last executing test programs:

30.141210695s ago: executing program 0 (id=24):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r3, 0x40000000}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

30.091448687s ago: executing program 0 (id=26):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x48}, 0x94)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r3, &(0x7f0000000180)="01010101", 0x4)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
mount(&(0x7f0000000000)=@filename='./file1\x00', &(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)='incremental-fs\x00', 0x219000, &(0x7f0000000440)='},^!^FX^*)%$-:,+[]@*^\xf4\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$KVM_CAP_STEAL_TIME(r4, 0x4068aea3, &(0x7f0000000480))
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0)

30.08968045s ago: executing program 0 (id=27):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x47, 0x2, 0x12, 0x66b, 0x5, "00000000000000800000004900008000790008"})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x8f)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000180)={0xfffffff7, 0x6003ff, 0xfffffff9, 0xc4cf, 0x9, "00000881dc06be9d0400b70001ffff00", 0x240000, 0x1fd})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000640)=0x8)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x7)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x26, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x7}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x48034)

30.009205426s ago: executing program 0 (id=28):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1], 0x1})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x1b800ac, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000080))
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x28e5291, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

29.945998134s ago: executing program 0 (id=33):
fanotify_init(0x2, 0x400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
io_uring_enter(r1, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
r2 = syz_io_uring_setup(0x6e3f, &(0x7f0000000240)={0x0, 0x58b6, 0x4000, 0x0, 0x1fd, 0x0, r1}, &(0x7f0000000000), &(0x7f00000002c0))
syz_io_uring_setup(0x4098, &(0x7f0000000300)={0x0, 0x3763, 0x200, 0x2, 0x291, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0))
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
syz_pidfd_open(r3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xcc0, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28.31057641s ago: executing program 0 (id=71):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) (async)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) (async)

28.237051903s ago: executing program 32 (id=71):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) (async)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) (async)

1.444678444s ago: executing program 2 (id=484):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x7040, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x12)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chroot(&(0x7f0000000000)='./bus\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

1.37176656s ago: executing program 2 (id=487):
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
close(r0)

1.302049807s ago: executing program 2 (id=490):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}})

1.202193254s ago: executing program 3 (id=494):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f00000002c0)={0x4000, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1.201965361s ago: executing program 2 (id=495):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
ptrace(0x4207, r0)

1.012249982s ago: executing program 4 (id=499):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x70000, 0x2000, &(0x7f0000001000/0x2000)=nil})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x20008040)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x70000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x20008040) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

710.830627ms ago: executing program 4 (id=502):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ftruncate(r3, 0x80796c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

631.715558ms ago: executing program 4 (id=505):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ppoll(&(0x7f0000001780)=[{r0, 0x2108}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

520.998121ms ago: executing program 4 (id=506):
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r3, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000540)={@mcast2}, &(0x7f0000000580)=0x14)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="5cf6b6a9d1eca53932ccb4965fbe659ec32c32d3b98260bc49c2c5ab44500be70084ab25c4e00660211bf60ddacc809c91e82f054188838e599bb6bd8addfa02d619f8720753a85a1966b71f59573806a44a2cc9a6028e0aa64f6ccac2a20b876c14b824d2a91242a2f351584f2007011bd78873f9efc1e19d5fd9f898", 0x7d}, {&(0x7f0000000300)="c2c8d66a8e7ec6b615f9389985c505e3387dfe684b6793f35b9171bcc077381db282d1f56770316b4bb61d5ea16ce8f3b9c1df3872e1873506d31950bd1ccfbe7434807ae3", 0x45}, {&(0x7f00000003c0)="5a73de92a044f4c765fa40547757bf133f41969df3216de30fedd7a5ccdce1a7fa8bd49b29768fc953045ab5247d51454cb8592f629fa6b4f134a45abb5c6007f15878e41f77", 0x46}, {&(0x7f0000000440)="1a8d2b84b8b173871676746f32a01fa25eb2cbf2d3f053dea9064228b426d21707f0ecdff52d83b3b28f8211d84d725fe071d760a8b1fe6d95e9c631c58fa1532e7c99392752d21e67d71c0b14e51d94aa1bf9932157335dc2508af1591c4b0138dcf924cd7c13b3", 0x68}], 0x4, &(0x7f0000000780)=[{0xb8, 0x8290ab580de921be, 0x7, "4d10cdd5b551cbcbd5addee6c306d28ec64714437e273f89a010249585c73e385d86329bcfbf15e40ae63acaad5bc295aae542d7b0b3ffc28c5167d35f035cc942cad5e1e10a6d6e13b09ee46998bd5b7bc246b2dc928a461357f55f5b1f14bd5a5a604f1e2b6be8aebbab0603842cb839a28dd3ecdb6de20326e53aa4826fd29c6a04ee84d2a990316a2f1f361c461fe1cddee300b09008991cc7334e4f9639c5a50e"}, {0x40, 0x111, 0x10, "a104418d882c78d152b6cc9196f8372b4f52bf4620b96a027d630987567138d1b15c157dc796bb29517343eb970ad74e"}, {0x80, 0x10b, 0x3, "b2a84ac67dd57bf4dea1f6236d94dafc401dd0ad5da0d92b2e9e2eaa247e4f7cf447b71d7e964926dc69698c72dca8c5d884f8df350e263620617bfb9d8096c2a7b46fc24f6d41c6682d81089982b7ef92524e83d12d6ba7ed883529080220c98d6d3e5bd3fd4b8a236734badaa22bf7"}, {0x48, 0xf87f3473e94ea196, 0x7, "d840eb7517504bf790725dc36a7b504eb6f1c1daece221cc6d2dd8f8eb9ce9a5ee44f04b7dd9caf6e0a719ddf45059d171d8"}], 0x1c0}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

356.345504ms ago: executing program 3 (id=509):
modify_ldt$write2(0x11, &(0x7f0000000100)={0x8, 0x1000, 0x0, 0x1}, 0x10) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = syz_clone(0x280000, 0x0, 0x4e, 0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1a43) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x1)
fcntl$setlease(r5, 0x400, 0x0) (async)
shutdown(r5, 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$P9_RGETLOCK(r6, &(0x7f0000000040)=ANY=[], 0x200002e6) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0xafe8) (async)
fcntl$setpipe(r6, 0x407, 0x7000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x2)
r8 = syz_clone(0x242106c669e1c0b0, &(0x7f00000002c0)="2b50510de22e5594832bb39d9083ea138ce5f648450ade33862397e2d5c726d1df3e789ad864a643d13dc3e91ed31cd5e1f40b78e178e2737bc9aea9ed9b3f1e01a1718c2b19a3a4a8c9c4939a689062f778e0d2803eb14dca8446c8e479295119210c5bad28dd20006aec52953fd76e33658ba0cf145240b44efe8c38e6907bdef67bbc5d57657b006da55fd59143a58f7e0ffa857ca13e8affa182475f515489257edf8587b058c8d0b448674851863024c9b1b10996a20a35ca1c097152", 0xbf, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000480)="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")
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc0106442, &(0x7f0000000000)) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={<r10=>0x0, 0x400}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000240)={<r11=>r10, 0x5c, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x2, @empty, 0x7b}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000400)=0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYRESHEX=r4, @ANYBLOB="c4389853fee3c48ffa37a133f3d380cced53bcf0fe7ba6fa707d1355d2c88a76a39debe0df21702c9d4f252e2eeb7589d682f6ebe847a33dffe02c8f33f99d01c242005fb0b63349bf0f96a276d4328e09d5d3434eb0639a32b17b3704166dd3e757d284b3f83520e2965631940538d688f2a0b44ae5ef07ea97824fe99a72fdad9b22beff4487c779cfc25a856e46633a55c3d858bea4a444fd44283098f1e4d21dee06d45c5357c277ab2c81d13f", @ANYRESDEC=r0, @ANYRESHEX=r7, @ANYRESHEX, @ANYRES16=r11, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRESHEX=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48041}, 0x40400c1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
close_range(r2, r2, 0x0)

356.157047ms ago: executing program 1 (id=510):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setfsuid(0xee00)
setresuid(0x0, 0x0, 0xffffffffffffffff)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x282882, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0)
sendto$netrom(r2, &(0x7f0000000080)="b8f6efc5dd3b3f70aae89b60f4a35265a15013f9d27f72a272de5d0589a6b47d6038cea74a7ddaea0f347bfee06fac4441137e2226aa90690cf60bbd4fa12cc3fbddb8fd837a4fe26c32dd8d99d7f4a4cdec5127445c2386c45c3e1bb9c66d775214876f1be82b84d5de741438ef3c8d0dfbc4be10e84e2d940d256bcb579c6cd9dee38a8d50de82b8aa918179edda35f79a03afc5237715730c8f8bb35682817c37d71ca779261e095ff070126e629e85cbe1dff5f95c1b7e3fedfdfc829f1b52beab5c637fc26a0b9e51740f499e3d8e6b659353263a5afa7427f23100445883c0000a161232de5118dae4", 0xec, 0x8880, 0x0, 0x0)

289.463182ms ago: executing program 2 (id=511):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x1, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

289.093054ms ago: executing program 3 (id=512):
r0 = open(0x0, 0x0, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x371c00, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 64)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', r1, &(0x7f0000000100)='./file7\x00', 0x400) (async, rerun: 64)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x26, 0x4, @tid=r3}, &(0x7f0000000180))
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))

232.125031ms ago: executing program 1 (id=513):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

230.526191ms ago: executing program 3 (id=514):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r1, r0, 0x0) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x80001) (async)
recvmmsg(r3, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001740)={0x4, 0x4, {0x0, @usage=0x7, 0x0, 0xffffffffffff94fd, 0x7d, 0x6, 0x3, 0x7, 0x81, @struct={0x1ff, 0x1}, 0x1, 0x4, [0xffffffffffffd69a, 0x6, 0x38, 0x9, 0x3b02, 0x63]}, {0x9, @usage=0x8, <r4=>0x0, 0x0, 0x6, 0x200, 0x8000000000000000, 0x10, 0x9, @usage=0x7, 0xffff, 0x2, [0x8575, 0x4, 0xffffffffffffffff, 0x4, 0x2, 0x5]}, {0x58, @usage=0x7f, 0x0, 0x8000, 0x4, 0x7, 0xfffffffffffffff9, 0x9, 0x400, @struct={0x5, 0x2}, 0x4, 0x1, [0x1, 0xd539, 0x7ff, 0xffff, 0x7, 0x1]}, {0x6429, 0xae93, 0x2e}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0x9, 0x4, {0x5, @usage=0x7, r4, 0x0, 0x0, 0x6, 0x0, 0x1, 0x62, @struct={0x7fff, 0x3eff}, 0x3, 0x4, [0x7, 0x3, 0xd, 0x10, 0xc0, 0x5f67]}, {0x0, @usage=0xa71, <r5=>0x0, 0x2, 0x0, 0x6, 0x69f, 0x4, 0x400, @usage=0x80000000000005, 0x8cd, 0x7d9, [0xfa1a, 0x3, 0x7fffffffffffffff, 0xf8, 0x9, 0x7]}, {0x46, @struct={0x5, 0x218}, 0x0, 0x2, 0x8000, 0xfe00000000000000, 0x6, 0xab70, 0x414, @struct={0x3f8fd5a2, 0x4}, 0x8, 0x4, [0x10, 0x2, 0x40, 0x4, 0x6, 0x5]}, {0x9, 0x6, 0x2}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000740)={r5, "bf3fad502f118ab6b4ce7a7e83f97a9d"}) (async)
r6 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc)

152.174568ms ago: executing program 4 (id=515):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2c10e6263b18471f5ac5d72b373e555e923018dd48ba6a016ccbf8ad2d8806b8c1196eb1058a17e77183370a97fdc2287e0f9e38b6b77d0226a5627b5e39374cc3e5995c8bbf0834e190d51d7ebf997704cd41993dc3f8e88fe45b09e683808e9ff1c7db86d1d9451612468196e08df5dffff4702950fec027591ac30c677ca86b0954b7a6662c0cb2c7fc9b06769636", 0x90}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

151.548775ms ago: executing program 1 (id=516):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000700ddff09000000000000100c000000010000000000000205000000002e002e2e5f009d31465b31e726c21d277d57d997d14661fb9dcb99913df83242e5ea41956ba6af591507a71e4566ea07051119aa1482de929b8e4318561fed21e9eb666419281e7d42ccc3246648e029f128805d9c525bc1351bcbece471ed6c2cc989688bd3ac0d914db8388439e5158cd993baf3268ce970c1ce3e10ceeb56aaceaf2da089d2c9df28fa49eb75388af1a2a3c829a46e379b678e67c092d13855cc5ac8701034dab5c2b90a282cef529dce231b08163ede"], &(0x7f0000000180)=""/199, 0x37, 0xc7, 0x1, 0x81, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

92.027809ms ago: executing program 1 (id=517):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f00000002c0)={0x6000, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

91.011607ms ago: executing program 3 (id=518):
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x20000, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x3, &(0x7f0000000080)=[0x2, 0x40000, 0x100], 0xa9b5, 0x2, 0x1})
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000140), 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x1060, 0x0, 0x5, 0x5, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x3, 0x10000}, 0x3, 0x4, 0x7f, 0xd, 0x2, 'syz1\x00', "1f1ef7dd3aba227eee69941c9e8a59c7ffa6d396ec708dbbf1167f66038632b2", "3b6d76c393cc976875c49a5c508a7cbf0f66444af0de4b968257cfdd7ecf69ab", [{0x4, 0x1ff, {0x2, 0x8000}}, {0x3, 0x7, {0x1, 0xffff}}, {0x8, 0xacc, {0x1, 0xffffffdf}}, {0x8, 0x9, {0x2, 0xfffffffc}}, {0xe000, 0x4, {0x2, 0x7fff}}, {0x40, 0x0, {0x3, 0x6}}, {0x100, 0x4, {0x0, 0x36d1}}, {0x59, 0x9, {0x0, 0x80000001}}, {0xb3e, 0xa3ef, {0x3, 0x3}}, {0x4480, 0x401, {0x3, 0x4}}, {0x1, 0x92aa, {0x1, 0x6}}, {0xcc3, 0x1, {0x0, 0x3}}, {0x3, 0x81, {0x3, 0x6}}, {0x9, 0x3, {0x2, 0xd1}}, {0x9, 0x400, {0x3, 0xc}}, {0x5, 0x6d, {0x0, 0x6}}, {0x0, 0x8, {0x0, 0x80000001}}, {0x0, 0x1, {0x2, 0x9}}, {0x8, 0x12, {0x2, 0x6}}, {0x9, 0x4, {0x3, 0x401}}, {0x1, 0x1000, {0x2, 0x6}}, {0x9, 0x401, {0x1, 0x8}}, {0x2, 0x8, {0x3, 0x3ff}}, {0x6c15, 0x2, {0x0, 0x8}}, {0x4c2, 0x40, {0x1, 0x6}}, {0x6b1, 0xe8fa, {0x0, 0x82f}}, {0x6, 0xfff5, {0x1, 0x7}}, {0xfffb, 0xfff, {0x3, 0x8}}, {0x2, 0x7, {0x1, 0x1ff}}, {0x9, 0x0, {0x2, 0x9}}, {0x9, 0xe9, {0x2, 0x1}}, {0x4, 0x3, {0x1, 0x3}}, {0x0, 0x2, {0x3, 0x10001}}, {0x5fc4, 0x8, {0x3, 0x8}}, {0x4, 0x7, {0x3, 0x9}}, {0x7, 0x7, {0x1}}, {0xeb, 0x1, {0x0, 0x40}}, {0x7, 0x1, {0x0, 0x1}}, {0x6, 0x7, {0x0, 0xfffffff8}}, {0x4, 0x1}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x3, 0x0, 0x6, 0x800, 0x17, 'syz1\x00', "8e4ffc1b899b480d77789305acbf3382020a9297f7e207585cbc887e97fa0420", "0baa9b10a5228cebb948db7b0700cf9f6600c0eb498e1b7b28c7cb846c7f12f3", [{0x5, 0x4, {0x1, 0xe4}}, {0xf6c8, 0x8, {0x1, 0x42}}, {0x1, 0xfff8, {0x3, 0x6}}, {0x0, 0x3, {0x2, 0xffff0000}}, {0xab66, 0x1, {0x0, 0x41}}, {0x81, 0x4, {0x0, 0x735}}, {0x8000, 0x7, {0x1, 0x3}}, {0x7f, 0x4, {0x2, 0x4}}, {0x7d, 0x7, {0x2, 0xdfc}}, {0x4, 0x6, {0x3, 0x7}}, {0xc, 0x4, {0x2, 0x2}}, {0x5, 0x3ff, {0x2, 0x9}}, {0x8, 0x8001, {0x3, 0x1c}}, {0x1, 0x5, {0x2, 0x8}}, {0x1, 0xfff9, {0x1, 0x80}}, {0x5, 0x0, {0x1, 0x9}}, {0x1, 0xc9, {0x2, 0x2}}, {0x9, 0x5, {0x3, 0x1}}, {0x4446, 0x400, {0x3, 0x10000}}, {0x1, 0x1, {0x1, 0x1}}, {0x0, 0x81, {0x1, 0x1bc}}, {0x8, 0x3bf2, {0x2, 0x2}}, {0x6, 0x46d, {0x0, 0x80}}, {0x7, 0x3, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x830}}, {0x6, 0x5, {0x1, 0xd7}}, {0x101, 0x101, {0x3, 0x900000}}, {0xa013, 0x0, {0x1, 0x261}}, {0x5, 0x1, {0x2, 0x2}}, {0x780, 0xb, {0x3}}, {0x5, 0x40, {0x1}}, {0x5, 0x7fff, {0x3, 0x401}}, {0x1, 0x2, {0x1, 0x1}}, {0x3, 0x80, {0x0, 0x5}}, {0x1, 0xfff7, {0x2, 0x3ff}}, {0xd, 0x1, {0x3, 0x800}}, {0x0, 0x3, {0x3, 0x4}}, {0x0, 0x1ff, {0x2, 0x5}}, {0x9, 0x6, {0x0, 0x8}}, {0x800, 0x2, {0x1, 0xd}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x4, 0x2, 0x24e8, 0x6d, 0x1, 'syz1\x00', "69a500626b2118f39293f148047b3f104e9fb2b9d24cd90a27c423df61cf1e28", "4d5dc7042d8962d11a8c37e098d5587fd301501dde7f311c7c3a92dc2cf03d0f", [{0x344d, 0xff, {0x3, 0x7}}, {0xad8, 0x9, {0x3, 0x1}}, {0x6f, 0x0, {0x1, 0xf}}, {0x382e, 0x4, {0x3, 0x3}}, {0x3, 0x8, {0x2, 0x3}}, {0x6, 0xa, {0x3, 0x9}}, {0x3, 0xa32, {0x2, 0x3}}, {0x9, 0x6, {0x0, 0x9}}, {0xf572, 0x800, {0x0, 0x3}}, {0xdf97, 0xf77b, {0x1, 0x7fffffff}}, {0x8, 0x7, {0x2, 0x5f0}}, {0xfeff, 0xa5, {0x1, 0x792}}, {0x3, 0x9, {0x2, 0x5}}, {0x1fe0, 0xfff9, {0x1, 0x56}}, {0xf9a, 0xffc1, {0x1, 0x4}}, {0x4, 0x4, {0x0, 0x10}}, {0x8, 0x9, {0x1, 0x8}}, {0x9, 0x5, {0x3, 0x1}}, {0x10, 0x3ff, {0x1, 0x1}}, {0xc544, 0xffff, {0x0, 0xab1f}}, {0x3ff, 0x1, {0x0, 0x9}}, {0x7ff, 0xd, {0x1, 0x5}}, {0x1, 0x100, {0x2, 0xc}}, {0x8, 0xce, {0x0, 0x5}}, {0x2, 0xe, {0x2, 0x81}}, {0x3, 0x4, {0x0, 0x10001}}, {0x9, 0x800, {0x1, 0x4}}, {0x4f76, 0x4, {0x2, 0x3ff}}, {0x0, 0x9bd, {0x3, 0x1}}, {0x5, 0x4845, {0x3, 0x6}}, {0x8, 0x8}, {0xa, 0xf, {0x0, 0x7fff}}, {0x1ff, 0x40, {0x0, 0x80000000}}, {0x1000, 0x8000, {0x2, 0xfffffff9}}, {0x6, 0x6, {0x3, 0x5}}, {0x7, 0x24, {0x1, 0xa}}, {0x0, 0x5, {0x1, 0x80000000}}, {0x5, 0xb7d, {0x0, 0xac12}}, {0x1, 0x101, {0x3, 0x101}}, {0x5, 0x7, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x7, 0xc, 0x1, 0x695d, 0x20, 'syz1\x00', "c7327b335f332dc8069b095e443a9f44f3b74fb55afbf24ee642c99fa844af6d", "fc1014cd29e9ff65ce1ae7cd349cda5fc55efc5609992e6bcf983222dfe44219", [{0x6, 0x1, {0x2, 0x31f052c6}}, {0x4, 0xfff7, {0x1, 0x9}}, {0xff4b, 0x7, {0x3, 0x476e4789}}, {0x1ff, 0x7, {0x0, 0x4}}, {0x1, 0x3, {0x3, 0x8001}}, {0x1, 0xa, {0x1, 0x3ff}}, {0x52f, 0x9, {0x0, 0x3}}, {0x348, 0x1, {0x3}}, {0x1, 0x76, {0x1, 0x6}}, {0x6, 0xc, {0x2, 0x2}}, {0x3, 0xa978, {0x2, 0x4}}, {0x2, 0xffff, {0x2, 0x101}}, {0x3, 0x1, {0x1, 0x5}}, {0x3, 0xde30, {0x2, 0xda}}, {0x4, 0x1, {0x3, 0x350a}}, {0xfc, 0x7fff, {0x0, 0x10}}, {0x8, 0x60d5, {0x2}}, {0xfffa, 0x400, {0x3, 0x40000000}}, {0x0, 0x5, {0x1, 0x39}}, {0x4, 0x5, {0x2, 0xe}}, {0x5, 0x5d33, {0x3, 0x8}}, {0x2, 0xfff, {0x1, 0x4}}, {0x1, 0x8cd7, {0x3, 0x2}}, {0x947, 0x7fff, {0x3, 0x103}}, {0xd600, 0x100, {0x3, 0x4}}, {0x10, 0x9, {0x2, 0x3b}}, {0x1, 0x5, {0x2, 0x9}}, {0x7, 0x3, {0x2, 0x8}}, {0x7811, 0x87b7, {0x2, 0xca}}, {0x3, 0x6, {0x3, 0x2}}, {0x1, 0x0, {0x0, 0x9}}, {0x6cca, 0x2, {0x1, 0x1}}, {0x5, 0xb04b, {0x1, 0x8}}, {0x3, 0x0, {0x0, 0x64cfacbb}}, {0x3, 0x6, {0x0, 0x101}}, {0x79, 0x101, {0x1, 0x85b}}, {0x5, 0x6, {0x2, 0x1}}, {0x6e, 0x1d5, {0x0, 0x5}}, {0x9d, 0xfffc, {0x1, 0x8000}}, {0x3995, 0x0, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x80, 0x7, 0xf, 0x3, 0x1, 'syz1\x00', "ac2e00e0efbf92128638d884992b4528638bcad16b6209104a4188ba7a4b8b46", "2118ba107c127bc283a7d8bbf343a727714d2febf35bb571d6c817873c503535", [{0x200, 0x5, {0x3, 0xe17}}, {0x0, 0xadea, {0x3, 0x2}}, {0x7, 0x0, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0xffff8c3a}}, {0x81, 0x10, {0x3, 0x4}}, {0x4, 0x81, {0x0, 0x3ff}}, {0xff, 0x37, {0x0, 0x7}}, {0x7, 0x8, {0x0, 0x84}}, {0xa5, 0x8, {0x0, 0x3}}, {0x8000, 0xfc59, {0x2, 0xa19}}, {0x1, 0x800, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x7}}, {0x6, 0x2, {0x3, 0x80000001}}, {0xff7c, 0x200, {0x3, 0x80000000}}, {0x7ff, 0x753c, {0x1, 0x6}}, {0x8c45, 0x4ebd, {0x0, 0x8}}, {0x80, 0x9, {0x1, 0x7}}, {0x2, 0x0, {0x1, 0x1}}, {0x0, 0x0, {0x1, 0x80000001}}, {0x6, 0x1, {0x3, 0x7}}, {0x8, 0x4, {0x2, 0x3}}, {0x8, 0xe, {0x2, 0xfffffff9}}, {0x200, 0x7, {0x2, 0x4}}, {0x9, 0x40, {0x0, 0x10}}, {0xa2, 0xea3, {0x2, 0x4}}, {0x6, 0x8, {0x3, 0x9}}, {0xe, 0x9, {0x1, 0x8}}, {0x61c, 0x3, {0x1, 0x5}}, {0x7ff, 0x1, {0x2}}, {0x0, 0xffff, {0x0, 0x61}}, {0x401, 0xfffa, {0x0, 0x7}}, {0xfffe, 0x800, {0x1}}, {0x7, 0x1382, {0x1, 0x1ef}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x9, {0x1, 0x5}}, {0x2, 0x2, {0x2, 0x7}}, {0x7, 0x101, {0x2, 0x8}}, {0xffff, 0x5, {0x3, 0x8}}, {0x7fff, 0xb15, {0x3, 0x7}}, {0x89, 0x1, {0x0, 0xbf5}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x41, 0x0, 0x4, 0x8, 0x25, 'syz0\x00', "eed74b3dc7e5253b69cd4625ba3bb3282bd4bbbc3de8afca706960aabb26e693", "a483f9ef8064f501828cbb5594254b5c90b2ebd0d84a0f154b650f39647c838c", [{0x680, 0x4, {0x0, 0x6}}, {0x3, 0x6, {0x3, 0x9}}, {0x6, 0x1, {0x0, 0x3}}, {0x540, 0x2, {0x1, 0x1}}, {0x80, 0x9, {0x3, 0x6}}, {0xc957, 0xaec5, {0x1, 0xf5fb}}, {0x7f, 0x3, {0x2, 0xf}}, {0x6, 0xfe00, {0x3, 0x2}}, {0x400, 0x1b, {0x1, 0x80000000}}, {0x7, 0x0, {0x3, 0x7}}, {0xa1a, 0x6, {0x0, 0x5}}, {0x3, 0x4, {0x5f9ac8a689ffabdb, 0x1}}, {0x6, 0x2, {0x3}}, {0x25, 0x5, {0x2, 0xd9}}, {0xa, 0x1, {0x2, 0x8000}}, {0x1, 0xff7f}, {0x7, 0x9, {0x0, 0x4}}, {0x7, 0xfa9, {0x0, 0x56}}, {0x2, 0xfffd, {0x1, 0x3}}, {0x8, 0x99, {0x3, 0x3221c353}}, {0x1, 0x6, {0x3, 0x6}}, {0x6, 0x66, {0x0, 0x80000001}}, {0x3ff, 0xff, {0x3, 0xfff}}, {0x4485, 0x3, {0x1, 0x1}}, {0x0, 0x0, {0x1, 0x8}}, {0xf96, 0x0, {0x0, 0x9}}, {0x9, 0x3, {0x2, 0xc}}, {0x9b6a, 0x4, {0x0, 0x10000}}, {0xb889, 0x9, {0x0, 0x2}}, {0x51, 0x0, {0x2, 0x2}}, {0xa2a, 0x9, {0x3, 0x1}}, {0x1281, 0x686a, {0x3, 0x9}}, {0x3, 0x4}, {0x9, 0x3, {0x3, 0x2}}, {0x7fff, 0xf, {0x0, 0x5}}, {0x7, 0x92, {0x2}}, {0x4069, 0xe, {0x0, 0x1}}, {0x84, 0x5, {0x1, 0x3}}, {0x8, 0xfffe, {0x0, 0x2}}, {0x1, 0x101, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x6e1ab631fa667a71, 0x2}, 0x1, 0x3, 0x7, 0x0, 0x14, 'syz1\x00', "9a5359ba1115a3f8a68890921996f3411e05fb47df2bc0ac4b9202c9b798a5db", "7d8583f9b402425f58d28f1fdde47054d918141f03d35cef58b8e0aaf9784031", [{0x6, 0x172, {0x2}}, {0xb9e, 0x64e, {0x3, 0x6}}, {0x1, 0x1ff, {0x2, 0x4}}, {0x1, 0x9, {0x1, 0x8}}, {0xfffe, 0x9, {0x2, 0x5}}, {0xcb6, 0xe, {0x1, 0x1}}, {0x9, 0x4, {0x1, 0x2}}, {0xa, 0xfffd, {0x0, 0x5}}, {0x3, 0x9d5, {0x0, 0xe}}, {0x5, 0x3ee, {0x2, 0x7}}, {0x7fff, 0x9, {0x3, 0x2}}, {0x1, 0x5, {0x3, 0x80}}, {0x7f, 0x0, {0x1, 0x1}}, {0x4, 0x3, {0xfb9fd08241670d72, 0x7fffffff}}, {0xfff7, 0x4, {0x2, 0xeec8}}, {0xeaf7, 0x5, {0x3, 0x9}}, {0x7, 0xfffc, {0x1, 0xb}}, {0x1, 0x4c8, {0x1, 0x1}}, {0xffff, 0x2, {0x3, 0x8}}, {0xaa4, 0x8, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x5}}, {0xfffa, 0x3019, {0x2, 0x4}}, {0x80, 0xf52, {0x1, 0x3}}, {0x3, 0x1, {0x1, 0x10001}}, {0x5, 0x10, {0x2, 0xf}}, {0x7fff, 0x0, {0x0, 0x5b50}}, {0x3, 0x4, {0x2, 0x2}}, {0xfffd, 0x4, {0x3, 0x80000000}}, {0x1, 0xd12c, {0x0, 0x8}}, {0x8f00, 0x0, {0x2, 0x8000}}, {0x3f, 0x8, {0x3, 0x3}}, {0x8, 0x0, {0x2, 0xfffffffb}}, {0x8, 0x8001, {0x1, 0x6}}, {0x80, 0x7, {0x3, 0x4}}, {0x2, 0x3, {0x1, 0x1}}, {0x3, 0x4, {0x1, 0xc}}, {0xff, 0x2, {0x0, 0x3}}, {0x401, 0x100, {0x0, 0x2}}, {0x0, 0x5, {0x2, 0x4}}, {0x5, 0xdab, {0x2, 0x8}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000012c0)={0x7, &(0x7f0000001280)=[{0x0, 0x7, 0x4, 0x4}, {0x3, 0xe, 0x7, 0x64f}, {0x8, 0x9, 0xe, 0x1}, {0x9, 0x0, 0x3f, 0x3}, {0x7, 0x0, 0x9, 0x7}, {0x1ff, 0x4, 0x38, 0x1}, {0x3, 0x26, 0x2, 0x9}]})
r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/sctp\x00')
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000001340)=0x2, 0x4)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000001380)={0x6, 0x2})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r3)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x60, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x63}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r5 = socket$xdp(0x2c, 0x3, 0x0)
pipe(&(0x7f0000001540)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000001580)=""/4096, &(0x7f0000002580)=0x1000)
fanotify_mark(r3, 0x800, 0x8000002, r3, &(0x7f00000025c0)='./file0\x00')
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000002600)={<r9=>0x0, 0x6}, &(0x7f0000002640)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000002680)={r9, 0x6, 0x30}, 0xc)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000002740)={'ip_vti0\x00', &(0x7f00000026c0)={'erspan0\x00', <r11=>0x0, 0x20, 0x10, 0x3, 0x5443, {{0xb, 0x4, 0x0, 0x30, 0x2c, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@timestamp={0x44, 0x18, 0xe6, 0x0, 0x2, [0x1000, 0x5, 0x3, 0x0, 0x80000000]}]}}}}})
setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000002780)={r11, @multicast2, @loopback}, 0xc)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000027c0)={<r12=>0x0, <r13=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000002840)={r12, 0x3, r2, 0x13, 0x80000})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002880), 0x90000, 0x0)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000028c0))
ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000002900)=r13)
setsockopt$inet_int(r10, 0x0, 0x12, &(0x7f0000002940)=0x7, 0x4)
r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0)
r16 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0)
r17 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002b40), 0x41, 0x0)
sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002980)="2fab27cdd4a896c9e39341288cf37b4bb12b1105db8763f1afd5d88a35ac91b451289a6dccf8ca3d033fd61ea40aa2a10351c34e0c03323de1e147dbe171727e14a14cbaa1629d5a8605f3919da637304f6c42a067734b9da4c867f4891bc9fe63df16226dff1f5d69ca75bda1373bc8d6906f83cd82b563cb7cf68660ea39b87ef66448a7c58e99480e268cf008787ad3d11a8c976e7c53c33817e6c817c5844fd3e3569d97e74ab32558ddf432d70da04214707fa9c57a8fc3cc67466441253a0829e861dcba7c38f3de999ad34e9428c9bc56aa520debda97c138a2c9", 0xde}], 0x1, &(0x7f0000002c80)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r1, r10, r5]}}, @rights={{0x1c, 0x1, 0x1, [r1, r15, r3]}}, @rights={{0x34, 0x1, 0x1, [r7, r16, r1, r5, r0, r1, 0xffffffffffffffff, r5, r7]}}, @rights={{0x30, 0x1, 0x1, [r2, r8, 0xffffffffffffffff, r3, r17, r3, r14, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r10, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r14, 0xffffffffffffffff, r14]}}], 0xf8, 0x20000000}}, {{&(0x7f0000002d80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002e00)="36bb5d68aa177a1410437fbc8af421a03d152f327c39b1b61a1afe3814a440eb5593000c361ab36d2f72cd41666ed8656060b10a4e5c70d0ae71220e8775044a11881b80c54297608f80a504b56f8eba7ce8694492", 0x55}], 0x1, &(0x7f0000002ec0)=[@rights={{0x18, 0x1, 0x1, [r10, r7]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r7]}}], 0x50, 0x4000004}}, {{&(0x7f0000002f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002fc0)="0aa41d727e391a11f6be672568573cdc41ae8068b3ae20f84e38d5f89e17364de55679ab87b9d86e5f2c513a0919926f6e9a40c36cd047efd7dab9c2df1f665cfab918da9565dffdac4981d873", 0x4d}, {&(0x7f0000003040)="702bf44f78b71146d8365e6edac3a415badd1d3b2c9cb51b21b989821f445bbc332aee34764a5a8f8590ec453719b7ed08847a7158b642db9f7cf6b8b54c981e84ef664ea15ee36fc3d9c4da2c4105999d032ae8dc89c2bfcae19b65abe972fd56d07cc346f457b16921f0b2be3ecd349fb2c3d560eb2dc237dcb236b600bbe4aa894534bebe8e57336c45176d0523b254ab7fade45dd3651131fec5cbc3dd", 0x9f}, {&(0x7f0000003100)="60a4fdffe9c76687270000f1a2220794ed56302d11e3ce", 0x17}], 0x3, 0x0, 0x0, 0x10}}], 0x3, 0x4)

89.010006ms ago: executing program 1 (id=519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x82, 0x0)

1.602455ms ago: executing program 3 (id=520):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/235, 0x4}, 0x20)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x5c}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x20a441, 0x0)

1.009012ms ago: executing program 1 (id=521):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents(r0, &(0x7f0000000000)=""/34, 0x22)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0xa5b, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x4a, 0xb1, 0x5b, 0x0, 0xb3c, 0xc004, 0x5b2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa49, 0x2, 0x6, 0x8, 0x30, 0x9, [{{0x9, 0x4, 0x3f, 0x9, 0x5, 0xab, 0xb1, 0xd1, 0x0, [@hid_hid={0x9, 0x21, 0xfff7, 0xa, 0x1, {0x22, 0x9e2}}, @uac_control={{0xa, 0x24, 0x1, 0xfffd, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0x4, 0x8000, 0x8, 0xfe}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x10, "5a726adf2b85"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x6, 0x3, [0x7, 0x5, 0x9], 0x7f}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x7, 0xfa, "7cb7ee752b"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x5, 0x6, 0x80}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x6, 0x7}]}], [{{0x9, 0x5, 0xe, 0x1, 0x0, 0x8, 0x8, 0x4, [@generic={0x57, 0xf, "799b8cd7c28344d644576a65d41412560dd36f4eca829469cd2b2ab5309206c97d1882888230b027353c5f5a1ce90c3d29ec29b0da9b416d3398cecd4685cc8e26d00e30e9e287e6a2f323cd90f7ffab87c974f657"}, @generic={0x86, 0x1, "43062f027e31140edc7206721d2d2099e13ac81f9e9c70d0a293e95dae7d772c1619c0d0711084ef8429969160fe427e1982363b5ddcafbe0abd9f4aa948476d6fb23915198e08cdac84ab339663abd105e6f6da0a7368556d0661ea8b67d281d6073f8eb320e1c82ddb0f1ea767f9d15574295de7c986f44b77b1573164392ba6da3d87"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x35, 0xc, 0x4, [@generic={0xa7, 0x20, "2af576a5b03350e7017dbe9b1cc34418f7807704cfebb8492c544ae0276c2ea8673e7ccbddbfd440af5f874e50cbc0bdd69b05b72bbfce9d962e056d06c116c038339923c11c107cf041f1d2576033684ac1e9e395a08c9c52fbe6da8a8192cfe288a202f0c2ecafa8a9e848e9868c88df4dd07030907aada5ab21d3c5c78eb2acc3a3c1c1adfd5fdf62ef09c216725e2ef8443671881b2022c9acdb2079cceb64799e3bcf"}, @generic={0xdc, 0x2, "9425c5dc7b3c873ae3a3482f7749d3fa00b8250ddc9662cf5b53b494dd34b37c0d7cf3a29fad97ce4e9dee59fb7dca5002ad1b28a0d1e2cc4604d1fa9f6490dc7878d81a1c0716c4a17927cbdeffc8d77c55677ec4443683ece5fb28f021f45d679e8c04b63234e7ef9ed70ab913c3cacf441ae19931a799d134abeb334545fa9835075f0f96b9619087a177c1a2e0be0e17ecdad689aec1ffaccd78bcd5f8bf82e38714c2a313bf4df4d3003517362ac2c6077c5d17f6b605ef571fe765b406b537c361e9511f1b724b6fe059d01d8549e0a872ec8bf95c5940"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x0, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x36}, @generic={0xd7, 0x6, "ecbcb5bea717435c25d65374eac360a7817878e43b269c67d4e0df4338bd73c5137b4ffa0c25d5e8f5aafe5bf8169bc87498491b8bdadae7fc5a4fd17e7f4b9726402349dd0012e1213809cf94d140ea543e4ed73d8504d3e9a4cdae2904ff3f9cc56070e179e08f1bb0769323816a6bf52e096fc0bbd7b96b3ab8ebaebc7a76962972ce30d9adc1b3c8f081582740f169cd53930c208237695e51b2a9e0a82ac319f70d7d8b6854470f35f650bfd034f96edabe87f462e7e26f4e1cab6ac78c21345e9e02deb42edfefb3fbcf68a720e94506b744"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x210, 0x7, 0x2, 0x6, [@generic={0x6d, 0xd, "dc0cffc36e5af8d16d9863a7b09ec4c19a01117945950c778773eca083f81f0c97266e102a24a8dfe85e14d23fbea527c736dc85d97ef3505b477010cb2025a5f2bb414184ad942a16aac808582fe2964ed92c4b0500c419884dc4c4803946dea43aea0c645cb3d4e8d42e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x6, 0xff, 0x7, [@generic={0x61, 0xa, "f0186dbe34d257515605244f5a79a2cad5069162a5fbc4afbf4f44e5e63faf64829a033d88bc57b99cfbb8171b3a50f1afc224563cbdae999716be66902bbd7149652f0032e18ecd2665b665f96f92594613a1fa0a688face55c61db764e03"}, @generic={0x5f, 0x1, "db35c83e5ce3a1b9d40ae2c23787cf4449f0880baf1691f794df204bf222b7819871e4cd2df5ccdf376103ba03e5629cfaa97b2ff2b98124eeb9c41bc1882ead971c5b2df0833b22a723235ab9b1b2183dcbd0aabd233182fa213a95e2"}]}}]}}, {{0x9, 0x4, 0x9d, 0xac, 0xc, 0xff, 0x7a, 0x63, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0x6090, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x3, 0x4, 0x9}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x8, "bc9571575c"}]}, @generic={0xbb, 0x21, "0972ccf1d28675a43fdbffbb7909c11acf78c90cad49772f7308357102c9f6cb6746eb97256d975c5a4bdeafe7e853fe62b23283943e0110058fc30817a24f3b840a2c980888f4f8012c6b96d1c60dd47462d13d76c0bfeec318388c788f0c80602b1720d689adf978d077bfabe6f99fb5c96652a9662f254f2a0fc404791a335679870fd0ee34390e8f1e7cc0e2b45d8fabf469f04c6dbfd088e8b0c2f291ffb323e7c814a98485d62f775b5ce8f31cfc33b3da7717249f7b"}], [{{0x9, 0x5, 0x4, 0xc, 0x40, 0x0, 0x7b, 0xff, [@generic={0xad, 0x10, "e5aa02d7655300229541a3567f232180afd7be9d131cf7164bdcd62ba6426130da2d51bb1849464030537d025389e0351e578b85f5e21485531d949e8c08aa0dd43d1b133dbedb15d2737741258cdd42225654ec2411a587cebd78cd6a47404416d0706655ec9058162adf1d82ba6c2542156cd194cd37b447461252d6812a906e779f5af9ce795bea7c2f53c6c880bb42858254dd8522450f373708eb68584204e5c998333734558b068f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x3, 0xcf, 0x8, [@generic={0x72, 0x4, "755a6e9858f3740ee2de8eec547cd23d4825d592f9af9583498f4374ef90d99888f71b40249428e6de424874f11572aa51c0d9ffc89f32e059d79a6020e260fe4064b38a7d91cbf240ffc687011e43bb44b9c94a2b246dc46ff40f96a3eae6568d8f435b9b9a81fce461fe9272890300"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7f}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3, 0x3, 0x1, [@generic={0x69, 0x8, "dda1ff5c76970e073f570972768f46018b5c989bfa0938844da371feed631fed311dbd93e8012e1ca8c174e17d91ede61ef13e67baf537685dd734483ae54e0ea7aa83d3576b72907c1a6c589c4601063d5bd998967f922fdaedf36becbcc09b5d5b5efc27c8fa"}, @generic={0x92, 0x10, "a18975e6f3329ba39acf3cc11fffc0930d94bd8e23e6521f97c709745da2b8055b032a294ea41d9fbbb0266d876fbac809998df1209583e509795d0e0367fa6a9b5cae7b1e1b766f1f30e06fcaa0cf131604680d37b8da8c6b17ddda0649d28bd82d254b59bf0251e510a760a2f372a2d2f7e4734e19bed1ff5a2ee96b3f96522742dcedd8115f74587cc9c3ca5a9a70"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2b56f3243942aa53, 0x2, 0x7a}]}}, {{0x9, 0x5, 0x5, 0x7, 0x8, 0x7, 0x9, 0x1, [@generic={0x36, 0x1b, "be8669070e1fec28a9674f5568eb146226dc193fac4b4e73b61a8b61a37c8e8cf2cd28f717653bcd067117aa054f9c402b91f06a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xc, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xff, 0x1, 0x9, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x9, 0x8, 0x2, [@generic={0x37, 0x30, "997d503f1e853feaa0e95c6a1555e2f0843590c2c3de1ae8f71b728ece1c02c71974982dfe340cb5d436a223942d6a2082b671a803"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x7, 0x81, 0x80, [@generic={0xd2, 0xd, "e7e4e5af745981723f926c909aa754b375561d311fbac51b6dc9f310e898971c4f8a9b7fcb59881e2f80c312024fabfcf913f746c3ffe95bdc6f43cb7c8140d6f41760f5ff60e3c6a1c55cbae3993bcdd01afcf1ba117b56fda10f4ce723bdc897eb636e6ea35eeafefe6b8174498fc5e2f7f4141918df39efd899b0209814bbf28218fe766ddfdba3cb74515261b64d4b57e4ca24385c5733629be297db27afc91bf2c82b6117a70376491f12728fffa1e094e948ab5a740abb56fb5f4533727535973aa13baf878675d26b3ebcdc69"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x9, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9c, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x0, 0x6, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}, {{0x9, 0x5, 0x80, 0x13, 0x20, 0x30, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}, @generic={0x6e, 0x24, "c667728560452578563c979b764f39cc71f38bf394157e381fa50982bdffa0e7c254af8c25de8da8e04bbd7c755d70bba1a0637134ede0b3f91eb23b683587046d341bec7088c3a3a2f379bc7a43482874af17c1795ff86b89e12f7b9b45b167916c62335a874982b6755f3f"}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0x1, 0x5, 0x8, 0x3a}, 0x12, &(0x7f0000001200)=ANY=[@ANYBLOB="0d2965cb020a10030006000798080003100bc1c339bdeb537fe59b7f41beecf63ca39d7f574a49352d8c96d3b8ace0f59546ddb1828177e5edc4757875a4368df5bd0d13e93945f3090cb7ed7b9912d1491601567330f4a43747a8abc512abb5574ce5a69634f9394dd40cc12f502545ed05f3855dcab6cff39adf4bccfd558e7b9967ef0074e569"], 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x448}}, {0x2f, &(0x7f0000000100)=@string={0x2f, 0x3, "2de3561bd82303d3fcaed6e2ad766fff769c7b7136a6182251655ac32af043a89f97b6cd9063733416ecac38cc"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x408}}, {0x27, &(0x7f00000001c0)=@string={0x27, 0x3, "a684521e88ae75e664f9d6169cdc93efbef1955cfd5efe8ed4ebe0a444afc4b5caf6134cce"}}]})
syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x40, 0x2, 0x17, {0x17, 0x21, "85813d3f82a8402e831d3bba2b9e3bdb30414fe9d1"}}, &(0x7f00000002c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "0945d4eb91f1e3835cec3212465263ba79aec99cbd3fdda371530c84a1c0686a73df61872a801d26dda048f823543be38cbe03ad0c681f8a8198c59bd6d6bad09c96adb93b1381a08ff46aa50a83f3dbfe4488803f4bd9f0cde370515335cdf61efbfffa40daa8b79c278cd90da89b813ef091d449ff689639715578c522a8d4f96fc2dcd9214fdfe53f951e172f9001acd34318bf995b"}}, &(0x7f0000000080)={0x0, 0x22, 0x1e, {[@main=@item_012={0x2, 0x0, 0xc, "acd9"}, @local=@item_012={0x1, 0x2, 0x4, 'N'}, @local=@item_4={0x3, 0x2, 0x8, "8eae8341"}, @local=@item_4={0x3, 0x2, 0x1, "753a62b2"}, @global=@item_012={0x2, 0x1, 0x4, "b5df"}, @local=@item_4={0x3, 0x2, 0x0, "0dcccc13"}, @local=@item_012={0x1, 0x2, 0x8, 'h'}, @global=@item_4={0x3, 0x1, 0xb, "b6b5c932"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0xe9}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x8, 0xa1, "426ea9e1c8b3f44520bd28b1d4f221a973b28e247e670a5ba1b536b7a6fcb3868194b59fc998544760a3107d9d0c6a3591e44e113fef58a104e1d42883096333975e1ec7fe362327b8389800c539e8396c5280cfd113a7858c6c5d733530011edd02384d68e533999b43a688291c91b00fcfdb635ca29f1ad0aeaeaf9551825fe8016aefb78b6a1aa0fff20d87aa0a4713b9327dc66e4674e0530f40114d44e752"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x13}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000012c0)=ANY=[@ANYBLOB="20012f0000aff1932f45d8b6fcb8705d18075bf7e734baec4a0229dbddc05d143c3fadc6807a101400000000000000000000000000181ccfbb52ccdf577239d07997842e24e8d6b4dc6b1a07ebc019c97ac958245df06d0006e6b16e4437586f1f18b1617f7e86f75d95ed2dc9db727e2536ca9361af81b5fe120ba2ca03eca3ac780b9843f4e70672500bfbf1c9640a0dc6258d036d7afec04c0171011699344069e3"], &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7f}})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
r4 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x2)
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000680))

443.142µs ago: executing program 2 (id=522):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x164, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x53}}}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf3, 0xac, "e257a8e6069e70b341a9d92c8d9efb4f7881e902e7db48dd531c8650058f3ab2d91749cb8a032e0708f560d339410e6f610ac7bc0f00c9b4d777c0f303f6005c444929a88c06f9fabbad1502118e666023d356abd1d8b8fa885b71a35f7290cd6d0c1ae1745c58062d709e250f64e338bdf0518a2c3e68defc76c66128b57d4e11965ae1eac1ec80ef8ed318bd27a3179727cd6780cb22b719e4d2c376d6f231c0b3450c84ce903d5b0c15077ab5999e112b4c0039f7c8c8cc701050565116a7427c5cd057dee5e1111c6933867b1ffbbc65d87952fa2602e5e5e05e3f8fcfbb513a78bec1e3ff38a28f6deadd9147"}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xff, 0xfffffff3, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0xb8, 0x6, 0x3}})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x380000000000004, 0x2)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000400), 0x204000, 0x0)
ioctl$FIONCLEX(r6, 0x5450)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553})
socket$inet6_udp(0xa, 0x2, 0x0)

0s ago: executing program 4 (id=523):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xffffffffffffffff}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = io_uring_setup(0x2e06, &(0x7f00000001c0)={0x0, 0xceae, 0x800, 0x3, 0xfb})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0x9, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x2, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xe, 0x6, 0x3, 0x8, 0x1}, {0x10000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x5, 0x2e, 0x4b}, {0x80a0000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x54000, 0x7000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0xc000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x54000, 0x300, 0x5, 0xf000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0x9, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x2, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xe, 0x6, 0x3, 0x8, 0x1}, {0x10000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x5, 0x2e, 0x4b}, {0x80a0000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x54000, 0x7000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0xc000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x54000, 0x300, 0x5, 0xf000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000840)={"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"})
io_uring_setup(0x740a, &(0x7f0000000280)={0x0, 0xb156, 0x2000, 0x3, 0xf7, 0x0, r2})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

kernel console output (not intermixed with test programs):

[   52.773285][   T40] audit: type=1400 audit(1771864198.877:61): avc:  denied  { siginh } for  pid=5904 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:18786' (ED25519) to the list of known hosts.
[   54.673004][   T40] audit: type=1400 audit(1771864200.807:62): avc:  denied  { name_bind } for  pid=5911 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   54.707247][   T40] audit: type=1400 audit(1771864200.837:63): avc:  denied  { execute } for  pid=5912 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   54.716169][   T40] audit: type=1400 audit(1771864200.837:64): avc:  denied  { execute_no_trans } for  pid=5912 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   57.009820][   T40] audit: type=1400 audit(1771864203.147:65): avc:  denied  { mounton } for  pid=5912 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   57.018588][   T40] audit: type=1400 audit(1771864203.157:66): avc:  denied  { mount } for  pid=5912 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.021574][ T5912] cgroup: Unknown subsys name 'net'
[   57.142394][ T5912] cgroup: Unknown subsys name 'cpuset'
[   57.148748][ T5912] cgroup: Unknown subsys name 'rlimit'
[   57.369489][ T5916] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   58.085058][ T5912] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.483613][   T40] kauditd_printk_skb: 15 callbacks suppressed
[   61.483629][   T40] audit: type=1400 audit(1771864207.617:82): avc:  denied  { execmem } for  pid=5921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   61.663665][   T40] audit: type=1400 audit(1771864207.797:83): avc:  denied  { create } for  pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.670147][   T40] audit: type=1400 audit(1771864207.807:84): avc:  denied  { read write } for  pid=5925 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   61.678222][   T40] audit: type=1400 audit(1771864207.807:85): avc:  denied  { open } for  pid=5925 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   61.685626][   T40] audit: type=1400 audit(1771864207.807:86): avc:  denied  { ioctl } for  pid=5925 comm="syz-executor" path="socket:[6587]" dev="sockfs" ino=6587 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.696573][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.700369][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.703279][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.707801][ T5287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.718818][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.726388][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.728235][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.730705][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.732470][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.735909][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.738189][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.741387][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.744612][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.745713][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.748202][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.748505][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.749453][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.749922][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.750516][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.758544][   T40] audit: type=1400 audit(1771864207.887:87): avc:  denied  { read } for  pid=5925 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   61.760398][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.773482][   T40] audit: type=1400 audit(1771864207.887:88): avc:  denied  { open } for  pid=5925 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   61.783586][   T40] audit: type=1400 audit(1771864207.887:89): avc:  denied  { mounton } for  pid=5925 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   61.958896][   T40] audit: type=1400 audit(1771864208.097:90): avc:  denied  { module_request } for  pid=5925 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   62.000189][ T5925] chnl_net:caif_netlink_parms(): no params data found
[   62.015648][ T5937] chnl_net:caif_netlink_parms(): no params data found
[   62.145635][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   62.168332][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.171864][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.174346][ T5937] bridge_slave_0: entered allmulticast mode
[   62.177107][ T5937] bridge_slave_0: entered promiscuous mode
[   62.185142][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.187485][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.190148][ T5937] bridge_slave_1: entered allmulticast mode
[   62.193862][ T5937] bridge_slave_1: entered promiscuous mode
[   62.199284][ T5929] chnl_net:caif_netlink_parms(): no params data found
[   62.209995][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.212886][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.215758][ T5925] bridge_slave_0: entered allmulticast mode
[   62.218979][ T5925] bridge_slave_0: entered promiscuous mode
[   62.249091][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.252257][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.255338][ T5925] bridge_slave_1: entered allmulticast mode
[   62.259695][ T5925] bridge_slave_1: entered promiscuous mode
[   62.294407][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.300848][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.330894][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.343971][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.398881][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.401555][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.404288][ T5934] bridge_slave_0: entered allmulticast mode
[   62.407019][ T5934] bridge_slave_0: entered promiscuous mode
[   62.411988][ T5937] team0: Port device team_slave_0 added
[   62.420284][ T5937] team0: Port device team_slave_1 added
[   62.423560][ T5925] team0: Port device team_slave_0 added
[   62.425653][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.428686][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.431085][ T5934] bridge_slave_1: entered allmulticast mode
[   62.434139][ T5934] bridge_slave_1: entered promiscuous mode
[   62.470558][ T5925] team0: Port device team_slave_1 added
[   62.481365][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.485112][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.487751][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.490409][ T5929] bridge_slave_0: entered allmulticast mode
[   62.493257][ T5929] bridge_slave_0: entered promiscuous mode
[   62.496646][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.499197][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.501643][ T5929] bridge_slave_1: entered allmulticast mode
[   62.504344][ T5929] bridge_slave_1: entered promiscuous mode
[   62.515241][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.536701][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.539201][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.547730][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.564718][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.567649][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.576174][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.586077][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.588500][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.596768][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.612963][ T5934] team0: Port device team_slave_0 added
[   62.616190][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.619446][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.621642][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.630157][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.646912][ T5934] team0: Port device team_slave_1 added
[   62.662229][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.671764][ T5937] hsr_slave_0: entered promiscuous mode
[   62.675175][ T5937] hsr_slave_1: entered promiscuous mode
[   62.719088][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.721524][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.730697][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.747454][ T5929] team0: Port device team_slave_0 added
[   62.753727][ T5925] hsr_slave_0: entered promiscuous mode
[   62.756557][ T5925] hsr_slave_1: entered promiscuous mode
[   62.759474][ T5925] debugfs: 'hsr0' already exists in 'hsr'
[   62.761674][ T5925] Cannot create hsr debugfs directory
[   62.764224][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.766806][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.775863][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.792704][ T5929] team0: Port device team_slave_1 added
[   62.816877][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.819223][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.827426][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.831932][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.834229][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.842867][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.922624][ T5934] hsr_slave_0: entered promiscuous mode
[   62.925049][ T5934] hsr_slave_1: entered promiscuous mode
[   62.927549][ T5934] debugfs: 'hsr0' already exists in 'hsr'
[   62.929398][ T5934] Cannot create hsr debugfs directory
[   62.944611][ T5929] hsr_slave_0: entered promiscuous mode
[   62.946960][ T5929] hsr_slave_1: entered promiscuous mode
[   62.949237][ T5929] debugfs: 'hsr0' already exists in 'hsr'
[   62.951136][ T5929] Cannot create hsr debugfs directory
[   63.166607][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.175749][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.187359][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.192922][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.231779][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.237917][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.242966][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.247402][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.319192][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.326527][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.333419][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.349485][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.374642][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.411605][ T5929] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.416343][ T5929] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.421756][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   63.428123][ T5929] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.434564][ T5929] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.449765][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.452172][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.476717][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.479218][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.498747][ T5937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.502367][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.527534][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.544062][   T40] audit: type=1400 audit(1771864209.677:91): avc:  denied  { sys_module } for  pid=5937 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   63.551254][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[   63.556106][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.559260][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.572565][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.575567][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.581625][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.599260][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   63.614410][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.617095][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.633032][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.640172][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.642556][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.659561][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.691506][ T5929] 8021q: adding VLAN 0 to HW filter on device team0
[   63.726149][ T5937] veth0_vlan: entered promiscuous mode
[   63.732452][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.734926][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.744393][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.747088][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.767584][ T5937] veth1_vlan: entered promiscuous mode
[   63.787195][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.789163][ T5927] Bluetooth: hci2: command tx timeout
[   63.791245][ T5287] Bluetooth: hci0: command tx timeout
[   63.792761][ T5927] Bluetooth: hci3: command tx timeout
[   63.816715][ T5937] veth0_macvtap: entered promiscuous mode
[   63.825060][ T5937] veth1_macvtap: entered promiscuous mode
[   63.859584][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.868640][ T5927] Bluetooth: hci1: command tx timeout
[   63.869081][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.876458][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.882571][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.902201][ T1201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.922598][ T1201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.943978][ T1201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.949232][ T1201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.961879][ T5925] veth0_vlan: entered promiscuous mode
[   63.991085][ T5934] veth0_vlan: entered promiscuous mode
[   64.001414][ T5925] veth1_vlan: entered promiscuous mode
[   64.005337][ T5934] veth1_vlan: entered promiscuous mode
[   64.021967][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.039938][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.043892][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.079498][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.081015][ T5934] veth0_macvtap: entered promiscuous mode
[   64.082812][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.085200][ T5925] veth0_macvtap: entered promiscuous mode
[   64.093859][ T5934] veth1_macvtap: entered promiscuous mode
[   64.099095][ T5925] veth1_macvtap: entered promiscuous mode
[   64.116943][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.120823][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.131380][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.139146][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.142377][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.148544][ T5929] veth0_vlan: entered promiscuous mode
[   64.154944][ T5929] veth1_vlan: entered promiscuous mode
[   64.161941][ T1201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.164846][ T1201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.181411][ T1201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.184303][ T1201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.196259][ T1201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.200071][ T1201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.214908][ T5929] veth0_macvtap: entered promiscuous mode
[   64.219691][ T1201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.223128][ T1201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.232688][ T5929] veth1_macvtap: entered promiscuous mode
[   64.265728][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.303892][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.307279][  T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.310279][  T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.321210][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.323815][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.336715][ T6023] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6'.
[   64.341148][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.344927][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.351635][ T1201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.358171][ T1201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.371754][ T1201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.381240][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.384198][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.385360][ T1201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.463467][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.465933][ T6030] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   64.466223][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.500624][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.503459][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.522433][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.527508][ T6036] netlink: get zone limit has 4 unknown bytes
[   64.552695][ T6036] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[   64.573902][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.584105][ T6038] bridge_slave_0 (unregistering): left allmulticast mode
[   64.586581][ T6038] bridge_slave_0 (unregistering): left promiscuous mode
[   64.590195][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.772745][ T6044] netlink: 616 bytes leftover after parsing attributes in process `syz.3.10'.
[   64.783257][   T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   64.826293][ T6048] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size.
[   64.951122][   T39] usb 7-1: config 0 has no interfaces?
[   64.953001][   T39] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   64.955952][   T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.961415][   T39] usb 7-1: config 0 descriptor??
[   65.164198][ T6058] Zero length message leads to an empty skb
[   65.172058][ T6026] usb 7-1: USB disconnect, device number 2
[   65.471008][ T6071] netlink: get zone limit has 4 unknown bytes
[   65.510936][ T6073] befs: (nullb0): No write support. Marking filesystem read-only
[   65.535256][ T6073] befs: (nullb0): invalid magic header
[   65.542137][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[   65.580963][ T6078] netlink: 96 bytes leftover after parsing attributes in process `syz.1.21'.
[   65.630672][ T6083] overlayfs: missing 'lowerdir'
[   65.715667][ T6085] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   65.719918][ T6085] block device autoloading is deprecated and will be removed.
[   65.842258][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   65.846391][ T6101] netlink: 'syz.2.31': attribute type 11 has an invalid length.
[   65.863554][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   65.866508][ T6101] netlink: 'syz.2.31': attribute type 11 has an invalid length.
[   65.878672][ T5927] Bluetooth: hci0: command tx timeout
[   65.878969][ T5936] Bluetooth: hci3: command tx timeout
[   65.881133][ T5927] Bluetooth: hci2: command tx timeout
[   65.950459][ T5927] Bluetooth: hci1: command tx timeout
[   66.013185][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36'.
[   66.089585][ T6129] vcan0: tx address claim with dest, not broadcast
[   66.154114][ T6137] netlink: 'syz.2.43': attribute type 1 has an invalid length.
[   66.158697][ T6138] syzkaller1: entered promiscuous mode
[   66.161075][ T6138] syzkaller1: entered allmulticast mode
[   66.313023][ T6156] wg1: entered promiscuous mode
[   66.314562][ T6156] wg1: entered allmulticast mode
[   66.368936][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'.
[   66.424075][ T6168] macvtap1: entered promiscuous mode
[   66.425964][ T6168] macvtap1: entered allmulticast mode
[   66.428736][ T6168] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[   66.431690][ T6168] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[   66.437802][ T6168] team0: Device macvtap1 failed to register rx_handler
[   66.442689][ T6168] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[   66.445356][ T6168] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[   66.487300][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.499048][ T6177] Cannot find add_set index 0 as target
[   66.538512][   T40] kauditd_printk_skb: 139 callbacks suppressed
[   66.538528][   T40] audit: type=1400 audit(1771864212.677:231): avc:  denied  { write } for  pid=6178 comm="syz.2.53" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   66.551317][   T40] audit: type=1400 audit(1771864212.677:232): avc:  denied  { ioctl } for  pid=6178 comm="syz.2.53" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   66.593286][   T40] audit: type=1400 audit(1771864212.727:233): avc:  denied  { ioctl } for  pid=6180 comm="syz.2.55" path="socket:[10616]" dev="sockfs" ino=10616 ioctlcmd=0x5625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.605815][   T40] audit: type=1400 audit(1771864212.737:234): avc:  denied  { map } for  pid=6180 comm="syz.2.55" path="socket:[10616]" dev="sockfs" ino=10616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.611814][ T6183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.54'.
[   66.614183][   T40] audit: type=1400 audit(1771864212.737:235): avc:  denied  { read } for  pid=6180 comm="syz.2.55" path="socket:[10616]" dev="sockfs" ino=10616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.661108][   T40] audit: type=1400 audit(1771864212.797:236): avc:  denied  { name_bind } for  pid=6186 comm="syz.3.56" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   66.671456][   T40] audit: type=1400 audit(1771864212.797:237): avc:  denied  { connect } for  pid=6180 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.714830][ T6190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6190 comm=syz.2.57
[   66.801642][ T6195] Bluetooth: MGMT ver 1.23
[   66.809846][   T40] audit: type=1400 audit(1771864212.947:238): avc:  denied  { write } for  pid=6196 comm="syz.3.59" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   66.907263][   T40] audit: type=1400 audit(1771864213.037:239): avc:  denied  { write } for  pid=6194 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   66.908657][ T6203] capability: warning: `syz.3.62' uses 32-bit capabilities (legacy support in use)
[   66.918887][   T40] audit: type=1400 audit(1771864213.057:240): avc:  denied  { read write } for  pid=6201 comm="syz.3.62" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   67.075932][ T6208] netlink: 'syz.2.63': attribute type 5 has an invalid length.
[   67.178677][ T6219] ubifs: Unknown parameter 'ns/net'
[   67.188357][ T6219] ubifs: Unknown parameter 'ns/net'
[   67.410867][ T6214] overlayfs: upper fs does not support tmpfile.
[   67.419341][ T6233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.422608][ T6233] IPv6: NLM_F_CREATE should be set when creating new route
[   67.425658][ T6233] IPv6: NLM_F_CREATE should be set when creating new route
[   67.431390][ T6233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.456506][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.590354][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.608540][ T5927] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[   67.657448][ T5287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.667083][ T5287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.670706][ T5287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.674420][ T5287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.677820][ T5287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.687767][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.719403][ T6256] 9pnet_virtio: no channels available for device syz
[   67.758923][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.864587][ T6252] chnl_net:caif_netlink_parms(): no params data found
[   67.896192][ T6267] SELinux: ebitmap: start bit 0 comes after start bit 0
[   67.913047][ T6267] SELinux: failed to load policy
[   67.915911][ T6267] xt_CONNSECMARK: invalid mode: 0
[   67.948263][ T5927] Bluetooth: hci3: command tx timeout
[   67.949090][ T5287] Bluetooth: hci0: command tx timeout
[   68.011507][ T6277] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   68.012665][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.017188][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.021204][ T6252] bridge_slave_0: entered allmulticast mode
[   68.024514][ T6252] bridge_slave_0: entered promiscuous mode
[   68.027607][ T6274] netlink: 13 bytes leftover after parsing attributes in process `syz.1.78'.
[   68.028776][ T5287] Bluetooth: hci1: command tx timeout
[   68.051292][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.051337][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.051459][ T6252] bridge_slave_1: entered allmulticast mode
[   68.052260][ T6252] bridge_slave_1: entered promiscuous mode
[   68.091790][ T6282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6282 comm=syz.3.83
[   68.091943][ T6282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=6282 comm=syz.3.83
[   68.096703][   T46] bridge_slave_1: left allmulticast mode
[   68.096763][   T46] bridge_slave_1: left promiscuous mode
[   68.097395][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.110614][   T46] bridge_slave_0: left allmulticast mode
[   68.110638][   T46] bridge_slave_0: left promiscuous mode
[   68.110769][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.298246][ T6251] syz.2.76 (6251): drop_caches: 2
[   68.302520][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.314194][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.326449][   T46] bond0 (unregistering): Released all slaves
[   68.338243][ T6252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.359990][ T6252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.398737][ T6252] team0: Port device team_slave_0 added
[   68.404038][ T6252] team0: Port device team_slave_1 added
[   68.435076][ T6319] sctp: [Deprecated]: syz.3.91 (pid 6319) Use of int in maxseg socket option.
[   68.435076][ T6319] Use struct sctp_assoc_value instead
[   68.470544][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.473454][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.492538][ T6252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.535005][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.538051][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.547066][ T6252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.592332][ T6252] hsr_slave_0: entered promiscuous mode
[   68.594751][ T6252] hsr_slave_1: entered promiscuous mode
[   68.596931][ T6252] debugfs: 'hsr0' already exists in 'hsr'
[   68.599558][ T6252] Cannot create hsr debugfs directory
[   68.759824][ T6349] loop9: detected capacity change from 0 to 8
[   68.829714][ T6356] program syz.1.101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.853920][    C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[   68.857673][    C0] Buffer I/O error on dev loop9, logical block 0, lost async page write
[   68.889506][   T46] hsr_slave_0: left promiscuous mode
[   68.892144][   T46] hsr_slave_1: left promiscuous mode
[   68.894914][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.909905][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.916446][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.920331][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.934508][   T46] veth1_macvtap: left promiscuous mode
[   68.943773][   T46] veth0_macvtap: left promiscuous mode
[   68.946551][   T46] veth1_vlan: left promiscuous mode
[   68.949248][   T46] veth0_vlan: left promiscuous mode
[   69.111034][   T46] team0 (unregistering): Port device team_slave_1 removed
[   69.121544][   T46] team0 (unregistering): Port device team_slave_0 removed
[   69.191507][ T6375] �x9�: renamed from bridge_slave_0 (while UP)
[   69.243992][ T6252] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.251103][ T6252] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.264672][ T6252] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.274971][ T6387] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   69.277542][ T6252] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.277697][ T6387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.294160][ T6387] team0: Device ipvlan1 failed to register rx_handler
[   69.382571][ T6405] random: crng reseeded on system resumption
[   69.385705][ T6252] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.407461][ T6252] 8021q: adding VLAN 0 to HW filter on device team0
[   69.407536][ T6407] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   69.454009][ T6407] bond1: entered promiscuous mode
[   69.456547][ T6407] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.473215][ T6411] bond1: (slave bridge1): making interface the new active one
[   69.475780][ T6411] bridge1: entered promiscuous mode
[   69.479964][ T6411] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   69.491384][ T6410] Bluetooth: hci4: Frame reassembly failed (-84)
[   69.495038][   T61] Bluetooth: hci4: Frame reassembly failed (-84)
[   69.510346][ T6410] bond1 (unregistering): Released all slaves
[   69.521514][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.524039][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.540701][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.543273][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.560878][ T6407] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   69.564866][ T6407] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   69.678124][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.788786][ T5927] Bluetooth: hci2: command tx timeout
[   69.841101][ T6443] __nla_validate_parse: 1 callbacks suppressed
[   69.841113][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'.
[   69.861263][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'.
[   69.911215][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.3.120'.
[   69.916909][ T6252] veth0_vlan: entered promiscuous mode
[   69.923078][ T6252] veth1_vlan: entered promiscuous mode
[   69.944591][ T6252] veth0_macvtap: entered promiscuous mode
[   69.949499][ T6252] veth1_macvtap: entered promiscuous mode
[   69.957673][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.965259][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.979856][   T98] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.983634][   T98] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.991895][   T98] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.994992][   T98] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.028670][ T5927] Bluetooth: hci0: command tx timeout
[   70.028909][ T5936] Bluetooth: hci3: command tx timeout
[   70.031670][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.035355][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.054983][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.057395][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.081200][ T6455] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   70.084120][ T6455] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   70.090672][ T6455] vhci_hcd vhci_hcd.0: Device attached
[   70.095099][ T6455] x_tables: duplicate underflow at hook 3
[   70.097437][ T6456] vhci_hcd: connection closed
[   70.099282][   T61] vhci_hcd vhci_hcd.3: stop threads
[   70.103218][   T61] vhci_hcd vhci_hcd.3: release socket
[   70.105058][   T61] vhci_hcd vhci_hcd.3: disconnect device
[   70.629940][ T6480] syz.4.127 uses obsolete (PF_INET,SOCK_PACKET)
[   70.717399][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   70.722981][ T6492] netlink: 'syz.2.130': attribute type 30 has an invalid length.
[   70.725679][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[   70.752440][ T6492] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.809135][ T6501] comedi comedi3: pcl812: a I/O base address must be specified
[   70.852059][ T6506] binder: 6505:6506 ioctl c018620c 200000000000 returned -22
[   70.894434][ T6510] UHID_CREATE from different security context by process 138 (syz.3.135), this is not allowed.
[   70.973380][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'.
[   71.238150][ T5961] delete_channel: no stack
[   71.471072][ T6540] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20000
[   71.548021][ T5287] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   71.607703][   T40] kauditd_printk_skb: 108 callbacks suppressed
[   71.607719][   T40] audit: type=1400 audit(71.521:349): avc:  denied  { ioctl } for  pid=6541 comm="syz.1.146" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   71.609492][ T6543] binder: 6541:6543 unknown command 64
[   71.621947][ T6543] binder: 6541:6543 ioctl c0306201 200000000640 returned -22
[   71.673343][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.677416][ T6548] bridge_slave_1: left allmulticast mode
[   71.683452][ T6548] bridge_slave_1: left promiscuous mode
[   71.686343][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.797522][   T40] audit: type=1400 audit(71.711:350): avc:  denied  { setopt } for  pid=6556 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.805918][   T40] audit: type=1400 audit(71.731:351): avc:  denied  { write } for  pid=6556 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.814375][ T6557] netlink: 9 bytes leftover after parsing attributes in process `syz.1.149'.
[   71.821177][ T6557] 0�: renamed from hsr0 (while UP)
[   71.825080][ T6557] 0�: entered allmulticast mode
[   71.826944][ T6557] hsr_slave_0: entered allmulticast mode
[   71.829641][ T6557] hsr_slave_1: entered allmulticast mode
[   71.832234][ T6557] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[   71.868491][ T5287] Bluetooth: hci1: command tx timeout
[   71.868522][ T5936] Bluetooth: hci2: command tx timeout
[   71.875665][ T6559] trusted_key: encrypted_key: insufficient parameters specified
[   71.879569][ T6560] trusted_key: encrypted_key: insufficient parameters specified
[   72.069810][   T40] audit: type=1400 audit(71.991:352): avc:  denied  { create } for  pid=6565 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   72.178163][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   72.199794][ T6569] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   72.202845][ T6569] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   72.206379][ T6569] vhci_hcd vhci_hcd.0: Device attached
[   72.217007][ T6571] vhci_hcd: connection closed
[   72.222008][   T12] vhci_hcd vhci_hcd.3: stop threads
[   72.227577][   T12] vhci_hcd vhci_hcd.3: release socket
[   72.234113][   T12] vhci_hcd vhci_hcd.3: disconnect device
[   72.318327][ T2005] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   72.338420][    T9] usb 6-1: Using ep0 maxpacket: 8
[   72.342174][    T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   72.345595][    T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   72.352864][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   72.356745][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.478518][ T2005] usb 9-1: Using ep0 maxpacket: 8
[   72.482690][ T2005] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   72.487178][ T2005] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   72.490505][ T2005] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   72.493603][ T2005] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[   72.497132][ T2005] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   72.502024][ T2005] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   72.505078][ T2005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.517537][ T2005] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22
[   72.715232][   T29] usb 9-1: USB disconnect, device number 2
[   72.779022][   T40] audit: type=1400 audit(72.701:353): avc:  denied  { connect } for  pid=6581 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   72.791858][   T40] audit: type=1400 audit(72.711:354): avc:  denied  { write } for  pid=6581 comm="syz.3.157" path="socket:[13518]" dev="sockfs" ino=13518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   72.920434][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.925370][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.937034][ T5961] usb 6-1: USB disconnect, device number 2
[   72.960616][   T40] audit: type=1400 audit(72.881:355): avc:  denied  { bind } for  pid=6587 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.961711][ T6589] warning: `syz.3.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.978245][   T40] audit: type=1400 audit(72.891:356): avc:  denied  { ioctl } for  pid=6588 comm="syz.3.159" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   73.004964][   T40] audit: type=1400 audit(72.901:357): avc:  denied  { getopt } for  pid=6587 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   73.032136][   T40] audit: type=1400 audit(72.901:358): avc:  denied  { mount } for  pid=6587 comm="syz.1.158" name="/" dev="autofs" ino=11894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   73.094503][   T34] cfg80211: failed to load regulatory.db
[   73.185635][ T6606] program syz.2.163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.273159][ T6613] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[   73.287160][ T6614] tmpfs: Too few inodes for current use
[   73.364758][ T6626] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   73.385426][   T34] hid-generic 0004:0006:0002.0002: item fetching failed at offset 1/2
[   73.386020][   T34] hid-generic 0004:0006:0002.0002: probe with driver hid-generic failed with error -22
[   73.504961][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   73.666937][ T6669] SELinux: security policydb version 17 (MLS) not backwards compatible
[   73.670012][ T6669] SELinux: failed to load policy
[   73.798003][ T6026] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   73.949318][ T5936] Bluetooth: hci2: command tx timeout
[   73.949348][ T5287] Bluetooth: hci1: command tx timeout
[   73.967946][ T6026] usb 6-1: Using ep0 maxpacket: 8
[   73.971505][ T6026] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   73.974806][ T6026] usb 6-1: config 179 has no interface number 0
[   73.976908][ T6026] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   73.980723][ T6026] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   73.984503][ T6026] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11
[   73.988308][ T6026] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[   73.992080][ T6026] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   73.996426][ T6026] usb 6-1: config 179 interface 65 has no altsetting 0
[   73.998780][ T6026] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   74.001780][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.010465][ T6649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   74.026305][ T6026] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5
[   74.074723][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   74.079197][ T6677] netlink: 'syz.2.185': attribute type 3 has an invalid length.
[   74.083207][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[   74.087037][ T6677] netlink: 'syz.2.185': attribute type 3 has an invalid length.
[   74.089500][ T5320] input input5: unable to receive magic message: -110
[   74.092322][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.094896][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.099539][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.102111][    C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1
[   74.104731][ T6677] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.108504][ T5320] input input5: unable to receive magic message: -32
[   74.111990][ T5320] input input5: unable to receive magic message: -32
[   74.112555][ T6677] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   74.122928][ T5320] input input5: unable to receive magic message: -32
[   74.126884][ T5320] input input5: unable to receive magic message: -32
[   74.132214][ T5320] input input5: unable to receive magic message: -32
[   74.136747][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.142495][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.146670][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.150582][ T6677] xfrm0 speed is unknown, defaulting to 1000
[   74.219097][ T6648] input input5: unable to receive magic message: -32
[   74.236269][ T5974] usb 6-1: USB disconnect, device number 3
[   74.236398][    C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   74.302116][ T2005] IPVS: starting estimator thread 0...
[   74.306315][ T6687] tipc: Started in network mode
[   74.308862][ T6687] tipc: Node identity ac1414aa, cluster identity 4711
[   74.311955][ T6687] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   74.315305][ T6687] tipc: Enabled bearer <udp:s>, priority 10
[   74.371296][ T6690] program syz.1.189 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.413735][ T6688] IPVS: using max 26 ests per chain, 62400 per kthread
[   74.448688][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   74.462562][ T6698] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20000
[   74.541054][ T6703] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   74.544524][ T6703] UDF-fs: Scanning with blocksize 2048 failed
[   74.549181][ T6703] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   74.551770][ T6703] UDF-fs: Scanning with blocksize 4096 failed
[   74.588109][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   74.728071][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   74.867963][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   75.007972][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   75.148063][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   75.287986][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   75.430429][ T6711] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   75.432886][ T6711] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   75.439110][ T6020] tipc: Node number set to 2886997162
[   75.443747][ T6711] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   75.448738][ T6711] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   75.451106][ T6711] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   75.454717][ T6711] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   75.460176][ T6711] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   75.462775][ T6711] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   75.466670][ T6711] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   75.471311][ T6711] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   75.473439][ T6711] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   75.477243][ T6711] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   75.701900][ T6738] fuse: Bad value for 'fd'
[   75.704063][ T6737] fuse: Bad value for 'fd'
[   75.857973][    C1] net_ratelimit: 1 callbacks suppressed
[   75.857991][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   76.388164][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   76.434059][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[   76.436974][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[   76.738009][ T2005] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   76.748418][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout
[   76.889769][ T2005] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   76.892673][ T2005] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   76.895993][ T2005] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   76.899426][ T2005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   76.902905][ T2005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   76.908014][ T2005] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   76.911142][ T2005] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   76.913691][ T2005] usb 8-1: Product: syz
[   76.915080][ T2005] usb 8-1: Manufacturer: syz
[   76.922000][ T2005] cdc_wdm 8-1:1.0: skipping garbage
[   76.923714][ T2005] cdc_wdm 8-1:1.0: skipping garbage
[   76.931087][ T2005] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   76.933320][ T2005] cdc_wdm 8-1:1.0: Unknown control protocol
[   77.123010][   T40] kauditd_printk_skb: 25 callbacks suppressed
[   77.123020][   T40] audit: type=1400 audit(77.041:384): avc:  denied  { read write } for  pid=6747 comm="syz.3.206" name="cdc-wdm0" dev="devtmpfs" ino=2877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   77.132889][   T40] audit: type=1400 audit(77.051:385): avc:  denied  { open } for  pid=6747 comm="syz.3.206" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   77.427116][ T6696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.467960][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   77.470402][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout
[   77.470429][ T5927] Bluetooth: hci3: command 0x0c1a tx timeout
[   77.526300][   T40] audit: type=1400 audit(77.441:386): avc:  denied  { mounton } for  pid=6763 comm="syz.4.210" path="/18/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   77.548149][ T5927] Bluetooth: hci2: command 0x0c1a tx timeout
[   77.563542][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.640622][   T40] audit: type=1400 audit(77.561:387): avc:  denied  { watch } for  pid=6763 comm="syz.4.210" path="/18" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   77.648415][   T40] audit: type=1400 audit(77.571:388): avc:  denied  { write } for  pid=6760 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   77.666610][ T6768] xfrm0 speed is unknown, defaulting to 1000
[   78.060013][   T40] audit: type=1400 audit(77.981:389): avc:  denied  { mounton } for  pid=6778 comm="syz.1.213" path="/file0" dev="ramfs" ino=14595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1
[   78.060841][ T6779] XFS (nbd1): no-recovery mounts must be read-only.
[   78.162423][   T40] audit: type=1400 audit(78.081:390): avc:  denied  { setopt } for  pid=6786 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   78.501655][   T40] audit: type=1400 audit(78.421:391): avc:  denied  { bind } for  pid=6797 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   78.507922][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   78.661735][ T6800] capability: warning: `syz.1.219' uses deprecated v2 capabilities in a way that may be insecure
[   78.674089][ T6800] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   78.679038][ T6800] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[   78.683262][ T6800] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[   78.714210][ T6816] ip6t_rpfilter: unknown options
[   78.791621][ T6818] hfs: unable to load iocharset "io#harset"
[   78.794824][   T40] audit: type=1400 audit(78.711:392): avc:  denied  { ioctl } for  pid=6817 comm="syz.2.224" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2877 ioctlcmd=0x5b1b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   78.828010][ T5927] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.947471][   T40] audit: type=1400 audit(78.861:393): avc:  denied  { mount } for  pid=6831 comm="syz.2.229" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   79.031651][ T6823] SELinux:  policydb string length -1037041656 does not match expected length 8
[   79.034757][ T6823] SELinux: failed to load policy
[   79.121399][ T6842] __nla_validate_parse: 3 callbacks suppressed
[   79.121411][ T6842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.232'.
[   79.135061][ T6842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.232'.
[   79.186663][ T6848] input: syz1 as /devices/virtual/input/input6
[   79.240144][ T6852] xt_l2tp: v2 tid > 0xffff: 2031748
[   79.244224][ T5927] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[   79.247554][ T5927] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[   79.251102][ T6853] xt_l2tp: v2 tid > 0xffff: 2031748
[   79.543315][   T34] usb 8-1: USB disconnect, device number 2
[   79.547988][ T5287] Bluetooth: hci3: command 0x0c1a tx timeout
[   79.548221][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   79.552725][ T5287] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.570881][ T6865] xfrm0 speed is unknown, defaulting to 1000
[   79.628176][ T5927] Bluetooth: hci2: command 0x0c1a tx timeout
[   79.634958][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'.
[   79.635637][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.649189][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.653421][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.657447][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.664987][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.669449][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.672438][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.675357][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.678934][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.684374][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.688641][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.691444][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.704967][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.709509][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.713528][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.717391][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.720823][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.723670][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.732606][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.735841][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.740912][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.747102][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.757806][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.762170][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.765159][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.776268][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.783698][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.785870][ T6890] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[   79.790579][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.794738][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.798207][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.803102][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.806888][ T6882] overlay: filesystem on ./file0 not supported as upperdir
[   79.833130][ T6894] netlink: 80 bytes leftover after parsing attributes in process `syz.1.250'.
[   79.931131][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   80.098472][ T6916] =======================================================
[   80.098472][ T6916] WARNING: The mand mount option has been deprecated and
[   80.098472][ T6916]          and is ignored by this kernel. Remove the mand
[   80.098472][ T6916]          option from the mount to silence this warning.
[   80.098472][ T6916] =======================================================
[   80.161587][ T6916] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   80.165627][ T6916] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   80.221703][ T6928] veth0: entered promiscuous mode
[   80.234591][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'.
[   80.278472][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'.
[   80.292464][ T6934] macsec0: entered promiscuous mode
[   80.294571][ T6934] macsec0: entered allmulticast mode
[   80.296970][ T6934] veth1_macvtap: entered allmulticast mode
[   80.353298][ T6939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.264'.
[   80.498959][ T6946] jfs: Unknown parameter 'grpquota'
[   80.588161][ T6026] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   80.588183][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   80.706681][ T6953] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   80.714107][ T6949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6949 comm=syz.2.270
[   80.744636][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.749804][ T6026] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   80.753421][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.761787][ T6026] usb 8-1: config 0 descriptor??
[   80.949304][ T5927] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   80.952274][ T5927] Bluetooth: hci2: SCO packet for unknown connection handle 201
[   80.977651][ T6026] usbhid 8-1:0.0: can't add hid device: -71
[   80.997992][ T6026] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   81.003500][ T6026] usb 8-1: USB disconnect, device number 3
[   81.003694][ T5927] Bluetooth: hci2: Malformed HCI Event
[   81.006142][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[   81.014996][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[   81.429112][ T6020] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   81.588031][ T6020] usb 8-1: Using ep0 maxpacket: 32
[   81.592425][ T6020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.596073][ T6020] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[   81.599433][ T6020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.606289][ T6020] usb 8-1: config 0 descriptor??
[   81.610841][ T6020] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   81.617208][ T6020] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   81.628015][ T5927] Bluetooth: hci1: command 0x0c1a tx timeout
[   81.628622][ T5287] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.637954][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   81.708161][ T5287] Bluetooth: hci2: command 0x0c1a tx timeout
[   82.045781][ T7024] overlayfs: failed to resolve './file0': -2
[   82.204534][   T40] kauditd_printk_skb: 35 callbacks suppressed
[   82.204577][   T40] audit: type=1400 audit(82.121:429): avc:  denied  { listen } for  pid=7038 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   82.260715][ T7046] ntfs3(loop1): try to read out of volume at offset 0x0
[   82.299468][ T7049] input: syz0 as /devices/virtual/input/input8
[   82.393439][ T7059] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[   82.460163][ T7061] xfrm0 speed is unknown, defaulting to 1000
[   82.667960][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   82.791282][   T40] audit: type=1400 audit(82.711:430): avc:  denied  { append } for  pid=7079 comm="syz.1.302" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.067971][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout
[   83.068016][ T6976] Bluetooth: hci0: Opcode 0x080f failed: -110
[   83.071058][   T40] audit: type=1400 audit(82.991:431): avc:  denied  { ioctl } for  pid=7092 comm="syz.1.308" path="socket:[15480]" dev="sockfs" ino=15480 ioctlcmd=0x4c08 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   83.178188][ T7099] xfrm0 speed is unknown, defaulting to 1000
[   83.249829][ T7106] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   83.252467][ T7106] netlink: 'syz.2.310': attribute type 3 has an invalid length.
[   83.379401][ T7115] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   83.381573][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   83.385634][ T7115] vhci_hcd vhci_hcd.0: Device attached
[   83.390369][ T7116] vhci_hcd: cannot find the pending unlink 1023
[   83.400803][ T7116] vhci_hcd: connection closed
[   83.401045][   T46] vhci_hcd vhci_hcd.2: stop threads
[   83.406061][   T46] vhci_hcd vhci_hcd.2: release socket
[   83.408637][   T46] vhci_hcd vhci_hcd.2: disconnect device
[   83.442717][ T6020] usb 8-1: USB disconnect, device number 4
[   83.459944][ T6020] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[   83.675851][   T40] audit: type=1400 audit(83.591:432): avc:  denied  { mount } for  pid=7140 comm="syz.3.322" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.686166][ T7142] dlm: no locking on control device
[   83.686262][ T7147] dlm: no locking on control device
[   83.696912][   T40] audit: type=1400 audit(83.611:433): avc:  denied  { getopt } for  pid=7140 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   83.705419][   T40] audit: type=1400 audit(83.621:434): avc:  denied  { map } for  pid=7140 comm="syz.3.322" path="/77/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   83.708032][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   83.714320][   T40] audit: type=1400 audit(83.621:435): avc:  denied  { execute } for  pid=7140 comm="syz.3.322" path="/77/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   83.769286][ T7154] bond1: Unable to set up delay as MII monitoring is disabled
[   83.774688][ T7154] bond1 (unregistering): Released all slaves
[   83.797985][ T5287] Bluetooth: hci2: command 0x0c1a tx timeout
[   83.803151][ T7155] bond1: Unable to set up delay as MII monitoring is disabled
[   83.806451][ T7155] bond1 (unregistering): Released all slaves
[   83.837661][   T40] audit: type=1400 audit(83.751:436): avc:  denied  { unmount } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.873684][   T40] audit: type=1400 audit(83.791:437): avc:  denied  { write } for  pid=7160 comm="syz.3.326" lport=56365 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   83.944106][ T7179] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   83.955003][ T7179] CIFS: Unable to determine destination address
[   83.956037][   T40] audit: type=1400 audit(83.871:438): avc:  denied  { node_bind } for  pid=7181 comm="syz.2.329" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   83.957525][ T7185] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003
[   83.958399][ T7179] SET target dimension over the limit!
[   83.974622][ T7183] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003
[   83.980807][ T5287] Bluetooth: hci3: SCO packet for unknown connection handle 201
[   84.105912][ T7202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   84.286978][ T7231] __nla_validate_parse: 13 callbacks suppressed
[   84.286991][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'.
[   84.318820][ T7236] netlink: 87 bytes leftover after parsing attributes in process `syz.4.342'.
[   84.325741][ T7236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.342'.
[   84.390011][ T7249] syzkaller0: entered promiscuous mode
[   84.391982][ T7249] syzkaller0: entered allmulticast mode
[   84.575828][ T7274] netlink: 'syz.4.347': attribute type 11 has an invalid length.
[   84.612091][ T7286] netlink: 488 bytes leftover after parsing attributes in process `syz.2.348'.
[   84.614955][ T7286] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.348'.
[   84.748288][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   84.784723][ T7297] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.349'.
[   84.789665][ T7297] netlink: ct family unspecified
[   84.808011][ T6026] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   84.971036][ T6026] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   84.976728][ T6026] usb 6-1: config 1 interface 0 has no altsetting 0
[   84.981990][ T6026] usb 6-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40
[   84.985888][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.989490][ T6026] usb 6-1: Product: ခ
[   84.991394][ T6026] usb 6-1: Manufacturer: ␁
[   84.993464][ T6026] usb 6-1: SerialNumber: Й
[   85.213818][ T6026] usbhid 6-1:1.0: can't add hid device: -71
[   85.215916][ T6026] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[   85.221336][ T6026] usb 6-1: USB disconnect, device number 4
[   85.554812][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.359'.
[   85.789798][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   85.804576][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.807713][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.811332][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.814095][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.817103][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.820349][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.823489][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.826769][ T7336] netlink: 'syz.4.361': attribute type 4 has an invalid length.
[   85.917736][ T7346] team0: Device gtp0 is up. Set it down before adding it as a team port
[   86.012334][ T7355] block nbd4: NBD_DISCONNECT
[   86.018631][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.367'.
[   86.057713][ T5961] IPVS: starting estimator thread 0...
[   86.157928][ T7365] IPVS: using max 44 ests per chain, 105600 per kthread
[   86.450372][ T7396] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   86.469575][ T7396] comedi comedi1: fl512: I/O port conflict (0x10003c4,16)
[   86.567994][   T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   86.729324][   T34] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   86.732164][   T34] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[   86.735507][   T34] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[   86.738513][   T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[   86.742053][   T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024
[   86.747028][   T34] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   86.750403][   T34] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   86.753068][   T34] usb 9-1: Product: syz
[   86.754473][   T34] usb 9-1: Manufacturer: syz
[   86.761120][   T34] cdc_wdm 9-1:1.0: skipping garbage
[   86.762878][   T34] cdc_wdm 9-1:1.0: skipping garbage
[   86.765472][   T34] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[   86.767435][   T34] cdc_wdm 9-1:1.0: Unknown control protocol
[   86.777996][ T6026] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   86.827945][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   86.930096][ T6026] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   86.933396][ T6026] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   86.936696][ T6026] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.943834][ T6026] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   86.947272][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.950396][ T6026] usb 8-1: Product: syz
[   86.952182][ T6026] usb 8-1: Manufacturer: syz
[   86.954108][ T6026] usb 8-1: SerialNumber: syz
[   86.961886][ T7399] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000)
[   86.969490][ T6026] hub 8-1:1.0: bad descriptor, ignoring hub
[   86.972135][ T6026] hub 8-1:1.0: probe with driver hub failed with error -5
[   87.130477][ T7423] sp0: Synchronizing with TNC
�[   87.182581][ T7433] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.186722][ T6026] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   87.252864][   T40] kauditd_printk_skb: 28 callbacks suppressed
[   87.252875][   T40] audit: type=1400 audit(87.171:467): avc:  denied  { getopt } for  pid=7437 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   87.264966][   T40] audit: type=1400 audit(87.191:468): avc:  denied  { setopt } for  pid=7437 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.350275][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'.
[   87.412449][   T40] audit: type=1400 audit(87.331:469): avc:  denied  { validate_trans } for  pid=7453 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   87.488222][   T34] usb 8-1: USB disconnect, device number 5
[   87.493767][   T34] usblp1: removed
[   87.518952][   T40] audit: type=1400 audit(87.441:470): avc:  denied  { ioctl } for  pid=7457 comm="syz.1.397" path="socket:[16144]" dev="sockfs" ino=16144 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   87.600227][ T7463] qnx6: unable to set blocksize
[   87.636662][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'.
[   87.640641][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.653564][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.690125][ T7466] EXT4-fs: Conflicting test_dummy_encryption options
[   87.707989][   T29] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[   87.799340][ T7470] dlm: Unknown command passed to DLM device : 33
[   87.799340][ T7470] 
[   87.827985][ T2005] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   87.861264][   T29] usb 7-1: Invalid ep0 maxpacket: 64
[   87.868009][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   87.988086][   T29] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[   87.990694][ T2005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.995012][ T2005] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   88.000121][ T2005] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.007760][ T2005] usb 8-1: language id specifier not provided by device, defaulting to English
[   88.023080][ T2005] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   88.027135][ T2005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.040711][ T2005] hub 8-1:1.0: bad descriptor, ignoring hub
[   88.043347][ T2005] hub 8-1:1.0: probe with driver hub failed with error -5
[   88.158015][   T29] usb 7-1: Invalid ep0 maxpacket: 64
[   88.161372][   T29] usb usb7-port1: attempt power cycle
[   88.240076][ T7413] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in;
[   88.240076][ T7413]    program syz.3.383 not setting count and/or reply_len properly
[   88.251608][   T40] audit: type=1400 audit(88.171:471): avc:  denied  { search } for  pid=7488 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.259822][   T40] audit: type=1400 audit(88.171:472): avc:  denied  { read write } for  pid=7488 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   88.266902][   T40] audit: type=1400 audit(88.171:473): avc:  denied  { open } for  pid=7488 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   88.277998][   T40] audit: type=1400 audit(88.171:474): avc:  denied  { lock } for  pid=7488 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   88.287460][   T40] audit: type=1400 audit(88.171:475): avc:  denied  { read } for  pid=7488 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1

syzkaller
syzkaller login: [   88.498044][   T29] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[   88.519729][   T29] usb 7-1: Invalid ep0 maxpacket: 64
[   88.649437][   T29] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[   88.671275][   T29] usb 7-1: Invalid ep0 maxpacket: 64
[   88.673927][   T29] usb usb7-port1: unable to enumerate USB device
[   88.908525][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   89.319656][   T40] audit: type=1400 audit(89.241:476): avc:  denied  { wake_alarm } for  pid=7495 comm="syz.1.408" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   89.332813][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[   89.332882][   T29] usb 9-1: USB disconnect, device number 3
[   89.335559][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[   89.340043][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   89.351973][ T2005] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   89.378576][ T2005] usb 8-1: USB disconnect, device number 6
[   89.392166][ T2005] usblp1: removed
[   89.431727][ T7502] validate_nla: 58 callbacks suppressed
[   89.431743][ T7502] netlink: 'syz.4.410': attribute type 10 has an invalid length.
[   89.454961][ T7502] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.641347][ T7515] sysfs: Unknown parameter 'lowerdir'
[   89.647365][ T7515] MTD: Attempt to mount non-MTD device "/dev/sr0"
[   89.659840][ T7515] cramfs: wrong magic
[   89.878178][ T2005] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   89.957915][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   89.964602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[   90.052631][ T2005] usb 8-1: Using ep0 maxpacket: 8
[   90.061426][ T2005] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   90.078103][ T2005] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   90.083979][ T2005] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   90.088252][ T2005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.099911][ T2005] usbtmc 8-1:16.0: bulk endpoints not found
[   90.238665][ T7549] netlink: 'syz.4.428': attribute type 8 has an invalid length.
[   90.242124][ T7549] __nla_validate_parse: 1 callbacks suppressed
[   90.242139][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'.
[   90.259813][ T7549] bond0: entered promiscuous mode
[   90.262279][ T7549] bond_slave_0: entered promiscuous mode
[   90.265277][ T7549] bond_slave_1: entered promiscuous mode
[   90.268669][ T7549] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[   90.278278][ T7549] gretap0: entered promiscuous mode
[   90.282800][ T7549] veth1_to_hsr: entered promiscuous mode
[   90.288319][ T7549] hsr1: entered promiscuous mode
[   90.536533][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.431'.
[   90.664958][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'.
[   90.671307][ T7559] atomic_op ffff888057b9f198 conn xmit_atomic 0000000000000000
[   90.913907][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.933668][ T7561] bridge_slave_0 (unregistering): left allmulticast mode
[   90.936958][ T7561] bridge_slave_0 (unregistering): left promiscuous mode
[   90.941604][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.988152][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   91.121378][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'.
[   91.538993][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.540695][ T7601] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   91.546586][ T7601] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[   91.570982][ T7601] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   91.574709][ T7601] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[   92.037950][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   92.276631][ T7590] Bluetooth: hci0: Opcode 0x080f failed: -4
[   92.307332][ T7617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   92.310511][ T7617] overlayfs: missing 'lowerdir'
[   92.535106][   T40] kauditd_printk_skb: 16 callbacks suppressed
[   92.535118][   T40] audit: type=1400 audit(92.451:493): avc:  denied  { append } for  pid=7627 comm="syz.4.451" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   92.600457][ T5974] usb 8-1: USB disconnect, device number 7
[   92.659968][   T40] audit: type=1400 audit(92.581:494): avc:  denied  { mounton } for  pid=7635 comm="syz.3.454" path="/92/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   92.660572][ T7636] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   92.682957][ T7636] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   92.703394][ T7636] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[   92.706631][ T7636] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[   92.722072][ T7636] overlayfs: d_ino too big (92, ino=9223372036854776307, xinobits=3)
[   92.725272][ T7636] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[   92.729455][ T7636] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[   92.732563][ T7636] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[   92.735393][ T7636] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[   92.741197][ T7636] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[   92.744943][ T7636] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3)
[   92.750113][ T7636] overlayfs: d_ino too big (kernel, ino=4611686018427388752, xinobits=3)
[   92.870103][ T7647] overlay: Unknown parameter 'euid<00000000000000000000'
[   92.876663][   T40] audit: type=1400 audit(92.791:495): avc:  denied  { create } for  pid=7651 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   92.883901][   T40] audit: type=1400 audit(92.791:496): avc:  denied  { connect } for  pid=7651 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   93.047941][   T40] audit: type=1400 audit(92.961:497): avc:  denied  { write } for  pid=7651 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   93.054604][   T40] audit: type=1400 audit(92.961:498): avc:  denied  { setopt } for  pid=7651 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   93.078847][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   93.180154][   T40] audit: type=1400 audit(93.101:499): avc:  denied  { bind } for  pid=7666 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   93.275813][ T7668] delete_channel: no stack
[   93.307793][   T40] audit: type=1400 audit(93.221:500): avc:  denied  { map } for  pid=7672 comm="syz.3.465" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.318944][   T40] audit: type=1400 audit(93.221:501): avc:  denied  { execute } for  pid=7672 comm="syz.3.465" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.336106][ T7674] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   93.475404][ T7682] binder: BINDER_SET_CONTEXT_MGR already set
[   93.477746][ T7682] binder: 7679:7682 ioctl 4018620d 200000004a80 returned -16
[   93.487729][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout
[   93.590886][   T40] audit: type=1400 audit(93.511:502): avc:  denied  { ioctl } for  pid=7683 comm="syz.1.470" path="/150/file0/cgroup.kill" dev="9p" ino=72614219 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.820018][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   93.827526][ T7692] sctp: [Deprecated]: syz.1.471 (pid 7692) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.827526][ T7692] Use struct sctp_sack_info instead
[   93.833924][ T7693] netlink: 1 bytes leftover after parsing attributes in process `syz.2.474'.
[   93.879061][ T7698] 9pnet_fd: Insufficient options for proto=fd
[   94.040094][ T7709] netlink: 'syz.2.478': attribute type 9 has an invalid length.
[   94.042697][ T7709] netlink: 'syz.2.478': attribute type 11 has an invalid length.
[   94.045188][ T7709] netlink: 'syz.2.478': attribute type 12 has an invalid length.
[   94.048598][ T7709] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.478'.
[   94.051812][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'.
[   94.108503][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   94.114488][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[   94.118083][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'.
[   94.184282][ T7717] ufs: You didn't specify the type of your ufs filesystem
[   94.184282][ T7717] 
[   94.184282][ T7717] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   94.184282][ T7717] 
[   94.184282][ T7717] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   94.196500][ T7717] ufs: failed to set blocksize
[   94.287225][ T7728] random: crng reseeded on system resumption
[   94.350315][    C0] Illegal XDP return value 16128 on prog  (id 35) dev veth0_to_bond, expect packet loss!
[   94.362237][ T7732] overlayfs: failed to resolve './file2': -2
[   94.522876][ T5287] Bluetooth: hci0: unexpected event for opcode 0x200b
[   94.584384][ T7760] binder: BINDER_SET_CONTEXT_MGR already set
[   94.587152][ T7760] binder: 7759:7760 ioctl 4018620d 200000004a80 returned -16
[   95.007094][ T7784] input: syz0 as /devices/virtual/input/input10
[   95.023415][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7784 comm=syz.1.501
[   95.040971][ T6032] udevd[6032]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[   95.104104][ T7789] exFAT-fs (nullb0): invalid boot record signature
[   95.107532][ T7789] exFAT-fs (nullb0): failed to read boot sector
[   95.111276][ T7789] exFAT-fs (nullb0): failed to recognize exfat type
[   95.148084][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   95.355010][ T7801] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   95.476205][ T7798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7798 comm=syz.4.506
[   95.499255][ T7813] geneve2: entered promiscuous mode
[   95.501502][ T7813] geneve2: entered allmulticast mode
[   95.574535][ T7822] trusted_key: encrypted_key: keyword 'u' not recognized
[   95.589931][ T7824] binder: BINDER_SET_CONTEXT_MGR already set
[   95.592111][ T7824] binder: 7823:7824 ioctl 4018620d 200000000100 returned -16
[   95.594693][ T7824] binder: BINDER_SET_CONTEXT_MGR already set
[   95.599748][ T7824] binder: 7823:7824 ioctl 4018620d 200000000100 returned -16
[   95.636257][ T7829] xt_hashlimit: size too large, truncated to 1048576
[   95.645652][ T7813] geneve2: entered promiscuous mode
[   95.650264][ T7813] geneve2: entered allmulticast mode
[   95.828737][ T7283] 
[   95.829590][ T7283] ============================================
[   95.831598][ T7283] WARNING: possible recursive locking detected
[   95.833642][ T7283] syzkaller #0 Tainted: G             L     
[   95.835696][ T7283] --------------------------------------------
[   95.837771][ T7283] kworker/u32:26/7283 is trying to acquire lock:
[   95.839859][ T7283] ffff888059fb1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x1a2/0x860
[   95.842913][ T7283] 
[   95.842913][ T7283] but task is already holding lock:
[   95.845322][ T7283] ffff888059fb1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0x88/0xf0
[   95.848422][ T7283] 
[   95.848422][ T7283] other info that might help us debug this:
[   95.851018][ T7283]  Possible unsafe locking scenario:
[   95.851018][ T7283] 
[   95.853440][ T7283]        CPU0
[   95.854587][ T7283]        ----
[   95.855693][ T7283]   lock(k-sk_lock-AF_INET6);
[   95.857229][ T7283]   lock(k-sk_lock-AF_INET6);
[   95.858797][ T7283] 
[   95.858797][ T7283]  *** DEADLOCK ***
[   95.858797][ T7283] 
[   95.861409][ T7283]  May be due to missing lock nesting notation
[   95.861409][ T7283] 
[   95.864652][ T7283] 3 locks held by kworker/u32:26/7283:
[   95.866570][ T7283]  #0: ffff888059c12948 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[   95.870200][ T7283]  #1: ffffc9000351fd08 ((work_completion)(&cp->cp_down_w)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[   95.873935][ T7283]  #2: ffff888059fb1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0x88/0xf0
[   95.877157][ T7283] 
[   95.877157][ T7283] stack backtrace:
[   95.879215][ T7283] CPU: 3 UID: 0 PID: 7283 Comm: kworker/u32:26 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.879231][ T7283] Tainted: [L]=SOFTLOCKUP
[   95.879234][ T7283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.879243][ T7283] Workqueue: krds_cp_wq#4/0 rds_shutdown_worker
[   95.879259][ T7283] Call Trace:
[   95.879263][ T7283]  <TASK>
[   95.879268][ T7283]  dump_stack_lvl+0x100/0x190
[   95.879284][ T7283]  print_deadlock_bug.cold+0xbd/0xca
[   95.879301][ T7283]  __lock_acquire+0x12bb/0x2630
[   95.879318][ T7283]  ? rds_recv_incoming+0xc92/0x1150
[   95.879328][ T7283]  ? rds_tcp_data_recv+0x278/0xce0
[   95.879344][ T7283]  ? __tcp_read_sock+0x204/0x8d0
[   95.879413][ T7283]  lock_acquire+0x1cf/0x380
[   95.879428][ T7283]  ? inet6_getname+0x1a2/0x860
[   95.879441][ T7283]  lock_sock_nested+0x41/0xf0
[   95.879483][ T7283]  ? inet6_getname+0x1a2/0x860
[   95.879492][ T7283]  inet6_getname+0x1a2/0x860
[   95.879502][ T7283]  rds_tcp_get_peer_sport+0x7c/0x110
[   95.879518][ T7283]  ? __pfx_rds_tcp_get_peer_sport+0x10/0x10
[   95.879537][ T7283]  ? rds_addr_cmp+0x10d/0x150
[   95.879549][ T7283]  rds_tcp_conn_slots_available+0x279/0x390
[   95.879565][ T7283]  ? __pfx_rds_tcp_conn_slots_available+0x10/0x10
[   95.879581][ T7283]  rds_recv_hs_exthdrs+0x5cb/0x7e0
[   95.879593][ T7283]  ? __pfx_rds_recv_hs_exthdrs+0x10/0x10
[   95.879606][ T7283]  rds_recv_incoming+0xd6c/0x1150
[   95.879618][ T7283]  ? __pfx_rds_recv_incoming+0x10/0x10
[   95.879628][ T7283]  ? skb_copy_bits+0x5c8/0x8d0
[   95.879645][ T7283]  rds_tcp_data_recv+0x278/0xce0
[   95.879662][ T7283]  ? tcp_recv_skb+0x2a4/0x400
[   95.879674][ T7283]  __tcp_read_sock+0x204/0x8d0
[   95.879687][ T7283]  ? __pfx_rds_tcp_data_recv+0x10/0x10
[   95.879703][ T7283]  ? __pfx___tcp_read_sock+0x10/0x10
[   95.879718][ T7283]  rds_tcp_read_sock+0x12e/0x280
[   95.879733][ T7283]  ? __pfx_rds_tcp_read_sock+0x10/0x10
[   95.879750][ T7283]  ? __local_bh_enable_ip+0x9e/0x120
[   95.879764][ T7283]  rds_tcp_recv_path+0x95/0xf0
[   95.879780][ T7283]  rds_tcp_conn_path_shutdown+0x26e/0x970
[   95.879797][ T7283]  ? __pfx_rds_tcp_conn_path_shutdown+0x10/0x10
[   95.879814][ T7283]  ? __pfx___might_resched+0x10/0x10
[   95.879825][ T7283]  ? __lock_acquire+0x4a5/0x2630
[   95.879841][ T7283]  rds_conn_shutdown+0x478/0xc20
[   95.879857][ T7283]  ? debug_object_deactivate+0x2e4/0x3b0
[   95.879875][ T7283]  ? finish_task_switch.isra.0+0x200/0xb80
[   95.879889][ T7283]  ? __pfx_rds_conn_shutdown+0x10/0x10
[   95.879906][ T7283]  ? rcu_is_watching+0x12/0xc0
[   95.879919][ T7283]  process_one_work+0x9d7/0x1920
[   95.879932][ T7283]  ? __pfx_process_one_work+0x10/0x10
[   95.879944][ T7283]  ? __pfx_rds_shutdown_worker+0x10/0x10
[   95.879957][ T7283]  worker_thread+0x5da/0xe40
[   95.879968][ T7283]  ? __pfx_worker_thread+0x10/0x10
[   95.879979][ T7283]  ? kthread+0x13a/0x450
[   95.879987][ T7283]  ? __pfx_worker_thread+0x10/0x10
[   95.879996][ T7283]  kthread+0x370/0x450
[   95.880005][ T7283]  ? __pfx_kthread+0x10/0x10
[   95.880014][ T7283]  ret_from_fork+0x754/0xd80
[   95.880024][ T7283]  ? __pfx_ret_from_fork+0x10/0x10
[   95.880033][ T7283]  ? __switch_to+0x7b4/0x1120
[   95.880045][ T7283]  ? __pfx_kthread+0x10/0x10
[   95.880054][ T7283]  ret_from_fork_asm+0x1a/0x30
[   95.880069][ T7283]  </TASK>
[   95.998665][ T7845] geneve1: entered allmulticast mode
[   96.188223][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   96.447942][   T54] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   96.577959][   T54] usb 6-1: device descriptor read/64, error -71
[   96.818059][   T54] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   96.957979][   T54] usb 6-1: device descriptor read/64, error -71
[   97.068967][   T54] usb usb6-port1: attempt power cycle
[   97.228165][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   97.417957][   T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   97.438446][   T54] usb 6-1: device descriptor read/8, error -71
[   97.677985][   T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   97.698511][   T54] usb 6-1: device descriptor read/8, error -71
[   97.808277][   T54] usb usb6-port1: unable to enumerate USB device
[   98.267920][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   99.307928][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  100.347995][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  101.388309][    C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  102.428047][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  103.477929][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  104.507963][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  105.547998][    C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available