(0x7f0000000a80)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c)

322.587881ms ago: executing program 5 (id=313):
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000280007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000002000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

318.813358ms ago: executing program 5 (id=314):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)="00000102", 0xfffff, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x402, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = accept(0xffffffffffffffff, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0xb1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x2f, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}]}]}, 0x64}}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0xb1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x2f, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}]}]}, 0x64}}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)

222.087557ms ago: executing program 5 (id=315):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x28000600)
r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0)
unshare(0x8000280)
close_range(r0, r1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x2, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000240)={0x4000021, 0x1001a, 0xd, 0x12, 0x1, 0x6, 0x5, 0x1a, 0x1})
ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000001c0)={0xebb7, 0x2})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1f, 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94)

221.303014ms ago: executing program 5 (id=316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet(0x2, 0x3, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

152.265276ms ago: executing program 5 (id=317):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000), 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@broadcast, @in6=@local, 0x4e20, 0x7, 0x4e22, 0x7f, 0xa, 0x80, 0x20, 0x73}, {0x1000, 0x6, 0x6, 0x2, 0x3, 0x0, 0x6, 0x8001}, {0x8, 0xb, 0x6, 0x8}, 0x9, 0x0, 0x1, 0x1, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9}}]}, 0xc4}}, 0x8000)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0x2}}, './file0\x00'})
getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000280)=0x4)
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})

81.524731ms ago: executing program 5 (id=318):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf3ee}}}, 0xd)
ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000040), 0x1004)
r1 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

250.053µs ago: executing program 4 (id=319):
mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000440)=0xe8)
mount$afs(&(0x7f0000000140)=@cell={0x0, 'syz0:', 'syz0', '.backup'}, &(0x7f0000000180)='./tracefs\x00', &(0x7f00000001c0), 0x12, &(0x7f0000000480)={[{@flock_local}, {@dyn}, {@flock_write}, {@dyn}, {@flock_openafs}], [{@subj_role={'subj_role', 0x3d, '::.'}}, {@uid_gt={'uid>', r0}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0)
r3 = add_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000e40)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000e80)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, r4)
r9 = add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r8)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000dc0)={r9}, 0x0, 0x0, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newpolicy={0xc0, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x3, 0x1}, [@sa_dir={0x5, 0x21, 0x2}]}, 0xc0}}, 0x0)
write(r2, &(0x7f0000000100)='rag\n', 0x4)

0s ago: executing program 1 (id=320):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xffffffffffffffbf, 0x153802)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1', 0x1)
read(r0, &(0x7f0000000140)=""/28, 0xffd2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
syz_open_dev$sg(&(0x7f00000002c0), 0xffffffffffffffbf, 0x153802) (async)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) (async)
write(r1, &(0x7f0000000280)='1', 0x1) (async)
read(r0, &(0x7f0000000140)=""/28, 0xffd2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) (async)

kernel console output (not intermixed with test programs):

[   37.887709][   T42] audit: type=1400 audit(1793280101.905:113): avc:  denied  { write } for  pid=5693 comm="sh" path="pipe:[7355]" dev="pipefs" ino=7355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   37.887901][   T42] audit: type=1400 audit(1793280101.905:114): avc:  denied  { rlimitinh } for  pid=5693 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.888001][   T42] audit: type=1400 audit(1793280101.905:115): avc:  denied  { siginh } for  pid=5693 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.206416][   T42] audit: type=1400 audit(1793280102.225:116): avc:  denied  { write } for  pid=5698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   38.276310][   T42] audit: type=1400 audit(1793280102.295:117): avc:  denied  { write } for  pid=5701 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   38.388449][   T42] audit: type=1400 audit(1793280102.405:118): avc:  denied  { write } for  pid=5704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   38.444426][   T42] audit: type=1400 audit(1793280102.465:119): avc:  denied  { write } for  pid=5707 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.191343][   T42] audit: type=1400 audit(1793280103.215:120): avc:  denied  { write } for  pid=5710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:8404' (ED25519) to the list of known hosts.
[   42.032997][ T5722] cgroup: Unknown subsys name 'net'
[   42.145078][ T5722] cgroup: Unknown subsys name 'cpuset'
[   42.150089][ T5722] cgroup: Unknown subsys name 'rlimit'
[   42.356200][ T5778] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   43.070621][ T5722] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.070277][   T42] kauditd_printk_skb: 33 callbacks suppressed
[   47.070296][   T42] audit: type=1400 audit(1793280111.085:154): avc:  denied  { execmem } for  pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   47.283716][   T42] audit: type=1400 audit(1793280111.305:155): avc:  denied  { create } for  pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.283747][   T42] audit: type=1400 audit(1793280111.305:156): avc:  denied  { read write } for  pid=5785 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   47.283769][   T42] audit: type=1400 audit(1793280111.305:157): avc:  denied  { open } for  pid=5786 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   47.292692][   T42] audit: type=1400 audit(1793280111.315:158): avc:  denied  { ioctl } for  pid=5786 comm="syz-executor" path="socket:[7016]" dev="sockfs" ino=7016 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.322772][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.323119][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.324212][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.327147][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.327805][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   47.327815][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.330421][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.330846][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.332236][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   47.333294][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   47.334178][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.334204][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.334909][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.335435][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.336772][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.337429][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   47.337711][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.339450][   T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   47.339641][   T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.341875][   T42] audit: type=1400 audit(1793280111.365:159): avc:  denied  { read } for  pid=5786 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   47.342174][   T42] audit: type=1400 audit(1793280111.365:160): avc:  denied  { open } for  pid=5786 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   47.343172][   T42] audit: type=1400 audit(1793280111.365:161): avc:  denied  { mounton } for  pid=5786 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   47.347062][   T42] audit: type=1400 audit(1793280111.365:162): avc:  denied  { module_request } for  pid=5786 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   47.347964][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.356413][   T42] audit: type=1400 audit(1793280111.375:163): avc:  denied  { mounton } for  pid=5787 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   47.596098][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   47.598778][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   47.600682][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   47.600836][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   47.607380][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   47.608891][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   47.706283][ T5787] infiniband rxe0: set active
[   47.706771][   T58] rxe_eth0 speed is unknown, defaulting to 1000
[   47.706893][ T5787] infiniband rxe0: added rxe_eth0
[   47.731190][ T5787] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   47.731226][ T5787] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   47.731264][ T5787] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   47.750731][ T5787] RDS/IB: rxe0: added
[   47.750847][ T5787] smc: adding ib device rxe0 with port count 1
[   47.750882][ T5787] smc:    ib device rxe0 port 1 has no pnetid
[   47.767754][ T1360] rxe_eth0 speed is unknown, defaulting to 1000
[   47.795374][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   47.839933][ T1360] rxe_eth0 speed is unknown, defaulting to 1000
[   47.847769][   T58] rxe_eth0 speed is unknown, defaulting to 1000
[   47.904753][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   47.960174][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.960348][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.960444][ T5785] bridge_slave_0: entered allmulticast mode
[   47.961836][ T5785] bridge_slave_0: entered promiscuous mode
[   47.976768][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.976838][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.976926][ T5785] bridge_slave_1: entered allmulticast mode
[   47.978075][ T5785] bridge_slave_1: entered promiscuous mode
[   48.027194][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.043207][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.051847][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.051891][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.051945][ T5794] bridge_slave_0: entered allmulticast mode
[   48.053266][ T5794] bridge_slave_0: entered promiscuous mode
[   48.055725][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.055825][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.055913][ T5794] bridge_slave_1: entered allmulticast mode
[   48.057115][ T5794] bridge_slave_1: entered promiscuous mode
[   48.067683][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   48.112407][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.112488][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.112585][ T5786] bridge_slave_0: entered allmulticast mode
[   48.113928][ T5786] bridge_slave_0: entered promiscuous mode
[   48.118014][ T5785] team0: Port device team_slave_0 added
[   48.119473][ T5785] team0: Port device team_slave_1 added
[   48.120685][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.121449][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.121571][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.121677][ T5786] bridge_slave_1: entered allmulticast mode
[   48.123005][ T5786] bridge_slave_1: entered promiscuous mode
[   48.128769][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.191121][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.192077][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.192091][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.192111][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.193952][ T5794] team0: Port device team_slave_0 added
[   48.196066][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.196591][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.196603][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.196623][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.199082][ T5794] team0: Port device team_slave_1 added
[   48.268395][ T5786] team0: Port device team_slave_0 added
[   48.279656][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.279670][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.279690][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.286239][ T5786] team0: Port device team_slave_1 added
[   48.286276][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   48.292038][ T5785] hsr_slave_0: entered promiscuous mode
[   48.292956][ T5785] hsr_slave_1: entered promiscuous mode
[   48.294376][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.294388][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.294409][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.351961][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.351976][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.351996][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.365730][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.365746][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.365768][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.415006][ T5794] hsr_slave_0: entered promiscuous mode
[   48.415795][ T5794] hsr_slave_1: entered promiscuous mode
[   48.416549][ T5794] debugfs: 'hsr0' already exists in 'hsr'
[   48.416624][ T5794] Cannot create hsr debugfs directory
[   48.491076][ T5786] hsr_slave_0: entered promiscuous mode
[   48.491833][ T5786] hsr_slave_1: entered promiscuous mode
[   48.492448][ T5786] debugfs: 'hsr0' already exists in 'hsr'
[   48.492465][ T5786] Cannot create hsr debugfs directory
[   48.762735][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.767940][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.768712][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.772801][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.775746][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.780215][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.813523][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.816626][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.861920][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.864581][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.865274][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.869699][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.888453][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.891794][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.912563][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.915495][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.981735][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.982132][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.982287][ T5787] bridge_slave_0: entered allmulticast mode
[   48.983059][ T5787] bridge_slave_0: entered promiscuous mode
[   48.996514][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.998436][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.998676][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.998716][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.998867][ T5787] bridge_slave_1: entered allmulticast mode
[   48.999780][ T5787] bridge_slave_1: entered promiscuous mode
[   49.017646][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.019007][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.024296][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.031909][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.032575][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.034451][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.034857][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.037730][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.051112][ T5787] team0: Port device team_slave_0 added
[   49.053823][ T5787] team0: Port device team_slave_1 added
[   49.072412][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.072427][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.072448][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.080130][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.080145][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.080167][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.129353][ T5787] hsr_slave_0: entered promiscuous mode
[   49.129806][ T5787] hsr_slave_1: entered promiscuous mode
[   49.130141][ T5787] debugfs: 'hsr0' already exists in 'hsr'
[   49.130152][ T5787] Cannot create hsr debugfs directory
[   49.151681][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.245628][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   49.254535][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.254664][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.264218][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.264262][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.318038][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.360196][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.360344][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.364356][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.369708][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.372969][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.373616][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.378178][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.379025][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.383621][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.392612][ T5144] Bluetooth: hci2: command tx timeout
[   49.392740][ T5144] Bluetooth: hci0: command tx timeout
[   49.392843][ T5144] Bluetooth: hci3: command tx timeout
[   49.393195][ T5803] Bluetooth: hci1: command tx timeout
[   49.395864][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   49.407983][  T241] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.408069][  T241] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.423150][  T241] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.423228][  T241] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.425817][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   49.439533][  T241] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.439605][  T241] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.455017][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.455066][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.552242][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.560100][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   49.568650][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.568735][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.580348][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.580392][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.746998][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.784067][ T5785] veth0_vlan: entered promiscuous mode
[   49.793198][ T5785] veth1_vlan: entered promiscuous mode
[   49.822227][ T5785] veth0_macvtap: entered promiscuous mode
[   49.826677][ T5785] veth1_macvtap: entered promiscuous mode
[   49.840073][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.848514][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.867779][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.891551][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.891693][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.891713][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.891733][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.942004][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.942024][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.949396][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.960477][ T5794] veth0_vlan: entered promiscuous mode
[   49.980372][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.980386][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.985616][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.989748][ T5794] veth1_vlan: entered promiscuous mode
[   50.021361][ T5794] veth0_macvtap: entered promiscuous mode
[   50.028532][ T5794] veth1_macvtap: entered promiscuous mode
[   50.035738][ T5786] veth0_vlan: entered promiscuous mode
[   50.054191][ T5786] veth1_vlan: entered promiscuous mode
[   50.056930][ T5787] veth0_vlan: entered promiscuous mode
[   50.073980][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.075552][ T5787] veth1_vlan: entered promiscuous mode
[   50.086900][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.089263][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.119354][ T5786] veth0_macvtap: entered promiscuous mode
[   50.138714][ T5786] veth1_macvtap: entered promiscuous mode
[   50.148217][ T5787] veth0_macvtap: entered promiscuous mode
[   50.159677][ T5787] veth1_macvtap: entered promiscuous mode
[   50.166256][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.194579][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.205154][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.205172][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.214438][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.245584][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.250447][  T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.250467][  T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.348525][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.348549][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.362647][ T5870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.363137][ T5870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.382041][ T5870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.400485][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.400507][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.419030][  T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.419050][  T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.449864][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.449886][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.465561][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.465956][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.466247][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.466652][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.481566][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.481748][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.481768][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.481786][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.481804][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.503045][ T5956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.548640][ T5956] lo: entered allmulticast mode
[   50.628700][ T5789] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 255
[   50.711878][ T5952] lo: left allmulticast mode
[   50.735338][ T5965] ip_tables: iptables: counters copy to user failed while replacing table
[   50.960443][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   51.085357][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   51.204139][ T5983] use of bytesused == 0 is deprecated and will be removed in the future,
[   51.204155][ T5983] use the actual size instead.
[   51.231586][ T5983] device-mapper: table: 248:0: multipath: not enough path parameters (-EINVAL)
[   51.231602][ T5983] device-mapper: ioctl: error adding target to table
[   51.381111][ T5949] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   51.472507][ T5789] Bluetooth: hci1: command tx timeout
[   51.472541][ T5789] Bluetooth: hci3: command tx timeout
[   51.472563][ T5789] Bluetooth: hci2: command tx timeout
[   51.541658][ T5949] usb 6-1: Using ep0 maxpacket: 8
[   51.542843][ T5949] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   51.544272][ T5949] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   51.544290][ T5949] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   51.544308][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   51.544323][ T5949] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   51.544336][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   51.544349][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   51.544363][ T5949] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   51.544376][ T5949] usb 6-1: config 168 interface 0 has no altsetting 0
[   51.545316][ T5949] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   51.545333][ T5949] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   51.545350][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   51.545364][ T5949] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   51.545401][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   51.545415][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   51.545428][ T5949] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   51.545442][ T5949] usb 6-1: config 168 interface 0 has no altsetting 0
[   51.546165][ T5949] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   51.546181][ T5949] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   51.546199][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   51.546213][ T5949] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   51.546226][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   51.546239][ T5949] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   51.546252][ T5949] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   51.546266][ T5949] usb 6-1: config 168 interface 0 has no altsetting 0
[   51.548875][ T5949] usb 6-1: string descriptor 0 read error: -22
[   51.548932][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.566911][ T5949] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   51.779373][ T5891] usb 6-1: USB disconnect, device number 2
[   52.072315][   T42] kauditd_printk_skb: 80 callbacks suppressed
[   52.072328][   T42] audit: type=1400 audit(1793280116.095:244): avc:  denied  { create } for  pid=6007 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.073846][   T42] audit: type=1400 audit(1793280116.095:245): avc:  denied  { ioctl } for  pid=6007 comm="syz.0.19" path="socket:[11666]" dev="sockfs" ino=11666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.074091][   T42] audit: type=1400 audit(1793280116.095:246): avc:  denied  { setopt } for  pid=6007 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.074447][   T42] audit: type=1400 audit(1793280116.095:247): avc:  denied  { bind } for  pid=6007 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.075168][   T42] audit: type=1400 audit(1793280116.095:248): avc:  denied  { connect } for  pid=6007 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.075347][   T42] audit: type=1400 audit(1793280116.095:249): avc:  denied  { write } for  pid=6007 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.132826][   T42] audit: type=1400 audit(1793280116.155:250): avc:  denied  { write } for  pid=6015 comm="syz.2.22" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   52.133020][   T42] audit: type=1400 audit(1793280116.155:251): avc:  denied  { open } for  pid=6015 comm="syz.2.22" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   52.145072][ T6016] ptp ptp0: new virtual clock ptp2
[   52.151729][ T6016] ptp ptp0: new virtual clock ptp3
[   52.157876][ T6016] ptp ptp0: new virtual clock ptp4
[   52.163115][ T6016] ptp ptp0: new virtual clock ptp5
[   52.169885][ T6016] ptp ptp0: new virtual clock ptp6
[   52.180938][ T6016] ptp ptp0: new virtual clock ptp7
[   52.185115][ T6016] ptp ptp0: new virtual clock ptp8
[   52.195084][ T6016] ptp ptp0: new virtual clock ptp9
[   52.205556][ T6016] ptp ptp0: new virtual clock ptp10
[   52.212682][ T6016] ptp ptp0: new virtual clock ptp11
[   52.215412][ T6016] ptp ptp0: new virtual clock ptp12
[   52.222748][ T6016] ptp ptp0: new virtual clock ptp13
[   52.229939][ T6016] ptp ptp0: new virtual clock ptp14
[   52.235945][ T6016] ptp ptp0: new virtual clock ptp15
[   52.242332][ T6016] ptp ptp0: new virtual clock ptp16
[   52.242350][ T6016] ptp ptp0: guarantee physical clock free running
[   52.271398][ T5803] Bluetooth: hci0: command tx timeout
[   52.298240][   T42] audit: type=1400 audit(1793280116.315:252): avc:  denied  { write } for  pid=6036 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   52.298807][   T42] audit: type=1400 audit(1793280116.315:253): avc:  denied  { nlmsg_write } for  pid=6036 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   52.377034][ T6046] netlink: 'syz.1.28': attribute type 1 has an invalid length.
[   52.402817][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'.
[   52.538011][ T6052] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   52.731019][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   52.892042][ T5949] usb 5-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00
[   52.892886][ T5949] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[   52.892900][ T5949] usb 5-1: config 1 has no interface number 0
[   52.892917][ T5949] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   52.892929][ T5949] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   52.895058][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.895072][ T5949] usb 5-1: Product: syz
[   52.895079][ T5949] usb 5-1: Manufacturer: syz
[   52.895087][ T5949] usb 5-1: SerialNumber: syz
[   52.900161][ T5949] usb 5-1: Expected 3 endpoints, found: 1
[   52.987957][ T6057] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22)
[   53.110400][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.113160][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.114599][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.114927][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.356514][ T6064] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   53.356534][ T6064] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   53.433965][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   53.551300][ T5803] Bluetooth: hci2: command tx timeout
[   53.551335][ T5803] Bluetooth: hci1: command tx timeout
[   53.668763][ T6077] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   53.668790][ T6077] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   53.668797][ T6077] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   53.668935][ T6077] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   53.741094][ T2367] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   53.838073][ T6080] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   53.901875][ T2367] usb 7-1: Using ep0 maxpacket: 8
[   53.902621][ T2367] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   53.903587][ T2367] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   53.903615][ T2367] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   53.903645][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   53.903666][ T2367] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   53.903687][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   53.903708][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   53.903729][ T2367] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   53.903751][ T2367] usb 7-1: config 168 interface 0 has no altsetting 0
[   53.904630][ T2367] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   53.904657][ T2367] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   53.904687][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   53.904710][ T2367] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   53.904731][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   53.904752][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   53.904775][ T2367] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   53.904797][ T2367] usb 7-1: config 168 interface 0 has no altsetting 0
[   53.905679][ T2367] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   53.905707][ T2367] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   53.905737][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   53.905760][ T2367] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   53.905780][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   53.905802][ T2367] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   53.905823][ T2367] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   53.905845][ T2367] usb 7-1: config 168 interface 0 has no altsetting 0
[   53.908826][ T2367] usb 7-1: string descriptor 0 read error: -22
[   53.908926][ T2367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.919332][ T2367] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   54.112875][ T5789] Bluetooth: hci3: command tx timeout
[   54.142799][ T5790] usb 7-1: USB disconnect, device number 2
[   54.341147][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'.
[   54.347199][ T6105] ip6erspan0: entered allmulticast mode
[   54.352110][ T5789] Bluetooth: hci0: command tx timeout
[   54.406829][ T6109] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003
[   54.410361][ T6109] netlink: 5 bytes leftover after parsing attributes in process `syz.1.48'.
[   54.410825][ T6109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   54.532331][ T5789] Bluetooth: hci2: Unable to find connection for big 0x00
[   54.533756][ T6115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.50'.
[   54.534005][ T6115] SELinux: DCCP has been removed, pid=6115 comm=syz.1.50
[   55.069261][ T6128] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   55.216020][ T6137] netlink: 'syz.2.57': attribute type 42 has an invalid length.
[   55.218116][ T6139] netlink: 'syz.2.57': attribute type 42 has an invalid length.
[   55.244399][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'.
[   55.256530][ T6141] netlink: 'syz.1.58': attribute type 10 has an invalid length.
[   55.259635][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.262773][ T6141] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   55.484327][   T58] usb 5-1: USB disconnect, device number 2
[   55.631579][ T5803] Bluetooth: hci2: command tx timeout
[   55.631609][ T5789] Bluetooth: hci1: command tx timeout
[   55.654051][ T6153] kvm [6152]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111
[   55.707821][ T6158] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   55.707843][ T6158] CIFS mount error: No usable UNC path provided in device string!
[   55.707843][ T6158] 
[   55.707981][ T6158] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   55.840979][   T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   55.890086][ T6165] Zero length message leads to an empty skb
[   55.991016][   T58] usb 5-1: Using ep0 maxpacket: 8
[   55.993269][   T58] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   55.994223][   T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   55.994251][   T58] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   55.994280][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   55.994302][   T58] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   55.994322][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   55.994342][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   55.994363][   T58] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   55.994385][   T58] usb 5-1: config 168 interface 0 has no altsetting 0
[   55.995227][   T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   55.995251][   T58] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   55.995646][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   55.995669][   T58] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   55.995688][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   55.995708][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   55.995729][   T58] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   55.995750][   T58] usb 5-1: config 168 interface 0 has no altsetting 0
[   55.996610][   T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   55.996634][   T58] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   55.996664][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   55.996685][   T58] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   55.996704][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   55.996724][   T58] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   55.996745][   T58] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   55.996766][   T58] usb 5-1: config 168 interface 0 has no altsetting 0
[   55.999118][   T58] usb 5-1: string descriptor 0 read error: -22
[   55.999215][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.028367][ T6168] tmpfs: Bad value for 'mpol'
[   56.108329][   T58] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   56.191056][ T5789] Bluetooth: hci3: command tx timeout
[   56.327356][   T58] usb 5-1: USB disconnect, device number 3
[   56.956499][ T6185] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   57.080123][ T6197] tipc: Failed to remove unknown binding: 66,0,0/0:2983941787/2983941789
[   57.080141][ T6197] tipc: Failed to remove unknown binding: 66,0,0/0:2983941787/2983941788
[   57.080417][ T6197] tipc: Failed to remove unknown binding: 66,0,0/0:2983941787/2983941789
[   57.080430][ T6197] tipc: Failed to remove unknown binding: 66,0,0/0:2983941787/2983941788
[   57.430855][   T42] kauditd_printk_skb: 87 callbacks suppressed
[   57.430876][   T42] audit: type=1400 audit(1793280121.445:339): avc:  denied  { map_create } for  pid=6203 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.431659][   T42] audit: type=1400 audit(1793280121.455:340): avc:  denied  { prog_load } for  pid=6203 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.436203][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   57.839293][   T10] rxe_eth0 speed is unknown, defaulting to 1000
[   57.869125][   T42] audit: type=1400 audit(1793280121.885:341): avc:  denied  { write } for  pid=6212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.918735][   T42] audit: type=1400 audit(1793280121.935:342): avc:  denied  { write } for  pid=6215 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.798414][   T42] audit: type=1400 audit(1793280122.815:343): avc:  denied  { bind } for  pid=6221 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   59.999907][ T6190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.046603][   T42] audit: type=1400 audit(1793280124.065:344): avc:  denied  { prog_run } for  pid=6227 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   60.164509][   T42] audit: type=1400 audit(1793280124.185:345): avc:  denied  { read write } for  pid=6238 comm="syz.0.80" name="vhost-net" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   60.164562][   T42] audit: type=1400 audit(1793280124.185:346): avc:  denied  { mount } for  pid=6238 comm="syz.0.80" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   60.165016][   T42] audit: type=1400 audit(1793280124.185:347): avc:  denied  { open } for  pid=6238 comm="syz.0.80" path="/dev/vhost-net" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   60.187271][   T42] audit: type=1400 audit(1793280124.205:348): avc:  denied  { unmount } for  pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   60.282369][ T5790] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   60.445773][ T5790] usb 7-1: Using ep0 maxpacket: 8
[   60.446876][ T5790] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   60.447687][ T5790] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   60.447704][ T5790] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   60.447723][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   60.447737][ T5790] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   60.447750][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   60.447763][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   60.447777][ T5790] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   60.447791][ T5790] usb 7-1: config 168 interface 0 has no altsetting 0
[   60.457023][ T5790] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   60.457044][ T5790] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   60.457062][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   60.457076][ T5790] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   60.457089][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   60.457102][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   60.457116][ T5790] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   60.457129][ T5790] usb 7-1: config 168 interface 0 has no altsetting 0
[   60.468302][ T5790] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   60.468324][ T5790] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   60.468343][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   60.468357][ T5790] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   60.468370][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   60.468383][ T5790] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   60.468397][ T5790] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   60.468410][ T5790] usb 7-1: config 168 interface 0 has no altsetting 0
[   60.481046][   T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   60.555878][ T6267] overlay: filesystem on ./bus not supported as upperdir
[   60.557619][ T6267] overlayfs: failed to resolve './bus': -2
[   60.567797][ T5790] usb 7-1: string descriptor 0 read error: -22
[   60.567908][ T5790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.585997][ T5790] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   60.631617][   T58] usb 5-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[   60.632640][   T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.632661][   T58] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   60.632691][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.648834][   T58] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[   60.726066][ T6274] openvswitch: netlink: Multiple metadata blocks provided
[   60.783635][   T41] usb 7-1: USB disconnect, device number 3
[   60.907458][ T6280] kvm: pic: level sensitive irq not supported
[   60.908780][ T6280] kvm: pic: non byte read
[   61.275739][ T6297] tipc: Started in network mode
[   61.275766][ T6297] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[   61.276387][ T6297] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   61.777726][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.851216][ T6301] tmpfs: Unknown parameter 'dont_measure'
[   62.009344][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.012088][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.012499][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.013813][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.014384][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.030555][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.099842][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.161300][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.226624][ T6309] rxe_eth0 speed is unknown, defaulting to 1000
[   62.315819][ T5870] bridge_slave_1: left allmulticast mode
[   62.315853][ T5870] bridge_slave_1: left promiscuous mode
[   62.316550][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.335262][ T5870] bridge_slave_0: left allmulticast mode
[   62.335364][ T5870] bridge_slave_0: left promiscuous mode
[   62.335628][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.361090][ T5790] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   62.419751][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.426797][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.427866][ T5870] bond0 (unregistering): Released all slaves
[   62.446198][ T5891] tipc: Node number set to 43690
[   62.531767][ T5790] usb 6-1: Using ep0 maxpacket: 8
[   62.532607][ T5790] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   62.535339][ T5790] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   62.535368][ T5790] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   62.535396][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   62.535419][ T5790] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   62.535438][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   62.535459][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   62.535483][ T5790] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   62.535504][ T5790] usb 6-1: config 168 interface 0 has no altsetting 0
[   62.536811][ T5790] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   62.536837][ T5790] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   62.536865][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   62.536886][ T5790] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   62.536906][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   62.536926][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   62.536947][ T5790] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   62.536974][ T5790] usb 6-1: config 168 interface 0 has no altsetting 0
[   62.537879][ T5790] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   62.537904][ T5790] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   62.537933][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   62.537954][ T5790] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   62.537980][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   62.538000][ T5790] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   62.538020][ T5790] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   62.538041][ T5790] usb 6-1: config 168 interface 0 has no altsetting 0
[   62.540768][ T5790] usb 6-1: string descriptor 0 read error: -22
[   62.540861][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.547587][   T42] kauditd_printk_skb: 44 callbacks suppressed
[   62.547597][   T42] audit: type=1400 audit(1793280126.565:393): avc:  denied  { write } for  pid=6328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.562778][ T5790] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   62.646149][   T42] audit: type=1400 audit(1793280126.665:394): avc:  denied  { write } for  pid=6333 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.699806][ T5498] 8021q: adding VLAN 0 to HW filter on device eth2
[   62.741876][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.741964][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.742030][ T6309] bridge_slave_0: entered allmulticast mode
[   62.743106][ T6309] bridge_slave_0: entered promiscuous mode
[   62.763517][   T24] usb 6-1: USB disconnect, device number 3
[   62.775016][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.775097][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.775198][ T6309] bridge_slave_1: entered allmulticast mode
[   62.776355][ T6309] bridge_slave_1: entered promiscuous mode
[   62.803044][ T6309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.805742][ T6309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.834957][ T6309] team0: Port device team_slave_0 added
[   62.836847][ T6309] team0: Port device team_slave_1 added
[   62.855700][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.855710][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.855724][ T6309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.858319][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.858332][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.858353][ T6309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.902881][   T42] audit: type=1400 audit(1793280126.925:395): avc:  denied  { write } for  pid=6339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.947410][   T42] audit: type=1400 audit(1793280126.965:396): avc:  denied  { write } for  pid=6342 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.948263][ T6309] hsr_slave_0: entered promiscuous mode
[   62.949282][ T6309] hsr_slave_1: entered promiscuous mode
[   62.949909][ T6309] debugfs: 'hsr0' already exists in 'hsr'
[   62.949934][ T6309] Cannot create hsr debugfs directory
[   63.010177][ T5498] 8021q: adding VLAN 0 to HW filter on device eth3
[   63.014755][ T5870] hsr_slave_0: left promiscuous mode
[   63.015845][ T5870] hsr_slave_1: left promiscuous mode
[   63.016274][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.016290][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.016913][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.016923][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.021183][ T5870] veth1_macvtap: left promiscuous mode
[   63.021208][ T5870] veth0_macvtap: left promiscuous mode
[   63.127016][ T5870] team0 (unregistering): Port device team_slave_1 removed
[   63.135981][ T5870] team0 (unregistering): Port device team_slave_0 removed
[   63.255946][   T10] usb 5-1: USB disconnect, device number 4
[   63.264806][   T10] idmouse 5-1:1.0: disconnected
[   63.292343][   T42] audit: type=1400 audit(1793280127.305:397): avc:  denied  { write } for  pid=6345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.323592][ T6348] trusted_key: encrypted_key: insufficient parameters specified
[   63.405698][ T6309] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.409945][   T42] audit: type=1400 audit(1793280127.425:398): avc:  denied  { write } for  pid=6351 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.422167][   T42] audit: type=1400 audit(1793280127.435:399): avc:  denied  { create } for  pid=6347 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.422592][   T42] audit: type=1400 audit(1793280127.445:400): avc:  denied  { connect } for  pid=6347 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.423284][   T42] audit: type=1400 audit(1793280127.445:401): avc:  denied  { bind } for  pid=6347 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.431826][   T42] audit: type=1400 audit(1793280127.445:402): avc:  denied  { write } for  pid=6347 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.446452][ T6348] xt_time: invalid argument - start or stop time greater than 23:59:59
[   63.455981][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.472798][ T6309] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.497396][ T6361] trusted_key: encrypted_key: insufficient parameters specified
[   63.498988][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.499396][ T6309] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.512558][ T6348] xt_time: invalid argument - start or stop time greater than 23:59:59
[   63.533139][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.535193][ T6309] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.550490][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.588490][ T5498] 8021q: adding VLAN 0 to HW filter on device eth4
[   63.623518][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.623689][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.624443][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.624538][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.654259][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.665936][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.788643][ T6309] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.799596][ T6382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1108 sclass=netlink_route_socket pid=6382 comm=syz.0.111
[   63.816388][ T6309] 8021q: adding VLAN 0 to HW filter on device team0
[   63.826082][ T6382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.111'.
[   63.829000][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.829082][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.836451][ T6382] ip6_vti0: entered promiscuous mode
[   63.844790][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[   63.854078][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.854166][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.949099][ T6389] can: request_module (can-proto-0) failed.
[   63.968630][ T6397] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[   63.968650][ T6397] netlink: 'syz.1.113': attribute type 2 has an invalid length.
[   64.018530][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.018990][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.019095][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.022495][ T5498] 8021q: adding VLAN 0 to HW filter on device eth5
[   64.042373][ T5789] Bluetooth: hci1: command tx timeout
[   64.366240][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.574273][ T6309] veth0_vlan: entered promiscuous mode
[   64.580510][ T6309] veth1_vlan: entered promiscuous mode
[   64.616790][ T6309] veth0_macvtap: entered promiscuous mode
[   64.620834][ T6309] veth1_macvtap: entered promiscuous mode
[   64.634099][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.644488][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.663647][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.663681][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.663705][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.663728][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.704780][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.704800][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.718971][  T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.718988][  T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.825213][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   64.893119][ T6437] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   64.944675][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   65.089466][ T6450] FAULT_INJECTION: forcing a failure.
[   65.089466][ T6450] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   65.089486][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) 
[   65.089499][ T6450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.089507][ T6450] Call Trace:
[   65.089511][ T6450]  <TASK>
[   65.089516][ T6450]  dump_stack_lvl+0x100/0x190
[   65.089592][ T6450]  should_fail_ex.cold+0x5/0xa
[   65.089612][ T6450]  should_fail_alloc_page+0xeb/0x140
[   65.089654][ T6450]  prepare_alloc_pages+0x1f0/0x5b0
[   65.089677][ T6450]  __alloc_frozen_pages_noprof+0x1b1/0x3280
[   65.089711][ T6450]  ? stack_trace_save+0x8e/0xc0
[   65.089736][ T6450]  ? __pfx_stack_trace_save+0x10/0x10
[   65.089766][ T6450]  ? is_bpf_text_address+0x94/0x1a0
[   65.089783][ T6450]  ? stack_depot_save_flags+0x27/0xa10
[   65.089801][ T6450]  ? __kernel_text_address+0xd/0x30
[   65.089817][ T6450]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   65.089833][ T6450]  ? kasan_save_stack+0x30/0x50
[   65.089852][ T6450]  ? __kasan_kmalloc+0xaa/0xb0
[   65.089869][ T6450]  ? snd_pcm_attach_substream+0x436/0xd20
[   65.089931][ T6450]  ? snd_pcm_open_substream+0x90/0x1850
[   65.089946][ T6450]  ? snd_pcm_oss_open+0x715/0x1400
[   65.089965][ T6450]  ? soundcore_open+0x2e3/0x5a0
[   65.089982][ T6450]  ? chrdev_open+0x234/0x6a0
[   65.089995][ T6450]  ? do_dentry_open+0x674/0x1470
[   65.090006][ T6450]  ? vfs_open_consume+0xcc/0x460
[   65.090020][ T6450]  ? path_openat+0x1547/0x23f0
[   65.090033][ T6450]  ? do_file_open+0x20e/0x430
[   65.090046][ T6450]  ? do_sys_openat2+0x163/0x1d0
[   65.090061][ T6450]  ? __x64_sys_openat+0x12d/0x210
[   65.090076][ T6450]  ? do_syscall_64+0x123/0x790
[   65.090109][ T6450]  ? __lock_acquire+0x5c0/0x1f40
[   65.090133][ T6450]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   65.090155][ T6450]  ? policy_nodemask+0xed/0x5e0
[   65.090170][ T6450]  alloc_pages_mpol+0x201/0x560
[   65.090186][ T6450]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   65.090198][ T6450]  ? __split_page_owner+0x1dd/0x340
[   65.090214][ T6450]  ? split_page_memcg+0x1e/0x1a0
[   65.090232][ T6450]  alloc_pages_noprof+0x1a/0x160
[   65.090247][ T6450]  alloc_pages_exact_noprof+0x32/0xf0
[   65.090262][ T6450]  snd_pcm_attach_substream+0x4b0/0xd20
[   65.090280][ T6450]  snd_pcm_open_substream+0x90/0x1850
[   65.090294][ T6450]  ? __kasan_kmalloc+0xaa/0xb0
[   65.090312][ T6450]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[   65.090326][ T6450]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   65.090342][ T6450]  ? snd_pcm_oss_open+0x5c5/0x1400
[   65.090363][ T6450]  snd_pcm_oss_open+0x715/0x1400
[   65.090393][ T6450]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[   65.090415][ T6450]  ? __pfx_default_wake_function+0x10/0x10
[   65.090436][ T6450]  ? __lock_acquire+0x5c0/0x1f40
[   65.090457][ T6450]  ? do_raw_spin_lock+0x128/0x260
[   65.090470][ T6450]  ? soundcore_open+0x231/0x5a0
[   65.090488][ T6450]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[   65.090509][ T6450]  soundcore_open+0x2e3/0x5a0
[   65.090528][ T6450]  ? __pfx_soundcore_open+0x10/0x10
[   65.090544][ T6450]  chrdev_open+0x234/0x6a0
[   65.090558][ T6450]  ? __pfx_chrdev_open+0x10/0x10
[   65.090573][ T6450]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   65.090594][ T6450]  do_dentry_open+0x674/0x1470
[   65.090605][ T6450]  ? __pfx_chrdev_open+0x10/0x10
[   65.090621][ T6450]  vfs_open_consume+0xcc/0x460
[   65.090638][ T6450]  path_openat+0x1547/0x23f0
[   65.090655][ T6450]  ? __pfx_path_openat+0x10/0x10
[   65.090673][ T6450]  do_file_open+0x20e/0x430
[   65.090688][ T6450]  ? __pfx_do_file_open+0x10/0x10
[   65.090713][ T6450]  ? _raw_spin_unlock+0x28/0x50
[   65.090729][ T6450]  ? alloc_fd+0x471/0x7a0
[   65.090748][ T6450]  do_sys_openat2+0x163/0x1d0
[   65.090763][ T6450]  ? __pfx_do_sys_openat2+0x10/0x10
[   65.090779][ T6450]  ? lock_acquire+0x1d1/0x380
[   65.090794][ T6450]  ? fd_install+0xa2/0x580
[   65.090811][ T6450]  __x64_sys_openat+0x12d/0x210
[   65.090827][ T6450]  ? __pfx___x64_sys_openat+0x10/0x10
[   65.090848][ T6450]  do_syscall_64+0x123/0x790
[   65.090861][ T6450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.090873][ T6450] RIP: 0033:0x7f067bd9f559
[   65.090887][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.090899][ T6450] RSP: 002b:00007f0679eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   65.090913][ T6450] RAX: ffffffffffffffda RBX: 00007f067c026090 RCX: 00007f067bd9f559
[   65.090920][ T6450] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[   65.090927][ T6450] RBP: 00007f067be36b20 R08: 0000000000000000 R09: 0000000000000000
[   65.090934][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.090941][ T6450] R13: 00007f067c026128 R14: 00007f067c026090 R15: 00007ffe59f22d58
[   65.090957][ T6450]  </TASK>
[   65.130999][   T41] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   65.281536][   T41] usb 9-1: Using ep0 maxpacket: 8
[   65.282808][   T41] usb 9-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00
[   65.285242][   T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   65.285259][   T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   65.285277][   T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.310674][   T41] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected
[   65.347715][ T6456] loop4: detected capacity change from 0 to 2640
[   65.358530][   T41] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[   65.370308][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370393][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370421][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370486][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370513][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370553][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370590][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370615][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370629][ T6456] ldm_validate_partition_table(): Disk read failed.
[   65.370653][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370677][ T6456] Buffer I/O error on dev loop4, logical block 0, async page read
[   65.370712][ T6456] Dev loop4: unable to read RDB block 0
[   65.370854][ T6456]  loop4: unable to read partition table
[   65.375522][ T6456] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[   65.422384][ T6462] input: syz1 as /devices/virtual/input/input5
[   65.554322][ T6471] capability: warning: `syz.0.127' uses deprecated v2 capabilities in a way that may be insecure
[   65.575281][ T6467] ima: policy update failed
[   65.621085][ T6474] CacheFiles: Failed to register: -95
[   65.680517][ T6475] Bluetooth: MGMT ver 1.23
[   65.780812][ T6480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   65.781131][ T6480] block device autoloading is deprecated and will be removed.
[   65.892505][ T6482] md: invalid raid superblock magic on ram2
[   65.892522][ T6482] md: ram2 does not have a valid v0.0 superblock, not importing!
[   65.892587][ T6482] md: md_import_device returned -22
[   65.944440][ T6482] md: md1 stopped.
[   65.971489][ T6480] md: invalid raid superblock magic on ram3
[   65.971549][ T6480] md: ram3 does not have a valid v0.90 superblock, not importing!
[   65.971586][ T6480] md: md_import_device returned -22
[   66.109357][   T34] usb 9-1: USB disconnect, device number 2
[   66.111068][ T5789] Bluetooth: hci1: command tx timeout
[   66.126367][   T34] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[   66.126861][   T34] kobil_sct 9-1:1.0: device disconnected
[   66.371104][ T1360] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[   66.407495][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   66.517176][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   66.631031][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   66.690393][ T6512] input: syz0 as /devices/virtual/input/input6
[   66.781156][    T9] usb 6-1: Using ep0 maxpacket: 8
[   66.783148][    T9] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   66.784905][    T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   66.784945][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   66.784971][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   66.784990][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   66.785010][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   66.785043][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.993906][    T9] usb 6-1: GET_CAPABILITIES returned 0
[   66.993946][    T9] usbtmc 6-1:16.0: can't read capabilities
[   67.209606][   T24] usb 6-1: USB disconnect, device number 4
[   67.544125][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'.
[   67.572076][   T42] kauditd_printk_skb: 50 callbacks suppressed
[   67.572093][   T42] audit: type=1400 audit(1793280131.595:453): avc:  denied  { write } for  pid=6536 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   67.575966][   T42] audit: type=1400 audit(1793280131.595:454): avc:  denied  { name_bind } for  pid=6536 comm="syz.0.149" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   67.654190][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'.
[   67.758942][   T42] audit: type=1400 audit(1793280131.775:455): avc:  denied  { shutdown } for  pid=6550 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   67.761498][   T42] audit: type=1400 audit(1793280131.775:456): avc:  denied  { name_connect } for  pid=6550 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   68.070983][ T2367] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[   68.152074][   T42] audit: type=1400 audit(1793280132.175:457): avc:  denied  { create } for  pid=6562 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   68.201061][ T5789] Bluetooth: hci1: command tx timeout
[   68.221064][ T2367] usb 9-1: device descriptor read/64, error -71
[   68.456121][   T42] audit: type=1400 audit(1793280132.475:458): avc:  denied  { ioctl } for  pid=6567 comm="syz.0.156" path="/dev/ptp1" dev="devtmpfs" ino=1287 ioctlcmd=0xc0403d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   68.459442][ T6568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30923 sclass=netlink_route_socket pid=6568 comm=syz.0.156
[   68.471009][ T2367] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[   68.519144][ T6570] device-mapper: table: 248:1: mirror: Device lookup failure (-ENOENT)
[   68.519168][ T6570] device-mapper: ioctl: error adding target to table
[   68.561184][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[   68.613277][ T2367] usb 9-1: device descriptor read/64, error -71
[   68.670762][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'.
[   68.723516][ T2367] usb usb9-port1: attempt power cycle
[   68.794702][ T6583] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   68.953507][   T42] audit: type=1400 audit(1793280132.975:459): avc:  denied  { mount } for  pid=6616 comm="syz.1.165" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   68.954468][   T42] audit: type=1400 audit(1793280132.975:460): avc:  denied  { ioctl } for  pid=6612 comm="syz.0.164" path="socket:[13126]" dev="sockfs" ino=13126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   68.954946][   T42] audit: type=1400 audit(1793280132.975:461): avc:  denied  { connect } for  pid=6612 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   69.061032][ T2367] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[   69.081814][ T2367] usb 9-1: device descriptor read/8, error -71
[   69.171447][   T42] audit: type=1400 audit(1793280133.195:462): avc:  denied  { write } for  pid=6616 comm="syz.1.165" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   69.335528][ T2367] usb 9-1: new low-speed USB device number 6 using dummy_hcd
[   69.353875][ T2367] usb 9-1: device descriptor read/8, error -71
[   69.465336][ T2367] usb usb9-port1: unable to enumerate USB device
[   69.900244][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   69.902921][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   69.903524][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   69.904412][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   69.905008][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   69.958583][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.166'.
[   70.144894][ T6652] rxe_eth0 speed is unknown, defaulting to 1000
[   70.280999][ T5789] Bluetooth: hci1: command tx timeout
[   70.288423][ T5870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.350520][ T5870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.407941][ T5870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.459465][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.459543][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.459601][ T6652] bridge_slave_0: entered allmulticast mode
[   70.460318][ T6652] bridge_slave_0: entered promiscuous mode
[   70.477629][ T5870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.484598][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.484775][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.484865][ T6652] bridge_slave_1: entered allmulticast mode
[   70.486178][ T6652] bridge_slave_1: entered promiscuous mode
[   70.500352][ T6652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.501938][ T6652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.514129][ T6652] team0: Port device team_slave_0 added
[   70.515429][ T6652] team0: Port device team_slave_1 added
[   70.528634][ T6652] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.528645][ T6652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.528659][ T6652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.529633][ T6652] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.529641][ T6652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.529656][ T6652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.549768][ T6652] hsr_slave_0: entered promiscuous mode
[   70.550213][ T6652] hsr_slave_1: entered promiscuous mode
[   70.550551][ T6652] debugfs: 'hsr0' already exists in 'hsr'
[   70.550564][ T6652] Cannot create hsr debugfs directory
[   70.645347][ T5870] bridge_slave_1: left allmulticast mode
[   70.645364][ T5870] bridge_slave_1: left promiscuous mode
[   70.645475][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.647099][ T5870] bridge_slave_0: left allmulticast mode
[   70.647111][ T5870] bridge_slave_0: left promiscuous mode
[   70.647205][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.749108][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.752910][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.758346][ T5870] bond0 (unregistering): Released all slaves
[   70.875776][ T6652] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   70.879059][ T6652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.879792][ T6652] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   70.890791][ T6652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.891747][ T6652] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   70.894734][ T6652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.898390][ T6652] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   70.903390][ T6652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.933589][ T6695] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   70.933604][ T6695] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   70.974504][ T6707] netlink: 'syz.4.174': attribute type 4 has an invalid length.
[   70.984711][ T5498] 8021q: adding VLAN 0 to HW filter on device eth6
[   71.032100][ T6652] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.047236][ T6652] 8021q: adding VLAN 0 to HW filter on device team0
[   71.053457][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.053542][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.065091][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.065187][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.178901][ T5870] hsr_slave_0: left promiscuous mode
[   71.179553][ T5870] hsr_slave_1: left promiscuous mode
[qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
   71.180100][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.180111][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.188496][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.188516][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.199830][ T5870] veth1_macvtap: left promiscuous mode
[   71.199870][ T5870] veth0_macvtap: left promiscuous mode
[   71.199949][ T5870] veth1_vlan: left promiscuous mode
[   71.202082][ T5870] veth0_vlan: left promiscuous mode
[   71.329068][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[   71.329135][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[   71.416452][ T5870] team0 (unregistering): Port device team_slave_1 removed
[   71.424645][ T5870] team0 (unregistering): Port device team_slave_0 removed
[   71.487399][ T5498] 8021q: adding VLAN 0 to HW filter on device eth7
[   71.488622][ T6722] warning: `syz.0.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.607912][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.179'.
[   71.648050][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.179'.
[   71.677628][ T5498] 8021q: adding VLAN 0 to HW filter on device eth8
[   71.734845][ T6652] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.816951][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   71.855722][ T5498] 8021q: adding VLAN 0 to HW filter on device eth9
[   71.875864][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   71.890657][ T6652] veth0_vlan: entered promiscuous mode
[   71.903012][ T6652] veth1_vlan: entered promiscuous mode
[   71.933801][ T6784] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.935120][ T6784] bond0: (slave bond1): Enslaving as an active interface with an up link
[   71.937970][ T6652] veth0_macvtap: entered promiscuous mode
[   71.959270][ T6652] veth1_macvtap: entered promiscuous mode
[   71.962188][ T5789] Bluetooth: hci4: command tx timeout
[   71.968371][ T6652] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.973457][ T6652] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.989074][ T6791] FAULT_INJECTION: forcing a failure.
[   71.989074][ T6791] name failslab, interval 1, probability 0, space 0, times 0
[   71.989103][ T6791] CPU: 1 UID: 0 PID: 6791 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) 
[   71.989126][ T6791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.989138][ T6791] Call Trace:
[   71.989144][ T6791]  <TASK>
[   71.989152][ T6791]  dump_stack_lvl+0x100/0x190
[   71.989201][ T6791]  should_fail_ex.cold+0x5/0xa
[   71.989232][ T6791]  should_failslab+0xc2/0x120
[   71.989258][ T6791]  __kmalloc_cache_noprof+0x91/0x6d0
[   71.989310][ T6791]  ? __io_uring_add_tctx_node+0x179/0x4f0
[   71.989334][ T6791]  __io_uring_add_tctx_node+0x179/0x4f0
[   71.989354][ T6791]  ? security_inode_init_security_anon+0x21/0x230
[   71.989374][ T6791]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[   71.989395][ T6791]  ? __anon_inode_getfile+0x17c/0x280
[   71.989410][ T6791]  io_uring_setup.cold+0x19bf/0x1c7e
[   71.989426][ T6791]  ? __pfx_io_uring_setup+0x10/0x10
[   71.989439][ T6791]  ? find_held_lock+0x2b/0x80
[   71.989463][ T6791]  ? xfd_validate_state+0x129/0x190
[   71.989483][ T6791]  __x64_sys_io_uring_setup+0xc2/0x170
[   71.989498][ T6791]  do_syscall_64+0x123/0x790
[   71.989516][ T6791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.989528][ T6791] RIP: 0033:0x7f067bd9f559
[   71.989539][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.989551][ T6791] RSP: 002b:00007f067cbb5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[   71.989564][ T6791] RAX: ffffffffffffffda RBX: 00007f067c025fa0 RCX: 00007f067bd9f559
[   71.989572][ T6791] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000f08
[   71.989580][ T6791] RBP: 00007f067be36b20 R08: 0000000000000000 R09: 0000000000000000
[   71.989588][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.989595][ T6791] R13: 00007f067c026038 R14: 00007f067c025fa0 R15: 00007ffe59f22d58
[   71.989610][ T6791]  </TASK>
[   72.041585][ T6597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.041599][ T6597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.053129][ T5837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.064945][ T6604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.064959][ T6604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.072430][ T6698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.072455][ T6698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.072474][ T6698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.091137][ T6800] rxe_eth0 speed is unknown, defaulting to 1000
[   72.127745][ T6804] xt_hashlimit: size too large, truncated to 1048576
[   72.156758][ T6805] ip_tables: iptables: counters copy to user failed while replacing table
[   72.159153][ T6805] x_tables: duplicate underflow at hook 3
[   72.162421][ T6805] ip_tables: iptables: counters copy to user failed while replacing table
[   72.166577][ T6805] ip_tables: iptables: counters copy to user failed while replacing table
[   72.176987][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.167'.
[   72.295916][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.167'.
[   72.393420][ T6831] evm: overlay not supported
[   72.614322][ T6845] capability: warning: `syz.0.201' uses 32-bit capabilities (legacy support in use)
[   72.648994][ T6847] overlayfs: failed to resolve './sys': -2
[   72.654389][   T42] kauditd_printk_skb: 38 callbacks suppressed
[   72.654407][   T42] audit: type=1400 audit(1793280136.675:501): avc:  denied  { name_bind } for  pid=6846 comm="syz.1.202" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   72.728714][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   72.809857][   T42] audit: type=1400 audit(1793280136.825:502): avc:  denied  { mounton } for  pid=6862 comm="syz.5.206" path="/5/mydev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   72.835245][ T6866] FAULT_INJECTION: forcing a failure.
[   72.835245][ T6866] name failslab, interval 1, probability 0, space 0, times 0
[   72.835263][ T6866] CPU: 0 UID: 0 PID: 6866 Comm: syz.5.206 Not tainted syzkaller #0 PREEMPT(full) 
[   72.835277][ T6866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   72.835284][ T6866] Call Trace:
[   72.835288][ T6866]  <TASK>
[   72.835294][ T6866]  dump_stack_lvl+0x100/0x190
[   72.835318][ T6866]  should_fail_ex.cold+0x5/0xa
[   72.835336][ T6866]  should_failslab+0xc2/0x120
[   72.835349][ T6866]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[   72.835368][ T6866]  ? find_held_lock+0x2b/0x80
[   72.835381][ T6866]  ? kasprintf+0xc7/0x100
[   72.835398][ T6866]  kvasprintf+0xbc/0x150
[   72.835411][ T6866]  ? __pfx_kvasprintf+0x10/0x10
[   72.835429][ T6866]  kasprintf+0xc7/0x100
[   72.835443][ T6866]  ? __pfx_kasprintf+0x10/0x10
[   72.835457][ T6866]  ? find_held_lock+0x2b/0x80
[   72.835469][ T6866]  ? avc_has_perm_noaudit+0x11e/0x470
[   72.835483][ T6866]  ? avc_has_perm_noaudit+0x11e/0x470
[   72.835499][ T6866]  logfc+0x11c/0x4e0
[   72.835517][ T6866]  ? __pfx_logfc+0x10/0x10
[   72.835532][ T6866]  ? cred_has_capability.isra.0+0x186/0x300
[   72.835547][ T6866]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[   72.835564][ T6866]  ? hook_capable+0x1bc/0x500
[   72.835582][ T6866]  ? rcu_is_watching+0x13/0xc0
[   72.835597][ T6866]  nfs_get_tree+0xcb9/0x1440
[   72.835611][ T6866]  ? security_capable+0x80/0x260
[   72.835627][ T6866]  vfs_get_tree+0x92/0x320
[   72.835644][ T6866]  vfs_cmd_create+0xd7/0x2a0
[   72.835655][ T6866]  __do_sys_fsconfig+0x55a/0xcb0
[   72.835667][ T6866]  ? __pfx___do_sys_fsconfig+0x10/0x10
[   72.835686][ T6866]  do_syscall_64+0x123/0x790
[   72.835699][ T6866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.835711][ T6866] RIP: 0033:0x7f04ce39f559
[   72.835721][ T6866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.835732][ T6866] RSP: 002b:00007f04cc5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   72.835743][ T6866] RAX: ffffffffffffffda RBX: 00007f04ce626180 RCX: 00007f04ce39f559
[   72.835750][ T6866] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[   72.835757][ T6866] RBP: 00007f04ce436b20 R08: 0000000000000000 R09: 0000000000000000
[   72.835764][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.835770][ T6866] R13: 00007f04ce626218 R14: 00007f04ce626180 R15: 00007fff30741c88
[   72.835785][ T6866]  </TASK>
[   72.838477][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   72.896412][   T42] audit: type=1400 audit(1793280136.915:503): avc:  denied  { map } for  pid=6868 comm="syz.0.207" path="socket:[16171]" dev="sockfs" ino=16171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   72.947855][ T5891] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   73.021986][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.208'.
[   73.024094][ T6875] syz.5.208 uses obsolete (PF_INET,SOCK_PACKET)
[   73.102840][ T5891] usb 6-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[   73.104891][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   73.104932][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.324310][ T5891] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[   73.342652][ T5891] wwan wwan0: port wwan0qmi0 attached
[   73.367281][ T5891] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, f6:1a:e8:d6:d1:d7
[   73.379069][ T6905] ip_tables: iptables: counters copy to user failed while replacing table
[   73.391680][   T42] audit: type=1400 audit(1793280137.405:504): avc:  denied  { read } for  pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   73.486085][   T42] audit: type=1400 audit(1793280137.505:505): avc:  denied  { write } for  pid=6911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.548206][ T1360] usb 6-1: USB disconnect, device number 6
[   73.554875][   T42] audit: type=1400 audit(1793280137.575:506): avc:  denied  { write } for  pid=6923 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.566920][ T1360] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[   73.639223][ T1360] wwan wwan0: port wwan0qmi0 disconnected
[   73.658330][   T42] audit: type=1400 audit(1793280137.675:507): avc:  denied  { append } for  pid=6932 comm="syz.4.217" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   73.689144][   T42] audit: type=1400 audit(1793280137.705:508): avc:  denied  { write } for  pid=6930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.763990][   T42] audit: type=1400 audit(1793280137.785:509): avc:  denied  { write } for  pid=6944 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.957432][ T6953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   74.031090][ T5789] Bluetooth: hci4: command tx timeout
[   74.198818][   T42] audit: type=1400 audit(1793280138.215:510): avc:  denied  { remount } for  pid=6962 comm="syz.5.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   74.270827][ T6967] device-mapper: table: 248:4: striped: Couldn't parse stripe destination (-ENOENT)
[   74.270850][ T6967] device-mapper: ioctl: error adding target to table
[   74.521534][ T3306] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[   74.601035][ T5891] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   74.761342][ T5891] usb 9-1: Using ep0 maxpacket: 32
[   74.763188][ T5891] usb 9-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   74.764143][ T5891] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[   74.764213][ T5891] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   74.764225][ T5891] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[   74.764253][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   74.764265][ T5891] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   74.764278][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   74.764299][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.766061][ T5891] usb 9-1: config 0 descriptor??
[   74.819959][ T7001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   74.826724][ T3306] usb 10-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[   74.826747][ T3306] usb 10-1: too many configurations: 181, using maximum allowed: 8
[   74.828302][ T3306] usb 10-1: unable to read config index 0 descriptor/start: -71
[   74.828320][ T3306] usb 10-1: can't read configurations, error -71
[   74.973934][ T5891] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   74.983664][ T7017] __nla_validate_parse: 3 callbacks suppressed
[   74.983680][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.235'.
[   75.176637][ T7026] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[   75.202397][    T9] usb 9-1: USB disconnect, device number 7
[   75.207354][    T9] usblp0: removed
[   75.351736][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'.
[   75.410117][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'.
[   75.447105][ T7046] ip6erspan0: entered allmulticast mode
[   75.508932][ T7048] smpboot: CPU 1 is now offline
[   75.534969][   T29] cfg80211: failed to load regulatory.db
[   75.572335][ T7056] /dev/sr0: Can't open blockdev
[   75.638815][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.639173][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.665419][ T7066] batadv1: entered promiscuous mode
[   75.665439][ T7066] batadv1: entered allmulticast mode
[   75.727436][ T7074] batadv1: entered promiscuous mode
[   75.727455][ T7074] batadv1: entered allmulticast mode
[   75.838586][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'.
[   75.921057][ T3306] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[   75.961630][ T2367] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   76.010367][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[   76.010548][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[   76.010706][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[   76.010863][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[   76.029234][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[   76.029429][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'.
[   76.051625][ T3306] usb 10-1: device descriptor read/64, error -71
[   76.111255][ T5789] Bluetooth: hci4: command tx timeout
[   76.111341][ T2367] usb 5-1: Using ep0 maxpacket: 8
[   76.111860][ T2367] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   76.112714][ T2367] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   76.112733][ T2367] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   76.112753][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   76.112769][ T2367] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   76.112785][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   76.112800][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   76.112814][ T2367] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   76.112830][ T2367] usb 5-1: config 168 interface 0 has no altsetting 0
[   76.114033][ T2367] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   76.114051][ T2367] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   76.114071][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   76.114086][ T2367] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   76.114101][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   76.114116][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   76.114171][ T2367] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   76.114187][ T2367] usb 5-1: config 168 interface 0 has no altsetting 0
[   76.115646][ T2367] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   76.115664][ T2367] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   76.115685][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   76.115701][ T2367] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   76.115716][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   76.115731][ T2367] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   76.115746][ T2367] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   76.115762][ T2367] usb 5-1: config 168 interface 0 has no altsetting 0
[   76.122345][ T2367] usb 5-1: string descriptor 0 read error: -22
[   76.122452][ T2367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.138703][ T2367] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   76.163672][ T3306] usb usb10-port1: attempt power cycle
[   76.253235][ T7103] xt_hashlimit: size too large, truncated to 1048576
[   76.531026][ T3306] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[   76.561712][ T3306] usb 10-1: device descriptor read/8, error -71
[   76.801519][ T3306] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[   76.821692][ T3306] usb 10-1: device descriptor read/8, error -71
[   76.923737][ T7114] block nbd4: not configured, cannot reconfigure
[   76.941600][ T3306] usb usb10-port1: unable to enumerate USB device
[   77.775694][   T42] kauditd_printk_skb: 28 callbacks suppressed
[   77.775711][   T42] audit: type=1400 audit(1793280141.795:539): avc:  denied  { read } for  pid=7134 comm="syz.1.262" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   77.778691][ T7135] FAULT_INJECTION: forcing a failure.
[   77.778691][ T7135] name failslab, interval 1, probability 0, space 0, times 0
[   77.778714][ T7135] CPU: 2 UID: 0 PID: 7135 Comm: syz.1.262 Not tainted syzkaller #0 PREEMPT(full) 
[   77.778734][ T7135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.778745][ T7135] Call Trace:
[   77.778752][ T7135]  <TASK>
[   77.778760][ T7135]  dump_stack_lvl+0x100/0x190
[   77.778795][ T7135]  should_fail_ex.cold+0x5/0xa
[   77.778824][ T7135]  should_failslab+0xc2/0x120
[   77.778844][ T7135]  __kmalloc_cache_noprof+0x91/0x6d0
[   77.778867][ T7135]  ? kasan_save_track+0x14/0x30
[   77.778884][ T7135]  ? ovl_init_fs_context+0x11f/0x630
[   77.778915][ T7135]  ovl_init_fs_context+0x11f/0x630
[   77.778943][ T7135]  alloc_fs_context+0x607/0xf40
[   77.778975][ T7135]  path_mount+0xf59/0x2850
[   77.779004][ T7135]  ? __pfx_path_mount+0x10/0x10
[   77.779028][ T7135]  ? lockdep_hardirqs_on+0x7d/0x110
[   77.779061][ T7135]  ? putname+0xb1/0x110
[   77.779081][ T7135]  ? kmem_cache_free+0x127/0x6c0
[   77.779111][ T7135]  ? __x64_sys_mount+0x293/0x310
[   77.779135][ T7135]  __x64_sys_mount+0x293/0x310
[   77.779161][ T7135]  ? __pfx___x64_sys_mount+0x10/0x10
[   77.779185][ T7135]  ? __pfx_ptp_ioctl+0x10/0x10
[   77.779248][ T7135]  do_syscall_64+0x123/0x790
[   77.779269][ T7135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.779288][ T7135] RIP: 0033:0x7fe83279f559
[   77.779304][ T7135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.779320][ T7135] RSP: 002b:00007fe833638028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   77.779339][ T7135] RAX: ffffffffffffffda RBX: 00007fe832a25fa0 RCX: 00007fe83279f559
[   77.779358][ T7135] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000
[   77.779370][ T7135] RBP: 00007fe832836b20 R08: 0000200000000580 R09: 0000000000000000
[   77.779382][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.779393][ T7135] R13: 00007fe832a26038 R14: 00007fe832a25fa0 R15: 00007ffea71b0ed8
[   77.779421][ T7135]  </TASK>
[   77.843367][ T7137] FAULT_INJECTION: forcing a failure.
[   77.843367][ T7137] name failslab, interval 1, probability 0, space 0, times 0
[   77.843387][ T7137] CPU: 2 UID: 0 PID: 7137 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) 
[   77.843400][ T7137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.843407][ T7137] Call Trace:
[   77.843411][ T7137]  <TASK>
[   77.843416][ T7137]  dump_stack_lvl+0x100/0x190
[   77.843439][ T7137]  should_fail_ex.cold+0x5/0xa
[   77.843458][ T7137]  should_failslab+0xc2/0x120
[   77.843471][ T7137]  __kvmalloc_node_noprof+0x113/0x9b0
[   77.843490][ T7137]  ? io_alloc_cache_init+0x38/0x170
[   77.843510][ T7137]  io_alloc_cache_init+0x38/0x170
[   77.843528][ T7137]  io_rsrc_cache_init+0x40/0x50
[   77.843543][ T7137]  io_uring_setup.cold+0x4c0/0x1c7e
[   77.843558][ T7137]  ? lock_acquire+0x1d1/0x380
[   77.843573][ T7137]  ? avc_has_perm_noaudit+0x56/0x470
[   77.843588][ T7137]  ? __pfx_io_uring_setup+0x10/0x10
[   77.843600][ T7137]  ? find_held_lock+0x2b/0x80
[   77.843612][ T7137]  ? avc_has_perm_noaudit+0x11e/0x470
[   77.843625][ T7137]  ? avc_has_perm_noaudit+0x11e/0x470
[   77.843647][ T7137]  ? __pfx___x64_sys_futex+0x10/0x10
[   77.843665][ T7137]  __x64_sys_io_uring_setup+0xc2/0x170
[   77.843679][ T7137]  do_syscall_64+0x123/0x790
[   77.843692][ T7137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.843705][ T7137] RIP: 0033:0x7fe83279f559
[   77.843714][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.843726][ T7137] RSP: 002b:00007fe833637fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[   77.843737][ T7137] RAX: ffffffffffffffda RBX: 00002000000001c0 RCX: 00007fe83279f559
[   77.843745][ T7137] RDX: 0000200000000280 RSI: 00002000000001c0 RDI: 00000000000045d2
[   77.843752][ T7137] RBP: 00007fe832836b20 R08: 0000000000000000 R09: 0000000000000000
[   77.843759][ T7137] R10: 00002000000002c0 R11: 0000000000000206 R12: 0000200000000280
[   77.843766][ T7137] R13: 00002000000002c0 R14: 0000200000000240 R15: 00007ffea71b0ed8
[   77.843781][ T7137]  </TASK>
[   78.000766][   T42] audit: type=1400 audit(1793280142.015:540): avc:  denied  { connect } for  pid=7141 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   78.003028][   T42] audit: type=1400 audit(1793280142.025:541): avc:  denied  { write } for  pid=7141 comm="syz.1.264" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   78.004457][ T7142] random: crng reseeded on system resumption
[   78.006340][   T42] audit: type=1400 audit(1793280142.025:542): avc:  denied  { open } for  pid=7141 comm="syz.1.264" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   78.109376][   T42] audit: type=1400 audit(1793280142.125:543): avc:  denied  { create } for  pid=7154 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   78.192784][ T5789] Bluetooth: hci4: command tx timeout
[   78.208373][   T42] audit: type=1400 audit(1793280142.225:544): avc:  denied  { create } for  pid=7161 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   78.279191][   T42] audit: type=1400 audit(1793280142.295:545): avc:  denied  { bind } for  pid=7164 comm="syz.1.271" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.279328][   T42] audit: type=1400 audit(1793280142.295:546): avc:  denied  { name_bind } for  pid=7164 comm="syz.1.271" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   78.279540][   T42] audit: type=1400 audit(1793280142.295:547): avc:  denied  { node_bind } for  pid=7164 comm="syz.1.271" saddr=ff02::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   78.435032][   T42] audit: type=1400 audit(1793280142.455:548): avc:  denied  { read write } for  pid=7172 comm="syz.1.275" name="power" dev="configfs" ino=16970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   78.474294][ T7173] null_blk: disk my_nullb created
[   78.502349][ T7177] bridge0: entered promiscuous mode
[   78.506568][ T7177] ip6gretap0: entered promiscuous mode
[   78.721385][ T6698] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.721430][ T6698] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.729075][ T1360] usb 5-1: USB disconnect, device number 5
[   78.742385][ T6698] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.742427][ T6698] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.112860][ T7214] null_blk: disk my_nullb created
[   79.186356][ T7216] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   79.226388][ T7218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7218 comm=syz.0.291
[   79.353771][ T7225] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[   80.024596][ T7256] =======================================================
[   80.024596][ T7256] WARNING: The mand mount option has been deprecated and
[   80.024596][ T7256]          and is ignored by this kernel. Remove the mand
[   80.024596][ T7256]          option from the mount to silence this warning.
[   80.024596][ T7256] =======================================================
[   80.025170][ T7256] overlayfs: overlapping lowerdir path
[   80.033404][ T7256] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   80.033434][ T7256] overlayfs: overlapping lowerdir path
[   80.047555][ T7256] overlayfs: overlapping lowerdir path
[   80.048947][ T7258] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   80.048972][ T7258] overlayfs: overlapping lowerdir path
[   80.128948][ T7270] process 'syz.0.303' launched './file0' with NULL argv: empty string added
[   80.299678][ T7277] rxe_eth0 speed is unknown, defaulting to 1000
[   80.824406][ T1172] IPVS: starting estimator thread 0...
[   80.921032][ T7284] IPVS: using max 42 ests per chain, 100800 per kthread
[   81.244186][ T5789] Bluetooth: hci0: command tx timeout
[   81.305988][ T7301] kAFS: Invalid Command on /proc/fs/afs/cells file
[   81.353551][ T5790] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   81.467006][ T7309] sd 0:0:0:0: PR command failed: 1026
[   81.467045][ T7309] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   81.467078][ T7309] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   81.521137][ T5790] usb 5-1: Using ep0 maxpacket: 8
[   81.521753][ T5790] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   81.524847][ T5790] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   81.524868][ T5790] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   81.524888][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   81.524904][ T5790] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   81.524919][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   81.524934][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   81.524950][ T5790] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   81.524966][ T5790] usb 5-1: config 168 interface 0 has no altsetting 0
[   81.525725][ T5790] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   81.525743][ T5790] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   81.525763][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   81.525778][ T5790] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   81.525793][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   81.525810][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   81.525825][ T5790] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   81.525841][ T5790] usb 5-1: config 168 interface 0 has no altsetting 0
[   81.526546][ T5790] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   81.526568][ T5790] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   81.526597][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   81.526622][ T5790] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   81.526645][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   81.526668][ T5790] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   81.526686][ T5790] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   81.526700][ T5790] usb 5-1: config 168 interface 0 has no altsetting 0
[   81.529481][ T5790] usb 5-1: string descriptor 0 read error: -22
[   81.529536][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.537288][ T5790] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   81.549675][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   81.699331][ T7319] afs: Bad value for 'source'
[   81.746234][ T5837] 
[   81.746852][   T58] usb 5-1: USB disconnect, device number 6
[   81.749574][ T5837] ======================================================
[   81.751931][ T5837] WARNING: possible circular locking dependency detected
[   81.754706][ T5837] syzkaller #0 Tainted: G             L      
[   81.757191][ T5837] ------------------------------------------------------
[   81.759616][ T5837] kworker/u32:2/5837 is trying to acquire lock:
[   81.762117][ T5837] ffff88801dfd0698 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0
[   81.765804][ T5837] 
[   81.765804][ T5837] but task is already holding lock:
[   81.768328][ T5837] ffffffff8fe7a6b0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390
[   81.772419][ T5837] 
[   81.772419][ T5837] which lock already depends on the new lock.
[   81.772419][ T5837] 
[   81.776097][ T5837] 
[   81.776097][ T5837] the existing dependency chain (in reverse order) is:
[   81.779700][ T5837] 
[   81.779700][ T5837] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[   81.782375][ T5837]        lock_acquire+0x1d1/0x380
[   81.784466][ T5837]        percpu_down_write+0x4e/0x3d0
[   81.786662][ T5837]        _cpu_up+0x68/0x960
[   81.788528][ T5837]        cpu_up+0x1ba/0x230
[   81.790006][ T5837]        cpuhp_bringup_mask+0xf8/0x180
[   81.792138][ T5837]        bringup_nonboot_cpus+0xd9/0x1b0
[   81.793955][ T5837]        smp_init+0x32/0x150
[   81.795667][ T5837]        kernel_init_freeable+0x44b/0x7b0
[   81.798114][ T5837]        kernel_init+0x21/0x1e0
[   81.799961][ T5837]        ret_from_fork+0x730/0xd60
[   81.801828][ T5837]        ret_from_fork_asm+0x1a/0x30
[   81.803971][ T5837] 
[   81.803971][ T5837] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}:
[   81.806962][ T5837]        lock_acquire+0x1d1/0x380
[   81.808727][ T5837]        __mutex_lock+0x19f/0x1c10
[   81.810813][ T5837]        cpu_device_down+0x46/0xc0
[   81.812738][ T5837]        device_offline+0x2f4/0x400
[   81.814596][ T5837]        acpi_bus_offline+0x3c7/0x550
[   81.816781][ T5837]        acpi_device_hotplug+0x627/0xbe0
[   81.818737][ T5837]        acpi_hotplug_work_fn+0x5e/0x90
[   81.820633][ T5837]        process_one_work+0xac7/0x1b10
[   81.822661][ T5837]        worker_thread+0x5ef/0xe50
[   81.824448][ T5837]        kthread+0x373/0x450
[   81.825931][ T5837]        ret_from_fork+0x730/0xd60
[   81.827894][ T5837]        ret_from_fork_asm+0x1a/0x30
[   81.829851][ T5837] 
[   81.829851][ T5837] -> #1 (&device->physical_node_lock){+.+.}-{4:4}:
[   81.833066][ T5837]        lock_acquire+0x1d1/0x380
[   81.835119][ T5837]        __mutex_lock+0x19f/0x1c10
[   81.837170][ T5837]        acpi_companion_match+0xc0/0x180
[   81.838909][ T5837]        acpi_device_uevent_modalias+0x19/0x30
[   81.841442][ T5837]        platform_uevent+0x51/0xc0
[   81.843509][ T5837]        dev_uevent+0x1de/0x870
[   81.845373][ T5837]        kobject_uevent_env+0x6eb/0x18b0
[   81.847328][ T5837]        kobject_synth_uevent+0x679/0x7d0
[   81.849642][ T5837]        uevent_store+0x24/0x50
[   81.851255][ T5837]        dev_attr_store+0x58/0x80
[   81.853246][ T5837]        sysfs_kf_write+0xf2/0x150
[   81.855329][ T5837]        kernfs_fop_write_iter+0x3e0/0x5f0
[   81.857419][ T5837]        vfs_write+0x6af/0x1050
[   81.859180][ T5837]        ksys_write+0x12a/0x250
[   81.861158][ T5837]        do_syscall_64+0x123/0x790
[   81.863256][ T5837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.865456][ T5837] 
[   81.865456][ T5837] -> #0 (kn->active#5){++++}-{0:0}:
[   81.868347][ T5837]        check_prev_add+0xeb/0xe60
[   81.870184][ T5837]        __lock_acquire+0x1528/0x1f40
[   81.872037][ T5837]        lock_acquire+0x1d1/0x380
[   81.874089][ T5837]        kernfs_drain+0x4eb/0x600
[   81.875759][ T5837]        __kernfs_remove+0x34c/0xbc0
[   81.877762][ T5837]        kernfs_remove_by_name_ns+0x7c/0x120
[   81.879998][ T5837]        device_del+0x361/0x9b0
[   81.881625][ T5837]        device_unregister+0x1d/0xe0
[   81.883758][ T5837]        unregister_cpu+0xa0/0x140
[   81.885796][ T5837]        acpi_processor_post_eject+0x16f/0x390
[   81.887981][ T5837]        acpi_device_hotplug+0x9df/0xbe0
[   81.890316][ T5837]        acpi_hotplug_work_fn+0x5e/0x90
[   81.892552][ T5837]        process_one_work+0xac7/0x1b10
[   81.894756][ T5837]        worker_thread+0x5ef/0xe50
[   81.896834][ T5837]        kthread+0x373/0x450
[   81.898681][ T5837]        ret_from_fork+0x730/0xd60
[   81.900278][ T5837]        ret_from_fork_asm+0x1a/0x30
[   81.902472][ T5837] 
[   81.902472][ T5837] other info that might help us debug this:
[   81.902472][ T5837] 
[   81.905956][ T5837] Chain exists of:
[   81.905956][ T5837]   kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock
[   81.905956][ T5837] 
[   81.911058][ T5837]  Possible unsafe locking scenario:
[   81.911058][ T5837] 
[   81.913500][ T5837]        CPU0                    CPU1
[   81.915572][ T5837]        ----                    ----
[   81.917748][ T5837]   lock(cpu_hotplug_lock);
[   81.919613][ T5837]                                lock(cpu_add_remove_lock);
[   81.922550][ T5837]                                lock(cpu_hotplug_lock);
[   81.925371][ T5837]   lock(kn->active#5);
[   81.926688][ T5837] 
[   81.926688][ T5837]  *** DEADLOCK ***
[   81.926688][ T5837] 
[   81.929908][ T5837] locks held by kworker/u32:2/5837: 6, last CPU#2:
[   81.932432][ T5837]  #0: ffff888024251948 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10
[   81.936783][ T5837]  #1: ffffc90003c07d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[   81.940745][ T5837]  #2: ffffffff91047100 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x7e/0xbe0
[   81.943916][ T5837]  #3: ffffffff90d15c60 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x8c/0xbe0
[   81.946926][ T5837]  #4: ffffffff8fe7a760 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390
[   81.950309][ T5837]  #5: ffffffff8fe7a6b0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390
[   81.953545][ T5837] 
[   81.953545][ T5837] stack backtrace:
[   81.955368][ T5837] CPU: 2 UID: 0 PID: 5837 Comm: kworker/u32:2 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   81.958609][ T5837] Tainted: [L]=SOFTLOCKUP
[   81.959823][ T5837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   81.963081][ T5837] Workqueue: kacpi_hotplug acpi_hotplug_work_fn
[   81.965542][ T5837] Call Trace:
[   81.966867][ T5837]  <TASK>
[   81.968038][ T5837]  dump_stack_lvl+0x100/0x190
[   81.969741][ T5837]  print_circular_bug.cold+0x178/0x1be
[   81.971450][ T5837]  check_noncircular+0x146/0x160
[   81.973004][ T5837]  check_prev_add+0xeb/0xe60
[   81.974436][ T5837]  __lock_acquire+0x1528/0x1f40
[   81.975955][ T5837]  lock_acquire+0x1d1/0x380
[   81.977375][ T5837]  ? __kernfs_remove+0x34c/0xbc0
[   81.978993][ T5837]  ? kernfs_drain+0x4c2/0x600
[   81.980566][ T5837]  kernfs_drain+0x4eb/0x600
[   81.982000][ T5837]  ? __kernfs_remove+0x34c/0xbc0
[   81.983549][ T5837]  ? __pfx_kernfs_drain+0x10/0x10
[   81.985133][ T5837]  ? find_held_lock+0x2b/0x80
[   81.986666][ T5837]  ? __kernfs_remove+0x224/0xbc0
[   81.988222][ T5837]  ? __kernfs_remove+0x224/0xbc0
[   81.989797][ T5837]  ? up_write+0x2dc/0x5b0
[   81.991148][ T5837]  __kernfs_remove+0x34c/0xbc0
[   81.992647][ T5837]  ? __pfx_acpi_processor_post_eject+0x10/0x10
[   81.994560][ T5837]  kernfs_remove_by_name_ns+0x7c/0x120
[   81.996243][ T5837]  device_del+0x361/0x9b0
[   81.997598][ T5837]  ? __pfx_device_del+0x10/0x10
[   81.999384][ T5837]  ? __pfx_acpi_processor_post_eject+0x10/0x10
[   82.001826][ T5837]  ? kernfs_remove_by_name_ns+0xbb/0x120
[   82.003910][ T5837]  ? __pfx_acpi_processor_post_eject+0x10/0x10
[   82.005880][ T5837]  device_unregister+0x1d/0xe0
[   82.007393][ T5837]  unregister_cpu+0xa0/0x140
[   82.008828][ T5837]  acpi_processor_post_eject+0x16f/0x390
[   82.010635][ T5837]  acpi_device_hotplug+0x9df/0xbe0
[   82.012261][ T5837]  ? __pfx_acpi_device_hotplug+0x10/0x10
[   82.013993][ T5837]  acpi_hotplug_work_fn+0x5e/0x90
[   82.015484][ T5837]  process_one_work+0xac7/0x1b10
[   82.016955][ T5837]  ? __pfx_process_one_work+0x10/0x10
[   82.018651][ T5837]  ? lock_acquire+0x1d1/0x380
[   82.020139][ T5837]  ? __pfx_acpi_hotplug_work_fn+0x10/0x10
[   82.021911][ T5837]  worker_thread+0x5ef/0xe50
[   82.023359][ T5837]  ? kthread+0x13a/0x450
[   82.024693][ T5837]  ? __pfx_worker_thread+0x10/0x10
[   82.026323][ T5837]  kthread+0x373/0x450
[   82.027595][ T5837]  ? __pfx_kthread+0x10/0x10
[   82.029333][ T5837]  ret_from_fork+0x730/0xd60
[   82.031052][ T5837]  ? __pfx_ret_from_fork+0x10/0x10
[   82.033033][ T5837]  ? __switch_to+0x800/0x10e0
[   82.034854][ T5837]  ? __pfx_kthread+0x10/0x10
[   82.036581][ T5837]  ret_from_fork_asm+0x1a/0x30
[   82.038384][ T5837]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.241950][ T7332] tipc: Resetting bearer <eth:syz_tun>
[   82.250182][ T7332] tipc: Disabling bearer <eth:syz_tun>
[   82.435297][ T5837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.435320][ T5837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.524950][ T5837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.524981][ T5837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.586780][ T5837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.586816][ T5837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.648324][ T5837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.648357][ T5837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.708565][ T5837] bridge_slave_1: left allmulticast mode
[   82.708586][ T5837] bridge_slave_1: left promiscuous mode
[   82.708677][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.709650][ T5837] bridge_slave_0: left allmulticast mode
[   82.709663][ T5837] bridge_slave_0: left promiscuous mode
[   82.709740][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.758318][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.759291][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.760212][ T5837] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   82.760731][ T5837] bond0 (unregistering): Released all slaves
[   82.808315][ T5837] tipc: Left network mode
[   82.812792][   T42] kauditd_printk_skb: 33 callbacks suppressed
[   82.812803][   T42] audit: type=1400 audit(1793280146.835:582): avc:  denied  { write } for  pid=7336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.812827][   T42] audit: type=1400 audit(1793280146.835:583): avc:  denied  { create } for  pid=7336 comm="dhcpcd-run-hook" name="resolv.conf.eth10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.812844][   T42] audit: type=1400 audit(1793280146.835:584): avc:  denied  { write } for  pid=7336 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth10.link" dev="tmpfs" ino=2564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.812862][   T42] audit: type=1400 audit(1793280146.835:585): avc:  denied  { append } for  pid=7336 comm="dhcpcd-run-hook" name="resolv.conf.eth10.link" dev="tmpfs" ino=2564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.851745][   T42] audit: type=1400 audit(1793280146.865:586): avc:  denied  { write } for  pid=7339 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.851772][   T42] audit: type=1400 audit(1793280146.865:587): avc:  denied  { unlink } for  pid=7339 comm="rm" name="resolv.conf.eth10.link" dev="tmpfs" ino=2564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.869299][ T5498] 8021q: adding VLAN 0 to HW filter on device eth10
[   82.920268][   T42] audit: type=1400 audit(1793280146.935:588): avc:  denied  { write } for  pid=7342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.956145][   T42] audit: type=1400 audit(1793280146.975:589): avc:  denied  { write } for  pid=7345 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.975588][ T5837] hsr_slave_0: left promiscuous mode
[   82.975805][ T5837] hsr_slave_1: left promiscuous mode
[   82.976014][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.976024][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.976340][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.976349][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.977896][ T5837] veth1_macvtap: left promiscuous mode
[   82.977911][ T5837] veth0_macvtap: left promiscuous mode
[   82.977935][ T5837] veth1_vlan: left promiscuous mode
[   82.977961][ T5837] veth0_vlan: left promiscuous mode
[   83.062268][ T5837] team0 (unregistering): Port device team_slave_1 removed
[   83.066010][ T5837] team0 (unregistering): Port device team_slave_0 removed
[   83.106964][ T5498] 8021q: adding VLAN 0 to HW filter on device eth11
[   83.131310][   T42] audit: type=1400 audit(1793280147.155:590): avc:  denied  { write } for  pid=7347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.178919][   T42] audit: type=1400 audit(1793280147.195:591): avc:  denied  { write } for  pid=7350 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.339362][ T5498] 8021q: adding VLAN 0 to HW filter on device eth12
[   83.410484][ T5837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.455084][ T5837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.495669][ T5837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.556998][ T5837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.559169][ T5498] 8021q: adding VLAN 0 to HW filter on device eth13
[   83.616586][ T5837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.648656][ T5837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.686535][ T5837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.725926][ T5837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.757583][ T5498] 8021q: adding VLAN 0 to HW filter on device eth14
[   83.796035][ T5837] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.845330][ T5837] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.895348][ T5837] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.913511][ T5498] 8021q: adding VLAN 0 to HW filter on device eth15
[   83.934359][ T5837] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.000517][ T5837] bridge_slave_1: left allmulticast mode
[   84.000533][ T5837] bridge_slave_1: left promiscuous mode
[   84.000603][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.003393][ T5837] bridge_slave_0: left allmulticast mode
[   84.003411][ T5837] bridge_slave_0: left promiscuous mode
[   84.003506][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.014745][ T5837] bridge_slave_1: left allmulticast mode
[   84.014758][ T5837] bridge_slave_1: left promiscuous mode
[   84.014828][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.015564][ T5837] bridge_slave_0: left allmulticast mode
[   84.015575][ T5837] bridge_slave_0: left promiscuous mode
[   84.015636][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.028734][ T5837] bridge_slave_1: left allmulticast mode
[   84.028749][ T5837] bridge_slave_1: left promiscuous mode
[   84.028859][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.029828][ T5837] bridge_slave_0: left allmulticast mode
[   84.029840][ T5837] bridge_slave_0: left promiscuous mode
[   84.029904][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.102716][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.103910][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.104775][ T5837] bond0 (unregistering): (slave bond1): Releasing backup interface
[   84.105095][ T5837] bond0 (unregistering): Released all slaves
[   84.106445][ T5837] bond1 (unregistering): Released all slaves
[   84.109114][ T5837] ip6gretap0 (unregistering): left promiscuous mode
[   84.141674][ T5837] bridge0 (unregistering): left promiscuous mode
[   84.148827][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.150187][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.157842][ T5837] bond0 (unregistering): Released all slaves
[   84.175806][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.176724][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.177325][ T5837] bond0 (unregistering): Released all slaves
[   84.178969][ T5498] 8021q: adding VLAN 0 to HW filter on device eth17
[   84.404943][ T5498] 8021q: adding VLAN 0 to HW filter on device eth16
[   84.540756][ T5498] 8021q: adding VLAN 0 to HW filter on device eth18
[   84.677634][ T5837] hsr_slave_0: left promiscuous mode
[   84.678112][ T5837] hsr_slave_1: left promiscuous mode
[   84.678525][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.678541][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.679014][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.679027][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.696639][ T5837] hsr_slave_0: left promiscuous mode
[   84.697079][ T5837] hsr_slave_1: left promiscuous mode
[   84.697498][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.697512][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.697953][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.697966][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.700603][ T5837] hsr_slave_0: left promiscuous mode
[   84.708517][ T5837] hsr_slave_1: left promiscuous mode
[   84.709150][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.709163][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.711844][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.711856][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.720346][ T5837] veth1_macvtap: left promiscuous mode
[   84.720362][ T5837] veth0_macvtap: left promiscuous mode
[   84.720392][ T5837] veth1_vlan: left promiscuous mode
[   84.720414][ T5837] veth0_vlan: left promiscuous mode
[   84.730366][ T5837] veth1_macvtap: left promiscuous mode
[   84.730389][ T5837] veth0_macvtap: left promiscuous mode
[   84.730446][ T5837] veth1_vlan: left promiscuous mode
[   84.730487][ T5837] veth0_vlan: left promiscuous mode
[   84.742482][ T5837] veth1_macvtap: left promiscuous mode
[   84.742509][ T5837] veth0_macvtap: left promiscuous mode
[   84.742561][ T5837] veth1_vlan: left promiscuous mode
[   84.742598][ T5837] veth0_vlan: left promiscuous mode
[   84.906431][ T5837] team0 (unregistering): Port device team_slave_1 removed
[   84.908334][ T5837] team0 (unregistering): Port device team_slave_0 removed
[   84.988053][ T5837] team0 (unregistering): Port device team_slave_1 removed
[   84.995814][ T5837] team0 (unregistering): Port device team_slave_0 removed
[   85.060691][ T5837] team0 (unregistering): Port device team_slave_1 removed
[   85.067347][ T5837] team0 (unregistering): Port device team_slave_0 removed
[   85.099559][ T5498] 8021q: adding VLAN 0 to HW filter on device eth19
[   85.260530][ T5498] 8021q: adding VLAN 0 to HW filter on device eth20
[   85.417013][ T5498] 8021q: adding VLAN 0 to HW filter on device eth21
[   85.544947][ T5498] 8021q: adding VLAN 0 to HW filter on device eth22
[   85.655953][ T5498] 8021q: adding VLAN 0 to HW filter on device eth23
[   85.774264][ T5498] 8021q: adding VLAN 0 to HW filter on device eth25
[   85.884521][ T5498] 8021q: adding VLAN 0 to HW filter on device eth24