last executing test programs:

1m3.231731015s ago: executing program 3 (id=55):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="000100000202000020"], 0x40}, 0x1, 0x0, 0x0, 0x24044042}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
modify_ldt$write(0x1, &(0x7f00000001c0)={0xfa, 0xffffffffdfffe7ff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$key(0xf, 0x3, 0x2)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = io_uring_setup(0x669, &(0x7f00000002c0))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x11, 0x0, r6, 0x1, &(0x7f00000005c0)="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", 0x1025, 0x2, 0x0, {0x0, r7}})
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0)
modify_ldt$write2(0x11, &(0x7f00000002c0)={0x8, 0x100000, 0x400, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0)
r11 = creat(&(0x7f0000000580)='./file0\x00', 0x0)
fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x8, 0x1b, r11, 0x0)
sendmsg$AUDIT_GET(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x3e8, 0x2, 0x70bd2a, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ptrace(0x10, r10)
ptrace$setregs(0xd, r10, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
mount_setattr(r11, &(0x7f0000000380)='./file0\x00', 0x1000, &(0x7f0000000480)={0x5, 0x1000f0, 0x0, {r11}}, 0x20)
socket$inet6(0xa, 0x3, 0x2f)

1m2.392790672s ago: executing program 3 (id=72):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) (async)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) (async)
setrlimit(0x8, &(0x7f0000000380)) (async, rerun: 64)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0, 0x1})
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) (async, rerun: 64)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1004000}) (async, rerun: 64)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x2, r1, 0x0, &(0x7f0000947000/0x3000)=nil, 0x3000, 0x1}) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r5, 0xf745000) (async)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'dmm32at\x00', [0x5c22, 0x3, 0x1, 0x0, 0xffff, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5e, 0x2, 0x3d, 0x403, 0x6, 0x7, 0x1, 0x1a449, 0x3, 0x40400003, 0x100089, 0x7fff, 0xb27, 0x5, 0x7fff, 0x10001, 0x2, 0x8, 0x8, 0x9]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) (async)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xfffffffffffffffe}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})

1m2.303405843s ago: executing program 3 (id=74):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "cda963672ee24a6b", "64af8fffaa3bc592f475dcbb27908196133a25c51342d62213dc8bd9d9e0f81e", "3241ef96", "21af4d74ad058d19"}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d730000000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x26, 0x0, &(0x7f00000006c0)="e460cdfbef2408002900119343056a0f000000072beb3014cd3ec8a755c1e1380081ffad0004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @local}, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="05d0a917af54b8bafae5d85d50a3bb5f883a2ae01da416641e1b8176dd160b5741baaf276241101130896cd74e086a220bd186c0e45659f805045985176bc88a7bc67e34381644d42dcf789a1ade17c3788135911d8192064082fc269875d662b6da131d88cd285f7b3b562711e7bead364cea0973268b61eab5126105c50a6245bb08ec7f595607374a30aabec9b1d1695392afa0e4679a938e4340908247453db811c3ae1bc121ebc4b7e3086fd323104837af896351caed2533ce08332b2cb9179cab384b45cc6afbd84ba6279b798369a7f3ab4643df3281276612", 0xdd}], 0x1, &(0x7f00000001c0)=[{0x80, 0x108, 0x1, "3d6ca6cab77aee9839a13fb4f334b1c7cc0bb9b4eacc17f8bcbd9827a65bf346499edf67a55909ab08e37939b176e04d9132ee5959258561491d5dbd8062c7dc722cd6d38dc4b12a962a18b7d1d3fa7dfa0f6e892b692700fcd6f15afe0f74b62a5bb5c0fb7a9341b3a8f955de66e1"}], 0x80}, 0x800)

1m2.298258586s ago: executing program 3 (id=76):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
setfsgid(0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="66043d", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r2, @ANYBLOB=',group_id=', @ANYRESOCT=r3])
read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100001, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$nfs(&(0x7f0000000340)='$)\x00', &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0), 0x102012, &(0x7f0000000600)={[{'\'-u]%'}, {'\x00'}, {'+[@:-/\\!'}, {'/dev/rnullb0\x00'}, {'('}, {}, {'proc\x00'}, {'/dev/nullb0\x00'}], [{@fowner_gt={'fowner>', r5}}]})
mount(&(0x7f0000000240)=@rnullb, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='proc\x00', 0x34010, &(0x7f0000000300)='/dev/loop#\x00')
setns(r3, 0x64020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8100, &(0x7f0000001dc0)={0x88, 0x77, 0x80000}, 0x20)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x20, 0x4, "7da5ffbc77de3083e102d42a3c3e8295b60defddf4ec34caf5578a619335e6b6de1f7688d5a87deb95393d2ed728108ce692ec1bd6d88494e57ac1df562aaa6f", "4e4adeb6b27fa098dab83d4b2afcb0362aaf780b0b61f3075bb5fcf708c92e49", [0xfffffffffffffff0, 0x10000]})

1m2.122672551s ago: executing program 3 (id=77):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0x1f, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x10, 0x2070bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20044081)

1m1.582534004s ago: executing program 3 (id=85):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000006000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00a<\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x1000, &(0x7f0000006000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000326291c42ebbcbf0"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f015b95b947020000c4c3f97ebf0800000000ba000000000f300f01cf640f4d30f2f267f23e0f2053c4c3397960ff1666baf80cb85cb52783ef66bafc0ced676526f30f166500c7442402da9e15f8c7442406000000000f011c2464660f388036b8d50000000f23d80f21f835400000700f23f8"}], 0x1, 0x1, 0x0, 0x67935ce692943673)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0xfffffffd, 0x1, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd91f807150b572803517076db9ad1fae9c2422504a94a0d81ec2757d0386e7d95f0669b740a5418d690800", 0x10000000000004}, 0x60)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
bind$can_raw(r10, &(0x7f00000001c0)={0x1d, r11}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
ioctl$SIOCGSTAMP(r10, 0x8906, 0x0)
sendmsg$can_raw(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x1, 0x0, 0x0, "4d2f25b09cd07197"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
read(r10, &(0x7f0000002340)=""/232, 0xe8)

1m1.555700795s ago: executing program 32 (id=85):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000006000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00a<\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x1000, &(0x7f0000006000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000326291c42ebbcbf0"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f015b95b947020000c4c3f97ebf0800000000ba000000000f300f01cf640f4d30f2f267f23e0f2053c4c3397960ff1666baf80cb85cb52783ef66bafc0ced676526f30f166500c7442402da9e15f8c7442406000000000f011c2464660f388036b8d50000000f23d80f21f835400000700f23f8"}], 0x1, 0x1, 0x0, 0x67935ce692943673)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0xfffffffd, 0x1, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd91f807150b572803517076db9ad1fae9c2422504a94a0d81ec2757d0386e7d95f0669b740a5418d690800", 0x10000000000004}, 0x60)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
bind$can_raw(r10, &(0x7f00000001c0)={0x1d, r11}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
ioctl$SIOCGSTAMP(r10, 0x8906, 0x0)
sendmsg$can_raw(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x1, 0x0, 0x0, "4d2f25b09cd07197"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
read(r10, &(0x7f0000002340)=""/232, 0xe8)

2.622460957s ago: executing program 0 (id=868):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0xc, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x9}]}}}]}, 0x3c}}, 0x4004)
unshare(0x2a020400)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x490, &(0x7f00000000c0)='%\x00')
syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.621502044s ago: executing program 0 (id=870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x4}, 0x16, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.562772808s ago: executing program 0 (id=872):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x9})
close(r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', @remote})
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r6, 0x0, 0x0, 0xffff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r7, 0x3, 0xa9, 0x8000c5f)
r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200080)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="1400000013000149993dde440113e90006"], 0x14}], 0x1}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r10, 0x0)
recvmmsg(r10, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x43e)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0407"], 0x102)
sendto$packet(r5, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xff}, 0x14)

2.455458627s ago: executing program 0 (id=874):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r5, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000)
ioctl$CEC_ADAP_G_CAPS(r6, 0xc04c6100, &(0x7f0000000080))
write$tun(r0, &(0x7f0000000b00)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r7 = socket$xdp(0x2c, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}})
r9 = syz_open_dev$audion(&(0x7f00000000c0), 0x8000000000000001, 0x200802)
mmap$panthor(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x1, 0x8010, r9, 0x2)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2.102523451s ago: executing program 0 (id=883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x20000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r4)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xcb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x2, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x6c6]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x4801)
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r6, &(0x7f0000000040)=""/138, 0x8a)

2.012718283s ago: executing program 0 (id=885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x1, 0x8, 0xf, 0x2, {{0x18, 0x4, 0x1, 0x3, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xf, "91a030c6e23e36e038a7a22ec4"}, @lsrr={0x83, 0x7, 0x6e, [@multicast1]}, @lsrr={0x83, 0xb, 0x5, [@dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x27, 0x27, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x174, 0x13, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1f, 0x0, 0x9c, 0x7, {0x4e22, 0x4e23, [0x7f, 0xe3b3, 0x3, 0x7ff], [0x0, 0x7, 0x25854143], r3, [0xb, 0x2]}, 0x1ff, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "865415661e04fd27e3557aa39466e3004bc3f3a4d39062a64dc0a19a71e72a91cb495890ff7e0072facebdcba7f1d11dc47ab04cb9487ba1f3a7780d9aec20937be08dc77d150ff18b24e389a793a909c2116f881bada7e7655796778c3cd0896ab3e91ccccdaa6ee88539a6430587778d6b4f4a056f0ff604ff3b976a8fdf9886ca5febecc3da3dad5aebe13193c91eb29679d0229c03ed5923b00b82a60da5c3ee3fa0f91c642d2e1565a740a755d0deeb872c454594ae01"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "e26879815a12a120123978d948dba5fa126155a86ed1b14e4f8fd25414a70ebc5233c4c8ec1e1f01f5d437114bc275065a985ba1e35c82d21aa4a351b0ff65243c07ca6aabecd69707aab71814d45f1004137d05b0917097ac78bb6da0b203b6c585"}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x8041) (async)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x174, 0x13, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1f, 0x0, 0x9c, 0x7, {0x4e22, 0x4e23, [0x7f, 0xe3b3, 0x3, 0x7ff], [0x0, 0x7, 0x25854143], r3, [0xb, 0x2]}, 0x1ff, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "865415661e04fd27e3557aa39466e3004bc3f3a4d39062a64dc0a19a71e72a91cb495890ff7e0072facebdcba7f1d11dc47ab04cb9487ba1f3a7780d9aec20937be08dc77d150ff18b24e389a793a909c2116f881bada7e7655796778c3cd0896ab3e91ccccdaa6ee88539a6430587778d6b4f4a056f0ff604ff3b976a8fdf9886ca5febecc3da3dad5aebe13193c91eb29679d0229c03ed5923b00b82a60da5c3ee3fa0f91c642d2e1565a740a755d0deeb872c454594ae01"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "e26879815a12a120123978d948dba5fa126155a86ed1b14e4f8fd25414a70ebc5233c4c8ec1e1f01f5d437114bc275065a985ba1e35c82d21aa4a351b0ff65243c07ca6aabecd69707aab71814d45f1004137d05b0917097ac78bb6da0b203b6c585"}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x8041)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010a4c000000090a010400000000000000000a0000040800073433cb1632c8dcf1000f08000540000000020900020073797a310000000008000a40fffffffc0c00098008030000000001010800084000000001140000001100010000000000040000000100000a000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$packet(0x11, 0x3, 0x300)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x2, 0x8000006, 0x0, 0x87, 0xffffffff, 0x7ff})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0) (async)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) (async)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r7, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14)
sendto$packet(r4, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x8004, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendto$packet(r4, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x8004, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})

762.806996ms ago: executing program 2 (id=911):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e657665"], 0x6c}}, 0x40)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

760.010767ms ago: executing program 2 (id=913):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x406026) (async)
mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
fcntl$setstatus(r3, 0x4, 0x42000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b40), 0x80c82, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r4, 0x5394, &(0x7f0000000b80)) (async, rerun: 32)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

671.576303ms ago: executing program 2 (id=914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]})
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
openat$cgroup_pressure(r4, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x60, 0x9, 0x7, {0x7, 0x30, "4bbd56d8b3"}}, 0x0, &(0x7f0000000480), 0x0}, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b02, 0x0)
fchdir(r4)
r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r9, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4)
bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r9, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000540)='./file1\x00', r8}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r7, 0x1, 0xa)
fchdir(r10)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)={{0x7f, 0xe}, {0xe983}, 0x3f})

481.898935ms ago: executing program 4 (id=919):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r0=>0x0})
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r0, 0x2, r1, 0x60000, 0x80000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94)

412.925995ms ago: executing program 4 (id=920):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = semget$private(0x0, 0x7, 0x180)
semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0xf0ff, @local, 0x2}, 0x1c)
r3 = accept$nfc_llcp(r2, 0x0, &(0x7f0000000940))
getsockopt$sock_buf(r3, 0x1, 0x19, &(0x7f0000000a40)=""/228, &(0x7f0000000280)=0xe4)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'veth1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x88, 0x0, 0x10}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x1, 0x76, 0xb75e, 0x5a3e, 0x4, 0x1c}}, @common=@inet=@multiport={{0x50}, {0x0, 0x40, [0x0, 0xffff, 0x0, 0x4e25, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xdf]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa52531e464ddd335, 0x0, 0xfffffffd, 0x3, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {0xff}, 0x5c, 0x1, 0x14}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="cb160002f1000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)

302.709468ms ago: executing program 1 (id=921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404004d}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x32, 0x20, 0x70bd28, 0x25dfdbfc, {0x6}, [@typed={0xc, 0x30, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40800)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0xff, {{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0x6, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e23, @broadcast}}]}, 0x390)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x40, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0x40}}, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108)

302.211668ms ago: executing program 1 (id=922):
r0 = userfaultfd(0x801)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110})
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000fed000/0x13000)=nil, &(0x7f0000e33000/0x1000)=nil, 0x13000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4b}]}, 0x60}, 0x1, 0x0, 0x0, 0x8008044}, 0x20040044)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000019c0), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001a00)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)

242.900239ms ago: executing program 1 (id=923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0)

241.822173ms ago: executing program 4 (id=924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r2, 0x101}], 0x1, 0xffffffbf)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000580)={0x0, 0xfffff78a, 0x2, {0x5, @vbi={0x5, 0x0, 0x1, 0x433417f444099b9e, [0x0, 0xffeffffc], [0x8200], 0x1}}})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x0, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)

241.140631ms ago: executing program 1 (id=925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030540008000ffdbdf250218e4ff", @ANYRES32=r8, @ANYBLOB="080002007f00000114"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030540008000ffdbdf250218e4ff", @ANYRES32=r8, @ANYBLOB="080002007f00000114"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) (async)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async)

172.882149ms ago: executing program 4 (id=926):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc117c000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(r3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000580)={<r6=>r5, @in={{0x2, 0x4e23, @private=0xa010102}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0xb}, 0x8)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1401, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x200400c0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x80}, 0x0)

169.450612ms ago: executing program 1 (id=927):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './bus\x00'}) (async)
r1 = semget$private(0x0, 0x0, 0x201)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r2=>0x0)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000180)={{0x0, r2, 0x0, 0x0, 0x0, 0x83, 0x180}, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) (async)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000000100)) (async)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')

121.00066ms ago: executing program 1 (id=928):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
write$char_usb(r2, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0xa3f3, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x3, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x5725, 0x9, 0x80, 0xfffffffd, 0x1, 0x9, 0xb13285ce, 0x8b, 0xcaa9, 0x1, 0x20001e58, 0x4bd, 0x1, 0x39, 0x8, 0x100006, 0xf7fffffa, 0xfffffff8]})

120.558583ms ago: executing program 4 (id=929):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r3, 0x0}])
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0x3, 0x5e, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)

62.946709ms ago: executing program 2 (id=930):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2)

61.494097ms ago: executing program 2 (id=931):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000b40)={{r1}, "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"})
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee50150305870ca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x24048800)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0xfffffffe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

2.690617ms ago: executing program 2 (id=932):
syz_clone(0x40022080, &(0x7f00000000c0)="8af7d157", 0x4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0x1}}}, 0x24}}, 0x20040084)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944c", 0x2}], 0x1}, 0x20000010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 4 (id=933):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15, 0x11, r3, 0x100000000)

kernel console output (not intermixed with test programs):

ed promiscuous mode
[   54.448581][ T5934] veth1_vlan: entered promiscuous mode
[   54.477846][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.484627][ T5934] veth0_macvtap: entered promiscuous mode
[   54.497003][ T5934] veth1_macvtap: entered promiscuous mode
[   54.508734][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.511777][ T5941] Bluetooth: hci3: command tx timeout
[   54.518703][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.523191][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.540108][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.543104][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.555147][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.558022][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.581954][ T5931] veth0_vlan: entered promiscuous mode
[   54.585664][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.600572][ T5943] veth0_vlan: entered promiscuous mode
[   54.614160][ T5931] veth1_vlan: entered promiscuous mode
[   54.640595][ T5943] veth1_vlan: entered promiscuous mode
[   54.654363][  T793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.657930][  T793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.672899][ T5935] veth0_vlan: entered promiscuous mode
[   54.677199][ T5931] veth0_macvtap: entered promiscuous mode
[   54.693893][ T5931] veth1_macvtap: entered promiscuous mode
[   54.698028][  T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.701291][ T5935] veth1_vlan: entered promiscuous mode
[   54.703646][  T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.709022][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.713314][ T5943] veth0_macvtap: entered promiscuous mode
[   54.719319][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.726778][  T126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.738490][ T5943] veth1_macvtap: entered promiscuous mode
[   54.742480][  T126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.747936][  T126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.750538][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.753100][  T126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.777989][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.789244][ T5935] veth0_macvtap: entered promiscuous mode
[   54.794453][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.826518][  T126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.842460][ T5935] veth1_macvtap: entered promiscuous mode
[   54.851151][  T126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.855182][  T126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.862807][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.865260][  T126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.868514][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.887898][ T6017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   54.890586][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.898694][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.909435][  T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.912553][  T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.923934][   T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.926922][   T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.930682][   T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.941854][   T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.964107][  T793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.967644][  T793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.008661][  T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.017305][  T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.021350][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.024809][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.072056][  T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.080028][  T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.134116][ T6024] loop5: detected capacity change from 0 to 7
[   55.152003][ T6024] Dev loop5: unable to read RDB block 7
[   55.153925][ T6024]  loop5: AHDI p1
[   55.155150][ T6024] loop5: partition table partially beyond EOD, truncated
[   55.168563][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.224090][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.230660][ T6024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.278358][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.843784][ T6055] netlink: 220 bytes leftover after parsing attributes in process `syz.2.12'.
[   56.331207][ T6070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16'.
[   56.334818][ T6070] netlink: 'syz.1.16': attribute type 6 has an invalid length.
[   56.337672][ T6070] netlink: 'syz.1.16': attribute type 5 has an invalid length.
[   56.341223][ T6070] netlink: 'syz.1.16': attribute type 4 has an invalid length.
[   56.506360][ T6084] Bluetooth: MGMT ver 1.23
[   56.509889][ T5941] Bluetooth: hci0: command tx timeout
[   56.509959][ T5946] Bluetooth: hci1: command tx timeout
[   56.512125][ T5941] Bluetooth: hci2: command tx timeout
[   56.590054][ T5941] Bluetooth: hci3: command tx timeout
[   56.702824][ T6091] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   57.017723][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'.
[   57.023149][ T6095] overlay: ./file0 is not a directory
[   57.029942][ T5926] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   57.120064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   57.256503][ T5926] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 256, setting to 64
[   57.261436][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0
[   57.268688][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   57.272771][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   57.276287][ T5926] usb 5-1: Product: syz
[   57.278136][ T5926] usb 5-1: Manufacturer: syz
[   57.280255][ T5926] usb 5-1: SerialNumber: syz
[   57.302787][ T6103] netlink: 'syz.2.27': attribute type 15 has an invalid length.
[   57.316181][ T6103] Invalid option length (1048180) for dns_resolver key
[   57.322067][   T40] kauditd_printk_skb: 99 callbacks suppressed
[   57.322078][   T40] audit: type=1400 audit(1773613465.425:191): avc:  denied  { read } for  pid=6101 comm="syz.2.27" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   57.336952][   T40] audit: type=1400 audit(1773613465.425:192): avc:  denied  { open } for  pid=6101 comm="syz.2.27" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   57.359980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   57.411702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   57.514061][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   57.529715][   T40] audit: type=1400 audit(1773613465.705:193): avc:  denied  { read write } for  pid=6105 comm="syz.3.26" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   57.539980][   T40] audit: type=1400 audit(1773613465.715:194): avc:  denied  { open } for  pid=6105 comm="syz.3.26" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   57.657644][   T40] audit: type=1400 audit(1773613465.835:195): avc:  denied  { create } for  pid=6107 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   57.668181][   T40] audit: type=1400 audit(1773613465.845:196): avc:  denied  { sys_admin } for  pid=6107 comm="syz.3.28" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   58.026032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   58.248941][ T5926] usb 5-1: config 0 descriptor??
[   58.250073][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.254393][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.270535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.274142][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.290606][ T5926] usb 5-1: selecting invalid altsetting 0
[   58.300029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.416192][   T40] audit: type=1400 audit(1773613466.595:197): avc:  denied  { create } for  pid=6119 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   58.422442][   T40] audit: type=1400 audit(1773613466.595:198): avc:  denied  { getopt } for  pid=6119 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   58.428297][   T40] audit: type=1400 audit(1773613466.595:199): avc:  denied  { create } for  pid=6119 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   58.452028][ T6122] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   58.454600][ T6122] netlink: 'syz.1.32': attribute type 2 has an invalid length.
[   58.459865][   T40] audit: type=1400 audit(1773613466.635:200): avc:  denied  { ioctl } for  pid=6121 comm="syz.1.32" path="socket:[10444]" dev="sockfs" ino=10444 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   58.589941][ T5941] Bluetooth: hci2: command tx timeout
[   58.590705][ T5293] Bluetooth: hci1: command tx timeout
[   58.591973][ T5941] Bluetooth: hci0: command tx timeout
[   58.627497][ T6131] syzkaller0: entered promiscuous mode
[   58.632999][ T6131] syzkaller0: entered allmulticast mode
[   58.656964][ T6148] bond0: Error: Cannot enslave bond to itself.
[   58.669834][ T5941] Bluetooth: hci3: command tx timeout
[   58.702742][ T6150] dummy0: entered promiscuous mode
[   58.705182][ T6150] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   58.708924][ T6150] hsr1: entered allmulticast mode
[   58.710817][ T6150] dummy0: entered allmulticast mode
[   58.712566][ T6150] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   58.739577][ T6154] tipc: Started in network mode
[   58.741479][ T6154] tipc: Node identity d284af25bb27, cluster identity 4711
[   58.744991][ T6154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.926239][ T6170] ptrace attach of "/syz-executor exec"[5935] was attempted by "/syz-executor exec"[6170]
[   58.985316][ T6175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.001079][ T6175] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   59.003191][ T5926] usb 5-1: USB disconnect, device number 2
[   59.055358][ T6183] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[   59.090682][ T6181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   59.247459][  T208] nci: nci_rsp_packet: unknown rsp opcode 0x3f
[   59.289878][ T5341] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   59.329926][   T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   59.341948][ T6185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   59.472882][ T5341] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.477504][ T5341] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[   59.481552][ T5341] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   59.485510][ T5341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.492611][ T5341] usb 7-1: config 0 descriptor??
[   59.499518][ T5341] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   59.502703][   T54] usb 6-1: Using ep0 maxpacket: 8
[   59.505318][ T5341] dvb-usb: bulk message failed: -22 (3/0)
[   59.509851][   T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   59.513451][   T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   59.517835][   T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   59.526515][ T5341] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   59.531642][ T5341] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   59.534805][ T5341] usb 7-1: media controller created
[   59.539334][ T5341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   59.543461][   T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   59.547819][   T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   59.554973][ T6153] tipc: Disabling bearer <eth:syzkaller0>
[   59.555466][   T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   59.565885][   T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.571312][ T5341] dvb-usb: bulk message failed: -22 (6/0)
[   59.574139][ T5341] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   59.581403][ T5341] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5
[   59.591913][ T5341] dvb-usb: schedule remote query interval to 150 msecs.
[   59.595089][ T5341] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   59.718619][  T831] usb 7-1: USB disconnect, device number 2
[   59.742550][   T73] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[   59.743437][  T831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   59.804877][   T54] usb 6-1: usb_control_msg returned -32
[   59.807977][   T54] usbtmc 6-1:16.0: can't read capabilities
[   59.932361][ T6214] xt_hashlimit: size too large, truncated to 1048576
[   59.992605][ T6217] �x9�: renamed from bridge_slave_0 (while UP)
[   60.286128][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'.
[   60.356519][ T6229] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   60.360432][ T6229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.543039][ T6253] usbtmc 6-1:16.0: usb_clear_halt returned -32
[   60.669936][ T5941] Bluetooth: hci0: command tx timeout
[   60.682927][ T5946] Bluetooth: hci2: command tx timeout
[   60.684951][ T5941] Bluetooth: hci1: command tx timeout
[   60.694318][ T6263] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   60.751041][ T5941] Bluetooth: hci3: command tx timeout
[   60.756391][ T5926] usb 6-1: USB disconnect, device number 2
[   60.771733][ T6267] netlink: 'syz.0.67': attribute type 4 has an invalid length.
[   60.824139][ T6271] tmpfs: Bad value for 'mpol'
[   60.887781][ T6274] netlink: 'syz.0.69': attribute type 7 has an invalid length.
[   60.892009][ T6274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6274 comm=syz.0.69
[   61.048589][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.053850][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.057799][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.061021][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.097052][ T6296] fuse: Unknown parameter 'f'
[   61.102407][ T6296] loop6: detected capacity change from 0 to 524287999
[   61.106223][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.109866][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.113358][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.116839][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.125013][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.128342][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.131733][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.135253][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.137964][ T6296] ldm_validate_partition_table(): Disk read failed.
[   61.140587][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.143398][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[   61.146063][ T6296] Dev loop6: unable to read RDB block 0
[   61.147989][ T6296]  loop6: unable to read partition table
[   61.152380][ T6296] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[   61.601808][ T6333] =======================================================
[   61.601808][ T6333] WARNING: The mand mount option has been deprecated and
[   61.601808][ T6333]          and is ignored by this kernel. Remove the mand
[   61.601808][ T6333]          option from the mount to silence this warning.
[   61.601808][ T6333] =======================================================
[   61.623286][ T6333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.83'.
[   61.655706][ T6332] kvm: kvm [6331]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18
[   61.660606][ T6332] kvm: kvm [6331]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18
[   61.679970][ T6332] kvm: kvm [6331]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18
[   61.701848][ T6332] kvm: kvm [6331]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18
[   61.705158][ T6332] kvm: kvm [6331]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18
[   61.802248][ T1153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.902088][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.906469][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.913388][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.916819][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.920858][ T1153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.921314][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.005740][ T1153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.093286][ T6341] chnl_net:caif_netlink_parms(): no params data found
[   62.093855][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'.
[   62.107623][ T1153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.155638][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.157965][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.162516][ T6341] bridge_slave_0: entered allmulticast mode
[   62.165221][ T6341] bridge_slave_0: entered promiscuous mode
[   62.168298][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.171293][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.173655][ T6341] bridge_slave_1: entered allmulticast mode
[   62.176285][ T6341] bridge_slave_1: entered promiscuous mode
[   62.191349][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.210900][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.232958][ T6373] pim6reg1: entered promiscuous mode
[   62.234771][ T6373] pim6reg1: entered allmulticast mode
[   62.235051][ T6376] capability: warning: `syz.1.98' uses deprecated v2 capabilities in a way that may be insecure
[   62.243818][ T6376] overlayfs: overlapping lowerdir path
[   62.244446][ T6341] team0: Port device team_slave_0 added
[   62.251292][ T6376] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   62.255158][ T6376] overlayfs: overlapping lowerdir path
[   62.257650][ T6341] team0: Port device team_slave_1 added
[   62.289250][ T1153] bridge_slave_1: left allmulticast mode
[   62.292025][ T1153] bridge_slave_1: left promiscuous mode
[   62.295128][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.302454][ T1153] �x9�: left allmulticast mode
[   62.304138][ T1153] �x9�: left promiscuous mode
[   62.305911][ T1153] bridge0: port 1(
1�x9�) entered disabled state
[   62.388301][   T40] kauditd_printk_skb: 88 callbacks suppressed
[   62.388312][   T40] audit: type=1400 audit(1773613470.565:289): avc:  denied  { unmount } for  pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   62.426360][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.433243][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.436901][ T1153] bond0 (unregistering): Released all slaves
[   62.444311][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.446604][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.455518][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.471479][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.473776][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.482226][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.509018][ T1153] tipc: Left network mode
[   62.532230][ T6341] hsr_slave_0: entered promiscuous mode
[   62.535556][ T6341] hsr_slave_1: entered promiscuous mode
[   62.538456][ T6341] debugfs: 'hsr0' already exists in 'hsr'
[   62.541001][ T6341] Cannot create hsr debugfs directory
[   62.572436][   T40] audit: type=1400 audit(1773613470.755:290): avc:  denied  { create } for  pid=6387 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.586380][   T40] audit: type=1400 audit(1773613470.765:291): avc:  denied  { bind } for  pid=6387 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.600908][   T40] audit: type=1400 audit(1773613470.775:292): avc:  denied  { setopt } for  pid=6387 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.633435][   T40] audit: type=1400 audit(1773613470.815:293): avc:  denied  { ioctl } for  pid=6389 comm="syz.0.103" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   62.642441][ T6393] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.102'.
[   62.644594][   T40] audit: type=1400 audit(1773613470.815:294): avc:  denied  { create } for  pid=6390 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.663742][   T40] audit: type=1400 audit(1773613470.825:295): avc:  denied  { ioctl } for  pid=6390 comm="syz.1.102" path="socket:[13549]" dev="sockfs" ino=13549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.676606][   T40] audit: type=1400 audit(1773613470.825:296): avc:  denied  { write } for  pid=6390 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.685985][   T40] audit: type=1400 audit(1773613470.835:297): avc:  denied  { search } for  pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.696223][   T40] audit: type=1400 audit(1773613470.835:298): avc:  denied  { search } for  pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.704553][ T6393] 9p: Bad value for 'rfdno'
[   62.719140][ T6393] SELinux:  Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped).
[   62.776260][ T5946] Bluetooth: Frame is too long (len 12, expected len 4)
[   62.828748][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   62.835395][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   62.899822][ T1153] hsr_slave_0: left promiscuous mode
[   62.903000][ T1153] hsr_slave_1: left promiscuous mode
[   62.906124][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.909444][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.916142][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.919541][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.931427][ T1153] veth1_macvtap: left promiscuous mode
[   62.934147][ T1153] veth0_macvtap: left promiscuous mode
[   62.936730][ T1153] veth1_vlan: left promiscuous mode
[   62.939186][ T1153] veth0_vlan: left promiscuous mode
[   63.004311][ T6414] Bluetooth: hci0: Opcode 0x080f failed: -4
[   63.065485][ T1153] team0 (unregistering): Port device team_slave_1 removed
[   63.072254][ T1153] team0 (unregistering): Port device team_slave_0 removed
[   63.193124][ T6341] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.201694][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   63.207707][ T6341] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.213421][ T6341] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.221030][ T6341] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.271724][ T6437] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   63.272258][ T6439] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   63.306703][ T6449] binder: 6443:6449 ioctl c0306201 200000000040 returned -14
[   63.324074][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.344528][ T6341] 8021q: adding VLAN 0 to HW filter on device team0
[   63.360377][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.362637][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.376825][  T793] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.379156][  T793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.413148][ T6456] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   63.439429][ T6341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.462294][ T6468] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.120'.
[   63.462320][ T6468] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   63.464221][ T6468] tipc: Started in network mode
[   63.464235][ T6468] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[   63.464978][ T6468] tipc: Enabled bearer <udp:syz1>, priority 10
[   63.553001][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.601205][ T5998] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   63.691799][ T6341] veth0_vlan: entered promiscuous mode
[   63.696675][ T6341] veth1_vlan: entered promiscuous mode
[   63.712239][ T6494] kvm: kvm [6492]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   63.715855][ T6494] kvm: kvm [6492]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   63.726180][ T6341] veth0_macvtap: entered promiscuous mode
[   63.733770][ T6341] veth1_macvtap: entered promiscuous mode
[   63.739852][ T5998] usb 5-1: device descriptor read/64, error -71
[   63.742182][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.747953][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.755648][ T1153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.760009][ T1153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.763898][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.766765][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.806080][  T793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.808634][  T793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.832448][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.835025][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.949815][ T5946] Bluetooth: hci3: command tx timeout
[   63.990357][ T5998] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   64.120422][ T5998] usb 5-1: device descriptor read/64, error -71
[   64.199884][ T1473] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   64.236743][ T5998] usb usb5-port1: attempt power cycle
[   64.329948][ T1473] usb 7-1: device descriptor read/64, error -71
[   64.453764][ T6525] nvme_fabrics: unknown parameter or missing value '�؞�ߞNJ]i�5)�G���>i�]�
' in ctrl creation request
[   64.471241][ T6113] tipc: Node number set to 4269801492
[   64.579809][ T5998] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   64.590125][ T1473] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   64.600253][ T5998] usb 5-1: device descriptor read/8, error -71
[   64.729958][ T1473] usb 7-1: device descriptor read/64, error -71
[   64.814871][ T6543] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   64.819253][ T6543] cramfs: wrong magic
[   64.849961][ T5998] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   64.852054][ T1473] usb usb7-port1: attempt power cycle
[   64.880312][ T5998] usb 5-1: device descriptor read/8, error -71
[   64.909845][ T5946] Bluetooth: hci0: command 0x080f tx timeout
[   64.990098][ T5998] usb usb5-port1: unable to enumerate USB device
[   65.123178][ T6558] macvlan2: entered promiscuous mode
[   65.165188][ T6560] overlayfs: failed to resolve './file1': -2
[   65.209868][ T1473] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[   65.230337][ T1473] usb 7-1: device descriptor read/8, error -71
[   65.351018][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   65.439139][ T6574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   65.499894][ T5998] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   65.500461][ T1473] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[   65.521693][ T1473] usb 7-1: device descriptor read/8, error -71
[   65.554596][ T6583] macsec1: entered promiscuous mode
[   65.556320][ T6583] macsec1: entered allmulticast mode
[   65.630316][ T1473] usb usb7-port1: unable to enumerate USB device
[   65.659955][ T5998] usb 9-1: Using ep0 maxpacket: 32
[   65.664471][ T5998] usb 9-1: config 0 has an invalid interface number: 119 but max is 0
[   65.667117][ T5998] usb 9-1: config 0 has no interface number 0
[   65.669292][ T5998] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   65.673443][ T5998] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[   65.677163][ T5998] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[   65.680551][ T5998] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   65.686408][ T5998] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[   65.689339][ T5998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.692205][ T5998] usb 9-1: Product: syz
[   65.693579][ T5998] usb 9-1: Manufacturer: syz
[   65.695141][ T5998] usb 9-1: SerialNumber: syz
[   65.697925][ T5998] usb 9-1: config 0 descriptor??
[   65.700880][ T6563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   65.706047][ T5998] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input6
[   65.710924][ T5326] usb 9-1: BOGUS urb xfer, pipe 1 != type 3
[   65.726996][ T6594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6594 comm=syz.1.150
[   65.802848][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'.
[   65.907891][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.912856][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.915948][ T5341] usb 9-1: USB disconnect, device number 2
[   66.135969][ T6606] tmpfs: Too few inodes for current use
[   66.141849][ T6606] overlayfs: workdir and upperdir must reside under the same mount
[   66.241524][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.244471][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.286060][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.291193][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.366608][ T6609] macsec1: left promiscuous mode
[   66.368302][ T6609] macsec1: left allmulticast mode
[   66.370683][  T126] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.374410][  T126] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.377921][  T126] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.383281][  T126] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.532415][ T6623] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[   66.535212][ T6623] ALSA: mixer_oss: invalid index 1374389
[   66.545175][ T6623] syz.4.160 uses obsolete (PF_INET,SOCK_PACKET)
[   66.551361][ T6623] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   66.674287][ T6632] warning: `syz.0.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.740202][ T6639] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   66.743950][ T6638] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[   66.749293][ T6638] input: syz0 as /devices/virtual/input/input7
[   66.792996][ T6642] tmpfs: Bad value for 'mpol'
[   66.794890][ T6642] netlink: 196 bytes leftover after parsing attributes in process `syz.0.167'.
[   66.798000][ T6642] netlink: 196 bytes leftover after parsing attributes in process `syz.0.167'.
[   66.802265][ T6642] netlink: 19 bytes leftover after parsing attributes in process `syz.0.167'.
[   66.990798][ T5946] Bluetooth: hci3: command tx timeout
[   67.060845][ T6662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6662 comm=syz.1.174
[   67.080759][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   67.130571][ T6671] Cannot find add_set index 65532 as target
[   67.311291][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   67.459824][ T5926] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   67.599890][ T5926] usb 9-1: device descriptor read/64, error -71
[   67.839872][ T5926] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   67.897776][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[   67.970973][ T5926] usb 9-1: device descriptor read/64, error -71
[   67.974336][   T40] kauditd_printk_skb: 58 callbacks suppressed
[   67.974350][   T40] audit: type=1400 audit(2000000000.990:357): avc:  denied  { setopt } for  pid=6695 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   68.070410][   T40] audit: type=1400 audit(2000000001.090:358): avc:  denied  { read } for  pid=6701 comm="syz.1.185" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   68.077629][   T40] audit: type=1400 audit(2000000001.090:359): avc:  denied  { open } for  pid=6701 comm="syz.1.185" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   68.084940][   T40] audit: type=1400 audit(2000000001.090:360): avc:  denied  { ioctl } for  pid=6701 comm="syz.1.185" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   68.090275][ T5926] usb usb9-port1: attempt power cycle
[   68.092963][   T40] audit: type=1400 audit(2000000001.100:361): avc:  denied  { create } for  pid=6704 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   68.101111][   T40] audit: type=1400 audit(2000000001.100:362): avc:  denied  { ioctl } for  pid=6704 comm="syz.2.186" path="socket:[14617]" dev="sockfs" ino=14617 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   68.108666][   T40] audit: type=1400 audit(2000000001.100:363): avc:  denied  { map } for  pid=6704 comm="syz.2.186" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   68.117305][   T40] audit: type=1400 audit(2000000001.100:364): avc:  denied  { execute } for  pid=6704 comm="syz.2.186" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   68.148268][ T6705] Zero length message leads to an empty skb
[   68.229868][   T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   68.381007][   T34] usb 5-1: config 0 has no interfaces?
[   68.382879][   T34] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   68.385893][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.394340][   T34] usb 5-1: config 0 descriptor??
[   68.440248][ T5926] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   68.460575][ T5926] usb 9-1: device descriptor read/8, error -71
[   68.465179][   T40] audit: type=1400 audit(2000000001.480:365): avc:  denied  { read } for  pid=6717 comm="syz.2.189" path="socket:[13981]" dev="sockfs" ino=13981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   68.469298][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'.
[   68.610128][ T5341] usb 5-1: USB disconnect, device number 7
[   68.655441][ T6690] random: crng reseeded on system resumption
[   68.658893][   T40] audit: type=1400 audit(2000000001.670:366): avc:  denied  { write } for  pid=6689 comm="syz.0.182" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   68.674778][ T6690] netlink: 108 bytes leftover after parsing attributes in process `syz.0.182'.
[   68.699840][ T5926] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   68.721892][ T5926] usb 9-1: device descriptor read/8, error -71
[   68.832029][ T5926] usb usb9-port1: unable to enumerate USB device
[   69.147276][ T6724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=6724 comm=syz.1.190
[   69.551338][ T6751] netlink: 'syz.0.200': attribute type 322 has an invalid length.
[   69.665469][ T6754] netfs: Couldn't get user pages (rc=-14)
[   69.746344][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   69.749215][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   69.752280][ T6754] netlink: 'syz.0.201': attribute type 19 has an invalid length.
[   69.817321][ T6754] 9pnet_virtio: no channels available for device syz
[   70.012228][ T6757] bond1: entered promiscuous mode
[   70.014239][ T6757] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.052134][ T6760] cgroup: Invalid name
[   70.058167][ T6760] process 'syz.0.203' launched './file0' with NULL argv: empty string added
[   70.140686][ T6766] tmpfs: Cannot enable quota on remount
[   70.178188][ T6768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6768 comm=syz.0.206
[   70.217389][ T6770] Failed to get privilege flags for destination (handle=0x2:0x156)
[   70.430984][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'.
[   70.458583][ T6801] nbd: socks must be embedded in a SOCK_ITEM attr
[   70.462094][ T5933] block nbd64: NBD_DISCONNECT
[   70.560753][ T5933] udevd[5933]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   70.910216][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.917130][ T6855] netlink: 'syz.1.235': attribute type 4 has an invalid length.
[   70.922782][ T6855] .`: renamed from bond0
[   71.024739][ T6865] netlink: 'syz.0.239': attribute type 1 has an invalid length.
[   71.027358][ T6865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.268555][ T6876] kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[   71.275755][ T6876] kvm: requested 89676 ns i8254 timer period limited to 200000 ns
[   71.280472][ T6876] kvm: requested 55314 ns i8254 timer period limited to 200000 ns
[   71.284893][ T6876] kvm: requested 166781 ns i8254 timer period limited to 200000 ns
[   71.288636][ T6876] kvm: requested 92190 ns i8254 timer period limited to 200000 ns
[   71.292931][ T6876] kvm: requested 103085 ns i8254 timer period limited to 200000 ns
[   71.297188][ T6876] kvm: requested 196114 ns i8254 timer period limited to 200000 ns
[   71.313444][ T6876] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[   71.317617][ T6876] kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[   71.322989][ T6876] kvm: requested 116495 ns i8254 timer period limited to 200000 ns
[   71.502232][ T6887] batadv_slave_0: entered promiscuous mode
[   71.525457][ T6889] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   71.533426][ T6892] fuse: Bad value for 'rootmode'
[   71.652473][ T6911] IPv6: sit1: Disabled Multicast RS
[   71.656729][ T6910] FAT-fs (sr0): bogus number of reserved sectors
[   71.659136][ T6910] FAT-fs (sr0): Can't find a valid FAT filesystem
[   71.700297][ T6916] veth1_to_batadv: entered promiscuous mode
[   71.738560][ T6921] netlink: 'syz.4.255': attribute type 58 has an invalid length.
[   72.027043][ T6935] __nla_validate_parse: 12 callbacks suppressed
[   72.027059][ T6935] netlink: 144 bytes leftover after parsing attributes in process `syz.0.261'.
[   72.027382][ T6936] netlink: 144 bytes leftover after parsing attributes in process `syz.0.261'.
[   72.039960][   T54] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   72.200073][   T54] usb 9-1: Using ep0 maxpacket: 8
[   72.204081][   T54] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[   72.208780][   T54] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   72.213157][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   72.217997][   T54] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   72.222769][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   72.227461][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   72.232395][   T54] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   72.238041][   T54] usb 9-1: config 168 interface 0 has no altsetting 0
[   72.241146][   T54] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[   72.244186][   T54] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   72.249545][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   72.254814][   T54] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   72.259342][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   72.264161][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   72.269041][   T54] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   72.274286][   T54] usb 9-1: config 168 interface 0 has no altsetting 0
[   72.278352][   T54] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[   72.281688][   T54] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   72.286590][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   72.290597][   T54] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   72.295305][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   72.300086][   T54] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   72.304949][   T54] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   72.309699][   T54] usb 9-1: config 168 interface 0 has no altsetting 0
[   72.317395][   T54] usb 9-1: string descriptor 0 read error: -22
[   72.319995][   T54] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   72.323285][   T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.335589][   T54] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   72.534993][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'.
[   72.539310][ T6928] netlink: 'syz.4.258': attribute type 9 has an invalid length.
[   72.542291][ T6928] netlink: 47 bytes leftover after parsing attributes in process `syz.4.258'.
[   72.546329][   T34] usb 9-1: USB disconnect, device number 7
[   72.661599][ T6972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=6972 comm=syz.1.272
[   72.710988][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.273'.
[   72.715825][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.273'.
[   72.726592][ T6976] macsec2: entered promiscuous mode
[   72.728812][ T6976] gretap0: entered promiscuous mode
[   72.814991][ T6984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.277'.
[   72.893869][ T6987] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled
[   72.908373][ T6987] ftl_cs: FTL header not found.
[   72.983174][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'.
[   72.986595][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[   72.989484][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[   73.025580][ T6999] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   73.035034][   T40] kauditd_printk_skb: 45 callbacks suppressed
[   73.035049][   T40] audit: type=1400 audit(2000000006.050:412): avc:  denied  { map } for  pid=6998 comm="syz.0.282" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   73.046782][   T40] audit: type=1400 audit(2000000006.050:413): avc:  denied  { execute } for  pid=6998 comm="syz.0.282" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   73.067779][ T7001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   73.070218][ T7001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   73.076076][ T7001] vhci_hcd vhci_hcd.0: Device attached
[   73.081282][ T7002] vhci_hcd: connection closed
[   73.085670][   T46] vhci_hcd vhci_hcd.2: stop threads
[   73.089423][   T46] vhci_hcd vhci_hcd.2: release socket
[   73.092144][   T46] vhci_hcd vhci_hcd.2: disconnect device
[   73.099509][ T7006] XFS (nbd4): no-recovery mounts must be read-only.
[   73.142225][ T7008] netlink: 'syz.0.285': attribute type 6 has an invalid length.
[   73.193786][ T7011] xt_hashlimit: size too large, truncated to 1048576
[   73.319278][   T40] audit: type=1400 audit(2000000006.330:414): avc:  denied  { write } for  pid=7018 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   73.320314][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.328001][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.332263][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.336488][ T7022] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.342292][ T7022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   73.345136][ T7025] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   73.361150][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.364566][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.386964][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.390610][ T7022] xfrm0 speed is unknown, defaulting to 1000
[   73.419103][ T7022] loop5: detected capacity change from 0 to 65536
[   73.461241][ T7022] loop5: detected capacity change from 65536 to 524287995
[   73.484109][ T7033] xt_hashlimit: size too large, truncated to 1048576
[   73.618113][ T7039] overlay: Unknown parameter 'smackfsdef'
[   73.635753][   T40] audit: type=1400 audit(2000000006.650:415): avc:  denied  { getopt } for  pid=7040 comm="syz.0.294" laddr=fe80::10 lport=59290 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   73.766020][   T40] audit: type=1400 audit(2000000006.780:416): avc:  denied  { write } for  pid=7053 comm="syz.0.298" name="/" dev="9p" ino=74448971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   73.769791][   T54] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[   73.856574][ T7058] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   73.870486][ T5926] e1000 0000:00:06.0 eth0: Reset adapter
[   73.901134][   T54] usb 9-1: device descriptor read/64, error -71
[   73.951574][   T40] audit: type=1400 audit(2000000006.970:417): avc:  denied  { setopt } for  pid=7064 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.020310][ T5926] e1000 0000:00:06.0 eth0: Reset adapter
[   74.142080][ T7079] syz.0.300 uses old SIOCAX25GETINFO
[   74.151714][   T54] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[   74.302496][   T54] usb 9-1: device descriptor read/64, error -71
[   74.410422][   T54] usb usb9-port1: attempt power cycle
[   74.759871][   T54] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[   74.780649][   T54] usb 9-1: device descriptor read/8, error -71
[   75.029822][   T54] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[   75.061120][   T54] usb 9-1: device descriptor read/8, error -71
[   75.170052][   T54] usb usb9-port1: unable to enumerate USB device
[   76.200862][ T5926] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[   76.285706][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   76.288100][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xbf000)
[   78.570575][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   78.572841][ T1115] ata1: failed to read log page 10h (errno=-5)
[   78.575652][ T1115] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0
[   78.578252][ T1115] ata1.00: irq_stat 0x41000000
[   78.580222][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED
[   78.582593][ T1115] ata1.00: cmd 61/c0:00:9e:18:08/02:00:00:00:00/40 tag 0 ncq dma 360448 out
[   78.582593][ T1115]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   78.590378][ T1115] ata1.00: status: { DRDY }
[   78.592047][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED
[   78.594035][ T1115] ata1.00: cmd 61/f8:f0:a6:12:08/05:00:00:00:00/40 tag 30 ncq dma 782336 out
[   78.594035][ T1115]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   78.599675][ T1115] ata1.00: status: { DRDY }
[   78.602061][ T1115] ata1.00: configured for UDMA/100
[   78.604667][ T1115] ata1: EH complete
[   82.680154][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   86.513787][  T841] cfg80211: failed to load regulatory.db
[   87.812743][   T40] audit: type=1400 audit(2000000020.830:418): avc:  denied  { connect } for  pid=7130 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   87.893045][   T40] audit: type=1400 audit(2000000020.910:419): avc:  denied  { create } for  pid=7147 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   87.915488][   T40] audit: type=1400 audit(2000000020.930:420): avc:  denied  { setopt } for  pid=7147 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   87.973391][ T7163] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[   87.979092][   T40] audit: type=1400 audit(2000000020.990:421): avc:  denied  { map } for  pid=7162 comm="syz.0.317" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   88.118075][ T7174] __nla_validate_parse: 2 callbacks suppressed
[   88.118086][ T7174] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.320'.
[   88.188927][ T7181] .`: (slave vlan4): Opening slave failed
[   88.199855][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[   88.369835][    T9] usb 9-1: Using ep0 maxpacket: 8
[   88.373620][    T9] usb 9-1: config index 0 descriptor too short (expected 5924, got 36)
[   88.377148][    T9] usb 9-1: config 250 has an invalid interface number: 228 but max is -1
[   88.382921][    T9] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0
[   88.386815][    T9] usb 9-1: config 250 has no interface number 0
[   88.389500][    T9] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   88.394297][    T9] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   88.398608][    T9] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   88.402927][    T9] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   88.407249][    T9] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   88.412937][    T9] usb 9-1: config 250 interface 228 has no altsetting 0
[   88.417181][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   88.421260][    T9] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   88.424656][    T9] usb 9-1: Product: syz
[   88.426424][    T9] usb 9-1: SerialNumber: syz
[   88.434676][    T9] hub 9-1:250.228: bad descriptor, ignoring hub
[   88.437060][    T9] hub 9-1:250.228: probe with driver hub failed with error -5
[   88.637806][    T9] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   88.749973][ T5926] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   88.768610][ T7199] bridge0: port 3(syz_tun) entered blocking state
[   88.772535][ T7199] bridge0: port 3(syz_tun) entered disabled state
[   88.775082][ T7199] syz_tun: entered allmulticast mode
[   88.779014][ T7199] syz_tun: entered promiscuous mode
[   88.781944][ T7199] bridge0: port 3(syz_tun) entered blocking state
[   88.784921][ T7199] bridge0: port 3(syz_tun) entered forwarding state
[   88.838802][   T40] audit: type=1400 audit(2000000021.850:422): avc:  denied  { read write } for  pid=7157 comm="syz.4.315" name="lp0" dev="devtmpfs" ino=2925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   88.847339][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'.
[   88.849130][   T40] audit: type=1400 audit(2000000021.850:423): avc:  denied  { open } for  pid=7157 comm="syz.4.315" path="/dev/usb/lp0" dev="devtmpfs" ino=2925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   88.909855][ T5926] usb 6-1: Using ep0 maxpacket: 32
[   88.913809][ T5926] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   88.918514][ T5926] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   88.930310][ T5926] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   88.935233][ T5926] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   88.951291][ T5926] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   88.954271][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.956849][ T5926] usb 6-1: Product: syz
[   88.958231][ T5926] usb 6-1: Manufacturer: syz
[   88.960519][ T5926] usb 6-1: SerialNumber: syz
[   88.967781][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[   88.973062][ T5926] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input8
[   89.082255][ T7220] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[   89.093683][ T7220] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.172557][ T7223] bond3: (slave ip6gretap1): making interface the new active one
[   89.175687][ T7223] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   89.180095][ T5926] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   89.182918][ T5926]  (id 0x00)
[   89.229926][ T5926] rc_core: IR keymap rc-imon-pad not found
[   89.231701][ T7160] usb 9-1: reset high-speed USB device number 12 using dummy_hcd
[   89.231945][ T5926] Registered IR keymap rc-empty
[   89.236538][ T5926] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   89.239836][ T5926] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   89.282844][   T40] audit: type=1400 audit(2000000022.300:424): avc:  denied  { write } for  pid=7226 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   89.289324][   T40] audit: type=1400 audit(2000000022.300:425): avc:  denied  { read } for  pid=7226 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   89.300258][ T7231] comedi comedi0: Minor 3 specified more than once!
[   89.382149][ T5926] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[   89.389943][ T5926] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input9
[   89.400303][ T7242] xfrm0 speed is unknown, defaulting to 1000
[   89.401956][   T40] audit: type=1400 audit(2000000022.420:426): avc:  denied  { getopt } for  pid=7243 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   89.412292][ T7246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7246 comm=syz.2.342
[   89.458825][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   89.464212][   T40] audit: type=1400 audit(2000000022.480:427): avc:  denied  { getopt } for  pid=7249 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   89.468604][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'.
[   89.487965][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.493622][ T7250] bridge_slave_1: left allmulticast mode
[   89.496064][ T7250] bridge_slave_1: left promiscuous mode
[   89.498662][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.506764][ T7250] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   89.598425][ T5926] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized
[   89.692946][ T6112] usb 6-1: USB disconnect, device number 3
[   89.759852][ T5926] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   89.900663][    T9] usb 9-1: USB disconnect, device number 12
[   89.905987][    T9] usblp0: removed
[   89.913258][ T5926] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   89.916295][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.918847][ T5926] usb 5-1: Product: syz
[   89.920313][ T5926] usb 5-1: Manufacturer: syz
[   89.921742][ T5926] usb 5-1: SerialNumber: syz
[   89.929372][ T5926] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   89.951993][ T6112] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   90.085316][ T7258] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   90.121057][ T7261] fuse: Bad value for 'group_id'
[   90.121072][ T7260] fuse: Bad value for 'group_id'
[   90.122921][ T7261] fuse: Bad value for 'group_id'
[   90.124876][ T7260] fuse: Bad value for 'group_id'
[   90.162725][ T7254] netlink: 'syz.0.345': attribute type 3 has an invalid length.
[   90.182125][    T9] usb 5-1: USB disconnect, device number 8
[   90.203020][ T7265] 9p: Bad value for 'dfltgid'
[   90.204717][ T7265] 9p: Bad value for 'dfltgid'
[   90.412246][ T7291] netlink: 'syz.1.358': attribute type 1 has an invalid length.
[   90.423572][ T7288] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.357'.
[   90.478021][ T7293] 8021q: adding VLAN 0 to HW filter on device .`
[   90.482437][ T7293] 8021q: adding VLAN 0 to HW filter on device team0
[   90.487719][ T7293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.545934][ T7302] sctp: [Deprecated]: syz.2.361 (pid 7302) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.545934][ T7302] Use struct sctp_sack_info instead
[   90.558949][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.362'.
[   90.655510][ T7312] tmpfs: Unknown parameter 'huMe'
[   90.989964][ T6112] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[   90.997074][ T6112] ath9k_htc: Failed to initialize the device
[   91.009809][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[   91.014952][ T7350] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   91.014952][ T7350]    program syz.4.377 not setting count and/or reply_len properly
[   91.022057][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'.
[   91.037738][ T7350] team0: Port device team_slave_1 removed
[   91.309856][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   91.366408][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'.
[   91.386700][ T7364] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.449867][    T9] usb 5-1: device descriptor read/64, error -71
[   91.689887][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   91.829851][    T9] usb 5-1: device descriptor read/64, error -71
[   91.951832][    T9] usb usb5-port1: attempt power cycle
[   92.289851][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   92.310601][    T9] usb 5-1: device descriptor read/8, error -71
[   92.452561][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   92.496663][ T7391] netlink: 'syz.2.390': attribute type 64 has an invalid length.
[   92.499296][ T7391] netlink: 'syz.2.390': attribute type 4 has an invalid length.
[   92.502096][ T7391] netlink: 152 bytes leftover after parsing attributes in process `syz.2.390'.
[   92.560804][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   92.580570][    T9] usb 5-1: device descriptor read/8, error -71
[   92.700479][    T9] usb usb5-port1: unable to enumerate USB device
[   92.766578][ T7412] overlayfs: failed to clone upperpath
[   92.820630][   T40] kauditd_printk_skb: 10813 callbacks suppressed
[   92.820643][   T40] audit: type=1326 audit(2000000025.830:11241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.830217][   T40] audit: type=1326 audit(2000000025.840:11242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.837441][   T40] audit: type=1326 audit(2000000025.840:11243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.845140][   T40] audit: type=1326 audit(2000000025.840:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.852819][   T40] audit: type=1326 audit(2000000025.840:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.860357][   T40] audit: type=1326 audit(2000000025.840:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.867976][   T40] audit: type=1326 audit(2000000025.840:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.876374][   T40] audit: type=1326 audit(2000000025.840:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.884396][   T40] audit: type=1326 audit(2000000025.840:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.891847][   T40] audit: type=1326 audit(2000000025.840:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.1.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162739c799 code=0x50000
[   92.893378][ T7419] xfrm0 speed is unknown, defaulting to 1000
[   93.153943][ T7434] syz_tun: entered allmulticast mode
[   93.176757][ T7434] syz_tun: left allmulticast mode
[   93.305594][ T7460] __nla_validate_parse: 1 callbacks suppressed
[   93.305607][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.335260][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.338326][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.343707][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.347674][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.353160][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.358915][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.364544][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.370007][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.374525][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.819826][    T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[   93.876306][ T7481] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001
[   93.982358][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   93.985860][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[   93.989673][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[   93.996375][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 64, changing to 7
[   94.000947][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   94.006414][    T9] usb 9-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[   94.009355][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.012351][    T9] usb 9-1: Product: syz
[   94.013732][    T9] usb 9-1: Manufacturer: syz
[   94.015590][    T9] usb 9-1: SerialNumber: syz
[   94.019165][ T7478] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   94.154905][   T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.158105][   T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.162183][   T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.165601][   T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.258946][    T9] usb 9-1: USB disconnect, device number 13
[   94.325819][ T7491] bond1: entered promiscuous mode
[   94.327587][ T7491] bond1: entered allmulticast mode
[   94.337725][ T7491] ip6gretap0: entered promiscuous mode
[   94.341507][ T7491] ip6gretap0: entered allmulticast mode
[   94.344023][ T7491] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link
[   94.783517][ T7503] netlink: 'syz.4.423': attribute type 7 has an invalid length.
[   94.786012][ T7503] netlink: 'syz.4.423': attribute type 8 has an invalid length.
[   94.841528][ T7508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7508 comm=syz.4.423
[   94.841875][ T7505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.014323][ T7515] (syz.4.427,7515,3):ocfs2_get_sector:1714 ERROR: status = -5
[   95.016909][ T7515] (syz.4.427,7515,3):ocfs2_sb_probe:753 ERROR: status = -5
[   95.019960][ T7515] (syz.4.427,7515,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   95.022808][ T7515] (syz.4.427,7515,3):ocfs2_fill_super:1177 ERROR: status = -5
[   95.259947][ T7526] overlayfs: statfs failed on './file0'
[   95.452482][ T7549] loop6: detected capacity change from 0 to 524287999
[   95.454974][ T7549] buffer_io_error: 7 callbacks suppressed
[   95.454982][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.459539][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.462458][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.465334][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.467820][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.471946][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.475708][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.478468][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.483139][ T7549] ldm_validate_partition_table(): Disk read failed.
[   95.485356][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.488063][ T7549] Buffer I/O error on dev loop6, logical block 0, async page read
[   95.491006][ T7549] Dev loop6: unable to read RDB block 0
[   95.493784][ T7549]  loop6: unable to read partition table
[   95.495760][ T7549] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[   95.551466][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.571290][ T7549] ldm_validate_partition_table(): Disk read failed.
[   95.573899][ T7549] Dev loop6: unable to read RDB block 0
[   95.575985][ T7549]  loop6: unable to read partition table
[   95.582372][ T7549] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[   95.605878][ T5342] ldm_validate_partition_table(): Disk read failed.
[   95.608121][ T5342] Dev loop6: unable to read RDB block 0
[   95.610282][ T5342]  loop6: unable to read partition table
[   95.641988][ T7563] ieee802154 phy0 wpan0: encryption failed: -22
[   95.719834][    T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[   95.800430][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.802893][ T7579] CUSE: unknown device info "�<�5����<Z�j5������9�$�+��r�(�0X�8"
[   95.804465][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.807901][ T7579] CUSE: unknown device info "eQ���mŀ%���P;T������38R�2߫Jg���$�O��k�J�;fA��v#ܗ�5��i�R/Ab?`W4���w�F��odADxa�*��"
[   95.817254][ T7579] CUSE: unknown device info "��dP�"
[   95.819599][ T7579] CUSE: unknown device info "O{S�n`�����W�A{����F4Q���>�\���
�z��0z,~XY�+A}s��F'%���:�Ij!�@�Q��mߑR��GQ��q6*�5p)�x�?,"
[   95.825744][ T7579] CUSE: unknown device info "��&b��%Z��W��)��3\my�	��"
[   95.829132][ T7579] CUSE: unknown device info "ҭS��������mM��i�_��0˱�ݯ;q�]�{�i��79�{�0Ե�t��~��>V����Z�\�.9��OC����U�&�q����msf�k��c��""
[   95.834413][ T7579] CUSE: DEVNAME unspecified
[   95.836901][ T7584] fuse: Bad value for 'fd'
[   95.861658][    T9] usb 9-1: device descriptor read/64, error -71
[   96.013217][ T7589] Can't find a SQUASHFS superblock on nullb0
[   96.039926][   T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   96.056271][ T7591] netlink: 'syz.1.447': attribute type 1 has an invalid length.
[   96.081186][ T7591] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.085026][ T7591] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   96.121363][    T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[   96.201304][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.205512][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.209507][   T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.215344][   T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.218584][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.224153][   T34] usb 5-1: config 0 descriptor??
[   96.249916][    T9] usb 9-1: device descriptor read/64, error -71
[   96.360246][    T9] usb usb9-port1: attempt power cycle
[   96.429005][   T34] usbhid 5-1:0.0: can't add hid device: -71
[   96.431648][   T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   96.438325][   T34] usb 5-1: USB disconnect, device number 13
[   96.719862][    T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[   96.750835][    T9] usb 9-1: device descriptor read/8, error -71
[   96.922905][ T7598] usb usb8: usbfs: process 7598 (syz.1.448) did not claim interface 0 before use
[   96.927999][ T7598] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   97.009838][    T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[   97.030312][    T9] usb 9-1: device descriptor read/8, error -71
[   97.067711][ T7604] vcan0: tx address claim with different name
[   97.070663][ T7605] vcan0: tx address claim with different name
[   97.153097][    T9] usb usb9-port1: unable to enumerate USB device
[   97.155411][ T7620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7620 comm=syz.2.456
[   97.168579][ T7620] team0: Device gtp0 is of different type
[   97.191144][ T7621] team0: Device gtp0 is of different type
[   97.295893][ T7636] binder: 7635:7636 ioctl 40046205 0 returned -22
[   97.431857][ T7656] netlink: 'syz.2.468': attribute type 16 has an invalid length.
[   97.435594][ T7656] veth1_macvtap: entered allmulticast mode
[   97.474131][ T7665] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   97.599112][ T7668] veth0_to_team: entered promiscuous mode
[   97.603149][ T7668] veth0_to_team: left promiscuous mode
[   97.707728][ T7704] vlan2: entered allmulticast mode
[   97.710393][ T7704] vlan0: entered allmulticast mode
[   97.712862][ T7704] veth0_vlan: entered allmulticast mode
[   97.844607][ T7715] : entered promiscuous mode
[   98.014071][   T40] kauditd_printk_skb: 21934 callbacks suppressed
[   98.014089][   T40] audit: type=1400 audit(2000000031.030:33185): avc:  denied  { create } for  pid=7732 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   98.026006][   T40] audit: type=1400 audit(2000000031.030:33186): avc:  denied  { ioctl } for  pid=7732 comm="syz.0.488" path="socket:[17406]" dev="sockfs" ino=17406 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   98.037457][   T40] audit: type=1400 audit(2000000031.040:33187): avc:  denied  { append } for  pid=7732 comm="syz.0.488" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   98.259538][   T40] audit: type=1400 audit(2000000031.270:33188): avc:  denied  { connect } for  pid=7742 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   98.268561][ T7745] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[   98.280696][ T7745] bond4: entered promiscuous mode
[   98.283193][ T7745] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.308988][ T7745] bond4: (slave bridge2): making interface the new active one
[   98.313593][ T7745] bridge2: entered promiscuous mode
[   98.317197][ T7745] bond4: (slave bridge2): Enslaving as an active interface with an up link
[   98.433405][   T40] audit: type=1400 audit(2000000031.450:33189): avc:  denied  { write } for  pid=7763 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   98.484632][ T7770] __nla_validate_parse: 73 callbacks suppressed
[   98.484647][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'.
[   98.506635][ T7772] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   98.513670][ T7772] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0
[   98.543903][ T7774] input: syz0 as /devices/virtual/input/input10
[   98.561900][   T40] audit: type=1400 audit(2000000031.580:33190): avc:  denied  { ioctl } for  pid=7779 comm="syz.2.505" path="socket:[18990]" dev="sockfs" ino=18990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.577246][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'.
[   98.587340][ T7774] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   98.618471][   T40] audit: type=1400 audit(2000000031.630:33191): avc:  denied  { read } for  pid=7779 comm="syz.2.505" path="socket:[18992]" dev="sockfs" ino=18992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.673473][ T7790] netlink: 'syz.0.509': attribute type 322 has an invalid length.
[   98.678370][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[   98.686241][ T7788] tmpfs: Bad value for 'mpol'
[   98.766416][ T7795] team0: No ports can be present during mode change
[   99.004824][ T7830] netlink: 'syz.4.522': attribute type 29 has an invalid length.
[   99.019834][ T7830] netlink: 'syz.4.522': attribute type 29 has an invalid length.
[   99.032686][ T7830] netlink: 'syz.4.522': attribute type 32 has an invalid length.
[   99.036734][ T7830] netlink: 500 bytes leftover after parsing attributes in process `syz.4.522'.
[   99.047434][ T7803] netlink: 68 bytes leftover after parsing attributes in process `syz.1.515'.
[   99.051898][ T7830] netlink: 788 bytes leftover after parsing attributes in process `syz.4.522'.
[   99.055520][ T7830] bond0: entered allmulticast mode
[   99.057655][ T7830] bond_slave_0: entered allmulticast mode
[   99.064391][   T40] audit: type=1400 audit(2000000032.080:33192): avc:  denied  { associate } for  pid=7802 comm="syz.1.515" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   99.078933][ T7830] bond_slave_1: entered allmulticast mode
[   99.089858][   T40] audit: type=1400 audit(2000000032.100:33193): avc:  denied  { write } for  pid=7827 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   99.150517][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.524'.
[   99.212478][   T40] audit: type=1400 audit(2000000032.230:33194): avc:  denied  { bpf } for  pid=7839 comm="syz.0.526" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.259640][ T7844] XFS (loop1): SB validate failed with error -5.
[   99.268726][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   99.309947][ T7830] mmap: syz.4.522 (7830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.348478][ T7854] xfrm0 speed is unknown, defaulting to 1000
[   99.380882][ T7854] veth1_macvtap: left promiscuous mode
[   99.402700][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[   99.406029][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[   99.431544][ T7858] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[   99.434969][ T7858] netlink: 1012 bytes leftover after parsing attributes in process `syz.0.527'.
[   99.759215][ T7876] kvm: kvm [7873]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[   99.802285][ T7886] devtmpfs: Bad value for 'nr_blocks'
[   99.857056][ T7889] xt_time: unknown flags 0xf4
[   99.865003][   T61] bond0: (slave bond_slave_0): interface is now down
[   99.868072][   T61] bond0: (slave bond_slave_1): interface is now down
[   99.873897][   T61] bond0: now running without any active interface!
[   99.885290][  T208] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex
[   99.890126][  T208] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex
[   99.894229][  T208] bond0: active interface up!
[   99.925780][ T7895] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   99.954699][ T5946] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  100.052285][ T7911] bridge1: entered promiscuous mode
[  100.211589][ T7920] validate_nla: 1 callbacks suppressed
[  100.211604][ T7920] netlink: 'syz.2.550': attribute type 9 has an invalid length.
[  100.219576][ T7920] xfrm0 speed is unknown, defaulting to 1000
[  100.725291][ T7891] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  100.728215][ T7891] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.734836][ T7891] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.740897][ T7891] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  100.743514][ T7891] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.747602][ T7891] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.751597][ T7891] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  100.754138][ T7891] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  100.757900][ T7891] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  100.762358][ T7891] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  100.764359][ T7891] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.766952][ T7891] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.849938][ T7953] netlink: 'syz.0.560': attribute type 39 has an invalid length.
[  100.907935][ T7957] netlink: 'syz.1.561': attribute type 1 has an invalid length.
[  100.926678][ T7957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7957 comm=syz.1.561
[  100.991424][ T7960] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.146666][ T7973] netlink: 'syz.4.567': attribute type 1 has an invalid length.
[  101.332914][ T7996] syz_tun: left allmulticast mode
[  101.339832][ T7996] syz_tun: left promiscuous mode
[  101.340281][ T7994] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  101.341666][ T7996] bridge0: port 3(syz_tun) entered disabled state
[  101.353102][ T7994] misc userio: Invalid payload size
[  101.353758][ T7996] bridge_slave_1: left allmulticast mode
[  101.357807][ T7996] bridge_slave_1: left promiscuous mode
[  101.360279][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.380726][ T7996] bridge_slave_0: left allmulticast mode
[  101.383255][ T7996] bridge_slave_0: left promiscuous mode
[  101.385870][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.394855][ T8001] overlayfs: cannot append lower layer
[  101.678893][ T8019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.029986][ T5946] Bluetooth: hci0: command 0x080f tx timeout
[  102.134125][ T5946] Bluetooth: hci0: unexpected event for opcode 0x201c
[  102.473106][ T8100] xfrm0 speed is unknown, defaulting to 1000
[  102.529866][ T1473] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  102.689853][ T1473] usb 5-1: Using ep0 maxpacket: 8
[  102.693305][ T1473] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  102.699182][ T1473] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  102.702693][ T1473] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.706415][ T1473] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.711352][ T1473] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  102.714369][ T1473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.749877][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.769853][ T5341] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  102.830912][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.831578][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.919829][ T5341] usb 6-1: Using ep0 maxpacket: 32
[  102.921709][ T1473] usb 5-1: usb_control_msg returned -32
[  102.923765][ T5341] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.924582][ T1473] usbtmc 5-1:16.0: can't read capabilities
[  102.927766][ T5341] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  102.929441][ T5341] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23
[  102.938409][ T5341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.951001][ T5341] usb 6-1: Product: syz
[  102.952412][ T5341] usb 6-1: Manufacturer: syz
[  102.953942][ T5341] usb 6-1: SerialNumber: syz
[  102.971334][ T5341] usb 6-1: config 0 descriptor??
[  103.222976][ T5341] usb 6-1: USB disconnect, device number 4
[  103.300599][ T8114] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  103.305037][ T8114] VFS: Can't find a romfs filesystem on dev nullb0.
[  103.305037][ T8114] 
[  103.310027][ T8114] xt_CONNSECMARK: invalid mode: 0
[  103.652264][   T40] kauditd_printk_skb: 26 callbacks suppressed
[  103.652277][   T40] audit: type=1400 audit(2000000036.670:33221): avc:  denied  { connect } for  pid=8116 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  103.764493][ T8126] __nla_validate_parse: 7 callbacks suppressed
[  103.764506][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  103.813160][ T8129] netlink: set zone limit has 4 unknown bytes
[  103.905339][ T8132] could not allocate digest TFM handle cryptd(blake2b-160)
[  104.483430][ T8141] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  104.487255][ T8142] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  104.494020][   T40] audit: type=1400 audit(2000000037.510:33222): avc:  denied  { set_context_mgr } for  pid=8140 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  104.503000][ T8141] binder: BINDER_SET_CONTEXT_MGR already set
[  104.505534][ T8141] binder: 8140:8141 ioctl 4018620d 200000001000 returned -16
[  104.506330][ T8142] binder: 8140:8142 ioctl c0306201 200000000680 returned -14
[  104.507299][   T40] audit: type=1400 audit(2000000037.520:33223): avc:  denied  { call } for  pid=8140 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  104.508228][   T40] audit: type=1400 audit(2000000037.520:33224): avc:  denied  { getopt } for  pid=8140 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  104.552160][ T8146] comedi comedi3: bad chanlist[0]=0x80000001 chan=1 range length=4
[  104.798400][   T40] audit: type=1400 audit(2000000037.810:33225): avc:  denied  { mount } for  pid=8153 comm="syz.2.608" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  104.829850][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.847380][ T8156] Driver unsupported XDP return value 0 on prog  (id 92) dev N/A, expect packet loss!
[  104.872917][ T8156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.910070][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout
[  104.910081][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout
[  105.230780][   T34] usb 5-1: USB disconnect, device number 14
[  105.367213][   T73] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[  105.372314][ T8169] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  105.375236][   T73] Bluetooth: hci4: Frame reassembly failed (-84)
[  105.799614][ T8179] xt_connbytes: Forcing CT accounting to be enabled
[  105.802817][ T8179] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.813475][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'.
[  105.883618][ T8186] binder: 8185:8186 ioctl ab03 0 returned -22
[  105.886247][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'.
[  105.974234][ T8194] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  105.974384][ T8196] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  105.980366][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'.
[  105.984811][ T8195] sctp: [Deprecated]: syz.2.621 (pid 8195) Use of int in max_burst socket option deprecated.
[  105.984811][ T8195] Use struct sctp_assoc_value instead
[  105.994466][ T8195] No source specified
[  106.006153][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'.
[  106.006646][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'.
[  106.034064][ T8203] input input11: cannot allocate more than FF_MAX_EFFECTS effects
[  106.039111][ T8205] input input12: cannot allocate more than FF_MAX_EFFECTS effects
[  106.068318][ T8207] binder: 8206:8207 ioctl 54e3 0 returned -22
[  106.157160][ T8211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  106.909922][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.933170][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.628'.
[  106.937083][ T8219] netlink: 'syz.2.628': attribute type 7 has an invalid length.
[  106.940991][ T8219] netlink: 'syz.2.628': attribute type 8 has an invalid length.
[  106.944448][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[  106.989899][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout
[  106.999988][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout
[  107.004959][ T8221] syzkaller0: entered promiscuous mode
[  107.006854][ T8221] syzkaller0: entered allmulticast mode
[  107.098541][ T8223] sch_fq: defrate 4294967295 ignored.
[  107.215026][ T8226] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  107.248232][ T8230] netlink: 'syz.1.632': attribute type 4 has an invalid length.
[  107.250849][ T8230] netlink: 152 bytes leftover after parsing attributes in process `syz.1.632'.
[  107.253888][ T8230] `: renamed from .` (while UP)
[  107.258694][   T40] audit: type=1400 audit(2000000040.270:33226): avc:  denied  { ioctl } for  pid=8229 comm="syz.1.632" path="socket:[22605]" dev="sockfs" ino=22605 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  107.260547][ T8230] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  107.389832][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  107.511041][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'.
[  107.618539][ T8235] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  107.620931][ T8235] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  107.623118][ T8235] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  107.625161][ T8235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  108.167850][ T8278] SELinux: syz.0.645 (8278) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  108.606247][ T8286] Set syz1 is full, maxelem 2 reached
[  108.631716][ T8286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.686681][ T8286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.733076][ T8289] sctp: [Deprecated]: syz.2.649 (pid 8289) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.733076][ T8289] Use struct sctp_sack_info instead
[  108.742786][ T8286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.386682][ T8300] syzkaller0: entered promiscuous mode
[  109.388591][ T8300] syzkaller0: entered allmulticast mode
[  109.549856][ T5946] Bluetooth: hci0: command 0x080f tx timeout
[  109.629841][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout
[  109.631969][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout
[  109.634030][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.261832][ T8295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.355098][ T8304] tmpfs: Unknown parameter 'usrquota'
[  110.358645][ T8304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  110.362016][ T8304] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  110.366274][ T8304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  110.430983][ T8308] netlink: 'syz.2.655': attribute type 1 has an invalid length.
[  110.778123][ T8319] Bluetooth: MGMT ver 1.23
[  110.782996][   T40] audit: type=1400 audit(2000000043.800:33227): avc:  denied  { mount } for  pid=8318 comm="syz.4.659" name="/" dev="configfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  110.826503][ T8321] netlink: 'syz.4.660': attribute type 1 has an invalid length.
[  110.829711][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.660'.
[  110.880948][ T8322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  110.880981][   T40] audit: type=1400 audit(2000000043.900:33228): avc:  denied  { getattr } for  pid=8320 comm="syz.4.660" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  110.990520][  T841] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  111.049255][ T8328] overlayfs: failed lookup in lower (newroot/113, name='file0', err=-40): overlapping layers
[  111.054373][ T8328] overlayfs: failed lookup in lower (newroot/113, name='file0', err=-40): overlapping layers
[  111.159408][   T40] audit: type=1400 audit(2000000044.170:33229): avc:  denied  { mount } for  pid=8329 comm="syz.4.663" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  111.179834][  T841] usb 6-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config
[  111.183618][  T841] usb 6-1: config 1 interface 0 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  111.196572][  T841] usb 6-1: config 1 interface 0 has no altsetting 0
[  111.200401][  T841] usb 6-1: New USB device found, idVendor=0458, idProduct=9317, bcdDevice=f5.2f
[  111.203397][  T841] usb 6-1: New USB device strings: Mfr=66, Product=2, SerialNumber=3
[  111.206006][  T841] usb 6-1: Product: 蝔⤀觥悳ﹺ夗촂各靿쪦€
[  111.208587][  T841] usb 6-1: Manufacturer: syz
[  111.210194][  T841] usb 6-1: SerialNumber: 퇿䃜䙕臸봥呋丕䝢问ᛏ䓍侫ǯ⣷ᲇ菶눸蒜葅㻋솰嫐ꓮ⎜崥륧䋡吩缰摺셢Ⴑَ⠲⿭ɮ王苚䷏ʔ➲尵꛻៑픖큵랓靶게鳳ч矄ᩊ䊸ꑤ鯺䥙㶾㜏翸碎ᗲ擊즮
[  111.430075][ T8342] /dev/sg0: Can't lookup blockdev
[  111.477672][  T841] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[  111.481186][  T841] usb 6-1: USB disconnect, device number 5
[  111.629860][ T5946] Bluetooth: hci0: command 0x080f tx timeout
[  111.773577][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'.
[  111.868929][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'.
[  111.872197][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'.
[  111.875201][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'.
[  111.878313][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'.
[  112.039961][ T1473] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  112.079039][ T8384] 9p: Bad value for 'port'
[  112.191434][ T1473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  112.195542][ T1473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  112.198757][ T1473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  112.202688][ T1473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  112.208057][ T1473] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  112.216137][ T1473] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.219857][ T1473] usb 9-1: Product: syz
[  112.221611][ T1473] usb 9-1: Manufacturer: syz
[  112.223415][ T1473] usb 9-1: SerialNumber: syz
[  112.235775][ T1473] usb 9-1: config 0 descriptor??
[  112.373378][ T8391] program syz.1.681 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.427237][ T8394] syzkaller0: entered promiscuous mode
[  112.429512][ T8394] syzkaller0: entered allmulticast mode
[  112.444063][ T1473] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  112.488847][ T8396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.683'.
[  112.492672][ T8396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.683'.
[  112.532702][ T8399] ip6gre1: entered promiscuous mode
[  112.534686][ T8399] ip6gre1: entered allmulticast mode
[  112.571725][ T8403] overlayfs: failed to clone upperpath
[  112.665694][ T8411] overlayfs: failed to clone upperpath
[  112.668116][ T8411] overlayfs: failed to clone lowerpath
[  112.739352][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'.
[  112.755777][ T8416] team0: Port device team_slave_1 removed
[  112.813549][ T8417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.691'.
[  112.820942][ T6112] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  112.852540][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.857801][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.917031][ T8371] 0x0000000000ff-0x000000020102 : ""
[  112.918885][ T8371] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff01
[  112.928408][ T8371] ftl_cs: FTL header corrupt!
[  112.974026][ T6112] usb 6-1: Using ep0 maxpacket: 8
[  112.978055][ T6112] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  112.982238][ T6112] usb 6-1: config 0 has no interface number 0
[  112.985026][ T6112] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.990085][ T6112] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  112.995388][ T6112] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  113.004020][ T6112] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  113.010167][ T6112] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  113.014820][ T6112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.020795][ T6112] usb 6-1: config 0 descriptor??
[  113.033011][ T6112] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  113.241206][ T6112] usb 6-1: USB disconnect, device number 6
[  113.247857][ T6112] ldusb 6-1:0.55: LD USB Device #1 now disconnected
[  113.268592][ T8444] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  113.729837][   T40] audit: type=1326 audit(2000000046.740:33230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.712" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244719c799 code=0x0
[  113.740173][   T40] audit: type=1400 audit(2000000046.750:33231): avc:  denied  { setopt } for  pid=8489 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  113.746379][  T841] libceph: connect (1)[c::]:6789 error -101
[  113.749413][  T841] libceph: mon0 (1)[c::]:6789 connect error
[  113.837581][ T8491] ceph: No mds server is up or the cluster is laggy
[  114.183451][ T8518] program syz.1.720 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.370701][ T8532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8532 comm=syz.0.725
[  114.648224][ T5946] Bluetooth: hci1: unexpected event for opcode 0x0803
[  114.656973][ T6112] IPVS: starting estimator thread 0...
[  114.759932][ T5998] usb 9-1: USB disconnect, device number 18
[  114.770130][ T8546] IPVS: using max 26 ests per chain, 62400 per kthread
[  114.866802][ T8558] netlink: 'syz.2.730': attribute type 30 has an invalid length.
[  114.982355][ T8564] overlayfs: failed to clone upperpath
[  114.982906][ T8563] overlayfs: failed to clone upperpath
[  115.090857][   T40] audit: type=1400 audit(2000000048.100:33232): avc:  denied  { mount } for  pid=8578 comm="syz.2.736" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  115.128676][   T40] audit: type=1400 audit(2000000048.140:33233): avc:  denied  { listen } for  pid=8580 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  115.137863][   T40] audit: type=1400 audit(2000000048.150:33234): avc:  denied  { accept } for  pid=8580 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  115.165220][ T8584] libceph: resolve '0' (ret=-3): failed
[  115.174275][   T40] audit: type=1400 audit(2000000048.190:33235): avc:  denied  { name_bind } for  pid=8585 comm="syz.4.739" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  115.222096][   T40] audit: type=1326 audit(2000000048.240:33236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.4.740" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f607219c799 code=0x0
[  115.242015][ T8588] SET target dimension over the limit!
[  115.950786][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  115.950801][   T40] audit: type=1400 audit(2000000048.970:33240): avc:  denied  { bind } for  pid=8624 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.168757][ T8644] batadv_slave_1: entered promiscuous mode
[  116.186239][ T8643] batadv_slave_1: left promiscuous mode
[  116.188095][   T40] audit: type=1400 audit(2000000049.200:33241): avc:  denied  { getopt } for  pid=8645 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.229316][ T8652] netlink: 'syz.4.759': attribute type 1 has an invalid length.
[  116.232360][ T8652] __nla_validate_parse: 8 callbacks suppressed
[  116.232370][ T8652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.759'.
[  116.244908][ T8654] netlink: 'syz.1.760': attribute type 39 has an invalid length.
[  116.284989][ T8656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8656 comm=syz.0.761
[  116.335408][ T8659] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  116.337976][ T8659] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  116.395636][ T8663] netlink: 'syz.2.764': attribute type 8 has an invalid length.
[  116.398317][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[  116.399687][   T40] audit: type=1400 audit(2000000049.410:33242): avc:  denied  { wake_alarm } for  pid=8666 comm="syz.4.765" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  116.403805][ T8663] bond0: entered promiscuous mode
[  116.411394][ T8663] bond_slave_0: entered promiscuous mode
[  116.413615][ T8663] bond_slave_1: entered promiscuous mode
[  116.415652][ T8663] bridge_slave_1: entered promiscuous mode
[  116.418805][ T8663] gretap0: entered promiscuous mode
[  116.422933][ T8663] hsr2: entered promiscuous mode
[  116.458501][ T8676] team_slave_1: entered promiscuous mode
[  116.459007][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'.
[  116.460825][ T8676] team_slave_1: entered allmulticast mode
[  116.480558][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.770'.
[  116.525137][ T8684] kernel profiling enabled (shift: 63)
[  116.527119][ T8684] profiling shift: 63 too large
[  116.542178][ T8694] netlink: 'syz.2.773': attribute type 9 has an invalid length.
[  116.580529][ T8702] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.597168][ T8702] 9p: Unknown Cache mode or invalid value f�Uache
[  116.651974][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'.
[  116.683319][ T8715] binder: 8714:8715 ioctl c0306201 2000000003c0 returned -14
[  116.686563][ T8715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8715 comm=syz.4.778
[  116.688364][   T40] audit: type=1400 audit(2000000049.700:33243): avc:  denied  { ioctl } for  pid=8719 comm="syz.2.780" path="socket:[24156]" dev="sockfs" ino=24156 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  116.695346][ T8715] binder: 8714:8715 ioctl c0286405 200000000600 returned -22
[  116.850628][ T8736] netlink: 'syz.4.786': attribute type 21 has an invalid length.
[  116.853674][ T8736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.786'.
[  116.918697][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'.
[  116.931301][ T8749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8749 comm=syz.1.791
[  117.043352][ T8754] netlink: 'syz.4.790': attribute type 61 has an invalid length.
[  117.121837][ T8766] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.797'.
[  117.292406][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  117.296218][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'.
[  117.306041][ T8792] erspan1: entered promiscuous mode
[  117.308151][ T8792] erspan1: entered allmulticast mode
[  117.427021][   T40] audit: type=1400 audit(2000000050.440:33244): avc:  denied  { write } for  pid=8799 comm="syz.0.809" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  117.437765][   T40] audit: type=1400 audit(2000000050.440:33245): avc:  denied  { open } for  pid=8799 comm="syz.0.809" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  118.138699][   T40] audit: type=1400 audit(2000000051.150:33246): avc:  denied  { read } for  pid=8826 comm="syz.4.814" name="file0" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  118.149862][   T40] audit: type=1400 audit(2000000051.160:33247): avc:  denied  { setattr } for  pid=8826 comm="syz.4.814" name="NETLINK" dev="sockfs" ino=24308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  118.151582][ T8827] openvswitch: netlink: Flow key attr not present in new flow.
[  118.387060][   T40] audit: type=1400 audit(2000000051.400:33248): avc:  denied  { bind } for  pid=8844 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  118.449953][  T841] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  118.606936][ T8860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8860 comm=syz.1.824
[  118.619933][  T841] usb 9-1: Using ep0 maxpacket: 8
[  118.623163][  T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.627092][  T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.630581][  T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38688, setting to 1024
[  118.634307][  T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  118.638250][  T841] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.643912][  T841] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.647022][  T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.650012][ T8864] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  118.653745][ T8865] x_tables: ip_tables: udp match: only valid for protocol 17
[  118.671668][ T5946] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  118.674618][ T5946] Bluetooth: hci1: Injecting HCI hardware error event
[  118.678371][ T5941] Bluetooth: hci1: hardware error 0x00
[  118.699168][ T8867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.729875][ T6112] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  118.856542][  T841] usb 9-1: GET_CAPABILITIES returned 0
[  118.858446][  T841] usbtmc 9-1:16.0: can't read capabilities
[  118.893028][ T6112] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  118.897095][ T6112] usb 5-1: config 0 has no interface number 0
[  118.900033][ T6112] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.904769][ T6112] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  118.909505][ T6112] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  118.914962][ T6112] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  118.919914][ T6112] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  118.924627][ T6112] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  118.930454][ T6112] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  118.934428][ T6112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.940258][ T6112] usb 5-1: config 0 descriptor??
[  118.943422][ T8857] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  118.946709][ T8857] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  118.955772][ T6112] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  119.070887][   T40] audit: type=1400 audit(2000000052.090:33249): avc:  denied  { watch } for  pid=8828 comm="syz.4.815" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  119.152203][ T5997] usb 5-1: USB disconnect, device number 15
[  119.159972][ T5997] ldusb 5-1:0.55: LD USB Device #1 now disconnected
[  119.689271][   T73] bond0: (slave bond_slave_0): interface is now down
[  119.691884][   T73] bond0: (slave bond_slave_1): interface is now down
[  119.694359][   T73] bond0: now running without any active interface!
[  119.709648][  T793] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex
[  119.713285][  T793] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex
[  119.716279][  T793] bond0: active interface up!
[  119.920408][ T8940] netlink: 'syz.4.847': attribute type 4 has an invalid length.
[  119.966594][ T8946] overlay: Bad value for 'workdir'
[  120.004803][ T8948] fuse: Bad value for 'group_id'
[  120.006528][ T8948] fuse: Bad value for 'group_id'
[  120.294898][ T8974] netlink: 'syz.4.857': attribute type 15 has an invalid length.
[  120.363299][ T8977] netlink: 'syz.2.858': attribute type 9 has an invalid length.
[  120.365894][ T8977] netlink: 'syz.2.858': attribute type 11 has an invalid length.
[  120.368405][ T8977] netlink: 'syz.2.858': attribute type 12 has an invalid length.
[  120.445368][ T8986] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  120.448525][ T8986] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  120.516729][ T8996] netlink: 'syz.2.865': attribute type 5 has an invalid length.
[  120.600258][ T9002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.627371][ T9002] xt_hashlimit: max too large, truncated to 1048576
[  120.759951][ T5941] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  121.191356][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  121.191367][   T40] audit: type=1400 audit(2000000054.210:33254): avc:  denied  { read } for  pid=9039 comm="syz.4.879" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  121.291739][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.292528][ T9055] __nla_validate_parse: 13 callbacks suppressed
[  121.292538][ T9055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.883'.
[  121.293461][ T9056] overlayfs: missing 'lowerdir'
[  121.296808][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.306345][   T40] audit: type=1400 audit(2000000054.320:33255): avc:  denied  { setopt } for  pid=9054 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  121.381466][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.407941][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.421187][   T40] audit: type=1400 audit(2000000054.440:33256): avc:  denied  { bind } for  pid=9061 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  121.424191][ T9073] virtio-fs: tag </dev/sg0> not found
[  121.433578][ T9073] netlink: 92 bytes leftover after parsing attributes in process `syz.1.888'.
[  121.456480][   T40] audit: type=1400 audit(2000000054.470:33257): avc:  denied  { listen } for  pid=9080 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  121.516782][ T9092] overlayfs: failed to clone upperpath
[  121.521327][ T9092] overlayfs: failed to clone upperpath
[  121.524619][ T9092] overlayfs: failed to clone upperpath
[  121.526963][ T9092] overlayfs: failed to clone upperpath
[  121.529332][ T9092] overlayfs: failed to clone upperpath
[  121.531951][ T9092] overlayfs: failed to clone upperpath
[  121.534549][ T9092] overlayfs: failed to clone upperpath
[  121.536839][ T9092] overlayfs: failed to clone upperpath
[  121.539150][ T9092] overlayfs: failed to clone upperpath
[  121.542701][ T9092] overlayfs: failed to clone upperpath
[  121.546705][ T9092] overlayfs: failed to clone upperpath
[  121.551378][ T9092] overlayfs: failed to clone upperpath
[  121.554547][ T9092] overlayfs: failed to clone upperpath
[  121.557481][ T9092] overlayfs: failed to clone upperpath
[  121.563016][ T9092] overlayfs: failed to clone upperpath
[  121.566246][ T9092] overlayfs: failed to clone upperpath
[  121.569535][ T9092] overlayfs: failed to clone upperpath
[  121.576497][ T9092] overlay: ./bus is not a directory
[  121.583340][ T9092] overlay: ./bus is not a directory
[  121.586296][ T9092] overlay: ./bus is not a directory
[  121.589174][ T9092] overlay: ./bus is not a directory
[  121.593254][ T9092] overlay: ./bus is not a directory
[  121.595716][ T9092] overlay: ./bus is not a directory
[  121.597930][ T9092] overlay: ./bus is not a directory
[  121.598912][ T9095] netlink: 80 bytes leftover after parsing attributes in process `syz.1.894'.
[  121.603074][ T9092] overlay: ./bus is not a directory
[  121.603814][ T9096] netlink: 80 bytes leftover after parsing attributes in process `syz.1.894'.
[  121.609287][ T9092] overlay: ./bus is not a directory
[  121.613536][ T9092] overlay: ./bus is not a directory
[  121.616183][ T9092] overlay: ./bus is not a directory
[  121.618627][ T9092] overlay: ./bus is not a directory
[  121.619889][   T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  121.624422][ T9092] overlay: ./bus is not a directory
[  121.626757][ T9092] overlay: ./bus is not a directory
[  121.628965][ T9092] overlay: ./bus is not a directory
[  121.631235][ T9092] overlay: ./bus is not a directory
[  121.720742][ T9102] team_slave_0: entered promiscuous mode
[  121.723368][ T9102] team_slave_0: left promiscuous mode
[  121.749987][   T29] usb 5-1: device descriptor read/64, error -71
[  121.876230][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'.
[  121.878551][   T40] audit: type=1400 audit(2000000054.890:33258): avc:  denied  { remount } for  pid=9106 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  121.904622][   T40] audit: type=1400 audit(2000000054.920:33259): avc:  denied  { unmount } for  pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  121.954263][ T9114] nvme_fabrics: missing parameter 'transport=%s'
[  121.957243][ T9114] nvme_fabrics: missing parameter 'nqn=%s'
[  121.971025][   T40] audit: type=1400 audit(2000000054.990:33260): avc:  denied  { name_bind 0x1000000 } for  pid=9111 comm="syz.4.900" path="socket:[27754]" dev="sockfs" ino=27754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  121.973835][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'.
[  121.990075][   T29] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  122.015683][   T40] audit: type=1400 audit(2000000055.030:33261): avc:  denied  { create } for  pid=9117 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  122.024340][   T40] audit: type=1400 audit(2000000055.040:33262): avc:  denied  { bind } for  pid=9117 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  122.034697][   T40] audit: type=1400 audit(2000000055.040:33263): avc:  denied  { setopt } for  pid=9117 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  122.102522][ T9112] syz.4.900 (9112): drop_caches: 2
[  122.120262][   T29] usb 5-1: device descriptor read/64, error -71
[  122.167579][ T9122] loop5: detected capacity change from 0 to 7
[  122.173086][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.176537][ T9122] buffer_io_error: 40 callbacks suppressed
[  122.176547][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.182733][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.186876][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.192559][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.196557][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.200117][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.204348][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.207771][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.212087][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.215423][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.219555][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.229908][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.230671][   T29] usb usb5-port1: attempt power cycle
[  122.234294][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.240140][ T9122] ldm_validate_partition_table(): Disk read failed.
[  122.243086][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.247234][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.250800][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.254931][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.258368][ T9122] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  122.262599][ T9122] Buffer I/O error on dev loop5, logical block 0, async page read
[  122.266094][ T9122] Dev loop5: unable to read RDB block 0
[  122.268052][ T9122]  loop5: unable to read partition table
[  122.270150][ T9122] loop5: partition table beyond EOD, truncated
[  122.272230][ T9122] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  122.466048][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'.
[  122.566950][ T5941] Bluetooth: hci2: unexpected event for opcode 0x2039
[  122.586777][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  122.590112][   T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  122.590432][ T9150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.911'.
[  122.597514][ T9150] netlink: 'syz.2.911': attribute type 1 has an invalid length.
[  122.601182][ T9150] netlink: 'syz.2.911': attribute type 2 has an invalid length.
[  122.603708][ T9150] netlink: 'syz.2.911': attribute type 1 has an invalid length.
[  122.606218][ T9150] netlink: 'syz.2.911': attribute type 3 has an invalid length.
[  122.608709][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'.
[  122.610347][   T29] usb 5-1: device descriptor read/8, error -71
[  122.850613][   T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  122.875183][   T29] usb 5-1: device descriptor read/8, error -71
[  122.980884][   T29] usb usb5-port1: unable to enumerate USB device
[  123.309427][ T9209] xt_hashlimit: overflow, rate too high: 0
[  123.361736][ T9211] xfrm0 speed is unknown, defaulting to 1000
[  123.382605][ T9213] ------------[ cut here ]------------
[  123.386446][ T9213] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002)
[  123.386459][ T9213] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#1: syz.4.933/9213
[  123.394931][ T9213] Modules linked in:
[  123.397462][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT(full) 
[  123.401699][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  123.405931][ T9213] RIP: 0010:path_noexec+0x1cf/0x230
[  123.408171][ T9213] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 ba d6 7d ff 83 e3 01 e8 d2 db 7d ff 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 c2 db 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 5f ea ff e9 a3 fe ff ff e8 3a 5f ea
[  123.416477][ T9213] RSP: 0018:ffffc900066ffbd8 EFLAGS: 00010287
[  123.418986][ T9213] RAX: 00000000000000e2 RBX: 0000000000000000 RCX: ffffc900300ab000
[  123.422252][ T9213] RDX: 0000000000080000 RSI: ffffffff828ae0be RDI: ffff88803758a4c0
[  123.425442][ T9213] RBP: ffff888021dfd1a0 R08: 0000000000000007 R09: 0000000000000000
[  123.428811][ T9213] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000
[  123.432151][ T9213] R13: 0000000000000001 R14: ffff888031c3f008 R15: 0000000000000002
[  123.435466][ T9213] FS:  00007f6072fdc6c0(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000
[  123.439167][ T9213] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.442006][ T9213] CR2: 000000110c417f6c CR3: 000000005aa76000 CR4: 0000000000352ef0
[  123.445310][ T9213] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  123.448623][ T9213] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  123.452536][ T9213] Call Trace:
[  123.454028][ T9213]  <TASK>
[  123.455142][ T9213]  do_mmap+0x857/0x12f0
[  123.456515][ T9213]  ? __pfx_do_mmap+0x10/0x10
[  123.458087][ T9213]  ? __pfx_down_write_killable+0x10/0x10
[  123.460113][ T9213]  vm_mmap_pgoff+0x29e/0x470
[  123.461695][ T9213]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  123.463365][ T9213]  ? __fget_files+0x215/0x3d0
[  123.464884][ T9213]  ? __fget_files+0x21f/0x3d0
[  123.466425][ T9213]  ksys_mmap_pgoff+0x3c8/0x650
[  123.467943][ T9213]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  123.469698][ T9213]  ? xfd_validate_state+0x129/0x190
[  123.471968][ T9213]  __x64_sys_mmap+0x125/0x190
[  123.473988][ T9213]  do_syscall_64+0x106/0xf80
[  123.475909][ T9213]  ? clear_bhb_loop+0x40/0x90
[  123.477893][ T9213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.480136][ T9213] RIP: 0033:0x7f607219c799
[  123.481619][ T9213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.488047][ T9213] RSP: 002b:00007f6072fdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  123.489882][   T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  123.490933][ T9213] RAX: ffffffffffffffda RBX: 00007f6072415fa0 RCX: 00007f607219c799
[  123.496538][ T9213] RDX: 0000000000000015 RSI: 0000000000004000 RDI: 0000200000001000
[  123.499077][ T9213] RBP: 00007f6072232c99 R08: 0000000000000005 R09: 0000000100000000
[  123.501706][ T9213] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  123.504280][ T9213] R13: 00007f6072416038 R14: 00007f6072415fa0 R15: 00007ffeca542938
[  123.506911][ T9213]  </TASK>
[  123.507925][ T9213] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  123.510253][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT(full) 
[  123.513188][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  123.516649][ T9213] Call Trace:
[  123.517800][ T9213]  <TASK>
[  123.518819][ T9213]  dump_stack_lvl+0x100/0x190
[  123.520439][ T9213]  vpanic+0x552/0x970
[  123.521813][ T9213]  ? __pfx_vpanic+0x10/0x10
[  123.523376][ T9213]  panic+0xd1/0xe0
[  123.524612][ T9213]  ? __pfx_panic+0x10/0x10
[  123.526029][ T9213]  check_panic_on_warn.cold+0x19/0x34
[  123.527843][ T9213]  ? path_noexec+0x1cf/0x230
[  123.529362][ T9213]  __warn.cold+0x191/0x348
[  123.530802][ T9213]  __report_bug+0x296/0x3d0
[  123.532285][ T9213]  ? path_noexec+0x1cf/0x230
[  123.533824][ T9213]  ? __pfx___report_bug+0x10/0x10
[  123.535462][ T9213]  ? arch_get_unmapped_area_topdown+0x559/0xa50
[  123.537489][ T9213]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  123.539277][ T9213]  ? path_noexec+0x1cf/0x230
[  123.540793][ T9213]  report_bug+0xb2/0x220
[  123.542224][ T9213]  ? path_noexec+0x1cf/0x230
[  123.543764][ T9213]  handle_bug+0x16a/0x2a0
[  123.545197][ T9213]  exc_invalid_op+0x17/0x50
[  123.546764][ T9213]  asm_exc_invalid_op+0x1a/0x20
[  123.548390][ T9213] RIP: 0010:path_noexec+0x1cf/0x230
[  123.550106][ T9213] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 ba d6 7d ff 83 e3 01 e8 d2 db 7d ff 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 c2 db 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 5f ea ff e9 a3 fe ff ff e8 3a 5f ea
[  123.556154][ T9213] RSP: 0018:ffffc900066ffbd8 EFLAGS: 00010287
[  123.558109][ T9213] RAX: 00000000000000e2 RBX: 0000000000000000 RCX: ffffc900300ab000
[  123.560727][ T9213] RDX: 0000000000080000 RSI: ffffffff828ae0be RDI: ffff88803758a4c0
[  123.563421][ T9213] RBP: ffff888021dfd1a0 R08: 0000000000000007 R09: 0000000000000000
[  123.566327][ T9213] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000
[  123.569899][ T9213] R13: 0000000000000001 R14: ffff888031c3f008 R15: 0000000000000002
[  123.572716][ T9213]  ? path_noexec+0x1ce/0x230
[  123.574572][ T9213]  ? path_noexec+0x1ce/0x230
[  123.576430][ T9213]  do_mmap+0x857/0x12f0
[  123.577935][ T9213]  ? __pfx_do_mmap+0x10/0x10
[  123.579488][ T9213]  ? __pfx_down_write_killable+0x10/0x10
[  123.581352][ T9213]  vm_mmap_pgoff+0x29e/0x470
[  123.582888][ T9213]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  123.584569][ T9213]  ? __fget_files+0x215/0x3d0
[  123.586133][ T9213]  ? __fget_files+0x21f/0x3d0
[  123.587696][ T9213]  ksys_mmap_pgoff+0x3c8/0x650
[  123.589232][ T9213]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  123.590942][ T9213]  ? xfd_validate_state+0x129/0x190
[  123.592637][ T9213]  __x64_sys_mmap+0x125/0x190
[  123.594147][ T9213]  do_syscall_64+0x106/0xf80
[  123.595666][ T9213]  ? clear_bhb_loop+0x40/0x90
[  123.597226][ T9213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.599251][ T9213] RIP: 0033:0x7f607219c799
[  123.600824][ T9213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.607078][ T9213] RSP: 002b:00007f6072fdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  123.609782][ T9213] RAX: ffffffffffffffda RBX: 00007f6072415fa0 RCX: 00007f607219c799
[  123.612362][ T9213] RDX: 0000000000000015 RSI: 0000000000004000 RDI: 0000200000001000
[  123.614957][ T9213] RBP: 00007f6072232c99 R08: 0000000000000005 R09: 0000000100000000
[  123.617558][ T9213] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  123.620180][ T9213] R13: 00007f6072416038 R14: 00007f6072415fa0 R15: 00007ffeca542938
[  123.622872][ T9213]  </TASK>
[  123.624839][ T9213] Kernel Offset: disabled
[  123.626313][ T9213] Rebooting in 86400 seconds..