last executing test programs:

1m4.470667072s ago: executing program 0 (id=247):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000140)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x8020)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc000400", @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="868b2dbd7000ffdbdf251e00000008000300", @ANYRES32=0x0, @ANYBLOB="34002f8030000380050002000300000014000380080002000000000006000100ffff0000050002000200000005000200030000000c000600010000000100000038002f8008000100040000000c000200040454555555555514000380050002000000000005000200040000000c0002000202aaaaaaaaaaaa4c002f803c000380280003800c0004000000000000000000060001000100000006000300feff00000800020001000000080001000300000008000174020000000c0002000202aaaaaaaaaaaa0c0006000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)

1m4.469482346s ago: executing program 0 (id=249):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

1m4.384490886s ago: executing program 0 (id=251):
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
socket(0x2a, 0x2, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000000c0)={0x20000000000084, @remote, 0x0, 0x0, 'sh\x00', 0x0, 0x200, 0x4}, 0x2c)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814)

1m4.030130981s ago: executing program 0 (id=254):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0xf, 0x59455247, 0x3, 0x1, 0x2, 0x4, 0x8, 0x0, 0x1, 0x0, 0x7}}) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000140))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010841000000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e200200000000000c002b8008000100", @ANYRES32, @ANYBLOB='\''], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000340))
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0}) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) (rerun: 64)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
rseq(&(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1, 0xf7d5, 0x3, 0x6}}, 0x20, 0x1, 0x0) (async)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
move_mount(r7, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000096040a000200aaaaaaaaaa0c"], 0x30}}, 0x48010)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0xff000000, 0xffffff00, 'ip6erspan0\x00', 'wg1\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x150, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0xfd, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e22], [0x1, 0x0, 0x43, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x5, 0xffffffff, 'snmp_trap\x00', 'syz1\x00', {0xfffffffffffffffb}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) (async)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000600)={'s526\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x100007ff, 0x8, 0x40083, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xeb, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010004b0400000000fcdbdf257a000000", @ANYRES32=r5, @ANYBLOB="0007000009c9010008001c00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x4048800)

1m4.029677917s ago: executing program 0 (id=255):
r0 = socket(0x10, 0x3, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000887000/0x2000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0xa, 0xe4, 0x76})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000750000/0x14000)=nil, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r1, 0x221d, 0xcf75, 0x37, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x4000004, 0xffffdffd, 0xd3c0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2, 0x0)
ioctl(r4, 0x40946400, &(0x7f0000000100)="70633231326500000000000000000000000000000003")
ioctl$COMEDI_INSN(r4, 0x8028250c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fab000/0x18000)=nil, 0x0, 0x0, 0x58, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010405000000e5ffffffff010000", @ANYRES32=0x0, @ANYBLOB="eab0817d0000000024001280110001006272696467655f736c617665000000000c0005800500190000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x440d0}, 0x40d0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x40}}, 0x8080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1d, 0x6}, {0x6, 0x8, 0x0, 0x2}]}, 0x10)
preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)

1m3.710223105s ago: executing program 0 (id=256):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) (fail_nth: 18)

1m3.645654407s ago: executing program 32 (id=256):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) (fail_nth: 18)

12.648900473s ago: executing program 3 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='off', 0x3)
write(r3, &(0x7f0000000180)='on', 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.309436998s ago: executing program 3 (id=611):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000300)="05000806", 0x4, 0x80d1, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @local}, 0x14)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18)
getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20000, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r11, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x8014)
getpeername$packet(r11, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r12, &(0x7f0000000f80)}, 0x20)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000010001307000000000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES16=r12, @ANYBLOB="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"], 0x13c}}, 0x0)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x76, @loopback, 0x1}, 0x1c)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0xfffffffffffffe36, 0x1, 0x5}, @L2TP_ATTR_COOKIE={0x0, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

11.349688429s ago: executing program 3 (id=618):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9f00000004000000024ed00a4400000f0400000000005f0000000000000000000000000000000000b6f9cb9dd1abb6b51d67c3495d9d33c24246d5e0ae459d2c6f5c565508004c5a6c0e4f3527bae0bf917e7fc4453930dfd592cf9ec4ee03d407cb686332de4d7ca7abcad5aa0891119023b34ba1b457972a42bfeb39b56598bb67aaa6547bef80327792fcf003eb256d8629375a43b6e86b0ce240e4c4af4be94779b1197e5e292039cc7ca72ec4f26f9facb7191f8be60a01a2e660d216539ef3aa94e2f529c18dc99b1f85d9caa1513c1c821e8951b39397405f88"], 0x0, 0x28, 0x0, 0x0, 0x9}, 0x28)
r1 = socket(0x1e, 0x80805, 0x0)
listen(r1, 0x7) (async)
accept$unix(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)

11.269997424s ago: executing program 3 (id=619):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) (async, rerun: 64)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r7, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0)
write(r12, &(0x7f0000000180)='0', 0x1) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)

11.180011459s ago: executing program 3 (id=620):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6)
preadv2(r0, &(0x7f0000001740)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1, 0xfffffffa, 0x6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=0x0], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=0x0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)

11.059734264s ago: executing program 3 (id=621):
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = getpid()
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=<r3=>0x0)
r4 = fcntl$getown(r0, 0x9)
syz_clone3(&(0x7f0000000340)={0x20100000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x33}, &(0x7f0000000140)=""/95, 0x5f, &(0x7f0000000240)=""/78, &(0x7f0000000300)=[r2, r3, r4, 0xffffffffffffffff], 0x4, {r1}}, 0x58)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000))
r5 = syz_io_uring_setup(0x6f09, &(0x7f0000001340)={0x0, 0x595f, 0x80, 0x1, 0x53}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000500)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)

3.807344692s ago: executing program 2 (id=683):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/230)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x4)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0)
fcntl$addseals(r2, 0x409, 0x1)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
recvmsg$can_j1939(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40)
r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00')
pread64(r3, &(0x7f0000000100)=""/222, 0xde, 0x10200000000014)
dup(r1)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) (async)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/230) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) (async)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0) (async)
fcntl$addseals(r2, 0x409, 0x1) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
chdir(&(0x7f0000000080)='./file0\x00') (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async)
recvmsg$can_j1939(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) (async)
syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') (async)
pread64(r3, &(0x7f0000000100)=""/222, 0xde, 0x10200000000014) (async)
dup(r1) (async)

3.739250563s ago: executing program 2 (id=684):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
gettimeofday(&(0x7f0000000000), &(0x7f0000000080))
mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0,timeo=1,retrans=1,soft\x00')
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f00000000c0)={0x2, 0x0, 0x6}) (async)
ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f00000000c0)={0x2, 0x0, 0x6})

3.270274708s ago: executing program 2 (id=686):
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "d02bd2338efc2bfabb1acaaa3494bf908e119c6ff5c9aba8605530df56a4274f0c599ec9c3305c3a152f7b40b3075599edddae0fbbc947f4129a4d00e1442d09", 0x35}, 0x48, 0x0) (async)
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "d02bd2338efc2bfabb1acaaa3494bf908e119c6ff5c9aba8605530df56a4274f0c599ec9c3305c3a152f7b40b3075599edddae0fbbc947f4129a4d00e1442d09", 0x35}, 0x48, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="0a000300010000", 0x7)
r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$packet(0x11, 0x3, 0x300)
pipe2$watch_queue(&(0x7f0000000780), 0x80)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000040)=0x80000001, 0x4) (async)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000040)=0x80000001, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40840)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r3, 0x3}, 0x0, &(0x7f0000000b80)="cb4403", 0x0)
keyctl$unlink(0x9, r0, r3)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="b9800000c00f3235004000000f30c4c2b99c800b000000f266362e0f98cf0f001866ba430066ed0f32470f93200f38cb93f97d000066b876008ed0b8010000000f01c1", 0x43}], 0x1, 0x74, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="b9800000c00f3235004000000f30c4c2b99c800b000000f266362e0f98cf0f001866ba430066ed0f32470f93200f38cb93f97d000066b876008ed0b8010000000f01c1", 0x43}], 0x1, 0x74, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.880360365s ago: executing program 2 (id=691):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}})
accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10, 0x80000) (async)
r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10, 0x80000)
preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/240, 0xf0}], 0x3, 0x289, 0xfffffffb)

2.878036908s ago: executing program 1 (id=692):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x2, 0x3, 0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, <r5=>0x0}, 0x2020)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4)
write$FUSE_INTERRUPT(r4, &(0x7f00000022c0)={0x10, 0x0, r5}, 0x10)
request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'rose0\x00', 0x1000})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})

2.720082812s ago: executing program 2 (id=693):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
mlock2(&(0x7f0000aeb000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010400)=@newlink={0x64, 0x10, 0x1, 0x70bdad, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x820, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3f, @link_local}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000844)

1.32304891s ago: executing program 2 (id=694):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @private1, 0x80005}, 0x1c)
ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110001, 0x0}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00'})
sendmsg$nl_route_sched(r5, 0x0, 0x4c840) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0}) (async)
ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x8000000000000001, 0x290d, 0xfffffff4})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01020300ffffffff00000000000000000000000000000080"], 0x38}}, 0x40) (async)
socket$netlink(0x10, 0x3, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async, rerun: 32)
setns(0xc9, 0x0) (rerun: 32)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r9=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0xff04, 0x0) (async)
read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x2020)
sendmmsg$inet(r8, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000440)="2ac4bb1e59131eaa04e5154f9fd0c76ebf9874de2fdc064e9815e0dad9a93661e7618c0f", 0x24}, {&(0x7f0000000480)="7ce762999336d15b6e3d67022928acfd88218eea5148d3a36fb9e1bde7a449fc59daba8cb248a65fdba737cd23837cd9209056e3c4f6879250c6946ee235cc3dd655dc09ce0040edd9989929e0302aee432df5cb3946cf2ea409cfeed9148cbd474bb59c404fb175df60dcd2aef45740042786a74bf7cf965981fccb758e378788e678cbe7442954b3530070386c4e2b59f25eac37f66b12a8c678a453b625b3008203e2aa234b7e256143953d3b8cefacfff1398f58beac86d5be3830fb9a12088587de80a7cf6f3181c110b52d7a7ce96355", 0xd3}, {&(0x7f0000000580)="ea65e9a8623450b28f645109a3262c667fbcc6653cb45b234f5b8102e224f4f199a21f9f4032621b2e80e8ae1678cd36f6610e93e7114bd5446ee5a0818d7fec1b96a69e118fcac7422b8944f774e499a27bbb8fabef587a93d1aad1755db4b2b70873d608a5f832ea22084e6e9a4eda889fe4505576adada73dd9522f6bae4decfe85b5b65ae5beb4b99a61822b2c19d957a98d77120247fab0566a0c38ea43b08b232afaa727d3ca88e45692daddfd82eeb8", 0xb3}, {&(0x7f0000000640)="2424ac255ceabc24d2b2ca058232cd02e7d20f6432b9823357dcaaa958f31a19cc41df", 0x23}, {&(0x7f00000006c0)="804be544075a97034f89b13c03a94a6a2734034fa2f0b4d04a48e7ed0a0ed9797bcebec61970a66290bd681d0ca60ccaca4d2c95c02e8f718610630e600f5ba68e5e1b47f585c91296fe061f040e772f38068579109baa2f3cb46566f49eab8ae500634bcbdcb7eaadbfccca5a81ae1e21a9c6dbaa37ead835dccc55cfbf8cdb99b1f6757bc6a5804bca48", 0x8b}], 0x6, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}}], 0x1, 0x4000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001200010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00210100bf0dcf6208001d00f8ffffff140003007866726d30"], 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4)
sendmsg$nl_route_sched(r5, 0x0, 0x10000090)

1.2931702s ago: executing program 33 (id=694):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @private1, 0x80005}, 0x1c)
ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110001, 0x0}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00'})
sendmsg$nl_route_sched(r5, 0x0, 0x4c840) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0}) (async)
ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x8000000000000001, 0x290d, 0xfffffff4})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01020300ffffffff00000000000000000000000000000080"], 0x38}}, 0x40) (async)
socket$netlink(0x10, 0x3, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async, rerun: 32)
setns(0xc9, 0x0) (rerun: 32)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r9=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0xff04, 0x0) (async)
read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x2020)
sendmmsg$inet(r8, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000440)="2ac4bb1e59131eaa04e5154f9fd0c76ebf9874de2fdc064e9815e0dad9a93661e7618c0f", 0x24}, {&(0x7f0000000480)="7ce762999336d15b6e3d67022928acfd88218eea5148d3a36fb9e1bde7a449fc59daba8cb248a65fdba737cd23837cd9209056e3c4f6879250c6946ee235cc3dd655dc09ce0040edd9989929e0302aee432df5cb3946cf2ea409cfeed9148cbd474bb59c404fb175df60dcd2aef45740042786a74bf7cf965981fccb758e378788e678cbe7442954b3530070386c4e2b59f25eac37f66b12a8c678a453b625b3008203e2aa234b7e256143953d3b8cefacfff1398f58beac86d5be3830fb9a12088587de80a7cf6f3181c110b52d7a7ce96355", 0xd3}, {&(0x7f0000000580)="ea65e9a8623450b28f645109a3262c667fbcc6653cb45b234f5b8102e224f4f199a21f9f4032621b2e80e8ae1678cd36f6610e93e7114bd5446ee5a0818d7fec1b96a69e118fcac7422b8944f774e499a27bbb8fabef587a93d1aad1755db4b2b70873d608a5f832ea22084e6e9a4eda889fe4505576adada73dd9522f6bae4decfe85b5b65ae5beb4b99a61822b2c19d957a98d77120247fab0566a0c38ea43b08b232afaa727d3ca88e45692daddfd82eeb8", 0xb3}, {&(0x7f0000000640)="2424ac255ceabc24d2b2ca058232cd02e7d20f6432b9823357dcaaa958f31a19cc41df", 0x23}, {&(0x7f00000006c0)="804be544075a97034f89b13c03a94a6a2734034fa2f0b4d04a48e7ed0a0ed9797bcebec61970a66290bd681d0ca60ccaca4d2c95c02e8f718610630e600f5ba68e5e1b47f585c91296fe061f040e772f38068579109baa2f3cb46566f49eab8ae500634bcbdcb7eaadbfccca5a81ae1e21a9c6dbaa37ead835dccc55cfbf8cdb99b1f6757bc6a5804bca48", 0x8b}], 0x6, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}}], 0x1, 0x4000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001200010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00210100bf0dcf6208001d00f8ffffff140003007866726d30"], 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4)
sendmsg$nl_route_sched(r5, 0x0, 0x10000090)

1.248679819s ago: executing program 1 (id=696):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000)
getdents(r0, &(0x7f0000000fc0)=""/4096, 0x1000)

1.169277585s ago: executing program 1 (id=697):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x140, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x7ff}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x1000, 0x6, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x86, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='\\', 0x1, 0x7ffffffe) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (rerun: 64)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x400000f4, 0x0, 0xb}]}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) (async)
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000394000/0x3000)=nil, 0x3000}})
write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000180)=@vmx={0x8, 0x0, 0x2080, {0x26000, 0x7000, {0x2}, 0x1, 0x2}, {"b4e4c40223bf5d2668e5498343776dc093fa086934c05d1b332167fb177a714a1189c530e8363518056a12076c94ca37092e5af7b4dd0efc5a93dcd2a88eaad474d7bac9ca7e5b9a048b7b8653652aa2efaa08b94a15e52a80ec2f3a6e4b6c31a1fe27a393ba4dd50a4aa14809405597f6f17fac6ef0b88f8f0743d8fe13d322a8541ac2fe89a4764e225c3e8be11382875480e09bb43926f00611e982183a1115d3b6990397d4c9b843e7e4c81cc3dccf21dd6287a606db76c68a108994614a801dbd153485ad6a3f17de2030bb0bdf352de6502bf40fa4f56aacb69832276c6c2fb04b37302bcdedfb699acf41324463c024ed2659fbf108c740498b123166763c9533aec5b79cbf4b4f7d9278508878b3fbbcec510fb176341f23ed10f2851597d1573ba11bdd7b055313c8fe94f9fc4142ad735291c93fbba396af7af70a61e7817b229e9364f5a21c559b75f1a44a1005491315c3b18d21d9bc397a7cbacb70bbefb39c86514d9ccac83e706ae9414c78fe41660cff50f7a69b7b20434ae66a23f8e8294c7ed8283c5c55dd8ef4e1a3c39c03504b1767c870231501dc612a5f57d7ef4d29a8ad2b4383159b47720454009d28eb1af9fcf2b7435859ca8e9f028d8fb4838c6fdabd8f212ff18f6f8c26cef0f481a8aebc1184adf5d1e95be9ab3b6cf50ff7fbb2c617be5e6ddc5861b746cf7366ef8135b6e388fe04563a853d2111e464bdbfe71cc6213c80d29e14836b1f184ae7640bf47da50ae0e881591243e185c6bed98d7c2108c08389dd342bd7b59d7942274c22810062c27fc085b051c105df4ae893fa2f8daa150629f6fa28557695b023d3e9edbb1aef77a5880f132809703c2c97d7a41c33a63b10b5d4d9efb011b8ba73b497e143afbb7c72077c6035777e116962fe132f45584d784161d8d5f625a711b5fbe4ea00b102cb9c6d8e1b5eeb4fa3e24ec3883fa3cc0c3219a1ecd578a994dd65b1ce81cce9702cf7935876c124449e3ac084adf1c17f1eaffb7f6c121b761e968e35021437c3a7e9cc7998f8f6d1184f108e085370b0698bd6202e35e701c4af9ad7997ff12c185149674830a7c41c9aaba5c2e1265c629fa8b7ea403485712c50b69eca53bbd1989fa5c5b4267be914ad6016c01eaf40626fd5956bb4433932b93ae7eff60ce5770ee6c8473022b5bc51429507e280a99e781b01d053b0d443ba9fdc7b7d668b2ed71a2d326f6e22667f346a78f05884cbff791821b260b7fa922d252c50a8872b1590cbee33c0c7c75fe0d7a9b7bdb4b5f0b3c741becd0df9ae8d2750ba34f9bc8477695a1b4a2d0b9659dba4fc12d0e580a3de1078717c9f883e05fa6f3cc722cc3d7327c5455fa5a322396a0e35e82a39f96475121ceb39b5e1c7f8d82ba3179724ccebeb44b27aeb6bc3f7f6db8644ec1cc5b05fbe413c64116a6a7ed007407b2449d7e3124447c5361e0b83452cb6793582422c9a7c60f3056f508028e9f1542c44591af115935c41450d577a8ac18d214d7471380097097f4a71a9c9eaac577ecd901d7a5bf89027164051ad52b4eb75d54a7ce6053ebb5599cf8c20a1ba82ddd8c0b86f76f5803a717a8f00d2ab462101923d64ebc771601cecd1039c6551c638f2af2e81bfba15b703617c7f3cc88ed3f23a5542c82a2260972f680f76bacffdafd4b8fc9ba3c3945146b55d4f321a278c2d0438e92586d1812d0b25f8eef1e00ba74f1699d22e7a15af4316b7d2ddf52e9b7add41e853ddb6dc16b14960b07876df751aff69fb3a15711a8d7bec8d4a74fca1409765eb1dc5c29248155f4b071453420c05c4a4b53677b1e9a92d509cf36bc177f6164603087caf3cbf0eeff6a686cbd43ce4a0f730cf9fd7e471c13e5fcf3888a3c85f567dd1fe63573b251a43458a87112512d3ba221255c0cc86b4b492e22af6cf2aa6076c69fe9c1c33a67d0f9980b1e37d36bf2befc04a726c1d0d46299bc6ab1f05c536619971500cd6280d2778992887203b9b11650b3be731ec35e8613bf9a205ad0f46f38e2291d60315f012930bbf294318d9068892bba0505fa9fcb63a7f3e11b7d2e3346a604d97fb506bb71d90ffc2dab1d725720712936b5e49a8c6f85bcabe366f2b489ecb28ee62423c22c0fc947491cba1fd27f13643ec6ec88c904cf44a6bd611f256e865be2aacd7f0419019d89377c9b83e5b8085d0e19444c99e24733ed3b5e7a1786239cb661b1850b1113d64da75b9726408c372048a1eac99cf5b72b66f093dad2aa482b3730f8b564c5958424f7400d5790287c6ec22907d518b2953d0e4165d97c7d72aef2cee35294c991f77d19e75d3178bf974b652cdb7e815e11476b6c638ff5bbdf808f12d5c3fc02226939d8147600ebe821973f9c90585bebd8a08774f6791e1f26210e2565a62fade04f8dc52e91a2ecde9a48fb663ba9489656b7c58c0d69e7cf1acface11897d29566cf28afbe718dc173a7cd0c5761729ebabf9c1c2ed1d04be7efbbc463e7338b91b91067e302a6d5e82582bfd83088671fad7c6ef4087128c21e192aaa7bb092c1ae2166af713d15ec2c3bd25fe8c66ba994903cf9b69b4c3bedf4d6889f6a593ddcf13dd170d4f6ef5068e28efae3a2631e9437ddd716e8658c10be9e9eea3fc53b1a9cbe519195f2d5118dea26da19b7c1529bc0f8d8a90d8c7f40374d38021810ac8583fcd40362ff7b1d889592e67c845fc9eecc8dd15ae829d57c0f952d6b516957187ff85575e6ffe5ba2175e4bade1c6d1e81fe495ec2e1bdc5a468b433ebd09319187b11c09174fc058fe1612aa75ebeb6acb114b2063bba6230506f68278c2825b9c4a9cf671302faafbce362d9400b274814164387517e22a8252101d982faa232917a7c32b0b023acd96c98f1ea6f790c4352d88c57005040c9a41114b366febf6c292cb3299658ddc256a79b2de66d5ae30615d849d6efc24ff6dcd2cb561194430ac1f899e84d8b43e445e05be761f532f0f6b8a7a20f391ac6217682d30eca6fefed24d0b77c0fae1fae4b970d477bc0a5bef472aac566b26dff7fc9af99da3d2542efd3b32d62aba229ae44494bf5ae591e7413416b3ff12a1cbd1086ea377e689ae7dde0f0e2f028f83dfbb1825fb0f11adaac9569df28b5f2126e34e97d44275123eb9442f2b2ba2a0d684e15b80b4a0513264e8e0d0d0b5877e8d77e5de826419d74bd087387bbdbcba771e3f54a43cc952b0f052d08e6bb774f50f71f79ab45d027b9da1e70c5a886cffc08c158b27891a866dfd19d18ea6e208c0265eadd9bc3e282b998d7206be6a0b0c0d68e86e8d994422e3b732915d04aec57fb2c66add2e491485260faa668feea37f1e02aea8dbd0dcf7106e5ad56584efa08cb2b1679687fe297902a639dd576db8ff321fdf65f7b332ca27fbddfb2367e8491acc1ead6c2838bc26bf29facb3662516790337c65c4297cbe97f1adc15ba10fc8db97766924c5ed25448a0f4fe5e011fd3f4bba67c7fdb12b56412daaa0323e5a3c63c6896bc43f8d08744ae3f2dc22641a3d06412d18b04cacad692ec3ae9cb6e497030bee410e3799fa831c793fc2f330e6b62f0bcada0e30d3522cfe1dc4ab03acc7ad5308b01c3b4d7e46dd2e568d86e278ded5e32c2a4a18929d90483d32943fd8dade6c142b7c0491ce738c38aacd3d78e44b309f83f57e80ec67a95804dfdfbdc8ee1eb1ed5f265db62346c016ffe0f5107496d8362c42953a11cc96c5c5d9b3de0aaa8edafe797b5c15b3d6b93a76d89c8b0bc3bb14f2704c43647a92fd5278ca858f5735a0aebb61f91518aa7751bb1c694c3829f4ebde5ce57a93fe861ad2013e7967c01d9daf23e1afd01e336612965db5714f3dacb7403b8cdf10d08d563128c2dfac100fb102225d3c9a4a838d72dfd7ea1f85040f438096ae76931778391758d2d3e691f1fdee1e942e9e26cc19beed54af036a02f2c0f1264ca2aec4c63d3acd6a92108e6a51f92cd658ae751e4b45940f3d6231ccdeb171cc9fc49bbd0e000ececb209c73f911fddd84c7a4c1baaf3dc9b2fa9209b3510e9cc3a588496b83ab5d3fb0f69e2cbb4e94ce3190ad1abfac1da5d41b6c281ae17574015b92b25ba333be984256c62757be4edf5f21dc237b1c80e1813c827460b076789e0335197dc9797ffe7c5aac4ce91f97969bad3cc1e992a45c81e0acdc8388a59ad0a18f5ce28f83d981db037c41a762eaaef94ee7c29682219fc46e618186caed11bfd7b818881b0424f83bbffef035840a63f2e9da890b3218ea6b7709b8f7f0b6ab9bfeaa497fd045a6d2fe3faa107d3c63941669c494534d9efde770c61590f0dfac13983a13b9e8d2d2ee66975c158cc4ef6623abbfbb2f9d8f5469391f37e0e38bd39c84884523a901168c09a605c9d5bf4dbb7b344f602196c8e17587d29203c9e7d6c436170b4976453f827ad494134692dc3091dcf5bcf167524096dfe3b6cbdbe86a231af99b7ea76758ece03175de86ee4b5136d29e0359ecfe27ba3e8df04ff82112aff4c8ba1e2eedee5dea33d59c7248fa6b6526b3b12bc9dc5f85ba5e2a2110ef5b7fc8a1c3db647eb60e667ac6892525bdeb4d72c8421b5a40f5588729e63b11df37529a279cf85e66791c8392cd0af867488873cebd5169ff0a99bb278a89446d2c2e0316ef5a74135903e4c4f29627dcb5bf39d185597c11bbb5ca55330674b835fd6f1c1bd6d8aceda650fb5044f153f574b1e2bef3ee8d3d4ea39b77325dc2de8cda299fecc79217b7ceab59a093ccc6ba5777aaa481e01d22a793344d6d313e7fb6c4670741a191805778ea40c628d8fd70c2e8ed474012cfe0b024edbffc2deee8c7c000b5b52b294adb194a9bf0f9ab0c4a472cf4a9ef3284ac510ee8c430e49ce1ddb4a2e974eecaba01f3b31c6246d757e2d47537c96edf32dc223e98982175477f5d598a7a45667cd0f52c5c839aa91637dcbf10686a0aad8522677b8413a53117227b7b1d19d4a4aac7bc4d62abb34a9e1597619c92994d0c4c0875c2f4d55ced54e804ad475ba4b92ee5c64ed80a869f95f544b5e960c7547570a9b7b83c7b78e7432b0a0a9d8cebb628137ca35ff0a2e6c3e96cc45e68846b49164b3134b0d2f478f8f130387e24836575ac4903e3e297dc7d3eb2b578f4d971d87298b89622ba21be43b2381157c8a0bacf3b66268a7c9831803d94efb2fefaaefbaaebd6594403d3050136045ce4a8ee99bc435200df389698b6fde75fa190bf99fac29954ee32bd7eaf7f3f28855e48e6c6ac7d56658735ec3ed5a07f380bbf65d98c17d95ca90a4b0f00bc626efe33558989c788153d3d4146214fe6f31025f80241116f23bdf18647f1f8f8d6593a1a876c922f3edcba090e68cdc5bc76b1161dc9e1388c728195712f0b9606b86e9c75a50125cab46dbf0c717db4a98a658eef9be6eb1d4c04ab2fb0e9ec79335bf72a807e97d2283984913383c8fd955f6617cbfbe9014d3d05f0572b727dd3919fbefff1023bf48292ac57c20769f191a4af60f33e57aa36812277a80e1cb52698ac6a3df09eccdd740e086c17cc80d5b73f5882fc622885d8d039e534a451f023ad8daac948d24122a89cae36b9a6867b73e6e23ec7714f4e66625688f36e577af1726c3dd5ce50e02642b38d95b79cc89c8a1385980718b643b7c0e14561e3bcd69b7405219dbbd92bc025a9226b2c223e5049c73eca68668c213a9a82e40ad0054d893e63ccac230bf44307e19a891eb6694a46d22751a8d4c86ac079d9d9f8ee74abb5aec43bef74", "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"}}) (async)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r7, &(0x7f00000021c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

1.059551922s ago: executing program 1 (id=699):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2509000000280002800800020002000080080001000020000014000380"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0020000", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25090000000800068004000200840001801c000280080002000300000008000200fe0b000008000400000000802c0004001400010002004e22e000000200000000000000001400020002004e2464010101000000000000000038000400200001000a004e200000000600000000000000000000ffffe00000014d0000001400020002004e246401010000000000000000004c000480340007800800030049000000080002000600000008000400010000000800020000000000080002000100000008000200240f00001300010062726f6164636173742d6c696e6b"], 0x2d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x61c0092}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x24c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8808}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa9b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "d2d25e2867edccd72bca485c14eff997f117ec0007542f16"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x85}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

975.707956ms ago: executing program 1 (id=701):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x4, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x121400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @msi={0x5, 0x7fff, 0xfffff609, 0x56f}}]})
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32)
r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32)
r12 = dup(r11) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000440)="0f00d1b986040000b8ae000000ba000000000f303ef46436652e0f01cb66b8b8008ee80f20d835080000000f22d864360f01cf3e0f01c5b9330b0000b82b650000ba000000000f30c4c1c05850d7"}], 0x1, 0x50, 0x0, 0x0)

839.324861ms ago: executing program 1 (id=704):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]})
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11)
syz_usb_control_io(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

838.871204ms ago: executing program 4 (id=705):
r0 = socket$inet(0x2, 0x2, 0x6aa2)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x5c, [0xfffffffffffffffa, 0xb, 0x100, 0x0, 0x8, 0x6], 0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/92}, &(0x7f00000001c0)=0x78) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)={0x5cc, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x51c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x3fa, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xe59}, @device_b, @device_b, @initial, {0x4, 0xcc2}, @value=@ver_80211n={0x0, 0x7fb8, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x35779319, @random=0xfff0, 0x10, @val={0x0, 0x1a, @random="ce68fd2338b346d943e9cdbe7712aeeac5ffed1a12b9eef8eee4"}, @void, @void, @val={0x4, 0x6, {0x4, 0x9, 0xfff, 0x9}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0xa9, {0xf1, 0x5, 0xf1, "1c86ceee52d89576349bc181d164fef2df3367ba21976b88867f9b06433d9bcc6ee95a83bfbbf817d2e4d2ebbe278e0bc794cc8461f47ae29866d46bff04f2bc1d509a48575945b906c16d150969c48535819a8bdb8a6a84a7c46fdccf8705780474ef6c2efffc72e81281cf21b9d1c4da430a2ab0c1c9e2c04aa281283a7cc4ed45b5c97605c56f01b6c891a476ae436796382cd954f205aa1a66721f44c4867fc80be03ea0"}}, @val={0x25, 0x3, {0x0, 0xd, 0x8}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0x7, 0x8}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x69, "5271e4061b4541de50d1997a46467dba8c49d9b056bdbba5f156060fcb1cb164af1afe9a12fa77ca55d242106932d8fac2c3c392740e5f52f7b2744b8fef46e8704cc48b1c846713f612be27e75a00ae5e373e0500965420b370e0e533071cec0f0e92a365a69ce756"}, {0xdd, 0xc3, "0e5283014ea7bedde3866a5a4e9db2194a1216ead0d66a7b3bd00628041ae6de3984fbc59864845ed13ee568946c0a77b312679dcbb9d0dfbf6c3b616a2f1a36d59a10cf8a88a8bbb50c6d0b77c162428c89485e066845703f783e48f4ca7702064e3fd0c11c8c239277f0a08d43b3aaaf72a52c0167ed93189236506dd6cb40c80ee8fda06499f38605c6ede1af25979aa42881cacceea5078ac5b56542d682303898c63066f62f1de2ab1ded1f3a979e7ef9c394cf33a66fced0698fb755f32addd6"}, {0xdd, 0xdd, "ffef8ab6a9a27caca4dc87b6aad1df165caa5c043257007b74ae527438c4923444f1d0cb317d647e9b9cbb9e03be3808257fb344ec2866b613a4748d9a3872defde57bfa1cd18218e4f2160c456334b662df754e0ff0daeaa4f657e6de84d32b5a293733e8d90dd606a405c890c25965e9e6534c207ece68d8097ba5cf84ee6501283805264223d745249f9920455024138346209015d0e69e32ca91014cd2f6d574703bea275b769a98bcd8121a14cc473de55c59b0eb2fc5dce42b369272b6316499dd02380635686fb676525093d8917248780a7108472245dc5e2b"}, {0xdd, 0x64, "ad2c4686c0bbbed3eff6b7319adacd6d77912288a2431d6833d53a7e12100593fe16ab29be7d2bc43b96a5c3d76eaff9c59bc6baee9e2dccad823020616f405203574bd2d906a87d61310fb6f98b35773b5f3612a9824efef9e2e23859900811b87c3d6f"}, {0xdd, 0x6e, "6cc6dfc126f2495371780fdff2c472a3c4294e25ee070826f748d6eed4a107a34f3534e59dce4ed197b677ae9e47dfebccfeedff0676effa986ae97ca76cd4eeaf4e0c119791de93810966ced5ec7ca644895476239a6eed0e02f60ab07adfb282ffe844e07cd2233d7210447764"}]}}, @NL80211_ATTR_IE={0x113, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @cf={0x4, 0x6, {0x5d, 0x0, 0x1000, 0x4}}, @perr={0x84, 0xfd, {0x8, 0x11, [{{}, @device_b, 0x1, @void, 0x3c}, {{}, @broadcast, 0x8, @void, 0x2e}, {{}, @device_b, 0x8001, @void, 0x27}, {{}, @device_a, 0xa5, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x39}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x2d}, {{}, @broadcast, 0x5, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x34}, {{}, @device_b, 0x6, @void, 0x27}, {{}, @device_b, 0x40, @void, 0x31}, {{0x0, 0x1}, @broadcast, 0xfffffffe, @value, 0x1b}, {{}, @device_a, 0x63bd, @void, 0x1e}, {{}, @device_b, 0x9, @void, 0x36}, {{}, @broadcast, 0xc1c, @void, 0x34}, {{}, @device_b, 0x8, @void, 0x30}, {{}, @device_a, 0x3, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x68, @value, 0x30}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8, 0x7f, [@ibss={0x6, 0x2, 0xad20}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_CSA_IES={0x64, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x52, 0x2a, [@erp={0x2a, 0x1}, @mic={0x8c, 0x18, {0x0, "b09c558c1846", @long="15e88bf42475359f4677255d4a34bdd9"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xb0, 0x9}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf, 0x6, @broadcast, 0x6, @value=@device_b, 0x7ff, 0x6539, @device_a, 0x1}}, @supported_rates={0x1, 0x2, [{0x16, 0x1}, {0x24, 0x1}]}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x45}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6b}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4000000}, 0xaf19e834df076179) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000019c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000000a00)={0xf58, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x1ca, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x9, 0x5}}, 0x8000000000000000, @random=0x7, 0x4202, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb8}, @void, @val={0x6, 0x2, 0x5}, @val={0x5, 0xdf, {0x3, 0xc3, 0x7, "1349b49c9701b7f65d37d6f1abf57c00fd8f6f898274497afe12bfda8bb83b9fd92ba11e73fbcb0ac42322de510e4c676aa5604b979c63fe510872c85d3e7969bc3bb2159de3adb1b9422b5c95648a71bd5ecb4606a7c8d738b6370565048149f89bc91683d85110033e12f0535159dd29efee6ad0ad8fa5f833b325248765fef51af6ce74485ba83f456b4e8a040a578bb6244caa89a4aec6d925edd5b3c031d32358cfe2bf2df070a77bf0824432fd2698ab45e24e1dab4f27b0ae2a8e94e56d3b839587c7213cfbcc3b61062a7070c80f0471dbb762aeb42477cf"}}, @val={0x25, 0x3, {0x1, 0x64, 0xff}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xec, 0x4b}}, @void, [{0xdd, 0x9a, "76fc9fbde2ec6596d57f12dd295742eab253046ae3303f0114151cc63bd6dd3a8b341db51fc2eed68285fc18b1a98f77492602af7734968ff6c0c4c677e6fbc75323f524ce671382a0396d408de3597ff4b35b9f6be4e55c4cd3b1d8e67dbc30c6568baa949fcafe576381a7c1b055ca78d39ca75cc222adf7165f796ef8fb1c19608b2b87698192bd59ff028c2500c6f9b579a200275d360068"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x5d, 0x7f, [@random_vendor={0xdd, 0x57, "9aa9cd7d3f982a0a226d1a65913e3ff0fde87ee1872e205d64c9d19b28ca8ef22e1afe98b475d36d48506e664dd62d1dc69fb11f979518be81f3d19056adf9782df007c4bf419fc3277c7df28a2437ad88529447dbf9cd"}]}, @NL80211_ATTR_PROBE_RESP={0x44c, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xa0, 0xf, [@cf={0x4, 0x6, {0x81, 0x40, 0x5, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x4c, 0x5, @broadcast, 0x5, 0x5, 0x4}}, @peer_mgmt={0x75, 0x14, {0x0, 0x1, @void, @void, @val="aaf7a4f8cd649ad25dad2c37cac0c4cc"}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x7}}, @tim={0x5, 0x50, {0x89, 0xb4, 0xd1, "f092d5807bf3e691b21d6558d62c7e7e5003485ffa0172585c2a5c0045a6c7315490a3463d5b13a5815709c3fd96ead94a0f0cda342940ef58ba397626adcbad968a87fb3f00b02a6558598c62"}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x3, 0x5, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x628, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x79, 0x80, [@prep={0x83, 0x1f, {{}, 0x12, 0x3, @device_a, 0x1, @void, 0x3, 0x8000, @device_b, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x21, @broadcast, 0x40, @value=@device_b, 0xd9, 0x2, @broadcast, 0x8}}, @prep={0x83, 0x1f, {{}, 0x86, 0x7, @broadcast, 0x1, @void, 0x416, 0x7f, @broadcast, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xe, 0x9}}, @chsw_timing={0x68, 0x4, {0x2, 0xf0f}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12d, 0x7f, [@mesh_chsw={0x76, 0x6, {0x9, 0x7, 0x31, 0x8}}, @measure_req={0x26, 0xa5, {0x6d, 0x0, 0x80, "72a66e7c97ab754fae0289bb9242e6b9fd668159e79c8eaac893f2f8fe04201f5918767519040b2c6e2fbd7fda4f1c50271572f6346d2c5674d46b9a47f799ae4f19de78651f6bd6f919603074f8b11f650fac6eb8dcb1ceef3435c27fe1a571c6d80fbe96fb0f91ff42e6cb73153d1cc3542405b737c8e18f17fff30d3cd2b975b1bfbbb3c372cb7388e4d14058ea9f89953af9031aee5d85792e903122bba9f980"}}, @challenge={0x10, 0x1, 0x78}, @peer_mgmt={0x75, 0x14, {0x0, 0x7f, @void, @void, @val="edf5ecc88c82c65661e6f23215d019f9"}}, @preq={0x82, 0x57, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x4, 0x6, 0x7fffffff, @device_b, 0x9, @value=@broadcast, 0x4, 0x40, 0x5, [{{}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0x1000}, {{}, @broadcast, 0xb}, {{}, @device_a, 0x1}]}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x39, 0x7f, [@ssid={0x0, 0x17, @random="df3498c14031f5b4dbe3275f8670b066749dc1f612850e"}, @channel_switch={0x25, 0x3, {0x0, 0x28}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @dsss={0x3, 0x1, 0x4}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x407570ea8fe01877}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xf58}, 0x1, 0x0, 0x0, 0x4040}, 0x1) (async)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000001a00)=""/240, 0xf0, 0x101, &(0x7f0000001b00)=@ethernet={0x1, @random="ef43ea9f2cf0"}, 0x80)
getxattr(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)=@random={'osx.', 'PPPPPP'}, &(0x7f0000001c00)=""/90, 0x5a) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000001c80), 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, <r6=>0xffffffffffffffff}) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r7, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x885)
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001e80), 0x400000, 0x0) (async)
r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0)
close_range(r8, r9, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000001f00)='wchan\x00')
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x64, r3, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc05c}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000020c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10000, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002200)={<r12=>0x0, 0x3, 0x81})
ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000002600)={r12, 0x5, 0x100}) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000002a00)) (async)
fstat(r9, &(0x7f0000002a40)) (async)
ioctl$VHOST_RESET_OWNER(r10, 0xaf02, 0x0)
r13 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000002b00)={0x2, &(0x7f0000002ac0)=[{0x54, 0x0, 0x7, 0x6}, {0x8001, 0x97, 0xc, 0xc7}]}, 0x10)
write$ppp(r10, &(0x7f0000002b40)="3675d4f6666550a5823ecd18ad9e817082ec0cbe517e8015dbb7c32838a6f09ff18ef60956badc8bc93429c65dbdad202424a14d3901117538e198eb902b1964ebf61ac08f54ccb2bd13fb2afbede57952cdeb884cffbeb3e92c223c390562f7f66183ab0395458f9c4294a308986792eaa571b8c8ff1aa7cb824e7effee3e4fb33a5bc7067e49553245d7c9e98c0253bb28eaf487808d2c77f5e8cf1f20486c2293bfb0253d1defad75154c860c181d41bb35eef8a7846abef3bdfa552de0ed9e3f6da5cc4e140e794f2d63f9fcb96f9ae4a7af76c1d700d1528d74fd76ff9a9433a81334cd246e65bf3d34dd3e058bdaa1cd408e821cd41bf41c7f9c9e276e35a4a2cd014d38537d04dab260af4f7f7b9edb757f10109c5f41f21b416b38cdb1f75732683c6fa4dccf9a2fcc71567f6058661baca9d289e5b5de0872463c48cd27ed35a05a6ff47ecb44ee0a827da945b122fe6034aec287af9276f524979fe92fc0dffa3788784aa7b2ea4cb50279dced559063c8f137a2733aacad56518ef4c593e599766cbdf95eca515c335e8b0b1ca524fe3fe3602eb46cfa288cc31d7cc63e3cdccc0bbaf7531965b9f215c868242672134bc6759e1495c741fff36e5730be1b3f75cc30e6818f87204e1eb6a4b4da721b8ef5389e3437dc7c04828feea6863e7832ae2ff5ecdcedaade0353c571786c0b23887f2b17e57339bb87ca7f9287383c8ec60d7a7dc34aaf1eec98c8a307dcdbac2d4229380cf3b59a6cce7fa54250217bde849b7a53fefb7bc0749e1fe41756897b6fc185a10a1e6ca0a99605c597b1500c878c1daefbc745e500d260cb248f7bbf3b21739b1efff1a6b41f1aa78964b1da310055c840157794198cf5ee115d7b4d632f0dd0eb903d54f407d3f6ac4b4054ba6bcc3a98695a7775b39613cce6aaeca49e914a5b7d76974a8226dc3579cbf2a07429df68e70e0516eb674e8b3c9a7ff4e71a8f526a1ce90b2aeccf290859db62b733b79d60a992dd14c8e8861b591d98b334008e755f9dd1f1ff7be0f165e3277e76fd20697e583eb7d99b0ebf065e2625ddbbfb0df34a26e684229eaa281336f441646b8052d8c886b58180dfc1f98401377719778f0b8ad73648d32af0bba791579c06ef6e0a06b32654b912f97cb0d629ee5074fb1555a8463318e47bf8e12ffeba7f4823f87b4b6346531acd24277ba99d4a99efb41aa4742dcc72c8cf3d40fb25fccd4f702252fb8f2799744d3972f3700aab4d444511e327564ecd1f2933c93c9c5ce7bcb54c6deea3551dca3a704ad4acdea6a3449da1cbb327569f6b70e38054ddfa20dcfba4253d69288d795006a0d58c7faeef45ab4649c2c412c99b9a04dc076d95c6f97f7d32f2f9907ed6f2df64f4b13887a3a8ae81fd871616f77e865dc2d4eaa9ee96247920d4c612dceb7126ac2d9bd404f61577dacac156793e4375ee23bbb34a0df736e9709eb14a8a08a66b73c02ff844d0c0f6acf2df0690be98679545b03fb2a8646220295adbc934180a72fdf8ad3a65cdebc129729cb216992f774edbc621b33e3c6cfb23f91472f33ad0ee770dd39c82e2e1db9ea53ff34c6985877cbdab500879a00af9764deeda97391defc7954cb1a378f9e9b4c5f16b856bc2e365f5fa7edfc93ce0afd5d45a09fd9152ba1105a0f462a556581e459bf2c3a775a468c65b2ee691c0de0c017f4683af40f7a32d89ef435a8ece1946b54c21983ae433bda4c4102841d76b8695195c619c99f02bc87346b4fc4a108a49bf6c27eb1db674952cea2cb4a841d903d3591f6cd0cbcb9e4412753a3cbc535834b243873c538151125abea9710890ad92d72ee5a01937008fc4d356e50128694ffe50d5f8e1cbec191345a514061f34f8046737afbb939aca4648a7d0d8e99d9662b0b5d2484924d34ae74e5058ae238d7a9e3560e9bf5d674fa3f0655d7ff3451398742d8f537b44db65ddd61d586bdb75105fb2067f7bf835489c501253de48a140d1161b4e5eab1f28d012a31665669bc06a29990edefad7aa6bdf6a541d7e0178dcb600651f6e188a2000f569de8aa6de4bead1353823fd24d2bc0309ceceb6a6023c86cac7fe3c7dcc823f23f2039066aa1e0c890b71e33a5c0b1308e27cd611ad0a889381e63d8125461ebc69f062b0c48de9699bebcb559c982896b7fef4361a11f50835c6d28cc641dc91e0d8e3a28933829c441624245a4376e5971a279d28651d4c29fa2043a948c4661c1a8785f47da663c97330293c249a63e209e2ae56cdd335b36e9059259341fe96cb3236b4abe7c024ef95a1608c93ce9c46482de842571fa8ce0601ed7a6e03ea66064391b9fe4f492836ba6c6d95b6c001212550115b6be29c218f2366842b5d50469aed0c7be83a1fd492c582293d45ddb576878bddd74b4bf5fba380525d8fed6c7986af528347004ab73060f341d26311239cf73adaafd92ef79a1faadea008eca66d9788376d3ff825329273aba95dc574cca0198b69d5aec4e931df6e12e00e29ccbf0f2987e38b93d9438cb9af2d97d8552c534498827d8c34a999a7dc3aad342ebe3f7ff77920615bdf8892dd01711e86bdf02760553f66fbc5c90bfef37cc4371891e6bf70af1d8db9d30e26884273a3aaf23b8fb39fe5d17dfd9d373c284f7e21997179c6e3ca95e1e69a33490fb972072d39d27ead3e13691c406074752ece027958af6da15ce6efa2d753e8b7dc3c7285ea695d6ddccf728dcaaec56959d40ba4f53529e4c960fc4f22c1c000fb6c3655a0bc850622e21e314ccac07bebd6704b3a3f9aefe56001ff45a3a286e1a61503cec72366278e4db85f1d477471d6a377b6d3e421ca47ad7388274248bebc89e6e7e28d68c838d5a9d912451e309d65aff88541801aa45485fced1358eadfcd242f97a06eac93cead6a43560ce2c227628c6796a64f4837b2687693e1af70b489067e34f6ede39a037a956e681b3c9347fc99448f9b720fceac88d50529cfbfac12ccfcf1d464ab753cfe893906008c138e275b093c7df914b49c2b7343607429cf384c53aa0c7172c77317eb98edf5a47250f7a30882894eb45b88119e94eb4ea353cfb14aa4ab56bff2da6eab5ae2d64e5d9a86a90069d66fd39173bf27a8405864c582095ca2fbe6edf4f7b5a754f7798f522667ae76eccd9313ee642e2e8ff309459bdd60ce05eaaca9e6189aa4654df6feded394230478603f6cc483320e5952f4744530ccd8d1d96ddc36ca37722007b6202d4a6112efb7c8bca5bc7a3dfa437a3d249af6b115ea5a8dde9932506c2fe1589e0c87107fce5579a8dafd011165958d416ff316537162394e47f9ebf745765a28805746acd75be235bb561eb0d2480879cc517ee08c96fed1e9dee834f65890cb18f065256995618e3354d1ac10a4e73de517a1f0ef4960a101a0f3214859aeae89940350c8e4357255dd1d04c78f5e9fcd4c944da7d74d49b625d20e1402ed3e0377b97d47344e11564c1e6502fd7f5827fe070dabfbe0f1e0c01aba1f489017eb433d2f2ffcad6abdd58ecaf83d9139d0cbb64d410942bc66a8873e61aaa182cc03a658d36486228b1f8eceaa64daad4522edb33eca9841d02728448237bed44280ef9991d969486d1fd82ea60dd8024b7caeddaf33b3921607b57c9433609e259a3c55b7703b33f39d00188f9609e7ecc5e72ec742c7504c51b3d4f68760d5eee37b3d95b921f6d72de0cd84ad3e92fe293158f1f68c809b6a4ea3f25262adcd524e6bf4e581de9e0d0d80d464042499c55aa87b767823b595e03942b7f42f75987f1784d0f9d1558aa671553e4792498c0e99be31ff72059cdab648562bd0af9cf91d22ad011c0862379e0b05d751ea79b4b806813a4f9e6ada46c00b3afc513bb3a3391e3f41650a90520772f29c885e0ab0471b959a606147dec29c4513c31f7f12d553a8d6a8b54cda0e12f4462d23c298334110e005616dec68300edb161c91c144b189bfe910808c0905411a773d67dd8e888f119d64996781cc758778374942f09d97e2c1a6fbbec23010c06c2a85e8ff9d89d5d858eaf7166d699e0af03e486e33074a835bab06c96bcc91a1c7b455aa71f0eb2e494ee783a4db89f31118e820ae9b48fbd864921e2f76fda37e6738c581c31b10ef793d622d0310acaa4528fef51e5220b7a746cfd0f963228becf07abe1f41ca4081ece8af67c7ea8f39e6f5a167bbc9244dacff51cff8222d7c86b3207febfbf1972ef69bd1ef414f9e1e4d670f6ea37016ebeaa8482013f22ca2ed9abf40e1592bd8acb5217c318caed3947c8deb787d660f6e203b1360586c27ea239d5efb7ac360ddfb51f8bee6a10acc8253662d24c770eae88935da1d2a3dbd25a3698004cb9fd49a1c2d5eb46d96da3bf34ce62b2f91a4120645522f858b4c3359fe8a48e45d6964b2ddc31383584d85c014f56727945bf11aafc0f8a37c120775d772ab9f2e3e88400e129161462e14ba5d0b0678f4f55ca72605a2eec71cd441b250b155f9c57fcd9b98e0d31fa901b4b7b8100709d46b14efd594d80c6bc5456ba4d48c9ecd30a5e8469ec881aa9bb4f76fab0e069a264265f01be82bdd8122022517c83ffe61fe9c4a7099716b34fe1ef809716b93fac06ab59bf81994c68bc50483a959a3ded7bdb8930ab073e66c15cb88cb8117f3486a0940266d0594ef93875234ae6699f1eaaf5a758ed4ec40a5c13318ce66b44c3b72739fa78b07d1f1d0086a877b24e5da718dc0645cfc6609741056d212c637a58b6865b4b26fd653ad2e0af12eea26ca64d2425adff40901b3d623f3705dabdf0086abb79a5d65c575635390c569cd30cc52bae82d9bc65fe8f238a93380a2b74c796eefcebd2558c2a46df9c16ae4205e4fe4df65b3b602584b6f182ad53f3ac61dc9d2bd32d78d10a2071d763d091fe013dc47407310c9c64fdb55099ac147affbf373f39b87e241be9392ab75b03676090408d979ca1dda8aaae66f745fa21bb2a95ff22f500e0d7247d399960b6d15fbc4f70eb319ab7dabca78299c42fa49a484846f932837554d74b3317eba32fa42271b0f6c4fb8b7d5ff3300369113182ce029ae53d73b9658610f6a37a48d8b1091ed0f9b757461e6f45430c444f8cd9d30adfe1c3d4862a0e9038833436831393cf9313f5a4fd0133d781169fd8622d1f92c7e7c53047b763700efc1566ac6a2907839edc393e93cd33d784e9fa74ef68f770dd0054763b4920c434fad016bb910482ac10a0b83f136120bc8b03750e3db3112beb1414b3da9d87cdcb2034d497516587d46ccf43836630f90edc9188490ee4eb54a8275657e19dd49a9d4d810412288aef892e8b9b288ee539cb6d865d020dd1a2b1ace30846f653c10f782efd15260a7e7081f147b1b3fad85e101ee072fbc541ebd80094a98a8ce84899912262f1f238a97e263540eda73e4ab4de26e049d316e75d07f15fd94fed3dc83b29d4c5ead72d04508c4f40a2ba25a29832a25b39a6179f80b3f97330882fd8cd74ea4946b3109d02d2100f7d19e4ca858a6418e21d2e2a204c2a4120254ade0975fce19be22143794459db43cfdc8dd66491b800adf949b53c44e625d2910340f5aec7474d97958ba87a4d37af53869d16ec2b70114b83a8de264fc31921509923eba251bc065186e30193627bcb389f9001073be43bc2f47c8fcccdcc1b91cd26cbd8915143375ad0eb1998000f54d46ff10e0ad06bb3755b374f3d273fb05bd4436d3941d83663e48ae45a577d6144bc28f843734f7aa", 0x1000)

787.290465ms ago: executing program 4 (id=706):
r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x3)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161, 0x103)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0x3}, {0x10}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[&(0x7f00000001c0)='name', &(0x7f0000000200)='+\x00']})

650.618805ms ago: executing program 4 (id=707):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r1, &(0x7f0000004700)=[{&(0x7f00000008c0)="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", 0x7bb}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0xfffffc00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a01040000000000000000070000040900010073797a3100000000081b32aa59c6eaa8117a22bb000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = getpid()
process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00')
lseek(0xffffffffffffffff, 0x1, 0x4)
ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r2)

559.915949ms ago: executing program 4 (id=708):
r0 = socket(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000750000/0x14000)=nil, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r1, 0x221d, 0xcf75, 0x37, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x4000004, 0xffffdffd, 0xd3c0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2, 0x0)
ioctl(r4, 0x40946400, &(0x7f0000000100)="70633231326500000000000000000000000000000003")
ioctl$COMEDI_INSN(r4, 0x8028250c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fab000/0x18000)=nil, 0x0, 0x0, 0x58, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010405000000e5ffffffff010000", @ANYRES32=0x0, @ANYBLOB="eab0817d0000000024001280110001006272696467655f736c617665000000000c0005800500190000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x440d0}, 0x40d0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x40}}, 0x8080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143c40, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1d, 0x6}, {0x6, 0x8, 0x0, 0x2}]}, 0x10)
preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)

210.589896ms ago: executing program 4 (id=709):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0x5, 0x570}}], 0x18})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x68747541, 0x444d4163, 0x69746e65}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r6=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r6, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x100000000)

0s ago: executing program 4 (id=710):
mount$9p_unix(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x3100000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"})
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x121843, 0x90)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xad, 0x2, 0x1, 0x0, 0xf7})
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000011c0)={0x0, 0x2}, 0x8)
read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_LSEEK(r3, &(0x7f0000000480)={0x18, 0x0, r6, {0x7}}, 0x18)
fcntl$setlease(r2, 0x400, 0x1)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
pread64(r7, &(0x7f00000024c0)=""/205, 0xcd, 0x9)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3)

kernel console output (not intermixed with test programs):

59.810280][ T6355] RIP: 0033:0x7f76a5b9e0d9
[   59.810291][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.810305][ T6355] RSP: 002b:00007f76a6b0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   59.810316][ T6355] RAX: ffffffffffffffda RBX: 00007f76a5e25fa0 RCX: 00007f76a5b9e0d9
[   59.810324][ T6355] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   59.810330][ T6355] RBP: 00007f76a6b0c090 R08: 000000001b6d3779 R09: 0000000000000000
[   59.810337][ T6355] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001
[   59.810343][ T6355] R13: 00007f76a5e26038 R14: 00007f76a5e25fa0 R15: 00007ffe08e2ab28
[   59.810358][ T6355]  </TASK>
[   59.903698][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.026893][   T50] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[   60.036117][   T50] usb 5-1: USB disconnect, device number 3
[   60.303336][ T5735] Bluetooth: hci3: command tx timeout
[   60.727794][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.731388][ T6371] sctp: [Deprecated]: syz.0.125 (pid 6371) Use of int in max_burst socket option.
[   60.731388][ T6371] Use struct sctp_assoc_value instead
[   61.054930][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'.
[   61.058651][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'.
[   61.063411][ T6394] geneve0: entered promiscuous mode
[   61.074170][ T6394] sd 0:0:0:0: PR command failed: 1026
[   61.076492][ T6394] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   61.079126][ T6394] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   61.190217][ T6397] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   61.212217][   T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   61.263693][ T5735] Bluetooth: hci3: ACL packet for unknown connection handle 3420
[   61.352345][   T50] usb 5-1: device descriptor read/64, error -71
[   61.549748][ T6409] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   61.552531][ T6409] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   61.558487][ T6409] vhci_hcd vhci_hcd.0: Device attached
[   61.563499][ T6410] vhci_hcd: cannot find the pending unlink 1
[   61.602255][   T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   61.683834][ T6415] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   61.687833][ T6415] netlink: 'syz.1.139': attribute type 7 has an invalid length.
[   61.690579][ T6415] netlink: 'syz.1.139': attribute type 8 has an invalid length.
[   61.695983][ T6415] netlink: 208 bytes leftover after parsing attributes in process `syz.1.139'.
[   61.700261][ T6415] NCSI netlink: No device for ifindex 1073545264
[   61.700457][ T6410] vhci_hcd: connection closed
[   61.706905][ T5773] vhci_hcd vhci_hcd.3: stop threads
[   61.711813][ T5773] vhci_hcd vhci_hcd.3: release socket
[   61.716357][ T5773] vhci_hcd vhci_hcd.3: disconnect device
[   61.732857][ T3263] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   61.737190][   T50] usb 5-1: device descriptor read/64, error -71
[   61.805190][ T6424] netlink: 'syz.2.141': attribute type 1 has an invalid length.
[   61.829624][ T6423] warning: `syz.1.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.842690][   T50] usb usb5-port1: attempt power cycle
[   61.890894][ T6428] netlink: 'syz.1.143': attribute type 10 has an invalid length.
[   61.899015][ T6428] team0: Port device veth0 added
[   61.930609][ T6430] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   61.934012][ T6430] cramfs: block size(16384) > page size(4096) not supported by filesystem
[   61.938126][ T6430] cramfs: wrong magic
[   61.985004][ T6433] input: syz0 as /devices/virtual/input/input7
[   62.153309][ T6450] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   62.157665][ T6450] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   62.202282][   T50] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   62.233683][   T50] usb 5-1: device descriptor read/8, error -71
[   62.282223][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   62.358514][ T6460] netlink: 'syz.3.154': attribute type 1 has an invalid length.
[   62.361271][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'.
[   62.375967][ T5735] Bluetooth: hci3: command tx timeout
[   62.432253][ T5833] usb 7-1: Using ep0 maxpacket: 32
[   62.443909][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short
[   62.452413][ T5833] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[   62.466563][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.469212][ T5833] usb 7-1: Product: syz
[   62.470478][ T5833] usb 7-1: Manufacturer: syz
[   62.478783][ T5833] usb 7-1: SerialNumber: syz
[   62.482471][   T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   62.502799][   T50] usb 5-1: device descriptor read/8, error -71
[   62.528332][ T6466] FAULT_INJECTION: forcing a failure.
[   62.528332][ T6466] name failslab, interval 1, probability 0, space 0, times 0
[   62.535622][ T6466] CPU: 3 UID: 0 PID: 6466 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) 
[   62.535649][ T6466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.535666][ T6466] Call Trace:
[   62.535673][ T6466]  <TASK>
[   62.535680][ T6466]  dump_stack_lvl+0x100/0x190
[   62.535710][ T6466]  should_fail_ex.cold+0x5/0xa
[   62.535736][ T6466]  should_failslab+0xc2/0x120
[   62.535763][ T6466]  __kmalloc_noprof+0xfc/0x820
[   62.535787][ T6466]  ? __kmalloc_noprof+0x345/0x820
[   62.535810][ T6466]  ? x509_fabricate_name.isra.0+0x5ea/0xa10
[   62.535844][ T6466]  x509_fabricate_name.isra.0+0x5ea/0xa10
[   62.535877][ T6466]  x509_note_issuer+0xf9/0x210
[   62.535905][ T6466]  asn1_ber_decoder+0xd0c/0x2170
[   62.535938][ T6466]  ? __pfx_asn1_ber_decoder+0x10/0x10
[   62.535965][ T6466]  ? kasan_save_track+0x14/0x30
[   62.535990][ T6466]  ? __kasan_kmalloc+0xaa/0xb0
[   62.536015][ T6466]  ? __kmalloc_cache_noprof+0x2e7/0x6b0
[   62.536037][ T6466]  ? x509_cert_parse+0x162/0x910
[   62.536067][ T6466]  x509_cert_parse+0x1c9/0x910
[   62.536114][ T6466]  x509_key_preparse+0x65/0x9c0
[   62.536137][ T6466]  asymmetric_key_preparse+0xce/0x1d0
[   62.536159][ T6466]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[   62.536189][ T6466]  __key_create_or_update+0x463/0xe30
[   62.536222][ T6466]  ? __pfx___key_create_or_update+0x10/0x10
[   62.536251][ T6466]  ? lookup_user_key+0x3f3/0x1300
[   62.536287][ T6466]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   62.536313][ T6466]  ? __pfx_keyring_search_iterator+0x10/0x10
[   62.536334][ T6466]  key_create_or_update+0x42/0x60
[   62.536365][ T6466]  __do_sys_add_key+0x2e8/0x460
[   62.536385][ T6466]  ? __pfx___do_sys_add_key+0x10/0x10
[   62.536403][ T6466]  ? ksys_write+0x1ac/0x250
[   62.536434][ T6466]  do_syscall_64+0x123/0x790
[   62.536455][ T6466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.536473][ T6466] RIP: 0033:0x7f2d5c99e0d9
[   62.536489][ T6466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.536504][ T6466] RSP: 002b:00007f2d5d887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   62.536522][ T6466] RAX: ffffffffffffffda RBX: 00007f2d5cc25fa0 RCX: 00007f2d5c99e0d9
[   62.536533][ T6466] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   62.536543][ T6466] RBP: 00007f2d5d887090 R08: 0000000033cb3141 R09: 0000000000000000
[   62.536581][ T6466] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001
[   62.536592][ T6466] R13: 00007f2d5cc26038 R14: 00007f2d5cc25fa0 R15: 00007ffe5bcb9d98
[   62.536616][ T6466]  </TASK>
[   62.612830][   T50] usb usb5-port1: unable to enumerate USB device
[   62.742216][ T5513] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   62.753082][ T6472] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   62.759780][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'.
[   62.762898][ T6475] openvswitch: netlink: Flow key attr not present in new flow.
[   62.892422][ T5513] usb 6-1: Using ep0 maxpacket: 8
[   62.896850][ T5513] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   62.900831][ T5513] usb 6-1: config 0 has no interfaces?
[   62.903332][ T5513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.911113][ T5513] usb 6-1: config 0 descriptor??
[   63.091431][ T5833] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[   63.095726][ T5833] dw2102: su3000_power_ctrl: 1, initialized 0
[   63.100873][ T5833] dvb-usb: bulk message failed: -22 (2/0)
[   63.111939][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   63.116528][ T5833] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[   63.120773][ T5833] usb 7-1: media controller created
[   63.123009][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[   63.124008][   T41] usb 6-1: USB disconnect, device number 3
[   63.126333][ T5833] dw2102: i2c transfer failed.
[   63.131776][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[   63.133757][ T5833] dw2102: i2c transfer failed.
[   63.135291][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[   63.137437][ T5833] dw2102: i2c transfer failed.
[   63.139579][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[   63.141490][ T5833] dw2102: i2c transfer failed.
[   63.143551][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[   63.145441][ T5833] dw2102: i2c transfer failed.
[   63.147055][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[   63.149061][ T5833] dw2102: i2c transfer failed.
[   63.150822][ T5833] dvb-usb: MAC address: 02:02:02:02:02:02
[   63.164718][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   63.181662][ T5833] dvb-usb: bulk message failed: -22 (3/0)
[   63.183563][ T5833] dw2102: command 0x0e transfer failed.
[   63.186058][ T5833] dvb-usb: bulk message failed: -22 (3/0)
[   63.188044][ T5833] dw2102: command 0x0e transfer failed.
[   63.350803][   T42] kauditd_printk_skb: 66 callbacks suppressed
[   63.350829][   T42] audit: type=1400 audit(1787727045.824:412): avc:  denied  { map_create } for  pid=6477 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   63.363961][   T42] audit: type=1400 audit(1787727045.824:413): avc:  denied  { map_read map_write } for  pid=6477 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   63.366035][ T6479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.159'.
[   63.366060][ T6478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.159'.

syzkaller
syzkaller login: [   63.492397][ T5833] dvb-usb: bulk message failed: -22 (3/0)
[   63.495361][ T5833] dw2102: command 0x0e transfer failed.
[   63.497863][ T5833] dvb-usb: bulk message failed: -22 (3/0)
[   63.500253][ T5833] dw2102: command 0x0e transfer failed.
[   63.503630][ T5833] dvb-usb: bulk message failed: -22 (1/0)
[   63.506286][ T5833] dw2102: command 0x51 transfer failed.
[   63.527276][ T5833] DVB: Unable to find symbol ds3000_attach()
[   63.529951][ T5833] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[   63.582969][ T5833] rc_core: IR keymap rc-su3000 not found
[   63.587585][ T5833] Registered IR keymap rc-empty
[   63.595847][ T5833] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[   63.603453][ T5833] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8
[   63.610031][   T42] audit: type=1400 audit(1787727046.084:414): avc:  denied  { read } for  pid=5119 comm="acpid" name="event4" dev="devtmpfs" ino=2878 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.613823][ T5833] dvb-usb: schedule remote query interval to 150 msecs.
[   63.621691][ T5833] dw2102: su3000_power_ctrl: 0, initialized 1
[   63.624697][ T5833] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[   63.625041][   T42] audit: type=1400 audit(1787727046.084:415): avc:  denied  { open } for  pid=5119 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2878 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.631047][ T6493] syz_tun: entered allmulticast mode
[   63.634903][ T5833] usb 7-1: USB disconnect, device number 2
[   63.637330][   T42] audit: type=1400 audit(1787727046.084:416): avc:  denied  { ioctl } for  pid=5119 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2878 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.637358][   T42] audit: type=1400 audit(1787727046.104:417): avc:  denied  { write } for  pid=6492 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   63.637377][   T42] audit: type=1400 audit(1787727046.104:418): avc:  denied  { nlmsg_write } for  pid=6492 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   63.668479][ T6493] pim6reg: entered allmulticast mode
[   63.694247][ T6493] syz_tun (unregistering): left allmulticast mode
[   63.714464][   T42] audit: type=1400 audit(1787727046.194:419): avc:  denied  { unmount } for  pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   63.796213][ T5833] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[   63.957317][ T6520] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   64.005832][   T42] audit: type=1400 audit(1787727046.484:420): avc:  denied  { create } for  pid=6522 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   64.029564][   T42] audit: type=1400 audit(1787727046.504:421): avc:  denied  { setopt } for  pid=6522 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   64.071947][ T1157] nvmet: connect request for invalid subsystem testsubsys!
[   64.075018][ T6524] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   64.216178][   T36] nvmet: connect request for invalid subsystem testsubsys!
[   64.221663][ T6524] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   64.240871][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6540 comm=syz.1.174
[   64.388158][ T6547] netlink: 'syz.1.176': attribute type 1 has an invalid length.
[   64.407838][ T6547] bond1: entered promiscuous mode
[   64.410176][ T6547] bond1: entered allmulticast mode
[   64.413111][ T6547] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.427561][ T6547] erspan1: entered allmulticast mode
[   64.430045][ T1157] nvmet: connect request for invalid subsystem testsubsys!
[   64.433850][ T6524] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   64.437343][ T6547] bond1: (slave erspan1): making interface the new active one
[   64.440567][ T6547] erspan1: entered promiscuous mode
[   64.444743][ T6547] bond1: (slave erspan1): Enslaving as an active interface with an up link
[   64.627137][ T1160] nvmet: connect request for invalid subsystem testsubsys!
[   64.629657][ T6524] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   64.762605][ T6565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.181'.
[   64.775472][ T6563] binder: 6562:6563 ioctl c0306201 200000000040 returned -14
[   64.783087][ T6563] binder: 6562:6563 ioctl c0306201 200000000640 returned -22
[   64.787375][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   64.848440][ T1157] nvmet: connect request for invalid subsystem testsubsys!
[   64.858618][ T6524] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[   64.900437][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   64.944984][ T6587] FAULT_INJECTION: forcing a failure.
[   64.944984][ T6587] name failslab, interval 1, probability 0, space 0, times 0
[   64.951130][ T6587] CPU: 2 UID: 0 PID: 6587 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(full) 
[   64.951151][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   64.951160][ T6587] Call Trace:
[   64.951166][ T6587]  <TASK>
[   64.951173][ T6587]  dump_stack_lvl+0x100/0x190
[   64.951210][ T6587]  should_fail_ex.cold+0x5/0xa
[   64.951233][ T6587]  should_failslab+0xc2/0x120
[   64.951263][ T6587]  __kmalloc_noprof+0xfc/0x820
[   64.951285][ T6587]  ? asymmetric_key_generate_id+0x7e/0x180
[   64.951312][ T6587]  asymmetric_key_generate_id+0x7e/0x180
[   64.951337][ T6587]  x509_akid_note_kid+0x100/0x260
[   64.951363][ T6587]  asn1_ber_decoder+0x12b3/0x2170
[   64.951394][ T6587]  ? __pfx_asn1_ber_decoder+0x10/0x10
[   64.951418][ T6587]  ? kasan_save_track+0x14/0x30
[   64.951440][ T6587]  ? __kasan_kmalloc+0xaa/0xb0
[   64.951463][ T6587]  ? __kmalloc_cache_noprof+0x2e7/0x6b0
[   64.951483][ T6587]  ? x509_cert_parse+0x162/0x910
[   64.951510][ T6587]  x509_cert_parse+0x24b/0x910
[   64.951536][ T6587]  x509_key_preparse+0x65/0x9c0
[   64.951556][ T6587]  asymmetric_key_preparse+0xce/0x1d0
[   64.951577][ T6587]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[   64.951599][ T6587]  __key_create_or_update+0x463/0xe30
[   64.951628][ T6587]  ? __pfx___key_create_or_update+0x10/0x10
[   64.951653][ T6587]  ? lookup_user_key+0x3f3/0x1300
[   64.951686][ T6587]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   64.951716][ T6587]  ? __pfx_keyring_search_iterator+0x10/0x10
[   64.951736][ T6587]  key_create_or_update+0x42/0x60
[   64.951763][ T6587]  __do_sys_add_key+0x2e8/0x460
[   64.951784][ T6587]  ? __pfx___do_sys_add_key+0x10/0x10
[   64.951801][ T6587]  ? ksys_write+0x1ac/0x250
[   64.951829][ T6587]  do_syscall_64+0x123/0x790
[   64.951855][ T6587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.951872][ T6587] RIP: 0033:0x7fcf8cf9e0d9
[   64.951886][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.951900][ T6587] RSP: 002b:00007fcf8ddee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   64.951917][ T6587] RAX: ffffffffffffffda RBX: 00007fcf8d225fa0 RCX: 00007fcf8cf9e0d9
[   64.951927][ T6587] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   64.951937][ T6587] RBP: 00007fcf8ddee090 R08: 00000000267bceba R09: 0000000000000000
[   64.951946][ T6587] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002
[   64.951955][ T6587] R13: 00007fcf8d226038 R14: 00007fcf8d225fa0 R15: 00007fff63710798
[   64.951977][ T6587]  </TASK>
[   64.951983][ T6587] X.509: Couldn't decode AuthKeyIdentifier
[   65.377445][ T6629] FAULT_INJECTION: forcing a failure.
[   65.377445][ T6629] name failslab, interval 1, probability 0, space 0, times 0
[   65.381921][ T6629] CPU: 2 UID: 0 PID: 6629 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(full) 
[   65.381936][ T6629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.381943][ T6629] Call Trace:
[   65.381947][ T6629]  <TASK>
[   65.381952][ T6629]  dump_stack_lvl+0x100/0x190
[   65.381972][ T6629]  should_fail_ex.cold+0x5/0xa
[   65.381987][ T6629]  should_failslab+0xc2/0x120
[   65.382005][ T6629]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[   65.382023][ T6629]  ? x509_cert_parse+0x2b6/0x910
[   65.382043][ T6629]  kmemdup_noprof+0x29/0x60
[   65.382057][ T6629]  x509_cert_parse+0x2b6/0x910
[   65.382088][ T6629]  x509_key_preparse+0x65/0x9c0
[   65.382103][ T6629]  asymmetric_key_preparse+0xce/0x1d0
[   65.382134][ T6629]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[   65.382150][ T6629]  __key_create_or_update+0x463/0xe30
[   65.382171][ T6629]  ? __pfx___key_create_or_update+0x10/0x10
[   65.382189][ T6629]  ? lookup_user_key+0x3f3/0x1300
[   65.382211][ T6629]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   65.382228][ T6629]  ? __pfx_keyring_search_iterator+0x10/0x10
[   65.382241][ T6629]  key_create_or_update+0x42/0x60
[   65.382260][ T6629]  __do_sys_add_key+0x2e8/0x460
[   65.382274][ T6629]  ? __pfx___do_sys_add_key+0x10/0x10
[   65.382286][ T6629]  ? ksys_write+0x1ac/0x250
[   65.382305][ T6629]  do_syscall_64+0x123/0x790
[   65.382319][ T6629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.382331][ T6629] RIP: 0033:0x7f76a5b9e0d9
[   65.382341][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.382351][ T6629] RSP: 002b:00007f76a6b0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   65.382362][ T6629] RAX: ffffffffffffffda RBX: 00007f76a5e25fa0 RCX: 00007f76a5b9e0d9
[   65.382369][ T6629] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   65.382375][ T6629] RBP: 00007f76a6b0c090 R08: 000000001c524278 R09: 0000000000000000
[   65.382382][ T6629] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002
[   65.382388][ T6629] R13: 00007f76a5e26038 R14: 00007f76a5e25fa0 R15: 00007ffe08e2ab28
[   65.382402][ T6629]  </TASK>
[   65.732909][ T6658] FAULT_INJECTION: forcing a failure.
[   65.732909][ T6658] name failslab, interval 1, probability 0, space 0, times 0
[   65.738985][ T6658] CPU: 3 UID: 0 PID: 6658 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) 
[   65.739000][ T6658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.739006][ T6658] Call Trace:
[   65.739010][ T6658]  <TASK>
[   65.739014][ T6658]  dump_stack_lvl+0x100/0x190
[   65.739044][ T6658]  should_fail_ex.cold+0x5/0xa
[   65.739059][ T6658]  should_failslab+0xc2/0x120
[   65.739082][ T6658]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[   65.739105][ T6658]  ? x509_cert_parse+0x3bd/0x910
[   65.739133][ T6658]  kmemdup_noprof+0x29/0x60
[   65.739158][ T6658]  x509_cert_parse+0x3bd/0x910
[   65.739181][ T6658]  x509_key_preparse+0x65/0x9c0
[   65.739194][ T6658]  asymmetric_key_preparse+0xce/0x1d0
[   65.739208][ T6658]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[   65.739224][ T6658]  __key_create_or_update+0x463/0xe30
[   65.739243][ T6658]  ? __pfx___key_create_or_update+0x10/0x10
[   65.739261][ T6658]  ? lookup_user_key+0x3f3/0x1300
[   65.739284][ T6658]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   65.739301][ T6658]  ? __pfx_keyring_search_iterator+0x10/0x10
[   65.739314][ T6658]  key_create_or_update+0x42/0x60
[   65.739333][ T6658]  __do_sys_add_key+0x2e8/0x460
[   65.739346][ T6658]  ? __pfx___do_sys_add_key+0x10/0x10
[   65.739358][ T6658]  ? ksys_write+0x1ac/0x250
[   65.739377][ T6658]  do_syscall_64+0x123/0x790
[   65.739395][ T6658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.739406][ T6658] RIP: 0033:0x7f2d5c99e0d9
[   65.739416][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.739426][ T6658] RSP: 002b:00007f2d5d887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   65.739437][ T6658] RAX: ffffffffffffffda RBX: 00007f2d5cc25fa0 RCX: 00007f2d5c99e0d9
[   65.739447][ T6658] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   65.739455][ T6658] RBP: 00007f2d5d887090 R08: 0000000023bf5aa3 R09: 0000000000000000
[   65.739462][ T6658] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002
[   65.739467][ T6658] R13: 00007f2d5cc26038 R14: 00007f2d5cc25fa0 R15: 00007ffe5bcb9d98
[   65.739481][ T6658]  </TASK>
[   65.914662][ T6676] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   66.396021][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'.
[   66.403856][ T6688] vlan3: entered promiscuous mode
[   66.405911][ T6688] gretap0: entered promiscuous mode
[   66.621724][ T6692] openvswitch: netlink: IP tunnel TTL not specified.
[   66.624415][ T6692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.728034][ T6694] FAULT_INJECTION: forcing a failure.
[   66.728034][ T6694] name failslab, interval 1, probability 0, space 0, times 0
[   66.733257][ T6694] CPU: 3 UID: 0 PID: 6694 Comm: syz.2.216 Not tainted syzkaller #0 PREEMPT(full) 
[   66.733276][ T6694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.733283][ T6694] Call Trace:
[   66.733288][ T6694]  <TASK>
[   66.733293][ T6694]  dump_stack_lvl+0x100/0x190
[   66.733316][ T6694]  should_fail_ex.cold+0x5/0xa
[   66.733333][ T6694]  should_failslab+0xc2/0x120
[   66.733354][ T6694]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[   66.733374][ T6694]  ? x509_get_sig_params+0xf5/0x6c0
[   66.733390][ T6694]  kmemdup_noprof+0x29/0x60
[   66.733406][ T6694]  x509_get_sig_params+0xf5/0x6c0
[   66.733418][ T6694]  ? __asan_memcpy+0x3c/0x60
[   66.733435][ T6694]  x509_cert_parse+0x4e9/0x910
[   66.733463][ T6694]  x509_key_preparse+0x65/0x9c0
[   66.733483][ T6694]  asymmetric_key_preparse+0xce/0x1d0
[   66.733504][ T6694]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[   66.733528][ T6694]  __key_create_or_update+0x463/0xe30
[   66.733551][ T6694]  ? __pfx___key_create_or_update+0x10/0x10
[   66.733572][ T6694]  ? lookup_user_key+0x3f3/0x1300
[   66.733597][ T6694]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   66.733615][ T6694]  ? __pfx_keyring_search_iterator+0x10/0x10
[   66.733631][ T6694]  key_create_or_update+0x42/0x60
[   66.733653][ T6694]  __do_sys_add_key+0x2e8/0x460
[   66.733668][ T6694]  ? __pfx___do_sys_add_key+0x10/0x10
[   66.733682][ T6694]  ? ksys_write+0x1ac/0x250
[   66.733704][ T6694]  do_syscall_64+0x123/0x790
[   66.733719][ T6694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.733732][ T6694] RIP: 0033:0x7fc86919e0d9
[   66.733743][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.733758][ T6694] RSP: 002b:00007fc86a05b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   66.733770][ T6694] RAX: ffffffffffffffda RBX: 00007fc869425fa0 RCX: 00007fc86919e0d9
[   66.733778][ T6694] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   66.733785][ T6694] RBP: 00007fc86a05b090 R08: 00000000396bb5b7 R09: 0000000000000000
[   66.733792][ T6694] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002
[   66.733799][ T6694] R13: 00007fc869426038 R14: 00007fc869425fa0 R15: 00007ffff475d8f8
[   66.733815][ T6694]  </TASK>
[   66.879840][ T6704] overlay: filesystem on ./file0 not supported as upperdir
[   66.883738][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.888198][ T6704] overlay: filesystem on ./file0 not supported as upperdir
[   66.894295][ T6704] overlay: filesystem on ./file0 not supported as upperdir
[   66.900058][ T6704] overlay: filesystem on ./file0 not supported as upperdir
[   66.904817][ T6704] overlay: filesystem on ./file0 not supported as upperdir
[   66.909482][ T6704] overlay: filesystem on ./file0 not supported as upperdir
[   67.018165][ T6713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.021990][ T6713] program syz.0.221 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.203419][ T6744] ieee802154 phy0 wpan0: encryption failed: -22
[   67.244484][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'.
[   67.385126][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'.
[   67.491433][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[   67.495053][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[   67.497846][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[   67.511362][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[   67.515069][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[   67.518501][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[   67.524801][ T5773] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.527965][ T5773] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.531144][ T5773] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.543963][ T5773] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.562633][ T6791] CUSE: unknown device info ""
[   67.564442][ T6791] CUSE: unknown device info ""
[   67.567024][ T6791] CUSE: unknown device info ""
[   67.568743][ T6791] CUSE: unknown device info ""
[   67.570626][ T6791] CUSE: DEVNAME unspecified
[   67.585280][ T6792] qnx4: no qnx4 filesystem (no root dir).
[   67.588280][ T6791] bridge1: entered allmulticast mode
[   67.626494][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'.
[   67.687270][ T6809] FAULT_INJECTION: forcing a failure.
[   67.687270][ T6809] name failslab, interval 1, probability 0, space 0, times 0
[   67.693368][ T6809] CPU: 1 UID: 0 PID: 6809 Comm: syz.1.245 Not tainted syzkaller #0 PREEMPT(full) 
[   67.693393][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   67.693403][ T6809] Call Trace:
[   67.693410][ T6809]  <TASK>
[   67.693418][ T6809]  dump_stack_lvl+0x100/0x190
[   67.693448][ T6809]  should_fail_ex.cold+0x5/0xa
[   67.693473][ T6809]  should_failslab+0xc2/0x120
[   67.693501][ T6809]  __kmalloc_noprof+0xfc/0x820
[   67.693523][ T6809]  ? crypto_create_tfm_node+0x1b4/0x3b0
[   67.693546][ T6809]  ? x509_get_sig_params+0x39e/0x6c0
[   67.693568][ T6809]  x509_get_sig_params+0x39e/0x6c0
[   67.693588][ T6809]  x509_cert_parse+0x4e9/0x910
[   67.693617][ T6809]  x509_key_preparse+0x65/0x9c0
[   67.693638][ T6809]  asymmetric_key_preparse+0xce/0x1d0
[   67.693660][ T6809]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[   67.693692][ T6809]  __key_create_or_update+0x463/0xe30
[   67.693724][ T6809]  ? __pfx___key_create_or_update+0x10/0x10
[   67.693752][ T6809]  ? lookup_user_key+0x3f3/0x1300
[   67.693786][ T6809]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   67.693837][ T6809]  ? __pfx_keyring_search_iterator+0x10/0x10
[   67.693862][ T6809]  key_create_or_update+0x42/0x60
[   67.693896][ T6809]  __do_sys_add_key+0x2e8/0x460
[   67.693921][ T6809]  ? __pfx___do_sys_add_key+0x10/0x10
[   67.693942][ T6809]  ? ksys_write+0x1ac/0x250
[   67.693977][ T6809]  do_syscall_64+0x123/0x790
[   67.694003][ T6809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.694024][ T6809] RIP: 0033:0x7f76a5b9e0d9
[   67.694043][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.694060][ T6809] RSP: 002b:00007f76a6b0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   67.694081][ T6809] RAX: ffffffffffffffda RBX: 00007f76a5e25fa0 RCX: 00007f76a5b9e0d9
[   67.694094][ T6809] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040
[   67.694105][ T6809] RBP: 00007f76a6b0c090 R08: 0000000023b26494 R09: 0000000000000000
[   67.694117][ T6809] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002
[   67.694128][ T6809] R13: 00007f76a5e26038 R14: 00007f76a5e25fa0 R15: 00007ffe08e2ab28
[   67.694155][ T6809]  </TASK>
[   67.918408][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'.
[   68.358964][   T42] kauditd_printk_skb: 70 callbacks suppressed
[   68.358975][   T42] audit: type=1400 audit(1787727050.834:492): avc:  denied  { write } for  pid=6852 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.430232][   T42] audit: type=1400 audit(1787727050.904:493): avc:  denied  { write } for  pid=6856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.474870][   T42] audit: type=1400 audit(1787727050.954:494): avc:  denied  { write } for  pid=6860 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.490599][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[   68.492808][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   68.496143][ T6854] vhci_hcd vhci_hcd.0: Device attached
[   68.501276][   T42] audit: type=1400 audit(1787727050.974:495): avc:  denied  { write } for  pid=6853 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   68.546926][   T42] audit: type=1400 audit(1787727051.024:496): avc:  denied  { write } for  pid=6864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.560053][   T42] audit: type=1400 audit(1787727051.034:497): avc:  denied  { write } for  pid=6853 comm="syz.1.253" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.569767][   T42] audit: type=1400 audit(1787727051.034:498): avc:  denied  { map } for  pid=6853 comm="syz.1.253" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.579559][   T42] audit: type=1400 audit(1787727051.034:499): avc:  denied  { execute } for  pid=6853 comm="syz.1.253" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.603990][   T42] audit: type=1400 audit(1787727051.084:500): avc:  denied  { write } for  pid=6867 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.628232][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.704044][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.723809][ T5728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.727557][ T5728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.734127][ T5728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.740791][ T5728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.744402][ T5728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.784059][ T5815] usb 40-1: SetAddress Request (2) to port 0
[   68.787064][ T5815] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[   68.788227][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.881803][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.053423][   T13] bridge_slave_1: left allmulticast mode
[   69.055357][   T13] bridge_slave_1: left promiscuous mode
[   69.057807][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.061851][   T13] bridge_slave_0: left allmulticast mode
[   69.063878][   T13] bridge_slave_0: left promiscuous mode
[   69.067637][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.163960][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.168792][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.172681][   T13] bond0 (unregistering): Released all slaves
[   69.178223][   T13] bond1 (unregistering): Released all slaves
[   69.186378][   T13] bond2 (unregistering): Released all slaves
[   69.208865][ T6862] vhci_hcd: connection reset by peer
[   69.214607][   T12] vhci_hcd vhci_hcd.1: stop threads
[   69.217301][   T12] vhci_hcd vhci_hcd.1: release socket
[   69.220618][   T12] vhci_hcd vhci_hcd.1: disconnect device
[   69.297848][   T42] audit: type=1400 audit(1787727051.774:501): avc:  denied  { write } for  pid=6888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.306984][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.310493][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.313785][ T6872] bridge_slave_0: entered allmulticast mode
[   69.317073][ T6872] bridge_slave_0: entered promiscuous mode
[   69.320947][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.323991][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.326932][ T6872] bridge_slave_1: entered allmulticast mode
[   69.331543][ T6872] bridge_slave_1: entered promiscuous mode
[   69.359331][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.364778][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.382768][   T13] rxrpc: Leaked peer c1 {1} 127.0.0.1:7003
[   69.400975][ T6872] team0: Port device team_slave_0 added
[   69.406798][ T6872] team0: Port device team_slave_1 added
[   69.428040][ T5436] 8021q: adding VLAN 0 to HW filter on device eth2
[   69.430818][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.435545][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.444619][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.458491][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.460774][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.470374][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.510535][ T6872] hsr_slave_0: entered promiscuous mode
[   69.513704][ T6872] hsr_slave_1: entered promiscuous mode
[   69.515786][ T6872] debugfs: 'hsr0' already exists in 'hsr'
[   69.517950][ T6872] Cannot create hsr debugfs directory
[   69.605247][   T13] hsr_slave_0: left promiscuous mode
[   69.610282][   T13] hsr_slave_1: left promiscuous mode
[   69.615397][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.618812][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.623004][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.625996][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.637113][   T13] veth1_macvtap: left promiscuous mode
[   69.638961][   T13] veth0_macvtap: left promiscuous mode
[   69.640864][   T13] veth1_vlan: left promiscuous mode
[   69.642870][   T13] veth0_vlan: left promiscuous mode
[   69.808924][ T6913] kAFS: No cell specified
[   69.852628][   T13] team0 (unregistering): Port device team_slave_1 removed
[   69.884396][   T13] team0 (unregistering): Port device team_slave_0 removed
[   69.972242][ T5436] 8021q: adding VLAN 0 to HW filter on device eth3
[   70.280712][ T6872] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   70.292790][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.296881][ T6872] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   70.303568][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.308622][ T6872] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   70.318750][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.323229][ T6872] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   70.330042][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.336749][ T5436] 8021q: adding VLAN 0 to HW filter on device eth4
[   70.387511][ T6947] jffs2: notice: (6947) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   70.427178][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.442901][ T6872] 8021q: adding VLAN 0 to HW filter on device team0
[   70.448385][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.450799][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.474195][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.478154][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.595067][ T5436] 8021q: adding VLAN 0 to HW filter on device eth5
[   70.772359][ T5735] Bluetooth: hci2: command tx timeout
[   70.793545][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.990964][ T6872] veth0_vlan: entered promiscuous mode
[   71.000933][ T6872] veth1_vlan: entered promiscuous mode
[   71.019948][ T6872] veth0_macvtap: entered promiscuous mode
[   71.027465][ T6872] veth1_macvtap: entered promiscuous mode
[   71.042328][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.050764][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.090896][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.114271][  T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.120781][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.124279][  T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.166793][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.169622][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.182433][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.186879][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.191882][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.195344][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.317512][ T7017] netlink: 'syz.4.257': attribute type 32 has an invalid length.
[   71.322443][ T5828] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   71.339448][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[   71.342956][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[   71.473190][ T5828] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   71.476970][ T5828] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   71.480407][ T5828] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   71.484816][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.497892][ T5828] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[   71.508119][ T5828] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[   71.596997][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.600194][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.602866][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.704425][   T29] usb 6-1: USB disconnect, device number 4
[   71.742092][   T29] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   71.753291][   T29] spcp8x5 6-1:1.0: device disconnected
[   71.887847][ T7037] netlink: 'syz.3.283': attribute type 32 has an invalid length.
[   71.918554][ T7037] bond1: option coupled_control: invalid value (73)
[   71.923930][ T7037] bond1 (unregistering): Released all slaves
[   72.191197][ T7056] netlink: 'syz.3.290': attribute type 2 has an invalid length.
[   72.194476][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.290'.
[   72.295435][ T7058] autofs4:pid:7058:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375)
[   72.306554][ T7060] o2cb: This node has not been configured.
[   72.321189][ T7060] o2cb: Cluster check failed. Fix errors before retrying.
[   72.328299][ T7060] (syz.2.292,7060,2):user_dlm_register:674 ERROR: status = -22
[   72.332025][ T7060] (syz.2.292,7060,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain"
[   72.518771][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.576873][ T7086] =======================================================
[   72.576873][ T7086] WARNING: The mand mount option has been deprecated and
[   72.576873][ T7086]          and is ignored by this kernel. Remove the mand
[   72.576873][ T7086]          option from the mount to silence this warning.
[   72.576873][ T7086] =======================================================
[   72.608821][ T7086] MTD: Couldn't look up '/dev/sg0': -15
[   72.611811][ T7086] /dev/sg0: Can't lookup blockdev
[   72.680941][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.699486][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.852330][ T5735] Bluetooth: hci2: command tx timeout
[   72.913169][ T6896] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.937766][ T6896] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.949669][ T6896] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.958356][ T6896] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.178445][ T7118] netlink: 'syz.3.307': attribute type 7 has an invalid length.
[   73.322212][ T1480] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   73.327122][ T7115] Cannot find del_set index 0 as target
[   73.349496][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[   73.359890][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[   73.365043][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[   73.369071][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[   73.373543][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[   73.449494][ T7127] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   73.472308][ T1480] usb 7-1: Using ep0 maxpacket: 8
[   73.480984][ T1480] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   73.491301][ T1480] usb 7-1: config 0 has no interfaces?
[   73.496873][ T1480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.510211][ T1480] usb 7-1: config 0 descriptor??
[   73.599410][   T42] kauditd_printk_skb: 48 callbacks suppressed
[   73.599427][   T42] audit: type=1400 audit(1787727056.074:550): avc:  denied  { write } for  pid=7134 comm="syz.4.312" name="dlm" dev="configfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   73.611517][   T42] audit: type=1400 audit(1787727056.074:551): avc:  denied  { write } for  pid=7134 comm="syz.4.312" name="comms" dev="configfs" ino=19630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   73.619763][   T42] audit: type=1400 audit(1787727056.074:552): avc:  denied  { write } for  pid=7134 comm="syz.4.312" name="local" dev="configfs" ino=19633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   73.631076][   T42] audit: type=1400 audit(1787727056.074:553): avc:  denied  { open } for  pid=7134 comm="syz.4.312" path="/11/config/dlm/cl1/comms/1/local" dev="configfs" ino=19633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   73.655853][   T42] audit: type=1400 audit(1787727056.074:554): avc:  denied  { write } for  pid=7134 comm="syz.4.312" name="spaces" dev="configfs" ino=19629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   73.760252][ T2319] usb 7-1: USB disconnect, device number 3
[   73.814712][   T42] audit: type=1400 audit(1787727056.294:555): avc:  denied  { map } for  pid=7150 comm="syz.4.316" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   73.817139][ T7153] binder_alloc: binder_alloc_mmap_handler: 7150 200000ffd000-200001000000 already mapped failed -16
[   73.827059][ T5815] usb 40-1: device descriptor read/8, error -110
[   73.843727][   T42] audit: type=1400 audit(1787727056.294:556): avc:  denied  { call } for  pid=7150 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   73.860637][ T7155] team0: Port device team_slave_1 removed
[   73.939744][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'.
[   73.941791][ T7153] syz.4.316 (7153): drop_caches: 2
[   74.009995][   T42] audit: type=1400 audit(1787727056.484:557): avc:  denied  { read write } for  pid=7161 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   74.019560][   T42] audit: type=1400 audit(1787727056.494:558): avc:  denied  { open } for  pid=7161 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   74.028738][   T42] audit: type=1400 audit(1787727056.494:559): avc:  denied  { lock } for  pid=7161 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   74.076768][ T7166] netlink: 'syz.4.320': attribute type 29 has an invalid length.

syzkaller
syzkaller login: [   74.145927][ T7170] dns_resolver: Unsupported content type (234)
[   74.222868][ T5815] usb usb40-port1: attempt power cycle
[   74.440613][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.331'.
[   74.522031][ T7198] ata1.00: invalid cdb length 6
[   74.522519][ T7199] openvswitch: netlink: Flow actions attr not present in new flow.
[   74.656028][ T7208] device-mapper: ioctl: Invalid data size in the ioctl structure: 4160749567
[   74.784385][ T5815] usb usb40-port1: unable to enumerate USB device
[   74.914526][ T7243] bond0: invalid ARP target specified
[   74.918075][ T7243] file system registered
[   74.997326][ T7246] ftl_cs: FTL header not found.
[   75.060887][ T7246] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[   75.065965][ T7243] block2mtd: error: cannot open device ·
[   75.095541][ T5722] ffs_data_put(): freeing
[   75.137835][ T7254] netlink: 'syz.2.349': attribute type 2 has an invalid length.
[   75.140879][ T7254] netlink: 228 bytes leftover after parsing attributes in process `syz.2.349'.
[   75.194363][ T7259] capability: warning: `syz.2.351' uses 32-bit capabilities (legacy support in use)
[   75.206282][ T7258] EXT4-fs (nbd4): unable to read superblock
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   75.261774][ T7267] netlink: 164 bytes leftover after parsing attributes in process `syz.4.354'.
[   75.267649][ T7268] binder: 7266:7268 ioctl c0306201 0 returned -14
[   75.271334][ T5728] Bluetooth: hci2: Malformed LE Event: 0x1d
[   75.274272][ T5728] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   75.277697][ T5728] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   75.313831][ T7271] process 'syz.2.356' launched './file0' with NULL argv: empty string added
[   75.447442][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.628424][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'.
[   75.658334][ T7289] syzkaller0: entered promiscuous mode
[   75.661141][ T7289] syzkaller0: entered allmulticast mode
[   75.880420][ T7312] FAULT_INJECTION: forcing a failure.
[   75.880420][ T7312] name fail_futex, interval 1, probability 0, space 0, times 1
[   75.885143][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.1.367 Not tainted syzkaller #0 PREEMPT(full) 
[   75.885162][ T7312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   75.885170][ T7312] Call Trace:
[   75.885175][ T7312]  <TASK>
[   75.885182][ T7312]  dump_stack_lvl+0x100/0x190
[   75.885216][ T7312]  should_fail_ex.cold+0x5/0xa
[   75.885234][ T7312]  get_futex_key+0x1d0/0x14f0
[   75.885249][ T7312]  ? __pfx_get_futex_key+0x10/0x10
[   75.885260][ T7312]  ? ttwu_queue_wakelist+0x2fd/0x450
[   75.885283][ T7312]  ? __smp_call_single_queue+0x17e/0x450
[   75.885301][ T7312]  ? __pfx___smp_call_single_queue+0x10/0x10
[   75.885322][ T7312]  futex_wait_setup+0x91/0x540
[   75.885345][ T7312]  __futex_wait+0x19f/0x300
[   75.885360][ T7312]  ? __pfx___futex_wait+0x10/0x10
[   75.885373][ T7312]  ? __pfx_try_to_wake_up+0x10/0x10
[   75.885385][ T7312]  ? futex_hash+0x311/0x400
[   75.885396][ T7312]  ? __pfx_futex_wake_mark+0x10/0x10
[   75.885412][ T7312]  ? find_held_lock+0x2b/0x80
[   75.885427][ T7312]  ? futex_wake+0x4ea/0x5e0
[   75.885448][ T7312]  futex_wait+0xe6/0x370
[   75.885464][ T7312]  ? __pfx_futex_wait+0x10/0x10
[   75.885481][ T7312]  ? rcu_read_lock_any_held+0x6a/0x90
[   75.885495][ T7312]  ? find_held_lock+0x2b/0x80
[   75.885507][ T7312]  ? ksys_write+0x190/0x250
[   75.885526][ T7312]  ? ksys_write+0x190/0x250
[   75.885541][ T7312]  do_futex+0x265/0x440
[   75.885553][ T7312]  ? __pfx_do_futex+0x10/0x10
[   75.885565][ T7312]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   75.885587][ T7312]  __x64_sys_futex+0x34f/0x4d0
[   75.885610][ T7312]  ? fput+0x7c/0x100
[   75.885628][ T7312]  ? __pfx___x64_sys_futex+0x10/0x10
[   75.885641][ T7312]  ? ksys_write+0x1ac/0x250
[   75.885655][ T7312]  ? __pfx_ksys_write+0x10/0x10
[   75.885674][ T7312]  do_syscall_64+0x123/0x790
[   75.885688][ T7312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.885700][ T7312] RIP: 0033:0x7f76a5b9e0d9
[   75.885710][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.885721][ T7312] RSP: 002b:00007f76a6b0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   75.885733][ T7312] RAX: ffffffffffffffda RBX: 00007f76a5e25fa8 RCX: 00007f76a5b9e0d9
[   75.885739][ T7312] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76a5e25fa8
[   75.885745][ T7312] RBP: 00007f76a5e25fa0 R08: 0000000000000000 R09: 0000000000000000
[   75.885751][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.885757][ T7312] R13: 00007f76a5e26038 R14: 00007ffe08e2aa40 R15: 00007ffe08e2ab28
[   75.885772][ T7312]  </TASK>
[   76.113238][ T5801] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   76.238037][ T7318] bond2: entered promiscuous mode
[   76.262913][ T5801] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   76.271057][ T5801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.276433][ T5801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.280586][ T5801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.286624][ T5801] usb 9-1: config 0 descriptor??
[   76.680690][ T5801] usbhid 9-1:0.0: can't add hid device: -71
[   76.685346][ T5801] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[   76.691241][ T5801] usb 9-1: USB disconnect, device number 2
[   76.862402][ T5728] Bluetooth: hci4: command 0x1003 tx timeout
[   76.863823][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   77.426303][ T5735] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   77.440722][ T5735] Bluetooth: hci2: Injecting HCI hardware error event
[   77.461039][ T5728] Bluetooth: hci2: hardware error 0x00
[   77.731904][ T7351] webusb: landingPage URL too long
[   77.817422][ T7353] CacheFiles: Failed to register: -95
[   77.874628][ T7356] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   77.972465][ T7360] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   78.430391][ T7366] random: crng reseeded on system resumption
[   78.442423][ T5513] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   78.457635][ T7368] jffs2: notice: (7368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   78.460280][ T7366] __nla_validate_parse: 2 callbacks suppressed
[   78.460296][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'.
[   78.586015][ T7376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   78.623131][ T5513] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[   78.626840][ T5513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.634645][ T5513] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 005
[   78.677929][   T42] kauditd_printk_skb: 31 callbacks suppressed
[   78.677943][   T42] audit: type=1400 audit(1787727061.154:591): avc:  denied  { write } for  pid=7384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.747346][   T42] audit: type=1400 audit(1787727061.214:592): avc:  denied  { write } for  pid=7387 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.777832][   T42] audit: type=1400 audit(1787727061.254:593): avc:  denied  { read } for  pid=7393 comm="syz.2.388" name="usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   78.789419][   T42] audit: type=1400 audit(1787727061.264:594): avc:  denied  { open } for  pid=7393 comm="syz.2.388" path="/dev/usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   78.811545][   T42] audit: type=1400 audit(1787727061.284:595): avc:  denied  { write } for  pid=7393 comm="syz.2.388" name="/" dev="9p" ino=78395907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   78.845583][   T42] audit: type=1400 audit(1787727061.324:596): avc:  denied  { write } for  pid=7396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.872268][ T5801] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   78.906988][   T42] audit: type=1400 audit(1787727061.384:597): avc:  denied  { write } for  pid=7401 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.036617][ T5801] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   79.041965][ T5801] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.043542][ T7364] ubi0: attaching mtd0
[   79.048453][ T5801] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.053439][ T5801] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.058188][ T5801] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.061755][ T5801] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42997, setting to 1024
[   79.068100][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   79.072888][ T5801] usb 8-1: Product: syz
[   79.074396][ T5801] usb 8-1: Manufacturer: syz
[   79.084617][ T7382] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   79.095004][ T5801] cdc_wdm 8-1:1.0: skipping garbage
[   79.097308][ T5513]  (null): failure reading functionality
[   79.101302][ T5801] cdc_wdm 8-1:1.0: skipping garbage
[   79.103852][ T5513] i2c i2c-2: failure reading functionality
[   79.137791][ T5513] i2c i2c-2: connected i2c-tiny-usb device
[   79.147109][ T5801] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   79.149148][ T5801] cdc_wdm 8-1:1.0: Unknown control protocol
[   79.160910][ T7364] ubi0: scanning is finished
[   79.163637][ T7364] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   79.176338][   T42] audit: type=1400 audit(1787727061.654:598): avc:  denied  { bpf } for  pid=7407 comm="syz.2.390" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.296668][   T42] audit: type=1400 audit(1787727061.774:599): avc:  denied  { read write } for  pid=7380 comm="syz.3.386" name="cdc-wdm0" dev="devtmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   79.305166][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.306293][   T42] audit: type=1400 audit(1787727061.774:600): avc:  denied  { open } for  pid=7380 comm="syz.3.386" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   79.309199][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.321401][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.325347][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.331009][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.333918][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.336804][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.339461][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.342427][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.345367][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.348318][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.352022][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.355697][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.358751][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.361602][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.364463][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.367503][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.371301][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.371583][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   79.371611][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   79.384761][ T7364] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   79.391873][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[   79.404190][ T5801] usb 8-1: USB disconnect, device number 2
[   79.482073][ T7425] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058)
[   79.486642][ T5735] Bluetooth: hci2: unexpected event for opcode 0x2041
[   79.517674][ T7364] i2c i2c-2: failure reading status
[   79.522843][ T7364] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5
[   79.528733][ T7364] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5
[   79.533262][ T7364] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03
[   79.582408][ T5728] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   79.812213][ T7443] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   79.812213][ T7443] The task syz.2.400 (7443) triggered the difference, watch for misbehavior.
[   79.949563][ T7454] binder: 7452:7454 ioctl c0306201 2000000001c0 returned -22
[   80.039311][ T7460] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b236ea (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[   80.045447][ T7460] Call Trace:
[   80.046823][ T7460]  <TASK>
[   80.048049][ T7460]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[   80.051100][ T7460]  ? native_send_call_func_ipi+0xcb/0x1b0
[   80.053805][ T7460]  mce_cpu_restart+0xd5/0x1f0
[   80.056421][ T7460]  ? __pfx_mce_cpu_restart+0x10/0x10
[   80.058526][ T7460]  ? set_bank+0x240/0x3a0
[   80.060275][ T7460]  smp_call_function_many_cond+0x1449/0x18c0
[   80.062670][ T7460]  ? __pfx_mce_cpu_restart+0x10/0x10
[   80.064950][ T7460]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[   80.067975][ T7460]  ? __timer_delete_sync+0x10f/0x1c0
[   80.070826][ T7460]  set_bank+0x240/0x3a0
[   80.073010][ T7460]  ? __pfx_set_bank+0x10/0x10
[   80.074904][ T7460]  ? find_held_lock+0x2b/0x80
[   80.076909][ T7460]  ? sysfs_file_kobj+0xe4/0x290
[   80.078839][ T7460]  ? sysfs_file_kobj+0xe4/0x290
[   80.080808][ T7460]  ? __pfx_set_bank+0x10/0x10
[   80.082834][ T7460]  dev_attr_store+0x58/0x80
[   80.084749][ T7460]  ? __pfx_dev_attr_store+0x10/0x10
[   80.086921][ T7460]  sysfs_kf_write+0xf2/0x150
[   80.088967][ T7460]  kernfs_fop_write_iter+0x3e0/0x5f0
[   80.091437][ T7460]  ? __pfx_sysfs_kf_write+0x10/0x10
[   80.093830][ T7460]  vfs_write+0x6af/0x1050
[   80.095398][ T7460]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   80.097300][ T7460]  ? __pfx_vfs_write+0x10/0x10
[   80.098882][ T7460]  ? find_held_lock+0x2b/0x80
[   80.100430][ T7460]  ksys_write+0x12a/0x250
[   80.101740][ T7460]  ? __pfx_ksys_write+0x10/0x10
[   80.103224][ T7460]  do_syscall_64+0x123/0x790
[   80.104787][ T7460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.106524][ T7460] RIP: 0033:0x7f2d5c99e0d9
[   80.108033][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.115364][ T7460] RSP: 002b:00007f2d5d887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   80.118597][ T7460] RAX: ffffffffffffffda RBX: 00007f2d5cc25fa0 RCX: 00007f2d5c99e0d9
[   80.121167][ T7460] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003
[   80.123606][ T7460] RBP: 00007f2d5ca35024 R08: 0000000000000000 R09: 0000000000000000
[   80.126038][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.128452][ T7460] R13: 00007f2d5cc26038 R14: 00007f2d5cc25fa0 R15: 00007ffe5bcb9d98
[   80.131921][ T7460]  </TASK>
[   80.452411][ T5728] Bluetooth: hci3: command tx timeout
[   80.543762][ T7473] vcan0 speed is unknown, defaulting to 1000
[   80.563927][ T7473] vcan0 speed is unknown, defaulting to 1000
[   80.569615][ T7473] vcan0 speed is unknown, defaulting to 1000
[   80.669212][ T7476] syzkaller0: entered promiscuous mode
[   80.671516][ T7476] syzkaller0: entered allmulticast mode
[   80.678763][ T7476] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[   80.705837][ T7473] infiniband syz1: set active
[   80.707851][ T7473] infiniband syz1: added vcan0
[   80.713020][ T5801] vcan0 speed is unknown, defaulting to 1000
[   80.726425][ T7473] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   80.735809][ T7473] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   80.743451][ T7473] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   80.785617][ T7473] RDS/IB: syz1: added
[   80.787941][ T7473] smc: adding ib device syz1 with port count 1
[   80.790796][ T7473] smc:    ib device syz1 port 1 has no pnetid
[   80.795940][ T5801] vcan0 speed is unknown, defaulting to 1000
[   80.813089][ T7473] vcan0 speed is unknown, defaulting to 1000
[   81.012866][ T7473] vcan0 speed is unknown, defaulting to 1000
[   81.088326][ T7489] syz.3.413: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.107002][ T7489] CPU: 3 UID: 0 PID: 7489 Comm: syz.3.413 Not tainted syzkaller #0 PREEMPT(full) 
[   81.107033][ T7489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   81.107044][ T7489] Call Trace:
[   81.107052][ T7489]  <TASK>
[   81.107060][ T7489]  dump_stack_lvl+0x100/0x190
[   81.107107][ T7489]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[   81.107143][ T7489]  warn_alloc.cold+0x9e/0xb2
[   81.107183][ T7489]  ? __pfx_warn_alloc+0x10/0x10
[   81.107215][ T7489]  ? __lock_acquire+0x4c5/0x1ec0
[   81.107257][ T7489]  ? avc_has_extended_perms+0x33a/0x1080
[   81.107282][ T7489]  ? avc_has_extended_perms+0x33a/0x1080
[   81.107309][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107336][ T7489]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[   81.107366][ T7489]  __vmalloc_node_range_noprof+0x123b/0x1460
[   81.107388][ T7489]  ? rcu_is_watching+0x13/0xc0
[   81.107412][ T7489]  ? trace_contention_end+0x126/0x160
[   81.107442][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107465][ T7489]  ? dvb_demux_do_ioctl+0x929/0x1200
[   81.107493][ T7489]  ? kasan_quarantine_put+0x104/0x240
[   81.107520][ T7489]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[   81.107552][ T7489]  ? __pfx___mutex_lock+0x10/0x10
[   81.107580][ T7489]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.107605][ T7489]  ? tomoyo_path_number_perm+0x188/0x580
[   81.107632][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107651][ T7489]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[   81.107671][ T7489]  __vmalloc_node_noprof+0xad/0xf0
[   81.107685][ T7489]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[   81.107705][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107722][ T7489]  dvb_demux_do_ioctl+0x9e0/0x1200
[   81.107745][ T7489]  ? do_vfs_ioctl+0x226/0x13e0
[   81.107784][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107806][ T7489]  dvb_usercopy+0x167/0x340
[   81.107832][ T7489]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[   81.107857][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107879][ T7489]  ? __pfx_dvb_usercopy+0x10/0x10
[   81.107910][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107932][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.107951][ T7489]  ? selinux_file_ioctl+0x13b/0x290
[   81.107976][ T7489]  ? selinux_file_ioctl+0xb6/0x290
[   81.108002][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.108023][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.108043][ T7489]  dvb_demux_ioctl+0x29/0x40
[   81.108067][ T7489]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[   81.108090][ T7489]  __x64_sys_ioctl+0x18e/0x210
[   81.108112][ T7489]  do_syscall_64+0x123/0x790
[   81.108131][ T7489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.108151][ T7489] RIP: 0033:0x7f2d5c99e0d9
[   81.108167][ T7489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.108184][ T7489] RSP: 002b:00007f2d5d887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   81.108203][ T7489] RAX: ffffffffffffffda RBX: 00007f2d5cc25fa0 RCX: 00007f2d5c99e0d9
[   81.108215][ T7489] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003
[   81.108233][ T7489] RBP: 00007f2d5ca35024 R08: 0000000000000000 R09: 0000000000000000
[   81.108244][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.108255][ T7489] R13: 00007f2d5cc26038 R14: 00007f2d5cc25fa0 R15: 00007ffe5bcb9d98
[   81.108277][ T7489]  ? __UNIQUE_ID_modinfo_730+0x636a6615/0xffffffffffec94cb
[   81.108304][ T7489]  </TASK>
[   81.109211][ T7489] Mem-Info:
[   81.219205][ T7473] vcan0 speed is unknown, defaulting to 1000
[   81.227317][ T7489] active_anon:19657 inactive_anon:8263 isolated_anon:0
[   81.227317][ T7489]  active_file:1638 inactive_file:47776 isolated_file:0
[   81.227317][ T7489]  unevictable:1000 dirty:71 writeback:0
[   81.227317][ T7489]  slab_reclaimable:7635 slab_unreclaimable:69217
[   81.227317][ T7489]  mapped:25545 shmem:19495 pagetables:3793
[   81.227317][ T7489]  sec_pagetables:303 bounce:0
[   81.227317][ T7489]  kernel_misc_reclaimable:0
[   81.227317][ T7489]  free:441800 free_pcp:16927 free_cma:0
[   81.232805][   T50] usb 6-1: USB disconnect, device number 5
[   81.307372][ T7489] Node 0 active_anon:78264kB inactive_anon:32996kB active_file:6552kB inactive_file:187228kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:105968kB dirty:280kB writeback:0kB shmem:75972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13568kB pagetables:6144kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   81.323610][ T7489] Node 1 active_anon:116kB inactive_anon:56kB active_file:0kB inactive_file:3876kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9152kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   81.339695][ T7489] Node 0 DMA free:15152kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:4kB free_cma:0kB
[   81.355800][ T7489] lowmem_reserve[]: 0 1224 1224 1224 1224
[   81.358526][ T7489] Node 0 DMA32 free:141704kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78248kB inactive_anon:32996kB active_file:6552kB inactive_file:187228kB unevictable:2000kB writepending:280kB zspages:2236kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:40724kB local_pcp:9072kB free_cma:0kB
[   81.375585][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'.
[   81.402269][ T7489] lowmem_reserve[]: 0 0 0 0 0
[   81.421355][ T7489] Node 1 Normal free:1609716kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116kB inactive_anon:56kB active_file:0kB inactive_file:3876kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:27776kB local_pcp:11116kB free_cma:0kB
[   81.439487][ T7489] lowmem_reserve[]: 0 0 0 0 0
[   81.442429][ T7489] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 12*16kB (UM) 10*32kB (UM) 9*64kB (U) 7*128kB (UM) 9*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 15152kB
[   81.450902][ T7489] Node 0 DMA32: 12*4kB (UM) 24*8kB (UM) 233*16kB (UME) 59*32kB (UME) 173*64kB (UME) 166*128kB (UME) 117*256kB (UM) 65*512kB (UM) 21*1024kB (M) 9*2048kB (UM) 0*4096kB = 141344kB
[   81.464098][ T7489] Node 1 Normal: 293*4kB (UM) 297*8kB (UM) 314*16kB (UM) 278*32kB (UM) 241*64kB (UME) 215*128kB (UM) 196*256kB (UME) 182*512kB (U) 175*1024kB (UME) 3*2048kB (UE) 298*4096kB (UM) = 1609724kB
[   81.475432][ T7489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   81.479565][ T7489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   81.484032][ T7489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   81.488354][ T7489] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   81.493429][ T7489] 68924 total pagecache pages
[   81.496085][ T7489] 19 pages in swap cache
[   81.498964][ T7489] Free swap  = 118544kB
[   81.501425][ T7489] Total swap = 124996kB
[   81.504284][ T7489] 1048443 pages RAM
[   81.506057][ T7489] 0 pages HighMem/MovableOnly
[   81.508138][ T7489] 285655 pages reserved
[   81.510103][ T7489] 0 pages cma reserved
[   81.517914][ T7473] vcan0 speed is unknown, defaulting to 1000
[   81.605440][ T1345] cfg80211: failed to load regulatory.db
[   81.698515][ T7492] lo speed is unknown, defaulting to 1000
[   81.701340][ T7496] rdma_rxe: rxe_newlink: failed to add syz_tun
[   81.707337][ T7492] lo speed is unknown, defaulting to 1000
[   81.710278][ T7492] lo speed is unknown, defaulting to 1000
[   81.869997][ T7530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7530 comm=syz.2.419
[   81.880521][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7531 comm=syz.2.419
[   81.982597][ T7528] netlink: 'syz.4.418': attribute type 2 has an invalid length.
[   81.989107][ T7528] netlink: 'syz.4.418': attribute type 4 has an invalid length.
[   82.019724][ T7492] infiniband s
z1: set down
[   82.021954][ T6464] lo speed is unknown, defaulting to 1000
[   82.028248][ T7492] infiniband s
z1: added lo
[   82.046652][ T7492] smbdirect: ib_dev[s
z1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   82.053192][ T7492] smbdirect: ib_dev[s
z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   82.061758][ T7492] smbdirect: ib_dev[s
z1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005

getty: ttyS0: read error: Resource temporarily unavailable
[   82.168281][ T7492] RDS/IB: s
z1: added
[   82.175098][ T7492] smc: adding ib device s
z1 with port count 1
[   82.182055][ T7492] smc:    ib device s
z1 port 1 has no pnetid
[   82.187187][   T50] lo speed is unknown, defaulting to 1000
[   82.201892][ T7492] lo speed is unknown, defaulting to 1000
[   82.304904][ T7553] kAFS: unparsable volume name
[   82.310888][ T7553] netlink: 116 bytes leftover after parsing attributes in process `syz.4.423'.
[   82.493817][ T7492] lo speed is unknown, defaulting to 1000
[   82.686585][ T7492] lo speed is unknown, defaulting to 1000
[   82.776034][ T7567] overlay: ./file2 is not a directory
[   82.779126][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   82.785043][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   82.876411][ T7492] lo speed is unknown, defaulting to 1000
[   83.011091][ T7574] mmap: syz.1.430 (7574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   83.072396][ T7580] netlink: 156 bytes leftover after parsing attributes in process `syz.4.432'.
[   83.153920][ T7588] netlink: 'syz.4.434': attribute type 1 has an invalid length.
[   83.161884][ T7588] syz.4.434 uses obsolete (PF_INET,SOCK_PACKET)
[   83.294459][ T7600] evm: overlay not supported
[   83.561266][ T7616] vlan2: entered promiscuous mode
[   83.563810][ T7616] bridge0: entered promiscuous mode
[   83.684735][   T42] kauditd_printk_skb: 34 callbacks suppressed
[   83.684752][   T42] audit: type=1400 audit(1787727066.164:635): avc:  denied  { write } for  pid=7620 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   83.700936][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'.
[   83.807334][ T7634] netlink: 80 bytes leftover after parsing attributes in process `syz.1.447'.
[   83.815111][ T7624] macvlan2: entered promiscuous mode
[   83.818990][ T7625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7625 comm=syz.4.445
[   83.944633][ T7638] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[   83.960853][ T5728] Bluetooth: hci3: ACL packet for unknown connection handle 4
[   83.974439][   T42] audit: type=1400 audit(1787727066.454:636): avc:  denied  { setopt } for  pid=7636 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   84.010979][ T7643] netlink: 144 bytes leftover after parsing attributes in process `syz.1.449'.
[   84.027694][ T7643] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string
[   84.269609][   T42] audit: type=1400 audit(1787727066.744:637): avc:  denied  { getopt } for  pid=7647 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   84.270614][ T7648] netlink: 'syz.3.450': attribute type 49 has an invalid length.
[   84.287508][ T7648] bond0: (slave bond_slave_0): Releasing backup interface
[   84.303935][   T42] audit: type=1400 audit(1787727066.774:638): avc:  denied  { setattr } for  pid=7654 comm="syz.1.451" name="XDP" dev="sockfs" ino=22908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   84.359230][ T7648] bond_slave_0: entered promiscuous mode
[   84.361161][ T7648] bond_slave_0: entered allmulticast mode
[   84.365763][   T42] audit: type=1400 audit(1787727066.844:639): avc:  denied  { create } for  pid=7659 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.385899][   T42] audit: type=1400 audit(1787727066.854:640): avc:  denied  { bind } for  pid=7659 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.418352][   T42] audit: type=1400 audit(1787727066.894:641): avc:  denied  { setopt } for  pid=7659 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.454070][ T7661] tipc: Failed to remove unknown binding: 66,0,0/0:1117893387/1117893388
[   84.467763][ T7661] tipc: Failed to remove unknown binding: 66,0,0/0:1117893387/1117893388
[   84.472099][   T42] audit: type=1400 audit(1787727066.944:642): avc:  denied  { write } for  pid=7664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.575386][   T42] audit: type=1400 audit(1787727067.054:643): avc:  denied  { write } for  pid=7674 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.625235][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'.
[   84.685144][ T7683] jffs2: notice: (7683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   84.722373][ T7689] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[   84.768203][   T42] audit: type=1400 audit(1787727067.244:644): avc:  denied  { write } for  pid=7690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.919686][ T7705] overlayfs: failed to resolve './file0': -2
[   84.955755][ T7709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7709 comm=syz.4.461
[   84.986863][ T7711] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   84.998769][ T7715] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   85.063455][ T7719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.464'.
[   85.488371][ T7737] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[   85.605177][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.632312][ T7752] netlink: 'syz.2.474': attribute type 2 has an invalid length.
[   85.642304][ T7752] netlink: 232 bytes leftover after parsing attributes in process `syz.2.474'.
[   85.765795][ T7766] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   85.770053][ T7766] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   85.779899][ T7766] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[   85.805208][ T7768] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[   85.902436][ T7779] qnx4: no qnx4 filesystem (no root dir).
[   85.986351][ T7782] syzkaller0: entered promiscuous mode
[   85.988404][ T7782] syzkaller0: entered allmulticast mode
[   86.000548][ T7782] xt_hashlimit: size too large, truncated to 1048576
[   86.248940][ T7806] netlink: 'syz.1.487': attribute type 21 has an invalid length.
[   86.549682][ T7812] loop5: detected capacity change from 0 to 2640
[   86.568104][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read
[   86.574007][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read
[   86.577402][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read
[   86.581123][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read
[   86.593604][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read
[   86.606513][ T7812] Buffer I/O error on dev loop5, logical block 1, async page read
[   86.609273][ T7812] Dev loop5: unable to read RDB block 8
[   86.618175][ T7812] Buffer I/O error on dev loop5, logical block 3, async page read
[   86.622669][ T7812]  loop5: unable to read partition table
[   86.625339][ T7812] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[   86.628247][ T7813] Buffer I/O error on dev loop5, logical block 0, lost async page write
[   86.636866][ T5729] Buffer I/O error on dev loop5, logical block 3, async page read
[   87.168249][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   87.322508][    T9] usb 7-1: Using ep0 maxpacket: 8
[   87.334663][    T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   87.339421][    T9] usb 7-1: config 0 has no interfaces?
[   87.343865][    T9] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[   87.347350][    T9] usb 7-1: Product: syz
[   87.349225][    T9] usb 7-1: Manufacturer: syz
[   87.351162][    T9] usb 7-1: SerialNumber: syz
[   87.359949][    T9] usb 7-1: config 0 descriptor??
[   88.046958][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.487'.
[   88.051923][   T50] usb 7-1: USB disconnect, device number 4
[   88.057038][ T7810] vlan3: entered allmulticast mode
[   88.059564][ T7810] macsec0: entered allmulticast mode
[   88.095586][ T7824] ip6t_srh: unknown srh match flags  4000
[   88.160357][ T7832] syzkaller1: entered promiscuous mode
[   88.165084][ T7832] syzkaller1: entered allmulticast mode
[   88.207095][ T7837] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   88.218351][ T5728] Bluetooth: hci1: SCO packet for unknown connection handle 1
[   88.313294][ T1164] IPVS: starting estimator thread 0...
[   88.422332][ T7844] IPVS: using max 44 ests per chain, 105600 per kthread
[   88.662327][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   88.812256][    T9] usb 6-1: Using ep0 maxpacket: 8
[   88.815142][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   88.819322][    T9] usb 6-1: config 0 has no interfaces?
[   88.821029][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.828779][    T9] usb 6-1: config 0 descriptor??
[   89.041264][   T24] usb 6-1: USB disconnect, device number 6
[   97.107821][   T42] kauditd_printk_skb: 21 callbacks suppressed
[   97.107840][   T42] audit: type=1400 audit(1787727079.584:666): avc:  denied  { write } for  pid=7859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.155612][   T42] audit: type=1400 audit(1787727079.634:667): avc:  denied  { write } for  pid=7862 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.436813][ T7879] binder: 7873:7879 ioctl c0306201 2000000001c0 returned -22
[  110.438630][ T7878] Mount JFS Failure: -22
[  110.439189][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[  110.439220][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[  110.445135][   T42] audit: type=1400 audit(1787727092.914:668): avc:  denied  { write } for  pid=7873 comm="syz.3.502" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  110.445767][ T7878] jfs_mount failed w/return code = -22
[  110.553789][   T42] audit: type=1400 audit(1787727093.034:669): avc:  denied  { kexec_image_load } for  pid=7873 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  110.570401][   T42] audit: type=1400 audit(1787727093.044:670): avc:  denied  { create } for  pid=7888 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  110.627577][ T7883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.503'.
[  110.632701][   T42] audit: type=1400 audit(1787727093.114:671): avc:  denied  { ioctl } for  pid=7888 comm="syz.1.505" path="socket:[22002]" dev="sockfs" ino=22002 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  110.664170][   T42] audit: type=1400 audit(1787727093.114:672): avc:  denied  { unmount } for  pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  110.712701][ T7894] jffs2: notice: (7894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  110.724275][ T7894] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  110.726856][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  110.729635][ T7897] gretap1: entered promiscuous mode
[  110.734332][ T7894] vhci_hcd vhci_hcd.0: Device attached
[  110.738914][   T42] audit: type=1400 audit(1787727093.214:673): avc:  denied  { setattr } for  pid=7893 comm="syz.3.506" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.751543][ T7894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7894 comm=syz.3.506
[  110.833362][ T7915] netlink: 232 bytes leftover after parsing attributes in process `syz.1.510'.
[  110.838559][   T42] audit: type=1400 audit(1787727093.304:674): avc:  denied  { write } for  pid=7907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.854184][ T7899] XFS (nbd4): SB validate failed with error -5.
[  110.908203][   T42] audit: type=1400 audit(1787727093.384:675): avc:  denied  { write } for  pid=7919 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.953546][ T2319] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  110.986106][   T42] audit: type=1400 audit(1787727093.464:676): avc:  denied  { write } for  pid=7923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.031928][   T42] audit: type=1400 audit(1787727093.504:677): avc:  denied  { write } for  pid=7926 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.040172][ T7898] vhci_hcd: connection closed
[  111.040428][   T29] usb 44-1: SetAddress Request (2) to port 0
[  111.042517][ T6896] vhci_hcd vhci_hcd.3: stop threads
[  111.044499][   T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  111.047070][ T6896] vhci_hcd vhci_hcd.3: release socket
[  111.053288][ T6896] vhci_hcd vhci_hcd.3: disconnect device
[  111.062321][   T29] usb 44-1: enqueue for inactive port 0
[  111.103202][ T2319] usb 7-1: Using ep0 maxpacket: 8
[  111.105394][ T2319] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  111.109560][ T2319] usb 7-1: config 0 has no interfaces?
[  111.111549][ T2319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.117592][ T2319] usb 7-1: config 0 descriptor??
[  111.204802][ T5815] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  111.321920][ T2319] usb 7-1: USB disconnect, device number 5
[  111.382740][ T5815] usb 6-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  111.386924][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.394464][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  111.398710][ T5815] usb 6-1: Product: syz
[  111.400603][ T5815] usb 6-1: Manufacturer: syz
[  111.411413][ T5815] navman 6-1:1.0: navman converter detected
[  111.417352][ T5815] usb 6-1: navman converter now attached to ttyUSB0
[  111.462993][   T29] usb usb44-port1: attempt power cycle
[  111.569760][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'.
[  111.603822][ T7948] netlink: 'syz.3.514': attribute type 11 has an invalid length.
[  111.644031][ T5833] usb 6-1: USB disconnect, device number 7
[  111.674372][ T5833] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  111.678517][ T5833] navman 6-1:1.0: device disconnected

syzkaller
syzkaller login: [  112.042764][   T29] usb usb44-port1: unable to enumerate USB device
[  112.114242][ T7980] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in;
[  112.114242][ T7980]    program syz.3.523 not setting count and/or reply_len properly
[  112.238359][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'.
[  112.284746][ T7997] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  112.427296][ T8017] Driver unsupported XDP return value 0 on prog  (id 37) dev N/A, expect packet loss!
[  112.502298][   T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  112.662270][   T29] usb 7-1: Using ep0 maxpacket: 8
[  112.665102][   T29] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  112.668926][   T29] usb 7-1: config 0 has no interfaces?
[  112.670913][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.679159][   T29] usb 7-1: config 0 descriptor??
[  112.888055][ T5815] usb 7-1: USB disconnect, device number 6

syzkaller
syzkaller login: [  113.483516][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.536'.
[  113.510941][ T8029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8029 comm=syz.4.536
[  113.587217][ T8037] netlink: 'syz.4.539': attribute type 1 has an invalid length.
[  113.625944][ T8037] macvtap1: entered allmulticast mode
[  113.634331][ T8037] macvtap2: entered allmulticast mode
[  113.644728][ T8037] bond1: (slave bridge2): making interface the new active one
[  113.647956][ T8037] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  113.820339][ T8050] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=15934209 (31868418 ns) > initial count (16783362 ns). Using initial count to start timer.
[  113.822253][ T2319] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  114.012231][ T2319] usb 6-1: Using ep0 maxpacket: 8
[  114.017429][ T2319] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  114.023672][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.2.545'.
[  114.025280][ T2319] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  114.038203][ T2319] usb 6-1: config 0 has no interface number 0
[  114.042516][ T2319] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  114.052254][ T2319] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  114.062286][ T2319] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  114.072487][ T2319] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  114.076761][ T2319] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  114.083792][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.089462][ T2319] usb 6-1: config 0 descriptor??
[  114.102000][ T2319] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  114.262262][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  114.297405][ T8035] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  114.304966][ T8035] lapbether: lapb_data_request error - 4
[  114.352497][   T29] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  114.413203][    T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  114.418344][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.422468][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.425472][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.430443][    T9] usb 7-1: config 0 descriptor??
[  114.492453][   T29] usb 9-1: device descriptor read/64, error -71
[  114.733396][   T29] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  114.842887][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  114.844908][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  114.852050][    T9] usb 7-1: USB disconnect, device number 7
[  114.862755][   T29] usb 9-1: device descriptor read/64, error -71
[  114.895012][ T8074] trusted_key: encrypted_key: keyword 'u' not recognized
[  114.924616][ T2319] usb 6-1: USB disconnect, device number 8
[  114.937621][ T2319] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  114.964911][ T8078] kvm: kvm [8076]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40
[  114.984933][   T29] usb usb9-port1: attempt power cycle
[  115.258122][    T9] hid-generic 0005:0007:0009.0003: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  115.307831][ T8091] fido_id[8091]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[  115.333222][   T29] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  115.362713][ T2319] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  115.363510][   T29] usb 9-1: device descriptor read/8, error -71
[  115.457187][   T42] kauditd_printk_skb: 18 callbacks suppressed
[  115.457204][   T42] audit: type=1400 audit(1787727097.934:696): avc:  denied  { sqpoll } for  pid=8098 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  115.532389][ T2319] usb 6-1: Invalid ep0 maxpacket: 64
[  115.622424][   T29] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  115.641270][   T42] audit: type=1400 audit(1787727098.114:697): avc:  denied  { getattr } for  pid=8102 comm="syz.2.559" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  115.644030][   T29] usb 9-1: device descriptor read/8, error -71
[  115.672285][ T2319] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  115.755333][   T29] usb usb9-port1: unable to enumerate USB device
[  115.779894][   T42] audit: type=1400 audit(1787727098.254:698): avc:  denied  { connect } for  pid=8109 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  115.822264][ T2319] usb 6-1: Invalid ep0 maxpacket: 64
[  115.827154][ T2319] usb usb6-port1: attempt power cycle
[  116.019876][ T8128] netlink: 'syz.3.565': attribute type 1 has an invalid length.
[  116.023166][ T8128] netlink: 'syz.3.565': attribute type 4 has an invalid length.
[  116.026250][ T8128] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.565'.
[  116.030763][ T8128] netlink: 'syz.3.565': attribute type 1 has an invalid length.
[  116.034311][ T8128] netlink: 'syz.3.565': attribute type 4 has an invalid length.
[  116.036771][ T8128] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.565'.
[  116.103197][   T42] audit: type=1400 audit(1787727098.584:699): avc:  denied  { audit_write } for  pid=8129 comm="syz.3.566" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  116.143157][   T42] audit: type=1400 audit(1787727098.624:700): avc:  denied  { getopt } for  pid=8137 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  116.180809][ T8141] Invalid ELF header type: 0 != 1
[  116.182945][   T42] audit: type=1400 audit(1787727098.654:701): avc:  denied  { module_load } for  pid=8140 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  116.183889][ T2319] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  116.191899][ T8141] Invalid ELF header type: 3 != 1
[  116.203714][   T42] audit: type=1326 audit(1787727098.684:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.2.570" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86919e0d9 code=0x0
[  116.213156][ T2319] usb 6-1: Invalid ep0 maxpacket: 64
[  116.352695][ T2319] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  116.374020][ T2319] usb 6-1: Invalid ep0 maxpacket: 64
[  116.377329][ T2319] usb usb6-port1: unable to enumerate USB device
[  116.612402][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  116.763210][    T9] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  116.767399][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.773337][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  116.776415][    T9] usb 8-1: Product: syz
[  116.777919][    T9] usb 8-1: Manufacturer: syz
[  116.785272][    T9] hub 8-1:1.0: bad descriptor, ignoring hub
[  116.787592][    T9] hub 8-1:1.0: probe with driver hub failed with error -5
[  116.791450][    T9] navman 8-1:1.0: navman converter detected
[  116.798615][    T9] usb 8-1: navman converter now attached to ttyUSB0
[  117.037938][   T42] audit: type=1400 audit(1787727099.514:703): avc:  denied  { mount } for  pid=8150 comm="syz.3.572" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  117.046516][   T42] audit: type=1400 audit(1787727099.524:704): avc:  denied  { read } for  pid=8150 comm="syz.3.572" name="trace" dev="tracefs" ino=5075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  117.054141][   T42] audit: type=1400 audit(1787727099.524:705): avc:  denied  { open } for  pid=8150 comm="syz.3.572" path="/125/trace/trace" dev="tracefs" ino=5075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  117.099589][   T29] usb 8-1: USB disconnect, device number 3
[  117.137637][   T29] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  117.144757][   T29] navman 8-1:1.0: device disconnected
[  117.236520][ T8158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.319217][ T8167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  117.446265][ T8169] loop5: detected capacity change from 0 to 7
[  117.456699][ T8169] Dev loop5: unable to read RDB block 7
[  117.468735][ T8169]  loop5: unable to read partition table
[  117.471479][ T8169] loop5: partition table beyond EOD, truncated
[  117.475390][ T8169] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  117.580669][ T8176] binder: 8175:8176 ioctl c0306201 2000000001c0 returned -14
[  117.654325][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8179 comm=syz.3.580
[  118.014368][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[  118.040115][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[  118.045286][ T8203] netlink: 'syz.3.585': attribute type 1 has an invalid length.
[  118.050589][ T8203] nbd: error processing sock list
[  118.107858][ T8212] futex_wake_op: syz.2.586 tries to shift op by 144; fix this program
[  118.113545][ T8212] futex_wake_op: syz.2.586 tries to shift op by 144; fix this program
[  118.122491][ T8213] devpts: Bad value for 'max'
[  118.270270][ T8224] vlan2: entered allmulticast mode
[  118.275125][ T8224] macsec0: entered allmulticast mode
[  118.278301][ T8224] veth1_macvtap: entered allmulticast mode
[  118.288996][ T8224] loop5: detected capacity change from 0 to 7
[  118.305376][ T8224] Dev loop5: unable to read RDB block 7
[  118.307772][ T8224]  loop5: unable to read partition table
[  118.313411][ T8232] CUSE: unknown device info ""
[  118.315201][ T8224] loop5: partition table beyond EOD, truncated
[  118.324424][ T8224] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  118.334541][ T8224] Dev loop5: unable to read RDB block 7
[  118.336654][ T8224]  loop5: unable to read partition table
[  118.336957][ T8232] CUSE: unknown device info ""
[  118.339425][ T8224] loop5: partition table beyond EOD, 
[  118.342462][ T8232] CUSE: unknown device info ""
[  118.342646][ T8224] truncated
[  118.344226][ T8232] CUSE: unknown device info ""
[  118.350303][ T8232] CUSE: zero length info key specified
[  118.353539][ T8232] overlayfs: conflicting options: userxattr,redirect_dir=on
[  118.437318][ T8241] netlink: 'syz.2.594': attribute type 2 has an invalid length.
[  118.912276][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  118.938109][ T8300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.600'.
[  118.962490][ T5815] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  118.998717][ T8303] tipc: Started in network mode
[  119.000786][ T8303] tipc: Node identity 2000004, cluster identity 4711
[  119.003443][ T8303] tipc: Node number set to 33554436
[  119.073806][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  119.078573][    T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  119.082924][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.087030][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.091284][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  119.097101][    T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  119.101558][    T9] usb 7-1: Manufacturer: syz
[  119.105714][ T5815] usb 6-1: device descriptor read/64, error -71
[  119.108594][    T9] usb 7-1: config 0 descriptor??
[  119.372399][ T5815] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  119.513982][ T5815] usb 6-1: device descriptor read/64, error -71
[  119.526305][    T9] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[  119.538755][    T9] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  119.624682][ T5815] usb usb6-port1: attempt power cycle
[  119.698360][ T8331] smpboot: CPU 1 is now offline
[  119.769430][ T8336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.608'.
[  119.785942][ T8331] smpboot: CPU 3 is now offline
[  119.904842][ T2319] usb 7-1: USB disconnect, device number 8
[  119.921753][ T8338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.609'.
[  119.964152][ T5815] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  119.995335][ T5815] usb 6-1: device descriptor read/8, error -71
[  120.042807][ T8343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.611'.
[  120.045668][ T8340] vcan0 speed is unknown, defaulting to 1000
[  120.119285][ T8345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'.
[  120.199855][ T8340] lo speed is unknown, defaulting to 1000
[  120.232448][ T5815] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  120.253863][ T5815] usb 6-1: device descriptor read/8, error -71
[  120.363049][ T5815] usb usb6-port1: unable to enumerate USB device
[  120.484589][ T8350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63920 sclass=netlink_route_socket pid=8350 comm=syz.2.613
[  120.511243][ T8351] x_tables: duplicate underflow at hook 1
[  120.578609][ T8356] netlink: 104 bytes leftover after parsing attributes in process `syz.2.615'.
[  120.580251][ T8354] vcan0 speed is unknown, defaulting to 1000
[  120.938460][   T42] kauditd_printk_skb: 19 callbacks suppressed
[  120.938477][   T42] audit: type=1400 audit(1787727103.414:725): avc:  denied  { listen } for  pid=8366 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.960766][   T42] audit: type=1400 audit(1787727103.434:726): avc:  denied  { accept } for  pid=8366 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.989958][ T8354] lo speed is unknown, defaulting to 1000
[  121.167614][   T42] audit: type=1400 audit(1787727103.644:727): avc:  denied  { mounton } for  pid=8374 comm="syz.3.620" path="/140/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  121.187125][   T42] audit: type=1400 audit(1787727103.664:728): avc:  denied  { mount } for  pid=8374 comm="syz.3.620" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  122.007638][   T42] audit: type=1400 audit(1787727104.484:729): avc:  denied  { create } for  pid=8385 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  122.025288][   T42] audit: type=1400 audit(1787727104.504:730): avc:  denied  { bind } for  pid=8385 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  122.173985][ T8401] overlayfs: empty lowerdir
[  122.185300][   T42] audit: type=1400 audit(1787727104.654:731): avc:  denied  { mounton } for  pid=8400 comm="syz.4.626" path="/file0" dev="ramfs" ino=25060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  122.194153][ T8399] netlink: 'syz.1.627': attribute type 10 has an invalid length.
[  122.201336][ T8399] ipvlan0: entered allmulticast mode
[  122.207257][ T8399] veth0_vlan: entered allmulticast mode
[  122.219445][ T8399] team0: Device ipvlan0 failed to register rx_handler
[  122.231778][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.627'.
[  122.340078][ T8405] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock
[  122.523827][ T8409] trusted_key: encrypted_key: master key parameter '' is invalid
[  122.542381][   T50] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  122.606215][   T42] audit: type=1400 audit(1787727105.084:732): avc:  denied  { remount } for  pid=8406 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  122.693810][   T50] usb 9-1: Using ep0 maxpacket: 8
[  122.697950][   T50] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  122.707774][   T50] usb 9-1: config 0 has no interfaces?
[  122.713648][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.735591][   T50] usb 9-1: config 0 descriptor??
[  122.778964][ T8413] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(131076.67136256.268435456), cmd(12)
[  122.883050][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'.
[  122.940144][ T8415] xfrm1: entered promiscuous mode
[  122.949198][ T8415] xfrm1: entered allmulticast mode
[  122.960383][   T50] usb 9-1: USB disconnect, device number 7
[  123.077106][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'.
[  123.093637][ T8420] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  123.541540][   T42] audit: type=1400 audit(1787727106.014:733): avc:  denied  { read } for  pid=8432 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  123.558589][   T42] audit: type=1400 audit(1787727106.024:734): avc:  denied  { write } for  pid=8432 comm="syz.4.637" path="socket:[25109]" dev="sockfs" ino=25109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  123.947498][ T8444] syzkaller0: entered promiscuous mode
[  123.952353][ T8444] syzkaller0: entered allmulticast mode
[  124.022540][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  124.172588][   T10] usb 7-1: Using ep0 maxpacket: 32
[  124.176361][   T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  124.181295][   T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  124.189313][   T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  124.199392][   T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.205389][   T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  124.217194][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.222863][   T10] usb 7-1: Product: syz
[  124.226522][   T10] usb 7-1: Manufacturer: syz
[  124.229135][   T10] usb 7-1: SerialNumber: syz
[  124.284516][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  124.315799][   T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input10
[  124.482800][   T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  124.491786][   T10]  (id 0x00)
[  124.515410][ T5815] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  124.528943][ T8461] NILFS (nbd1): device size too small
[  124.563310][   T10] rc_core: IR keymap rc-imon-pad not found
[  124.565439][   T10] Registered IR keymap rc-empty
[  124.567029][   T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  124.570152][   T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  124.672319][ T5815] usb 9-1: Using ep0 maxpacket: 8
[  124.684443][ T5815] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  124.687803][   T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0
[  124.694659][ T5815] usb 9-1: config 0 has no interfaces?
[  124.698026][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.701441][   T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input11
[  124.712943][ T5815] usb 9-1: config 0 descriptor??
[  124.771838][   T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:9> initialized
[  124.885214][ T5815] usb 7-1: USB disconnect, device number 9
[  124.939329][ T2319] usb 9-1: USB disconnect, device number 8
[  125.091273][ T8437] netlink: 96 bytes leftover after parsing attributes in process `syz.2.638'.
[  125.136226][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  125.273822][   T10] usb 6-1: device descriptor read/64, error -71
[  125.512529][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  125.642904][   T10] usb 6-1: device descriptor read/64, error -71
[  125.724390][ T8481] ip_tables: iptables: counters copy to user failed while replacing table
[  125.728034][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'.
[  125.731574][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'.
[  125.752699][   T10] usb usb6-port1: attempt power cycle
[  125.838599][ T8487] xt_l2tp: invalid flags combination: c
[  125.996331][ T8495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=332 sclass=netlink_xfrm_socket pid=8495 comm=syz.4.654
[  126.102799][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  126.123030][   T10] usb 6-1: device descriptor read/8, error -71
[  126.165896][ T8500] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  126.362936][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  126.385412][   T10] usb 6-1: device descriptor read/8, error -71
[  126.390317][ T8511] IPv6: syztnl0: Disabled Multicast RS
[  126.493182][   T10] usb usb6-port1: unable to enumerate USB device
[  126.543737][   T50] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  126.694462][   T50] usb 7-1: Using ep0 maxpacket: 8
[  126.696936][   T50] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  126.700235][   T50] usb 7-1: config 0 has no interfaces?
[  126.702029][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.711484][   T50] usb 7-1: config 0 descriptor??
[  126.798602][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.667'.
[  126.828090][ T1164] Bluetooth: hci4: Frame reassembly failed (-90)
[  126.917900][   T50] usb 7-1: USB disconnect, device number 10
[  127.574524][ T8546] pim6reg1: entered promiscuous mode
[  127.577062][ T8546] pim6reg1: entered allmulticast mode
[  127.698347][   T42] kauditd_printk_skb: 17 callbacks suppressed
[  127.698358][   T42] audit: type=1400 audit(1787727110.174:752): avc:  denied  { ioctl } for  pid=8549 comm="syz.2.672" path="socket:[25586]" dev="sockfs" ino=25586 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  127.930960][ T8559] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  128.175871][ T8568] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00
[  128.180196][ T8568] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  128.183213][ T8568] raw: 00fff00000000000 ffffea00013f8008 ffffea00013f8008 0000000000000000
[  128.186220][ T8568] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  128.189589][ T8568] page dumped because: unmovable page
[  128.191590][ T8568] page_owner tracks the page as allocated
[  128.195564][   T42] audit: type=1400 audit(1787727110.674:753): avc:  denied  { read } for  pid=5116 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  128.196941][ T8568] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 6869, tgid 6869 (syz-executor), ts 68704056717
[  128.209544][ T8568]  post_alloc_hook+0xfd/0x120
[  128.211446][ T8568]  get_page_from_freelist+0x110d/0x35b0
[  128.211714][   T42] audit: type=1400 audit(1787727110.674:754): avc:  denied  { search } for  pid=5116 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.219293][ T8568]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  128.222043][ T8568]  alloc_pages_mpol+0x201/0x550
[  128.224122][ T8568]  alloc_pages_noprof+0x1a/0x160
[  128.226622][ T8568]  __vmalloc_node_range_noprof+0xdcc/0x1460
[  128.228481][ T8568]  vmalloc_user_noprof+0x9e/0xe0
[  128.230155][ T8568]  kcov_ioctl+0x4d/0x760
[  128.231481][ T8568]  __x64_sys_ioctl+0x18e/0x210
[  128.231892][   T42] audit: type=1400 audit(1787727110.674:755): avc:  denied  { write search } for  pid=5116 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.235573][ T8568]  do_syscall_64+0x123/0x790
[  128.241576][ T8568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.245207][ T8568] page last free pid 5718 tgid 5718 ts 68606391936 stack trace:
[  128.247557][ T8568]  free_pages_prepare+0x586/0xe00
[  128.249166][ T8568]  __free_contig_range_common+0x14f/0x250
[  128.251034][ T8568]  free_pages_bulk+0x12a/0x200
[  128.252205][   T42] audit: type=1400 audit(1787727110.674:756): avc:  denied  { add_name } for  pid=5116 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.253555][ T8568]  vm_area_free_pages+0xad/0x2b0
[  128.259299][   T42] audit: type=1400 audit(1787727110.674:757): avc:  denied  { create } for  pid=5116 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  128.260808][ T8568]  vfree+0x108/0x730
[  128.273135][   T42] audit: type=1400 audit(1787727110.674:758): avc:  denied  { append open } for  pid=5116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  128.281102][ T8568]  kcov_close+0x34/0x60
[  128.286253][ T8568]  __fput+0x3ff/0xb50
[  128.287721][   T42] audit: type=1400 audit(1787727110.674:759): avc:  denied  { getattr } for  pid=5116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  128.298854][ T8568]  task_work_run+0x150/0x240
[  128.301178][ T8569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=8569 comm=syz.1.678
[  128.307431][ T8568]  do_exit+0x951/0x2ae0
[  128.309544][ T8568]  do_group_exit+0xd5/0x2a0
[  128.311166][ T8568]  __x64_sys_exit_group+0x3e/0x50
[  128.313280][ T8568]  x64_sys_call+0x1567/0x1570
[  128.314857][ T8568]  do_syscall_64+0x123/0x790
[  128.316437][ T8568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.411332][ T8574] /dev/sg0: Can't lookup blockdev
[  128.516091][   T42] audit: type=1400 audit(1787727110.994:760): avc:  denied  { read } for  pid=8579 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  128.622251][ T1480] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  128.774443][   T42] audit: type=1400 audit(1787727111.254:761): avc:  denied  { setopt } for  pid=8571 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  128.784905][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.791172][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.797294][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.801334][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.805131][ T1480] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  128.812880][ T1480] usb 6-1: unable to read config index 0 descriptor/start: -71
[  128.822243][ T1480] usb 6-1: can't read configurations, error -71
[  128.852317][ T5735] Bluetooth: hci4: command 0x1003 tx timeout
[  128.852347][ T5728] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  128.944991][   T37] rpcbind: server 127.0.0.1 not responding, timed out
[  129.055212][ T8594] Bluetooth: MGMT ver 1.23
[  129.103913][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.687'.
[  129.268141][ T8606] bond0: (slave ip_vti0): Error: Device can not be enslaved while up
[  129.425423][ T8617] ip_tables: iptables: counters copy to user failed while replacing table
[  129.452878][ T8620] 9pnet_virtio: no channels available for device syz
[  131.101977][ T8627] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  131.159767][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.171623][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.176485][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.179981][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.182778][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.276058][ T8643] netlink: 484 bytes leftover after parsing attributes in process `syz.1.699'.
[  131.586506][ T8630] vcan0 speed is unknown, defaulting to 1000
[  131.687014][ T8675] netlink: 48 bytes leftover after parsing attributes in process `syz.4.707'.
[  131.744132][ T1480] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  131.821215][ T8630] lo speed is unknown, defaulting to 1000
[  131.903960][ T1480] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  131.909926][ T1480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.945152][ T1480] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 023
[  132.255554][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.258604][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.261543][ T8630] bridge_slave_0: entered allmulticast mode
[  132.267924][ T8630] bridge_slave_0: entered promiscuous mode
[  132.272831][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.275738][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.278649][ T8630] bridge_slave_1: entered allmulticast mode
[  132.283216][ T8630] bridge_slave_1: entered promiscuous mode
[  132.323615][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.328220][ T1480]  (null): failure reading functionality
[  132.338688][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.344063][ T1480] i2c i2c-2: failure reading functionality
[  132.353662][ T8691] 
@0Ù: renamed from bond_slave_1 (while UP)
[  132.370937][ T1480] i2c i2c-2: connected i2c-tiny-usb device
[  132.444000][ T8630] team0: Port device team_slave_0 added
[  132.456179][ T8630] team0: Port device team_slave_1 added
[  132.498766][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.502868][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.515424][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.520129][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.522673][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.531621][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.572417][ T8630] hsr_slave_0: entered promiscuous mode
[  132.575967][ T8630] hsr_slave_1: entered promiscuous mode
[  132.578336][ T8630] debugfs: 'hsr0' already exists in 'hsr'
[  132.580293][ T8630] Cannot create hsr debugfs directory
[  132.622816][ T1480] usb 6-1: USB disconnect, device number 23
[  132.625326][ T8669] i2c i2c-2: failure reading status
[  132.636471][ T8669] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5
[  132.649573][ T8669] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI
[  132.653281][ T8669] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147]
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  132.655991][ T8669] CPU: 0 UID: 0 PID: 8669 Comm: syz.1.704 Not tainted syzkaller #0 PREEMPT(full) 
[  132.659573][ T8669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  132.663149][ T8669] RIP: 0010:kasan_byte_accessible+0x15/0x30
[  132.664996][ T8669] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00
[  132.670924][ T8669] RSP: 0018:ffffc900031df530 EFLAGS: 00010286
[  132.672845][ T8669] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  132.675476][ T8669] RDX: 0000000000000000 RSI: ffffffff81e58a44 RDI: dffffc0000000028
[  132.678178][ T8669] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000
[  132.680823][ T8669] R10: ffff88803c38fca3 R11: 0000000000000000 R12: ffffffff81e58a44
[  132.683376][ T8669] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000
[  132.685958][ T8669] FS:  00007f76a6b0c6c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000
[  132.689583][ T8669] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.692432][ T8669] CR2: 00007f8b4c896d58 CR3: 00000000130e0000 CR4: 0000000000352ef0
[  132.695195][ T8669] Call Trace:
[  132.696542][ T8669]  <TASK>
[  132.697686][ T8669]  __kasan_check_byte+0x13/0x50
[  132.699540][ T8669]  lock_acquire+0x132/0x370
[  132.701125][ T8669]  ? __pfx___might_resched+0x10/0x10
[  132.702850][ T8669]  down_write_nested+0x94/0x200
[  132.704405][ T8669]  ? __simple_recursive_removal+0x7f/0x5c0
[  132.706235][ T8669]  ? __pfx_down_write_nested+0x10/0x10
[  132.707974][ T8669]  ? __simple_recursive_removal+0x3d/0x5c0
[  132.709814][ T8669]  ? do_raw_spin_unlock+0x145/0x1e0
[  132.711443][ T8669]  __simple_recursive_removal+0x7f/0x5c0
[  132.713462][ T8669]  ? __pfx_remove_one+0x10/0x10
[  132.715346][ T8669]  ? mntput+0x70/0xa0
[  132.716770][ T8669]  debugfs_remove+0x5d/0x80
[  132.718278][ T8669]  i2c_device_probe+0x6e2/0xd10
[  132.719841][ T8669]  ? kernfs_put+0x3f/0x60
[  132.721201][ T8669]  ? __pfx_i2c_device_probe+0x10/0x10
[  132.722872][ T8669]  ? sysfs_create_link+0x68/0xc0
[  132.724426][ T8669]  ? __pfx_i2c_device_probe+0x10/0x10
[  132.726093][ T8669]  really_probe+0x241/0xa60
[  132.727578][ T8669]  __driver_probe_device+0x210/0x460
[  132.729241][ T8669]  ? i2c_of_match_device+0x45/0x170
[  132.730975][ T8669]  driver_probe_device+0x4a/0x140
[  132.732740][ T8669]  __device_attach_driver+0x1df/0x320
[  132.734753][ T8669]  ? __pfx___device_attach_driver+0x10/0x10
[  132.737042][ T8669]  bus_for_each_drv+0x159/0x1e0
[  132.738790][ T8669]  ? __pfx_bus_for_each_drv+0x10/0x10
[  132.740724][ T8669]  ? lockdep_hardirqs_on+0x7d/0x110
[  132.742341][ T8669]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  132.744142][ T8669]  __device_attach+0x1e4/0x4d0
[  132.745631][ T8669]  ? __pfx___device_attach+0x10/0x10
[  132.747283][ T8669]  ? do_raw_spin_unlock+0x145/0x1e0
[  132.748912][ T8669]  device_initial_probe+0xaf/0xd0
[  132.750482][ T8669]  bus_probe_device+0x64/0x160
[  132.751939][ T8669]  device_add+0x121d/0x1970
[  132.753383][ T8669]  ? __pfx_device_add+0x10/0x10
[  132.754904][ T8669]  ? lockdep_init_map_type+0x5c/0x250
[  132.756676][ T8669]  ? __init_waitqueue_head+0xca/0x150
[  132.758359][ T8669]  i2c_new_client_device+0x660/0xd30
[  132.760061][ T8669]  new_device_store+0x20f/0x420
[  132.761652][ T8669]  ? __lock_acquire+0x4c5/0x1ec0
[  132.763253][ T8669]  ? __pfx_new_device_store+0x10/0x10
[  132.765017][ T8669]  ? find_held_lock+0x2b/0x80
[  132.766508][ T8669]  ? sysfs_file_kobj+0xe4/0x290
[  132.768021][ T8669]  ? sysfs_file_kobj+0xe4/0x290
[  132.769549][ T8669]  ? __pfx_new_device_store+0x10/0x10
[  132.771174][ T8669]  dev_attr_store+0x58/0x80
[  132.772606][ T8669]  ? __pfx_dev_attr_store+0x10/0x10
[  132.774364][ T8669]  sysfs_kf_write+0xf2/0x150
[  132.775978][ T8669]  kernfs_fop_write_iter+0x3e0/0x5f0
[  132.777881][ T8669]  ? __pfx_sysfs_kf_write+0x10/0x10
[  132.779726][ T8669]  vfs_write+0x6af/0x1050
[  132.781090][ T8669]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  132.782890][ T8669]  ? __pfx_vfs_write+0x10/0x10
[  132.784454][ T8669]  ? find_held_lock+0x2b/0x80
[  132.785936][ T8669]  ksys_write+0x12a/0x250
[  132.787310][ T8669]  ? __pfx_ksys_write+0x10/0x10
[  132.788844][ T8669]  do_syscall_64+0x123/0x790
[  132.790249][ T8669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.792034][ T8669] RIP: 0033:0x7f76a5b9e0d9
[  132.793516][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.800360][ T8669] RSP: 002b:00007f76a6b0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.803147][ T8669] RAX: ffffffffffffffda RBX: 00007f76a5e25fa0 RCX: 00007f76a5b9e0d9
[  132.805578][ T8669] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000005
[  132.808029][ T8669] RBP: 00007f76a5c35024 R08: 0000000000000000 R09: 0000000000000000
[  132.810500][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.812915][ T8669] R13: 00007f76a5e26038 R14: 00007f76a5e25fa0 R15: 00007ffe08e2ab28
[  132.815400][ T8669]  </TASK>
[  132.816573][ T8669] Modules linked in:
[  132.819125][ T8669] ---[ end trace 0000000000000000 ]---
[  132.840538][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  132.842779][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  132.867971][ T8630] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  132.870319][ T8669] RIP: 0010:kasan_byte_accessible+0x15/0x30
[  132.872361][ T8669] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00
[  132.878620][ T8669] RSP: 0018:ffffc900031df530 EFLAGS: 00010286
[  132.897769][ T8669] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  132.900529][ T8669] RDX: 0000000000000000 RSI: ffffffff81e58a44 RDI: dffffc0000000028
[  132.913726][ T8669] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000
[  132.919610][ T8630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  132.948884][ T8669] R10: ffff88803c38fca3 R11: 0000000000000000 R12: ffffffff81e58a44
[  132.951363][ T8669] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000
[  132.963906][ T8669] FS:  00007f76a6b0c6c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000
[  132.967982][ T8669] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.970588][ T8669] CR2: 00007f3b853535c0 CR3: 00000000130e0000 CR4: 0000000000352ef0
[  133.003140][ T8669] Kernel panic - not syncing: Fatal exception
[  133.005734][ T8669] Kernel Offset: disabled
[  133.007112][ T8669] Rebooting in 86400 seconds..