last executing test programs:

2m25.042911606s ago: executing program 1 (id=5117):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x1020, 0x0)

2m24.044591211s ago: executing program 1 (id=5120):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0405560c"], 0x7)

2m23.17236994s ago: executing program 1 (id=5122):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xd4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe730d03272302fbd}, 0x0)

2m17.477295061s ago: executing program 2 (id=5145):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x557, r0)

2m16.855049258s ago: executing program 2 (id=5151):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})

2m16.792689034s ago: executing program 2 (id=5152):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2m16.661199548s ago: executing program 2 (id=5153):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x36, 0x30, 0x63, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0)
keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0)

2m16.558389683s ago: executing program 2 (id=5154):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8089}, 0x4000814)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4)

2m16.509487302s ago: executing program 2 (id=5155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x48c0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0xc080)

2m16.156819025s ago: executing program 32 (id=5084):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a3100000000050004000000000014000780080008400000"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x54, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706012c00000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

2m9.138748693s ago: executing program 4 (id=5178):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180))
r2 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f00000004c0)=[{0x5, 0x201, 0x0, 0x0}, {0x2cbd, 0x11, 0x0, 0x0}, {0x2, 0x6000, 0x93, &(0x7f00000003c0)="3ec66602e9fdf31c44b7e460dda4df2e1edaee3e8dc83ebcb69ba8b13ef12b32d9d1eebb4d10d4aff6df5450fd5badb4b6a5b44bc98dfbfcb693eaf9b2e3cf0d49b5addaff9032ba1a6b4f8f1d5db19525c75f64dba4d8bc29224cb22270897de5c0444888e8501925f261e651a7db113c2031febefd496a7eaf6588a643f829177ca755d57f518baca1392fcc645dfda31292"}, {0x400, 0x1801, 0x75, &(0x7f0000000580)="fdfcb1b52023128e98469064255211db1a48ef2a8e4fb7ff2ebdc72897ef65044ab99f9b8a825e3daf70cf6e5b683fbe8286c3aa65ee63fa5a2dbc9f7f6f2d59fb4f14dfabc0c20b7070fad87f0df2a58e5b06be00bc7dad14db7a09f97a9d11759cddaabfbe8c229feb13d22038ff1c02a7d0266d"}], 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x7813, 0x10000, 0x4000000}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2affff0000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x20000800)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0)
syz_usb_ep_read(r7, 0x2, 0x28, &(0x7f0000000100)=""/8)

2m8.33449331s ago: executing program 4 (id=5179):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='('], 0x28}}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
close_range(r0, 0xffffffffffffffff, 0x0)

2m7.706756307s ago: executing program 33 (id=5122):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xd4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe730d03272302fbd}, 0x0)

2m7.698860062s ago: executing program 4 (id=5181):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffcf}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000000001"], 0x28}}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m7.550190764s ago: executing program 4 (id=5182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x2)

2m6.877424268s ago: executing program 4 (id=5183):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
syz_ublk_setup_io_uring(0x49ef, &(0x7f00000001c0)={0x0, 0x800030a6, 0x8, 0xfffffffd, 0x2b1}, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000380))
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
inotify_init1(0x800)
r2 = timerfd_create(0x0, 0x0)
close_range(r2, r2, 0x0)
ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x1310}, {r2, 0x8190}, {0xffffffffffffffff, 0x80}], 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x9, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x3ff, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})
unshare(0x8040480)
mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)

2m5.869089488s ago: executing program 4 (id=5185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setns(0xc9, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, 0x0)
r2 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40402)
ioctl$FE_GET_PROPERTY(r2, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x2e, '\x00', @buffer={"01bafa6c508131f7c158db180015b4d676632457dad1eea8176fd41e95e7c393", 0x20}, 0x7f}, {0x46, '\x00', @data=0xd8f, 0x3}]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000400040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000440)}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6)
request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r7)
add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7)

2m4.809284451s ago: executing program 5 (id=5189):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180))
r2 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f00000004c0)=[{0x5, 0x201, 0x0, 0x0}, {0x2cbd, 0x11, 0x0, 0x0}, {0x2, 0x6000, 0x93, &(0x7f00000003c0)="3ec66602e9fdf31c44b7e460dda4df2e1edaee3e8dc83ebcb69ba8b13ef12b32d9d1eebb4d10d4aff6df5450fd5badb4b6a5b44bc98dfbfcb693eaf9b2e3cf0d49b5addaff9032ba1a6b4f8f1d5db19525c75f64dba4d8bc29224cb22270897de5c0444888e8501925f261e651a7db113c2031febefd496a7eaf6588a643f829177ca755d57f518baca1392fcc645dfda31292"}, {0x400, 0x1801, 0x75, &(0x7f0000000580)="fdfcb1b52023128e98469064255211db1a48ef2a8e4fb7ff2ebdc72897ef65044ab99f9b8a825e3daf70cf6e5b683fbe8286c3aa65ee63fa5a2dbc9f7f6f2d59fb4f14dfabc0c20b7070fad87f0df2a58e5b06be00bc7dad14db7a09f97a9d11759cddaabfbe8c229feb13d22038ff1c02a7d0266d"}], 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x7813, 0x10000, 0x4000000}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2affff0000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x20000800)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0)
syz_usb_ep_read(r7, 0x2, 0x28, &(0x7f0000000100)=""/8)

2m2.001978185s ago: executing program 34 (id=5149):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@chain)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m1.981684835s ago: executing program 5 (id=5191):
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
readv(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
socket$rxrpc(0x21, 0x2, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x21)

2m1.647677034s ago: executing program 5 (id=5192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x2)

2m1.12821172s ago: executing program 35 (id=5155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x48c0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0xc080)

2m0.070525184s ago: executing program 5 (id=5194):
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m59.169035439s ago: executing program 5 (id=5199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r2, &(0x7f00000001c0)='m', 0x1, 0x1}])

1m58.810893785s ago: executing program 5 (id=5201):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

1m50.604664103s ago: executing program 36 (id=5185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setns(0xc9, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, 0x0)
r2 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40402)
ioctl$FE_GET_PROPERTY(r2, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x2e, '\x00', @buffer={"01bafa6c508131f7c158db180015b4d676632457dad1eea8176fd41e95e7c393", 0x20}, 0x7f}, {0x46, '\x00', @data=0xd8f, 0x3}]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000400040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000440)}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6)
request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r7)
add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7)

1m43.537958297s ago: executing program 37 (id=5201):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

1m21.774944966s ago: executing program 9 (id=5325):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
close(r0)

1m21.495300952s ago: executing program 9 (id=5327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='('], 0x28}}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c00"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
close_range(r0, 0xffffffffffffffff, 0x0)

1m19.530184644s ago: executing program 9 (id=5337):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001440)={0x2020}, 0x2020)

1m17.16057199s ago: executing program 9 (id=5343):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1m16.88442885s ago: executing program 9 (id=5347):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='('], 0x28}}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c00"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
close_range(r0, 0xffffffffffffffff, 0x0)

1m16.77066178s ago: executing program 3 (id=5348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000740)='loop', 0x4)
symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r3, &(0x7f0000000900)='transport=loop,nqn=testsubsys', 0x1d)

1m15.530228249s ago: executing program 3 (id=5355):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x8044)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1m15.412687332s ago: executing program 9 (id=5356):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e65742c706f7274"], 0x64}}, 0x4008000)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000040)={0x1, "34aaaa9f2f8e89fbd1afe6a84dd4b0670f78687960f487f9cafb65e8fe5a612f", 0x1})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000050000223c000000090a010400000000000000000a0000040900010053797a310000000008000540000000020900020073797a310000000008000a40000000022c0000000c0a010100b6ec3a000000000000000a0000060900020073797a31000000000900010073797a31000000002c0000000e0a3f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001000000000000000000010000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xd0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x34b6, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000094)
fchdir(0xffffffffffffffff)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0x25, ""/37})
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3)

1m15.03904321s ago: executing program 3 (id=5359):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, 0x0, 0x0, r0)
r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x36, 0x30, 0x63, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0)
keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0)

1m14.591086222s ago: executing program 3 (id=5362):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r2, r5, 0xfffffffffffffc01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
tee(r2, r5, 0x60000000000, 0x0)
read$FUSE(r4, &(0x7f00000014c0)={0x2020}, 0x2020)
ioctl$KDSKBMODE(r0, 0x4b45, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x22, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4008004)

1m14.159809335s ago: executing program 3 (id=5363):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.745936173s ago: executing program 3 (id=5366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000021000005000700ff0000000c00018008000140e00040000c00028008000140e00000020d00148008000140ffffffe200"/96], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x2004c484)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, 0x0, 0x25, 0x8, @void}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0)
read$msr(r6, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
close_range(r7, 0xffffffffffffffff, 0x0)

1m0.225676413s ago: executing program 38 (id=5356):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e65742c706f7274"], 0x64}}, 0x4008000)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000040)={0x1, "34aaaa9f2f8e89fbd1afe6a84dd4b0670f78687960f487f9cafb65e8fe5a612f", 0x1})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000050000223c000000090a010400000000000000000a0000040900010053797a310000000008000540000000020900020073797a310000000008000a40000000022c0000000c0a010100b6ec3a000000000000000a0000060900020073797a31000000000900010073797a31000000002c0000000e0a3f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001000000000000000000010000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xd0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x34b6, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000094)
fchdir(0xffffffffffffffff)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0x25, ""/37})
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3)

58.565705644s ago: executing program 39 (id=5366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000021000005000700ff0000000c00018008000140e00040000c00028008000140e00000020d00148008000140ffffffe200"/96], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x2004c484)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, 0x0, 0x25, 0x8, @void}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0)
read$msr(r6, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
close_range(r7, 0xffffffffffffffff, 0x0)

57.929560616s ago: executing program 8 (id=5445):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r2, r5, 0xfffffffffffffc01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
tee(r2, r5, 0x60000000000, 0x0)
read$FUSE(r4, &(0x7f00000014c0)={0x2020}, 0x2020)
ioctl$KDSKBMODE(r0, 0x4b45, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040f0800"], 0x7)

57.098611258s ago: executing program 8 (id=5450):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x3c, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0)
syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x40c, 0x2d4, 0x0, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa8699a213d39b9940bc00000000000000a576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d292ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x6}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @gre_key=0xe63e}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x468)

56.274215668s ago: executing program 8 (id=5452):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
syz_ublk_setup_io_uring(0x49ef, &(0x7f00000001c0)={0x0, 0x800030a6, 0x8, 0xfffffffd, 0x2b1}, 0x0, &(0x7f0000000040), &(0x7f0000000380))
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
inotify_init1(0x800)
r2 = timerfd_create(0x0, 0x0)
close_range(r2, r2, 0x0)
ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x1310}, {r2, 0x8190}, {0xffffffffffffffff, 0x80}], 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x9, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x3ff, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})
unshare(0x8040480)
mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)

53.494643026s ago: executing program 8 (id=5456):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

53.078073786s ago: executing program 8 (id=5458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0)

52.514536933s ago: executing program 8 (id=5459):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0)

38.865163812s ago: executing program 1 (id=5431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file1\x00', 0x4100, 0x1a0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64])
read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x204000, 0x2, {0x2, 0x0, 0x1, 0x0, 0x0, 0xa9, 0x7, 0x10001, 0x1, 0x2000, 0x0, r2, r3, 0x7ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00')
preadv(r4, 0x0, 0x0, 0x6c, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000440)=0x58)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r6 = syz_io_uring_setup(0x31bc, &(0x7f00000001c0)={0x0, 0x9436, 0x2, 0xffffffff, 0x3a3}, 0x0, 0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(0x0, 0x0, r7, 0x0)
io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0)
ioctl$EVIOCGRAB(r5, 0x40044590, 0x0)

38.478238436s ago: executing program 1 (id=5490):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1e0, 0x268, 0x33a, 0x0, 0x268, 0x318, 0x460, 0x460, 0x318, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0xd8000000, {0x9402}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth1_to_bond\x00', {0xfff}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
fchmod(0xffffffffffffffff, 0x22)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c351)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_DEFRAG(r0, 0xc0401273, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r1 = fsopen(&(0x7f0000000280)='squashfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

38.402365115s ago: executing program 1 (id=5491):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x814)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0xdff4092e7c6caadc)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
lsm_list_modules(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x30, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
epoll_create1(0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))

37.219145415s ago: executing program 40 (id=5459):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0)

22.968951902s ago: executing program 41 (id=5491):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x814)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0xdff4092e7c6caadc)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
lsm_list_modules(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x30, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
epoll_create1(0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))

18.691844044s ago: executing program 6 (id=5527):
mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev, @local}}}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000014000300ce5d6201ffdbdf25"], 0x10}}, 0x40000)

16.697219728s ago: executing program 6 (id=5529):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sigaltstack(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf)
syz_open_dev$usbmon(0x0, 0x0, 0x20120)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

9.607619069s ago: executing program 6 (id=5542):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)

8.803869401s ago: executing program 7 (id=5546):
socket$inet_icmp(0x2, 0x2, 0x1)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$unix(r2, 0x0, 0x20000840)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = open(0x0, 0x4c27e, 0x10)
fallocate(r3, 0x0, 0x0, 0x1000f4)
sendfile(r3, r3, 0x0, 0x40000000800)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r4, 0x100000000000011, 0x2000, 0x2f93)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101480)

7.895913841s ago: executing program 7 (id=5547):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000303010000000000000000000a0000000c000200000023010006"], 0x54}}, 0x0)

7.026888458s ago: executing program 6 (id=5548):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r1)
accept4(r0, &(0x7f0000000280)=@xdp, 0x0, 0x80800)

7.014293405s ago: executing program 0 (id=5549):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x73}, {@loopback, 0x11, 0x0, 0x1}}, 0x44)
setsockopt(r0, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r1, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x1, &(0x7f0000000680)=[{0x0, 0x4, &(0x7f0000000380)='rr\x00', &(0x7f0000000580)="b7487bbe3b2525d7d1fb3db9547cd0dc3ea6e15d383b6c52de36875512b59cc07757eca2cf3f5ae1c9356d08cfdaace3d404dd7e10299fdf4d02a456c5dd2f4042aa02b3030f1bc50a1581fb6309cd9e396542087d045fa36f2435d4199fd6ed0c4306715741ecb3cb7b53d501cf2fa977c6e002205de60b5398c4396c20759bf9d5586604227ed3f4a989d15d93210eb1ad6c82e3924e50e8fd4c43b8d0de3a481b14d140730fa8edc00f832141d68f74854f76c3d7a88c8abf0f923f733b9cee3d52164981455968b56ccfaa333d57abd46f2a19a7099be71390d35292d28d247ef50c15a92c", 0xe7, 0x10}]})
r3 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, '\x00\x00\x00\x00\x00\x00\x00\x00'}]})
r4 = socket$inet6(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)
syz_open_dev$sg(0x0, 0x6f5e, 0x2)

6.978189754s ago: executing program 7 (id=5550):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002140)='net/netstat\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r4, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229)
mkdirat(0xffffffffffffffff, 0x0, 0x67)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000000)=0x7ff, 0x12)
landlock_create_ruleset(&(0x7f0000000040)={0x1010, 0x3}, 0x30, 0x0)

5.927292201s ago: executing program 6 (id=5551):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setgroups(0x0, 0x0)
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00')
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
syz_open_dev$sndpcmc(0x0, 0x20000000000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00')
read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020)
mmap$IORING_OFF_SQ_RING(0x0, 0x401, 0xd, 0x10010, r6, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

3.84957357s ago: executing program 7 (id=5552):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045})
ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01000000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x85434d09f3f6babb, 0x1, 0x2, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, @generic={0xfa, 0x5, 0x4, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177989fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d0403020347f7304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffd)
close(r4)
r5 = socket(0x2b, 0x1, 0x1)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x5)
accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0xfffffffffffffd98, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x8d0)
recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80)

3.848847824s ago: executing program 6 (id=5553):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)

3.488554771s ago: executing program 0 (id=5554):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f00000010c0))

3.226127261s ago: executing program 0 (id=5555):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

2.647600222s ago: executing program 0 (id=5556):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)

2.423475805s ago: executing program 0 (id=5557):
pause()
landlock_restrict_self(0xffffffffffffffff, 0xc)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f00000006c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x79, &(0x7f0000000440)=""/121, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x8, 0xffff, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x5, 0x9, 0xb}], 0x10, 0x3}, 0x94)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x2, 0xff}, {}, @note={0x59, 0xfc, 0x52, 0x5, 0x7ff}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0xfe, 0x1f}, {}, @quote={{0x7, 0x3}, 0x2e}}], 0x38)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x4012}, 0x22004080)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@getqdisc={0x30, 0x26, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x3, 0x3}, {0x8, 0xffe8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x8000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x3800001, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x400000002000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000ac0000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

1.423486402s ago: executing program 7 (id=5558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000303010000000000000000000a0000000c000200000023010006"], 0x54}}, 0x0)

826.105389ms ago: executing program 0 (id=5559):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sigaltstack(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0xaf)
syz_open_dev$usbmon(0x0, 0x0, 0x20120)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100)={0x1, 0x6}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000000)={0x2, 0x3}, 0x2)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)

0s ago: executing program 7 (id=5560):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sigaltstack(0x0, &(0x7f0000001500)={0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf)
syz_open_dev$usbmon(0x0, 0x0, 0x20120)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000100)={0x1, 0x6}, 0x2)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

5][T21594] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5235'.
[  899.802968][T21513] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.803059][T21513] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.803235][T21513] bridge_slave_0: entered allmulticast mode
[  899.809686][T21513] bridge_slave_0: entered promiscuous mode
[  899.846280][T21513] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.846354][T21513] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.846459][T21513] bridge_slave_1: entered allmulticast mode
[  899.865052][T21513] bridge_slave_1: entered promiscuous mode
[  900.026879][T21595] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5235'.
[  900.088526][T21599] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  900.099651][T21599] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  900.111714][T21599] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  900.127679][T21599] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  900.139058][T21599] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  900.293099][T21513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  900.318145][T21513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  900.548647][T21513] team0: Port device team_slave_0 added
[  900.574513][T21513] team0: Port device team_slave_1 added
[  900.852408][T21513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.852414][T21513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.852428][T21513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.861005][T21513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.861015][T21513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.861037][T21513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.141396][T17646] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  901.290391][T17646] usb 8-1: device descriptor read/64, error -71
[  901.304023][T21513] hsr_slave_0: entered promiscuous mode
[  901.319319][T21513] hsr_slave_1: entered promiscuous mode
[  901.319779][T21513] debugfs: 'hsr0' already exists in 'hsr'
[  901.319792][T21513] Cannot create hsr debugfs directory
[  901.350368][T15343] Bluetooth: hci9: command tx timeout
[  901.530175][T17646] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  901.660900][T17646] usb 8-1: device descriptor read/64, error -71
[  901.750482][ T5608] Bluetooth: hci10: Opcode 0x1003 failed: -110
[  901.770763][T17646] usb usb8-port1: attempt power cycle
[  902.001806][T17996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.120682][T17646] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  902.141392][T17646] usb 8-1: device descriptor read/8, error -71
[  902.230218][ T5608] Bluetooth: hci11: command tx timeout
[  902.369883][T17996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.381352][T17646] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  902.402038][T17646] usb 8-1: device descriptor read/8, error -71
[  902.511152][T17646] usb usb8-port1: unable to enumerate USB device
[  903.146760][T17996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.245501][T21634] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5246'.
[  903.293231][T21634] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5246'.
[  903.643576][T17996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.826910][T21597] lo speed is unknown, defaulting to 1000
[  904.070127][    C1] net_ratelimit: 216 callbacks suppressed
[  904.318333][ T5608] Bluetooth: hci11: command tx timeout
[  904.359471][   T30] audit: type=1400 audit(1790548011.951:2137): avc:  denied  { mount } for  pid=21649 comm="syz.8.5253" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  905.518202][   T30] audit: type=1400 audit(1790548013.171:2138): avc:  denied  { unmount } for  pid=21396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  905.716817][ T5608] Bluetooth: hci8: unexpected event for opcode 0x0000
[  905.829093][T21660] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  906.390712][ T5608] Bluetooth: hci11: command tx timeout
[  906.460188][T18927] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  906.508067][T21513] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  906.532644][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  906.536726][T21513] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  906.596587][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  906.602797][T18927] usb 8-1: device descriptor read/64, error -71
[  906.615504][ T5801] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  906.617175][T17996] bridge_slave_1: left allmulticast mode
[  906.617194][T17996] bridge_slave_1: left promiscuous mode
[  906.619409][T17996] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.662793][T17996] bridge_slave_0: left allmulticast mode
[  906.662812][T17996] bridge_slave_0: left promiscuous mode
[  906.662989][T17996] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.800194][ T5801] usb 9-1: Using ep0 maxpacket: 8
[  906.801203][ T5801] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  906.817385][ T5801] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  906.817446][ T5801] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  906.817503][ T5801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.860147][T18927] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  906.873010][ T5801] usbtmc 9-1:16.0: bulk endpoints not found
[  907.000753][T18927] usb 8-1: device descriptor read/64, error -71
[  907.110799][T18927] usb usb8-port1: attempt power cycle
[  907.405542][T17996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.413268][T17996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.437789][T17996] bond0 (unregistering): Released all slaves
[  907.471578][T18927] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  907.483820][T21513] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  907.501399][T18927] usb 8-1: device descriptor read/8, error -71
[  907.536470][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  907.543235][T21513] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  907.594104][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  907.723844][T17996] tipc: Left network mode
[  907.770383][T18927] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  907.790939][T18927] usb 8-1: device descriptor read/8, error -71
[  907.831920][T15343] Bluetooth: hci6: Opcode 0x206a failed: -110
[  907.834317][T15343] Bluetooth: hci6: command 0x206a tx timeout
[  907.900735][T18927] usb usb8-port1: unable to enumerate USB device
[  908.307655][   T30] audit: type=1400 audit(1790548015.961:2139): avc:  denied  { write } for  pid=21692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  908.434909][   T30] audit: type=1400 audit(1790548016.091:2140): avc:  denied  { write } for  pid=21710 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  908.470836][ T5608] Bluetooth: hci11: command tx timeout
[  908.573818][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1
[  908.752266][T21513] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.110067][    C0] net_ratelimit: 133 callbacks suppressed
[  909.141917][T21513] 8021q: adding VLAN 0 to HW filter on device team0
[  909.177292][T18001] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.178114][T18001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.195705][T18001] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.195791][T18001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.489955][T18927] usb 9-1: USB disconnect, device number 2
[  909.588488][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5272'.
[  909.751865][ T5608] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0
[  909.752403][ T5608] Bluetooth: hci8: Injecting HCI hardware error event
[  909.754371][T15343] Bluetooth: hci8: hardware error 0x00
[  909.819780][T17997] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3ed43194-f953-4f68-84e8-2d6d8c7e4abc.
[  910.021027][   T30] audit: type=1400 audit(1790548017.681:2141): avc:  denied  { write } for  pid=21721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  910.261545][T21597] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.261683][T21597] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.261864][T21597] bridge_slave_0: entered allmulticast mode
[  910.304465][T21737] nvme nvme0: creating 2 I/O queues.
[  910.308973][T21597] bridge_slave_0: entered promiscuous mode
[  910.343431][T21597] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.343479][T21597] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.343604][T21597] bridge_slave_1: entered allmulticast mode
[  910.388126][T21597] bridge_slave_1: entered promiscuous mode
[  910.405352][   T30] audit: type=1400 audit(1790548018.061:2142): avc:  denied  { write } for  pid=21747 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  910.443174][T21737] nvme nvme0: new ctrl: "testsubsys"
[  910.645146][T17996] hsr_slave_0: left promiscuous mode
[  910.647703][T17996] hsr_slave_1: left promiscuous mode
[  910.648661][T17996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  910.648678][T17996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  910.649595][T17996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  910.649610][T17996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  910.717262][T17996] veth1_macvtap: left promiscuous mode
[  910.717296][T17996] veth0_macvtap: left promiscuous mode
[  910.730611][T17996] veth1_vlan: left promiscuous mode
[  910.730678][T17996] veth0_vlan: left promiscuous mode
[  911.322881][T17620] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  911.422298][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5283'.
[  911.450908][T17620] usb 8-1: device descriptor read/64, error -71
[  911.691184][T17620] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  911.796719][T17996] team0 (unregistering): Port device team_slave_1 removed
[  911.821975][T17620] usb 8-1: device descriptor read/64, error -71
[  911.842619][T17996] team0 (unregistering): Port device team_slave_0 removed
[  911.931631][T17620] usb usb8-port1: attempt power cycle
[  912.000498][T15343] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  912.280312][T17620] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  912.295897][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2
[  912.301005][T17620] usb 8-1: device descriptor read/8, error -71
[  912.332505][T21597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  912.367645][T21597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  912.390140][T21599] Bluetooth: hci6: Opcode 0x206a failed: -110
[  912.390242][T21599] Bluetooth: hci6: command 0x206a tx timeout
[  912.512213][T21597] team0: Port device team_slave_0 added
[  912.544705][T17620] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  912.562816][T17620] usb 8-1: device descriptor read/8, error -71
[  912.563266][T21597] team0: Port device team_slave_1 added
[  912.670520][T17620] usb usb8-port1: unable to enumerate USB device
[  912.804143][T21597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.804154][T21597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.804174][T21597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.814432][T21597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.814443][T21597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.814466][T21597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.256557][T21597] hsr_slave_0: entered promiscuous mode
[  913.275975][T21597] hsr_slave_1: entered promiscuous mode
[  914.044075][   T30] audit: type=1400 audit(1790548021.701:2143): avc:  denied  { write } for  pid=21781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  914.097016][T21513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.169753][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5292'.
[  914.297317][   T30] audit: type=1400 audit(1790548021.951:2144): avc:  denied  { write } for  pid=21814 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  914.323204][    C0] net_ratelimit: 159 callbacks suppressed
[  914.416503][T21818] dvmrp1: entered allmulticast mode
[  914.450107][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3
[  914.837988][   T30] audit: type=1400 audit(1790548022.491:2145): avc:  denied  { write } for  pid=21821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  915.015660][   T30] audit: type=1400 audit(1790548022.671:2146): avc:  denied  { write } for  pid=21835 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  915.034116][T21597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.328033][T21818] dvmrp1: left allmulticast mode
[  915.484497][T21847] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5299'.
[  915.655413][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4
[  915.919744][T21597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.088004][T21597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.167355][T21513] veth0_vlan: entered promiscuous mode
[  916.180313][T17620] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  916.232613][T21597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.240247][T18926] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  916.317624][T21513] veth1_vlan: entered promiscuous mode
[  916.340216][T17620] usb 9-1: Using ep0 maxpacket: 32
[  916.346108][T17620] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  916.357143][T17620] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  916.357173][T17620] usb 9-1: config 0 has no interface number 0
[  916.357211][T17620] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  916.357238][T17620] usb 9-1: config 0 interface 1 has no altsetting 0
[  916.359594][T17620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.359615][T17620] usb 9-1: Product: syz
[  916.359631][T17620] usb 9-1: Manufacturer: syz
[  916.359646][T17620] usb 9-1: SerialNumber: syz
[  916.401661][T18926] usb 8-1: Using ep0 maxpacket: 32
[  916.402394][T18926] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  916.403477][T18926] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  916.403499][T18926] usb 8-1: config 0 has no interface number 0
[  916.403533][T18926] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  916.403553][T18926] usb 8-1: config 0 interface 1 has no altsetting 0
[  916.405852][T18926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.405873][T18926] usb 8-1: Product: syz
[  916.405887][T18926] usb 8-1: Manufacturer: syz
[  916.405902][T18926] usb 8-1: SerialNumber: syz
[  916.417909][T18926] usb 8-1: config 0 descriptor??
[  916.495406][T17620] usb 9-1: config 0 descriptor??
[  916.517021][T21513] veth0_macvtap: entered promiscuous mode
[  916.537360][T21513] veth1_macvtap: entered promiscuous mode
[  916.668608][T21513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  916.689672][T18926] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  916.691631][T18926] cx231xx 8-1:0.1: Failed to read PCB config
[  916.691689][T18926] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71
[  916.712867][T18926] usb 8-1: USB disconnect, device number 18
[  916.717147][T21513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  916.756659][T17620] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  916.757195][T17620] cx231xx 9-1:0.1: Failed to read PCB config
[  916.757240][T17620] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71
[  916.786488][   T30] audit: type=1400 audit(1790548024.451:2147): avc:  denied  { bind } for  pid=21865 comm="syz.6.5305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  916.809431][T17620] usb 9-1: USB disconnect, device number 3
[  916.826499][T17989] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  916.826764][T17996] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  916.826911][T17996] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  916.830155][  T115] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  917.220200][T18926] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  917.303939][T17997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  917.303952][T17997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.370190][T18927] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  917.381935][T18926] usb 8-1: Using ep0 maxpacket: 32
[  917.383605][T18926] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  917.387303][T18926] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  917.387316][T18926] usb 8-1: config 0 has no interface number 0
[  917.387338][T18926] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  917.387350][T18926] usb 8-1: config 0 interface 1 has no altsetting 0
[  917.421833][T18926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.421853][T18926] usb 8-1: Product: syz
[  917.421868][T18926] usb 8-1: Manufacturer: syz
[  917.421883][T18926] usb 8-1: SerialNumber: syz
[  917.433775][T18926] usb 8-1: config 0 descriptor??
[  917.530322][T18927] usb 9-1: Using ep0 maxpacket: 32
[  917.537189][T18927] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  917.538399][T18927] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  917.538413][T18927] usb 9-1: config 0 has no interface number 0
[  917.538434][T18927] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  917.538446][T18927] usb 9-1: config 0 interface 1 has no altsetting 0
[  917.549549][T18927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.549569][T18927] usb 9-1: Product: syz
[  917.549604][T18927] usb 9-1: Manufacturer: syz
[  917.549618][T18927] usb 9-1: SerialNumber: syz
[  917.563054][T18927] usb 9-1: config 0 descriptor??
[  917.656204][T18926] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  917.656927][T18926] cx231xx 8-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  917.729594][T17998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  917.729608][T17998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.761040][T18926] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  917.762800][T18926] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  917.764625][T18926] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  917.764964][T18926] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  917.766414][T18926] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  917.766428][T18926] cx231xx 8-1:0.1: Failed to set devmode to analog: error: -32
[  917.804238][T21597] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  917.839938][T18927] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  917.853627][T21597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  917.865009][T21597] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  917.866320][T18927] cx231xx 9-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  917.883690][T18926] i2c i2c-2: Added multiplexed i2c bus 4
[  917.886645][T21861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.898080][T21861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.915036][T18926] i2c i2c-2: Added multiplexed i2c bus 5
[  917.915245][T21861] cx231xx 8-1:0.1: cx231xx_send_usb_command: failed with status --32
[  917.917179][T18926] cx231xx 8-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]!
[  917.917207][T18926] cx231xx 8-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]!
[  917.958199][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5303'.
[  917.968927][T21597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  917.985914][T18927] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  918.005405][T21597] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  918.005887][T18927] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  918.007134][T18927] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  918.010973][T18927] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  918.011441][T18927] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  918.011459][T18927] cx231xx 9-1:0.1: Failed to set devmode to analog: error: -32
[  918.067895][T21597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  918.076158][T21597] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  918.107378][T21859] cx231xx 8-1:0.1: cx231xx_send_usb_command: failed with status --71
[  918.121056][T21597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  918.131772][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5304'.
[  918.189014][T21859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.189824][T21859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.204461][T18927] i2c i2c-5: Added multiplexed i2c bus 2
[  918.227569][T18927] i2c i2c-5: Added multiplexed i2c bus 6
[  918.230151][T18927] cx231xx 9-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]!
[  918.230171][T18927] cx231xx 9-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]!
[  918.239807][T18926] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -32
[  918.328255][T18926] usb 8-1: USB disconnect, device number 19
[  918.426277][T21597] 8021q: adding VLAN 0 to HW filter on device bond0
[  918.509883][T18927] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -32
[  918.541627][T21597] 8021q: adding VLAN 0 to HW filter on device team0
[  918.571822][T18927] usb 9-1: USB disconnect, device number 4
[  918.591167][T17997] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.591260][T17997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  918.631027][  T115] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.631120][  T115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.572619][T21597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  919.708089][T21597] veth0_vlan: entered promiscuous mode
[  919.738493][T21597] veth1_vlan: entered promiscuous mode
[  919.799014][T21597] veth0_macvtap: entered promiscuous mode
[  919.811272][T21597] veth1_macvtap: entered promiscuous mode
[  919.835543][T21597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  919.873406][T21597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  919.910155][    C1] net_ratelimit: 309 callbacks suppressed
[  920.038860][T17996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  920.042857][T17997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  920.050405][T17989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  920.050444][T17989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  920.489654][T17989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.489667][T17989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.681672][ T5801] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  920.814861][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.814875][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.833377][ T5801] usb 8-1: Using ep0 maxpacket: 32
[  920.837157][ T5801] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  920.843583][ T5801] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  920.843605][ T5801] usb 8-1: config 0 has no interface number 0
[  920.843638][ T5801] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  920.843659][ T5801] usb 8-1: config 0 interface 1 has no altsetting 0
[  920.855579][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.855599][ T5801] usb 8-1: Product: syz
[  920.855613][ T5801] usb 8-1: Manufacturer: syz
[  920.855627][ T5801] usb 8-1: SerialNumber: syz
[  920.868196][ T5801] usb 8-1: config 0 descriptor??
[  921.079252][ T5801] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  921.086347][ T5801] cx231xx 8-1:0.1: Failed to read PCB config
[  921.086401][ T5801] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71
[  921.108111][ T5801] usb 8-1: USB disconnect, device number 20
[  921.157709][T21937] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5322'.
[  921.600426][ T5801] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  921.750720][ T5801] usb 8-1: Using ep0 maxpacket: 32
[  921.757467][ T5801] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  921.759562][ T5801] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  921.759576][ T5801] usb 8-1: config 0 has no interface number 0
[  921.759612][ T5801] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  921.759625][ T5801] usb 8-1: config 0 interface 1 has no altsetting 0
[  921.766862][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.766881][ T5801] usb 8-1: Product: syz
[  921.766896][ T5801] usb 8-1: Manufacturer: syz
[  921.766911][ T5801] usb 8-1: SerialNumber: syz
[  921.777516][ T5801] usb 8-1: config 0 descriptor??
[  922.018629][ T5801] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  922.022073][ T5801] cx231xx 8-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  922.133534][ T5801] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  922.134043][ T5801] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  922.134536][ T5801] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  922.135252][ T5801] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  922.135708][ T5801] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  922.135729][ T5801] cx231xx 8-1:0.1: Failed to set devmode to analog: error: -32
[  922.218619][ T5801] i2c i2c-2: Added multiplexed i2c bus 4
[  922.229735][ T5801] i2c i2c-2: Added multiplexed i2c bus 5
[  922.232459][ T5801] cx231xx 8-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]!
[  922.232481][ T5801] cx231xx 8-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]!
[  922.234852][T21931] cx231xx 8-1:0.1: cx231xx_send_usb_command: failed with status --32
[  922.262560][T21931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5319'.
[  922.265463][T21931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  922.268070][T21931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.324854][ T5602] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  922.404819][ T5801] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -32
[  922.428722][ T5801] usb 8-1: USB disconnect, device number 21
[  922.474204][ T5602] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  922.475228][ T5602] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.475244][ T5602] usb 10-1: config 0 has no interfaces?
[  922.507858][ T5602] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.507870][ T5602] usb 10-1: Product: syz
[  922.507879][ T5602] usb 10-1: Manufacturer: syz
[  922.507888][ T5602] usb 10-1: SerialNumber: syz
[  922.525749][ T5602] usb 10-1: config 0 descriptor??
[  922.758078][ T5801] usb 10-1: USB disconnect, device number 2
[  922.861340][ T5602] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  922.996864][T17989] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3ed43194-f953-4f68-84e8-2d6d8c7e4abc.
[  922.999581][T21974] nvme nvme1: creating 2 I/O queues.
[  923.014691][ T5602] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  923.014725][ T5602] usb 9-1: too many configurations: 248, using maximum allowed: 8
[  923.020684][ T5602] usb 9-1: config index 0 descriptor too short (expected 28277, got 36)
[  923.020707][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.020726][ T5602] usb 9-1: config 0 has no interfaces?
[  923.021591][T21974] nvme nvme1: new ctrl: "testsubsys"
[  923.022304][ T5602] usb 9-1: config index 1 descriptor too short (expected 28277, got 36)
[  923.022326][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.022345][ T5602] usb 9-1: config 0 has no interfaces?
[  923.032807][ T5602] usb 9-1: config index 2 descriptor too short (expected 28277, got 36)
[  923.032830][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.032849][ T5602] usb 9-1: config 0 has no interfaces?
[  923.038464][ T5602] usb 9-1: config index 3 descriptor too short (expected 28277, got 36)
[  923.038487][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.038505][ T5602] usb 9-1: config 0 has no interfaces?
[  923.042134][ T5602] usb 9-1: config index 4 descriptor too short (expected 28277, got 36)
[  923.042156][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.042174][ T5602] usb 9-1: config 0 has no interfaces?
[  923.049177][ T5602] usb 9-1: config index 5 descriptor too short (expected 28277, got 36)
[  923.049201][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.049220][ T5602] usb 9-1: config 0 has no interfaces?
[  923.058948][ T5602] usb 9-1: config index 6 descriptor too short (expected 28277, got 36)
[  923.058969][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.058989][ T5602] usb 9-1: config 0 has no interfaces?
[  923.066041][ T5602] usb 9-1: config index 7 descriptor too short (expected 28277, got 36)
[  923.066064][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.066083][ T5602] usb 9-1: config 0 has no interfaces?
[  923.066130][ T5602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.086726][ T5602] usb 9-1: config 0 descriptor??
[  924.297191][ T5602] usb 9-1: string descriptor 0 read error: -71
[  924.714476][ T5602] usb 9-1: USB disconnect, device number 5
[  924.933429][  T115] net_ratelimit: 377 callbacks suppressed
[  926.164242][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  926.164289][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  926.692871][T22011] fuse: Bad value for 'fd'
[  926.823094][T22018] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  926.940082][T17646] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  927.105538][T17646] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  927.111930][T17646] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.111958][T17646] usb 10-1: config 0 has no interfaces?
[  927.118992][T17646] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.119012][T17646] usb 10-1: Product: syz
[  927.119027][T17646] usb 10-1: Manufacturer: syz
[  927.119043][T17646] usb 10-1: SerialNumber: syz
[  927.131859][T17646] usb 10-1: config 0 descriptor??
[  927.191974][   T30] audit: type=1400 audit(1790548034.851:2148): avc:  denied  { write } for  pid=21996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  927.193440][T17990] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3ed43194-f953-4f68-84e8-2d6d8c7e4abc.
[  927.198796][T22016] nvme nvme2: creating 2 I/O queues.
[  927.245745][T22016] nvme nvme2: new ctrl: "testsubsys"
[  927.366287][T17646] usb 10-1: USB disconnect, device number 3
[  927.655683][   T30] audit: type=1400 audit(1790548291.316:2149): avc:  denied  { write } for  pid=22035 comm="syz.7.5354" name="target" dev="configfs" ino=1256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  927.656700][   T30] audit: type=1400 audit(1790548291.316:2150): avc:  denied  { create } for  pid=22035 comm="syz.7.5354" name="usb_gadget" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  927.731419][   T30] audit: type=1400 audit(1790548291.396:2151): avc:  denied  { write } for  pid=22039 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  927.826219][   T30] audit: type=1400 audit(1790548291.436:2152): avc:  denied  { write } for  pid=22035 comm="syz.7.5354" name="usb_gadget" dev="configfs" ino=108358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  928.654355][   T30] audit: type=1400 audit(1790548292.316:2153): avc:  denied  { watch watch_reads } for  pid=22062 comm="syz.6.5357" path="pipe:[101150]" dev="pipefs" ino=101150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  929.641409][   T30] audit: type=1400 audit(1790548293.296:2154): avc:  denied  { write } for  pid=22052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  929.914456][T22096] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5366'.
[  929.959543][T21688] net_ratelimit: 196 callbacks suppressed
[  930.101521][   T30] audit: type=1400 audit(1790548293.766:2155): avc:  denied  { write } for  pid=22099 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  930.732022][   T30] audit: type=1400 audit(1790548294.376:2156): avc:  denied  { unlink } for  pid=22112 comm="syz.8.5373" name="#1" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  931.365135][T22104] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.365658][T22104] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.578123][T22104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.595639][T22104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.872043][T22122] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  931.890335][T17990] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.890374][T17990] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.890409][T17990] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.890443][T17990] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.554100][   T30] audit: type=1400 audit(1790548296.216:2157): avc:  denied  { write } for  pid=22130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  932.620671][T22146] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5376'.
[  932.829340][   T30] audit: type=1400 audit(1790548296.486:2158): avc:  denied  { write } for  pid=22151 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  933.048362][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5379'.
[  933.048379][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5379'.
[  933.158541][   T30] audit: type=1400 audit(1790548296.816:2159): avc:  denied  { bind } for  pid=22162 comm="syz.6.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  933.584435][   T30] audit: type=1400 audit(1790548297.246:2160): avc:  denied  { write } for  pid=22154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  933.700537][T22179] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5385'.
[  933.700561][T22179] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5385'.
[  933.700591][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5385'.
[  933.796553][   T30] audit: type=1400 audit(1790548297.456:2161): avc:  denied  { write } for  pid=22181 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  934.027400][T22187] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  934.064921][T22195] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5389'.
[  934.088171][T22196] 9p: Bad value for 'wfdno'
[  934.108286][T21599] Bluetooth: hci6: unexpected event for opcode 0x0c26
[  934.385381][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5391'.
[  934.385391][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5391'.
[  934.579951][T18927] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  934.742526][T18927] usb 8-1: Using ep0 maxpacket: 8
[  934.743286][T18927] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  934.744516][T18927] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  934.744538][T18927] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  934.744600][T18927] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  934.744655][T18927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.808264][T18927] hub 8-1:1.0: bad descriptor, ignoring hub
[  934.808286][T18927] hub 8-1:1.0: probe with driver hub failed with error -5
[  934.808842][T18927] cdc_wdm 8-1:1.0: skipping garbage
[  934.808857][T18927] cdc_wdm 8-1:1.0: skipping garbage
[  934.808926][T18927] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  935.110045][    C1] net_ratelimit: 227 callbacks suppressed
[  935.201339][T17646] usb 8-1: USB disconnect, device number 22
[  936.125253][T22226] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  937.009614][T22237] 9p: Bad value for 'wfdno'
[  937.715679][   T30] audit: type=1400 audit(1790548301.376:2162): avc:  denied  { create } for  pid=22241 comm="syz.7.5406" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  937.720304][   T30] audit: type=1400 audit(1790548301.376:2163): avc:  denied  { write } for  pid=22241 comm="syz.7.5406" name="file2" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  937.720350][   T30] audit: type=1400 audit(1790548301.386:2164): avc:  denied  { open } for  pid=22241 comm="syz.7.5406" path="/44/file2" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  937.732882][   T30] audit: type=1400 audit(1790548301.386:2165): avc:  denied  { ioctl } for  pid=22241 comm="syz.7.5406" path="/44/file2" dev="tmpfs" ino=253 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  937.799586][T22242] SQUASHFS error: Failed to read block 0x0: -5
[  937.918845][T22246] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5408'.
[  937.937272][   T30] audit: type=1400 audit(1790548301.596:2166): avc:  denied  { unlink } for  pid=21383 comm="syz-executor" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  938.087457][T22252] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5409'.
[  938.087474][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5409'.
[  938.169970][   T30] audit: type=1400 audit(1790548301.826:2167): avc:  denied  { mounton } for  pid=22254 comm="syz.6.5412" path="/102/sec" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  938.283938][   T30] audit: type=1326 audit(1790548301.946:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22258 comm="syz.7.5413" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f405219e159 code=0x0
[  938.348935][T22262] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5412'.
[  938.362629][T22255] bond1: entered allmulticast mode
[  938.368734][T22255] 8021q: adding VLAN 0 to HW filter on device bond1
[  938.419213][T22257] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  938.442419][T22257] macvlan2: entered allmulticast mode
[  938.442434][T22257] bond0: entered allmulticast mode
[  938.442448][T22257] bond_slave_0: entered allmulticast mode
[  938.442465][T22257] bond_slave_1: entered allmulticast mode
[  938.446188][T22257] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  938.532594][T22260] ip6gretap1: entered allmulticast mode
[  938.537503][T22260] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  938.546950][T22262] bond0 (unregistering): left allmulticast mode
[  938.546965][T22262] bond_slave_0: left allmulticast mode
[  938.546981][T22262] bond_slave_1: left allmulticast mode
[  938.573362][T22262] bond1: (slave macvlan2): Removing an active aggregator
[  938.613011][T22262] bond1: (slave macvlan2): Releasing backup interface
[  938.613022][T22262] bond1: (slave macvlan2): the permanent HWaddr of slave - c6:ce:bf:50:0d:b4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  938.618680][T22262] macvlan2 (unregistering): left allmulticast mode
[  938.684995][T22262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.703466][T22262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.707647][T22262] bond0 (unregistering): Released all slaves
[  939.161657][T22269] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  939.384150][   T30] audit: type=1400 audit(1790548303.046:2169): avc:  denied  { getopt } for  pid=22270 comm="syz.7.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  940.229942][    C1] net_ratelimit: 127 callbacks suppressed
[  940.868392][   T30] audit: type=1400 audit(1790548304.526:2170): avc:  denied  { connect } for  pid=22282 comm="syz.7.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  940.918131][T22284] netlink: 'syz.7.5420': attribute type 2 has an invalid length.
[  940.918148][T22284] netlink: 'syz.7.5420': attribute type 11 has an invalid length.
[  940.918161][T22284] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5420'.
[  941.857646][   T30] audit: type=1400 audit(1790548305.516:2171): avc:  denied  { ioctl } for  pid=22295 comm="syz.6.5425" path="socket:[108664]" dev="sockfs" ino=108664 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  941.858237][T22299] bridge0: port 3(netdevsim0) entered blocking state
[  941.862852][T22299] bridge0: port 3(netdevsim0) entered disabled state
[  941.863073][T22299] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  941.994657][T22299] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  942.090133][T22296] netlink: 'syz.6.5425': attribute type 10 has an invalid length.
[  942.484885][T22310] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  943.587300][T15343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  943.602514][T15343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  943.605758][T15343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  943.617243][T15343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  943.618243][T15343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  943.901298][T22328] C: renamed from veth1_to_team
[  943.948405][T22328] netlink: 'syz.6.5434': attribute type 2 has an invalid length.
[  943.961013][T22328] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5434'.
[  944.003801][   T30] audit: type=1400 audit(1790548307.666:2172): avc:  denied  { wake_alarm } for  pid=22323 comm="syz.6.5434" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  944.689153][T22353] overlayfs: failed to clone upperpath
[  944.906040][T22358] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  945.038311][T15343] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  945.050352][T15343] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  945.051492][T15343] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  945.067357][T15343] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  945.083775][T15343] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  945.255301][T22366] net_ratelimit: 138 callbacks suppressed
[  945.255322][T22366] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  945.265570][T22326] lo speed is unknown, defaulting to 1000
[  945.671726][T21599] Bluetooth: hci3: command tx timeout
[  946.751179][T22361] lo speed is unknown, defaulting to 1000
[  946.998128][   T30] audit: type=1400 audit(1790548310.656:2173): avc:  denied  { mount } for  pid=22387 comm="syz.8.5450" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  947.110170][T21599] Bluetooth: hci10: command tx timeout
[  947.145438][   T30] audit: type=1400 audit(1790548310.806:2174): avc:  denied  { unmount } for  pid=21396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  947.587565][T22326] bridge0: port 1(bridge_slave_0) entered blocking state
[  947.587743][T22326] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.590158][T22326] bridge_slave_0: entered allmulticast mode
[  947.602416][T22326] bridge_slave_0: entered promiscuous mode
[  947.621207][   T30] audit: type=1400 audit(1790548567.284:2175): avc:  denied  { watch watch_reads } for  pid=22401 comm="syz.8.5452" path="/52" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  947.674940][T22326] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.674987][T22326] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.675259][T22326] bridge_slave_1: entered allmulticast mode
[  947.676247][T22326] bridge_slave_1: entered promiscuous mode
[  947.749974][T15343] Bluetooth: hci3: command tx timeout
[  948.025926][T22326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.138026][T22326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  948.470594][T22410] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  948.478005][T22326] team0: Port device team_slave_0 added
[  948.484893][T22326] team0: Port device team_slave_1 added
[  948.767197][T22326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  948.767210][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.767819][T22326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  948.868027][T22326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  948.868035][T22326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.868049][T22326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  949.191183][T15343] Bluetooth: hci10: command tx timeout
[  949.352356][T15343] Bluetooth: hci7: command 0x0406 tx timeout
[  949.638194][T22326] hsr_slave_0: entered promiscuous mode
[  949.638843][T22326] hsr_slave_1: entered promiscuous mode
[  949.639268][T22326] debugfs: 'hsr0' already exists in 'hsr'
[  949.639278][T22326] Cannot create hsr debugfs directory
[  949.831487][T21599] Bluetooth: hci3: command tx timeout
[  950.119295][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5456'.
[  950.119312][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5456'.
[  950.310060][    C0] net_ratelimit: 142 callbacks suppressed
[  951.269862][T15343] Bluetooth: hci10: command tx timeout
[  951.347241][T22444] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5461'.
[  951.356567][T22361] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.356647][T22361] bridge0: port 1(bridge_slave_0) entered disabled state
[  951.356807][T22361] bridge_slave_0: entered allmulticast mode
[  951.367379][T22361] bridge_slave_0: entered promiscuous mode
[  951.423028][T22361] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.423113][T22361] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.423290][T22361] bridge_slave_1: entered allmulticast mode
[  951.429517][T22361] bridge_slave_1: entered promiscuous mode
[  951.662683][T22361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  951.798817][T22361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  951.886963][T22450] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  951.909854][T15343] Bluetooth: hci3: command tx timeout
[  952.396579][T22361] team0: Port device team_slave_0 added
[  952.443992][T22361] team0: Port device team_slave_1 added
[  952.521917][   T30] audit: type=1400 audit(1790548572.184:2176): avc:  denied  { write } for  pid=22451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  952.631475][T22361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  952.631484][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.631497][T22361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  952.813193][   T30] audit: type=1400 audit(1790548572.474:2177): avc:  denied  { write } for  pid=22465 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  952.902711][T22361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  952.902722][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.902745][T22361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  953.350991][T15343] Bluetooth: hci10: command tx timeout
[  953.471818][T22361] hsr_slave_0: entered promiscuous mode
[  953.580535][T22361] hsr_slave_1: entered promiscuous mode
[  953.634353][T22361] debugfs: 'hsr0' already exists in 'hsr'
[  953.634971][T22361] Cannot create hsr debugfs directory
[  955.058098][T22326] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  955.113123][T22326] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  955.190436][T22326] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  955.247656][T22326] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  955.257248][T22326] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  955.325900][T22326] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  955.429934][    C0] net_ratelimit: 214 callbacks suppressed
[  955.466564][   T30] audit: type=1400 audit(1790548575.124:2178): avc:  denied  { write } for  pid=22498 comm="syz.7.5475" name="usb_gadget" dev="configfs" ino=1327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  955.791632][T22326] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  956.318072][T22326] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  958.917707][T22326] 8021q: adding VLAN 0 to HW filter on device bond0
[  958.951341][T22326] 8021q: adding VLAN 0 to HW filter on device team0
[  958.958190][  T115] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.958240][  T115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  958.995881][  T115] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.995960][  T115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  959.906015][T22326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  960.059589][T22361] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  960.657215][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  960.673858][T22361] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  960.709744][    C1] net_ratelimit: 122 callbacks suppressed
[  960.757761][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  960.758526][T22361] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  960.858435][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  960.881173][T22361] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  960.923085][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  961.559384][T22326] veth0_vlan: entered promiscuous mode
[  961.598058][T22326] veth1_vlan: entered promiscuous mode
[  961.651332][T17626] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  961.799000][T22326] veth0_macvtap: entered promiscuous mode
[  961.807479][T17626] usb 8-1: Using ep0 maxpacket: 32
[  961.817985][T17626] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  961.819308][T17626] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  961.819339][T17626] usb 8-1: config 0 has no interface number 0
[  961.819375][T17626] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  961.819397][T17626] usb 8-1: config 0 interface 1 has no altsetting 0
[  961.884397][T17626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.884418][T17626] usb 8-1: Product: syz
[  961.884433][T17626] usb 8-1: Manufacturer: syz
[  961.884449][T17626] usb 8-1: SerialNumber: syz
[  961.887902][T17626] usb 8-1: config 0 descriptor??
[  962.063686][T22326] veth1_macvtap: entered promiscuous mode
[  963.768383][T22326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  963.785440][T17626] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  963.792254][T17626] cx231xx 8-1:0.1: Failed to read PCB config
[  963.792304][T17626] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71
[  963.814127][T17626] usb 8-1: USB disconnect, device number 23
[  963.861883][T22326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.932192][T17990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.932416][T17990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.932569][T17990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.957859][T22361] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.002598][T22361] 8021q: adding VLAN 0 to HW filter on device team0
[  964.007812][T18001] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.007892][T18001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.054101][T17990] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.054192][T17990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.103393][T17990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.245313][T18001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.245329][T18001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.330062][T17626] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  964.350406][T18000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.350420][T18000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.479898][T17626] usb 8-1: Using ep0 maxpacket: 32
[  964.483510][T17626] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  964.485700][T17626] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  964.485721][T17626] usb 8-1: config 0 has no interface number 0
[  964.485755][T17626] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  964.485775][T17626] usb 8-1: config 0 interface 1 has no altsetting 0
[  964.492268][T17626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.492287][T17626] usb 8-1: Product: syz
[  964.492302][T17626] usb 8-1: Manufacturer: syz
[  964.492316][T17626] usb 8-1: SerialNumber: syz
[  964.499450][T17626] usb 8-1: config 0 descriptor??
[  964.682381][T22575] fuse: Bad value for 'fd'
[  964.764803][T17626] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  964.775821][T17626] cx231xx 8-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  964.887837][T17626] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  964.888238][T17626] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  964.890021][T17626] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  964.891870][T17626] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  964.892927][T17626] cx231xx 8-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  964.892947][T17626] cx231xx 8-1:0.1: Failed to set devmode to analog: error: -32
[  964.985166][T22582] SQUASHFS error: Failed to read block 0x0: -5
[  964.989187][T17626] i2c i2c-2: Added multiplexed i2c bus 4
[  965.012395][T22562] cx231xx 8-1:0.1: cx231xx_send_usb_command: failed with status --32
[  965.025925][T17626] i2c i2c-2: Added multiplexed i2c bus 5
[  965.032927][T17626] cx231xx 8-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]!
[  965.032948][T17626] cx231xx 8-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]!
[  965.037359][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5480'.
[  965.054418][T22562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.091406][T22562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.208229][T17626] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -32
[  965.239525][T17626] usb 8-1: USB disconnect, device number 24
[  965.341055][T22361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.353371][  T115] rpcbind: server 127.0.0.1 not responding, timed out
[  965.497222][T22361] veth0_vlan: entered promiscuous mode
[  965.521896][T22361] veth1_vlan: entered promiscuous mode
[  965.568994][T22361] veth0_macvtap: entered promiscuous mode
[  965.583906][T22361] veth1_macvtap: entered promiscuous mode
[  965.628443][T22361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  965.656454][T22361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  965.721812][T22361] net_ratelimit: 262 callbacks suppressed
[  965.729864][T17996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.730005][T17996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  965.834742][  T115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.835799][  T115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  966.096298][T18001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.096311][T18001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.353696][T18001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.353709][T18001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.413804][T21599] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  966.433154][T21599] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  966.463172][T21599] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  966.476260][T21599] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  966.478604][T21599] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  966.761655][T22603] FAULT_INJECTION: forcing a failure.
[  966.761655][T22603] name failslab, interval 1, probability 0, space 0, times 0
[  966.761676][T22603] CPU: 1 UID: 0 PID: 22603 Comm: syz.7.5495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  966.761694][T22603] Tainted: [L]=SOFTLOCKUP
[  966.761700][T22603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  966.761708][T22603] Call Trace:
[  966.761713][T22603]  <TASK>
[  966.761719][T22603]  dump_stack_lvl+0x100/0x190
[  966.761742][T22603]  should_fail_ex.cold+0x5/0xa
[  966.761760][T22603]  should_failslab+0xc2/0x120
[  966.761777][T22603]  __kmalloc_cache_noprof+0x91/0x6d0
[  966.761790][T22603]  ? xprt_alloc+0x590/0x9d0
[  966.761807][T22603]  xprt_alloc+0x590/0x9d0
[  966.761823][T22603]  xs_setup_xprt+0xaf/0x3c0
[  966.761840][T22603]  xs_setup_tcp+0x95/0xad0
[  966.761852][T22603]  xprt_create_transport+0x16c/0x740
[  966.761870][T22603]  rpc_create+0x390/0x7f0
[  966.761888][T22603]  ? lock_acquire+0x1d1/0x380
[  966.761901][T22603]  ? __pfx_rpc_create+0x10/0x10
[  966.761934][T22603]  ? net_generic+0xea/0x2a0
[  966.761950][T22603]  ? net_generic+0xea/0x2a0
[  966.761969][T22603]  nfs_create_rpc_client+0x6a1/0x8f0
[  966.761986][T22603]  ? __pfx_nfs_create_rpc_client+0x10/0x10
[  966.762010][T22603]  ? lockdep_init_map_type+0x5c/0x250
[  966.762025][T22603]  ? lockdep_init_map_type+0x5c/0x250
[  966.762042][T22603]  nfs4_alloc_client+0x8f0/0xd70
[  966.762069][T22603]  ? __pfx_nfs4_alloc_client+0x10/0x10
[  966.762093][T22603]  ? lock_acquire+0x1d1/0x380
[  966.762107][T22603]  ? net_generic+0x25/0x2a0
[  966.762125][T22603]  ? nfs_get_client+0x849/0x1230
[  966.762143][T22603]  ? nfs_get_client+0x849/0x1230
[  966.762163][T22603]  nfs_get_client+0x87b/0x1230
[  966.762179][T22603]  ? do_raw_spin_lock+0x128/0x260
[  966.762199][T22603]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  966.762215][T22603]  nfs4_set_client+0x3f6/0x640
[  966.762232][T22603]  nfs4_init_server.isra.0+0x5ad/0xf60
[  966.762250][T22603]  ? __pfx___debug_object_init+0x10/0x10
[  966.762266][T22603]  ? __pfx_nfs4_init_server.isra.0+0x10/0x10
[  966.762292][T22603]  ? __rpc_init_priority_wait_queue+0x38a/0x500
[  966.762311][T22603]  nfs4_create_server+0x185/0x2b0
[  966.762330][T22603]  nfs4_try_get_tree+0x93/0x140
[  966.762347][T22603]  nfs_get_tree+0xa61/0x1450
[  966.762361][T22603]  vfs_get_tree+0x92/0x320
[  966.762373][T22603]  path_mount+0x7d0/0x24c0
[  966.762387][T22603]  ? __pfx_path_mount+0x10/0x10
[  966.762397][T22603]  ? lockdep_hardirqs_on+0x7d/0x110
[  966.762412][T22603]  ? putname+0xb1/0x110
[  966.762429][T22603]  ? kmem_cache_free+0x127/0x6c0
[  966.762447][T22603]  ? __x64_sys_mount+0x293/0x310
[  966.762459][T22603]  __x64_sys_mount+0x293/0x310
[  966.762470][T22603]  ? __pfx___x64_sys_mount+0x10/0x10
[  966.762486][T22603]  do_syscall_64+0x123/0x790
[  966.762501][T22603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.762513][T22603] RIP: 0033:0x7f405219e159
[  966.762524][T22603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.762535][T22603] RSP: 002b:00007f405308a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  966.762547][T22603] RAX: ffffffffffffffda RBX: 00007f4052425fa0 RCX: 00007f405219e159
[  966.762558][T22603] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080
[  966.762566][T22603] RBP: 00007f405223506b R08: 0000200000000140 R09: 0000000000000000
[  966.762573][T22603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  966.762580][T22603] R13: 00007f4052426038 R14: 00007f4052425fa0 R15: 00007ffd8ec8c208
[  966.762596][T22603]  </TASK>
[  968.798220][T15343] Bluetooth: hci11: command tx timeout
[  969.413776][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5501'.
[  970.331709][T17998] rpcbind: server 127.0.0.1 not responding, timed out
[  970.519546][T22598] lo speed is unknown, defaulting to 1000
[  970.561103][T22633] syz.7.5504 (22633): attempted to duplicate a private mapping with mremap.  This is not supported.
[  970.870220][T21599] Bluetooth: hci11: command tx timeout
[  970.951249][    C1] net_ratelimit: 423 callbacks suppressed
** 413 printk messages dropped **
** 19 printk messages dropped **
** 19 printk messages dropped **
** 63 printk messages dropped **
** 52 printk messages dropped **
[  971.187638][T22635] 8021q: adding VLAN 0 to HW filter on device team0
[  971.226338][T22635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  971.401443][T22635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  971.432374][T22635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  971.467238][T22635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  971.467255][T22635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  971.505053][T22635] veth1_vlan: left promiscuous mode
[  971.507413][T22635] veth0_vlan: left promiscuous mode
[  971.512504][T22635] veth0_vlan: entered promiscuous mode
[  971.525767][T22635] veth1_vlan: entered promiscuous mode
[  971.565852][T22643] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5507'.
[  971.567647][T22635] veth1_macvtap: left promiscuous mode
[  971.574740][T22635] veth0_macvtap: left promiscuous mode
[  971.582793][T22635] veth0_macvtap: entered promiscuous mode
[  971.590432][T22635] veth1_macvtap: entered promiscuous mode
[  971.623295][T22635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  971.627429][T22635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  971.628306][T22635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  971.633639][T22635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  971.697009][T22570] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.697123][T22570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.735526][T22570] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.735639][T22570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  972.009915][T22570] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  972.009972][T22570] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  972.010001][T22570] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  972.010026][T22570] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  972.955583][T15343] Bluetooth: hci11: command tx timeout
[  973.184862][   T30] audit: type=1400 audit(1790548592.844:2179): avc:  denied  { read write } for  pid=22361 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  973.218137][   T30] audit: type=1400 audit(1790548592.874:2180): avc:  denied  { open } for  pid=22361 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  973.220268][   T30] audit: type=1400 audit(1790548592.874:2181): avc:  denied  { ioctl } for  pid=22361 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3885 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  973.336661][   T30] audit: type=1400 audit(1790548592.994:2182): avc:  denied  { create } for  pid=22662 comm="syz.7.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  973.385404][   T30] audit: type=1400 audit(1790548593.044:2183): avc:  denied  { allowed } for  pid=22662 comm="syz.7.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  973.407676][   T30] audit: type=1400 audit(1790548593.054:2184): avc:  denied  { create } for  pid=22664 comm="syz.0.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  973.410174][   T30] audit: type=1400 audit(1790548593.054:2185): avc:  denied  { map_create } for  pid=22664 comm="syz.0.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  973.410226][   T30] audit: type=1400 audit(1790548593.054:2186): avc:  denied  { bpf } for  pid=22664 comm="syz.0.5511" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  973.410264][   T30] audit: type=1400 audit(1790548593.054:2187): avc:  denied  { map_read map_write } for  pid=22664 comm="syz.0.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  973.423960][   T30] audit: type=1400 audit(1790548593.074:2188): avc:  denied  { prog_load } for  pid=22664 comm="syz.0.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  974.460892][T22670] lo speed is unknown, defaulting to 1000
[  974.464805][T22670] lo speed is unknown, defaulting to 1000
[  974.490320][T22670] lo speed is unknown, defaulting to 1000
[  974.515459][T22670] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  974.515511][T22670] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  974.515584][T22670] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  974.624778][T22670] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  974.728644][T22670] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  974.821918][T22598] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.822349][T22598] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.823176][T22598] bridge_slave_0: entered allmulticast mode
[  974.996505][T22598] bridge_slave_0: entered promiscuous mode
[  975.035969][T15343] Bluetooth: hci11: command tx timeout
[  975.140249][T22670] lo speed is unknown, defaulting to 1000
[  975.186614][T22670] lo speed is unknown, defaulting to 1000
[  975.199209][T22598] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.203982][T22598] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.242303][T22598] bridge_slave_1: entered allmulticast mode
[  975.387575][T22598] bridge_slave_1: entered promiscuous mode
[  975.471269][T22670] lo speed is unknown, defaulting to 1000
[  975.511370][T22670] lo speed is unknown, defaulting to 1000
[  975.989657][    C0] net_ratelimit: 286 callbacks suppressed
[  976.403760][T22670] lo speed is unknown, defaulting to 1000
[  976.404821][T22670] lo speed is unknown, defaulting to 1000
[  976.430801][T22598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  976.455996][T22598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  976.503670][T22670] lo speed is unknown, defaulting to 1000
[  976.504667][T22670] lo speed is unknown, defaulting to 1000
[  976.556435][T22670] lo speed is unknown, defaulting to 1000
[  976.557466][T22670] lo speed is unknown, defaulting to 1000
[  976.571301][T22598] team0: Port device team_slave_0 added
[  976.575434][T22670] lo speed is unknown, defaulting to 1000
[  976.588744][T22598] team0: Port device team_slave_1 added
[  976.687094][T22670] lo speed is unknown, defaulting to 1000
[  976.811831][T22598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  976.811838][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.811851][T22598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  976.817146][T22670] lo speed is unknown, defaulting to 1000
[  976.821845][T22598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  976.821856][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.821878][T22598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  977.004264][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5512'.
[  977.127471][T22598] hsr_slave_0: entered promiscuous mode
[  977.136675][T22598] hsr_slave_1: entered promiscuous mode
[  977.137346][T22598] debugfs: 'hsr0' already exists in 'hsr'
[  977.142019][T22598] Cannot create hsr debugfs directory
[  978.304523][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  978.304537][   T30] audit: type=1400 audit(1790548597.314:2209): avc:  denied  { execmem } for  pid=22683 comm="syz.6.5517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  979.003219][T22693] FAULT_INJECTION: forcing a failure.
[  979.003219][T22693] name fail_futex, interval 1, probability 0, space 0, times 0
[  979.003280][T22693] CPU: 1 UID: 0 PID: 22693 Comm: syz.7.5520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  979.003311][T22693] Tainted: [L]=SOFTLOCKUP
[  979.003329][T22693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  979.003342][T22693] Call Trace:
[  979.003351][T22693]  <TASK>
[  979.003360][T22693]  dump_stack_lvl+0x100/0x190
[  979.003397][T22693]  should_fail_ex.cold+0x5/0xa
[  979.003427][T22693]  get_futex_key+0x1d0/0x14f0
[  979.003460][T22693]  ? __pfx_get_futex_key+0x10/0x10
[  979.003489][T22693]  ? __pfx___schedule+0x10/0x10
[  979.003527][T22693]  futex_wait_setup+0x91/0x540
[  979.003559][T22693]  __futex_wait+0x19f/0x300
[  979.003585][T22693]  ? __pfx___futex_wait+0x10/0x10
[  979.003607][T22693]  ? __pfx_try_to_wake_up+0x10/0x10
[  979.003632][T22693]  ? futex_hash+0x311/0x400
[  979.003662][T22693]  ? __pfx_futex_wake_mark+0x10/0x10
[  979.003690][T22693]  ? find_held_lock+0x2b/0x80
[  979.003719][T22693]  ? futex_wake+0x4ea/0x5e0
[  979.003748][T22693]  futex_wait+0xe6/0x370
[  979.003771][T22693]  ? __pfx_futex_wait+0x10/0x10
[  979.003801][T22693]  ? rcu_is_watching+0x13/0xc0
[  979.003827][T22693]  ? trace_sched_exit_tp+0x120/0x160
[  979.003860][T22693]  do_futex+0x265/0x440
[  979.003891][T22693]  ? __pfx_do_futex+0x10/0x10
[  979.003928][T22693]  __x64_sys_futex+0x34f/0x4d0
[  979.003959][T22693]  ? fdget_pos+0x2c0/0x380
[  979.003989][T22693]  ? __pfx___x64_sys_futex+0x10/0x10
[  979.004019][T22693]  ? rcu_is_watching+0x13/0xc0
[  979.004057][T22693]  do_syscall_64+0x123/0x790
[  979.004082][T22693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.004104][T22693] RIP: 0033:0x7f405219e159
[  979.004122][T22693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  979.004142][T22693] RSP: 002b:00007f40530480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  979.004163][T22693] RAX: ffffffffffffffda RBX: 00007f4052426188 RCX: 00007f405219e159
[  979.004204][T22693] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4052426188
[  979.004219][T22693] RBP: 00007f4052426180 R08: 0000000000000000 R09: 0000000000000000
[  979.004233][T22693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  979.004247][T22693] R13: 00007f4052426218 R14: 00007ffd8ec8c120 R15: 00007ffd8ec8c208
[  979.004279][T22693]  </TASK>
[  979.415124][   T30] audit: type=1400 audit(1790548598.654:2210): avc:  denied  { mounton } for  pid=22689 comm="syz.7.5520" path="/77/proc" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  979.415180][   T30] audit: type=1400 audit(1790548598.664:2211): avc:  denied  { mount } for  pid=22689 comm="syz.7.5520" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  979.415219][   T30] audit: type=1400 audit(1790548598.664:2212): avc:  denied  { mounton } for  pid=22689 comm="syz.7.5520" path="/77/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  980.186661][T22598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.186703][T22598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.708383][   T30] audit: type=1400 audit(1790548600.364:2213): avc:  denied  { unmount } for  pid=21383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  980.861818][T22598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.861849][T22598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.926402][   T30] audit: type=1400 audit(1790548600.584:2214): avc:  denied  { create } for  pid=22696 comm="syz.7.5522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  980.999156][   T30] audit: type=1400 audit(1790548600.654:2215): avc:  denied  { mount } for  pid=22696 comm="syz.7.5522" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  981.025989][   T30] audit: type=1400 audit(1790548600.664:2216): avc:  denied  { mount } for  pid=22696 comm="syz.7.5522" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  981.026037][   T30] audit: type=1800 audit(1790548600.684:2217): pid=22697 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5522" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  981.189759][    C1] net_ratelimit: 242 callbacks suppressed
[  981.379938][   T30] audit: type=1400 audit(1790548601.034:2218): avc:  denied  { unmount } for  pid=21383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  981.397347][T22598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  981.397377][T22598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.543300][T21599] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  981.550689][T21599] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  981.564356][T21599] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  981.577269][T21599] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  981.588053][T21599] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  982.964621][T22598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  982.964640][T22598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.545842][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  983.545855][   T30] audit: type=1400 audit(1790548603.204:2230): avc:  denied  { read } for  pid=22715 comm="syz.0.5526" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  983.555496][   T30] audit: type=1400 audit(1790548603.214:2231): avc:  denied  { open } for  pid=22715 comm="syz.0.5526" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  983.592112][   T30] audit: type=1400 audit(1790548603.254:2232): avc:  denied  { ioctl } for  pid=22715 comm="syz.0.5526" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  983.645957][   T30] audit: type=1400 audit(1790548603.304:2233): avc:  denied  { read write } for  pid=22715 comm="syz.0.5526" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  983.646009][   T30] audit: type=1400 audit(1790548603.304:2234): avc:  denied  { open } for  pid=22715 comm="syz.0.5526" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  983.646050][   T30] audit: type=1400 audit(1790548603.304:2235): avc:  denied  { ioctl } for  pid=22715 comm="syz.0.5526" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  983.673992][T21599] Bluetooth: hci12: command tx timeout
[  983.748755][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[  983.748786][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead
[  983.748859][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000300: 0x0011 instead
[  983.748876][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000030c: 0xaaaa instead
[  983.748893][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000310: 0x1daa instead
[  983.749040][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead
[  983.749058][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead
[  983.749075][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead
[  983.749212][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d00: 0x0038 instead
[  983.749228][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000d04: 0x0005 instead
[  983.749243][T22718] jffs2: Further such events for this erase block will not be printed
[  983.749256][T22718] jffs2: Empty flash at 0x00000d34 ends at 0x00000d38
[  983.867530][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[  983.867550][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[  983.867568][T22718] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[  983.891958][ T5696] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  983.969364][T22718] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  983.969371][T22718] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  984.040135][ T5696] usb 1-1: Using ep0 maxpacket: 32
[  984.042746][ T5696] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  984.043888][ T5696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  984.043910][ T5696] usb 1-1: config 0 has no interface number 0
[  984.043945][ T5696] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  984.043960][ T5696] usb 1-1: config 0 interface 1 has no altsetting 0
[  984.055374][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.055394][ T5696] usb 1-1: Product: syz
[  984.055408][ T5696] usb 1-1: Manufacturer: syz
[  984.055423][ T5696] usb 1-1: SerialNumber: syz
[  984.074776][ T5696] usb 1-1: config 0 descriptor??
[  984.155468][T22699] lo speed is unknown, defaulting to 1000
[  984.201644][   T30] audit: type=1400 audit(1790548603.864:2236): avc:  denied  { write } for  pid=22717 comm="syz.6.5519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  984.201686][   T30] audit: type=1400 audit(1790548603.864:2237): avc:  denied  { read } for  pid=22717 comm="syz.6.5519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  984.258363][   T30] audit: type=1400 audit(1790548603.914:2238): avc:  denied  { firmware_load } for  pid=22717 comm="syz.6.5519" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  984.336247][ T5696] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  984.349767][ T5696] cx231xx 1-1:0.1: Failed to read PCB config
[  984.349820][ T5696] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[  984.384713][ T5696] usb 1-1: USB disconnect, device number 89
[  984.518643][   T30] audit: type=1400 audit(1790548604.174:2239): avc:  denied  { mount } for  pid=22717 comm="syz.6.5519" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  984.672954][T22718] syz.6.5519 (22718) used greatest stack depth: 17944 bytes left
[  985.480109][ T5696] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  985.639597][ T5696] usb 1-1: Using ep0 maxpacket: 32
[  985.640191][ T5696] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  985.646595][ T5696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  985.646618][ T5696] usb 1-1: config 0 has no interface number 0
[  985.646653][ T5696] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  985.646675][ T5696] usb 1-1: config 0 interface 1 has no altsetting 0
[  985.694501][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.694522][ T5696] usb 1-1: Product: syz
[  985.694538][ T5696] usb 1-1: Manufacturer: syz
[  985.694554][ T5696] usb 1-1: SerialNumber: syz
[  985.697694][ T5696] usb 1-1: config 0 descriptor??
[  985.749652][T21599] Bluetooth: hci12: command tx timeout
[  985.810992][T22598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  985.854815][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  985.855713][T22598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  985.881955][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  985.882831][T22598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  985.914529][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  985.915397][T22598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  985.945083][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  985.958935][T22699] lo speed is unknown, defaulting to 1000
[  985.968954][ T5696] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  985.979421][ T5696] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  986.042014][T22735] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5528'.
[  986.093310][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  986.094355][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  986.094810][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  986.095292][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  986.095752][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  986.095773][ T5696] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32
[  986.169193][ T5696] i2c i2c-2: Added multiplexed i2c bus 4
[  986.180325][ T5696] i2c i2c-2: Added multiplexed i2c bus 5
[  986.181734][ T5696] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]!
[  986.181752][ T5696] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]!
[  986.223711][T22716] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32
[  986.242030][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5526'.
[  986.248144][T22716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  986.248963][T22716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.301160][ T5696] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32
[  986.310117][    C1] net_ratelimit: 175 callbacks suppressed
[  986.326369][ T5696] usb 1-1: USB disconnect, device number 90
[  986.737169][T22598] 8021q: adding VLAN 0 to HW filter on device bond0
[  986.802645][T22598] 8021q: adding VLAN 0 to HW filter on device team0
[  986.823872][T17996] bridge0: port 1(bridge_slave_0) entered blocking state
[  986.824004][T17996] bridge0: port 1(bridge_slave_0) entered forwarding state
[  986.911421][T17995] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.911513][T17995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  987.929959][T21599] Bluetooth: hci12: command tx timeout
[  987.930610][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  987.930657][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  988.427265][T22699] bridge0: port 1(bridge_slave_0) entered blocking state
[  988.427345][T22699] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.427494][T22699] bridge_slave_0: entered allmulticast mode
[  988.531032][T22699] bridge_slave_0: entered promiscuous mode
[  989.087437][T22765] FAULT_INJECTION: forcing a failure.
[  989.087437][T22765] name failslab, interval 1, probability 0, space 0, times 0
[  989.089109][T22765] CPU: 1 UID: 0 PID: 22765 Comm: syz.0.5534 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  989.089144][T22765] Tainted: [L]=SOFTLOCKUP
[  989.089152][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  989.089166][T22765] Call Trace:
[  989.089175][T22765]  <TASK>
[  989.089185][T22765]  dump_stack_lvl+0x100/0x190
[  989.089226][T22765]  should_fail_ex.cold+0x5/0xa
[  989.089257][T22765]  should_failslab+0xc2/0x120
[  989.089287][T22765]  __kmalloc_cache_noprof+0x91/0x6d0
[  989.089311][T22765]  ? netstat_seq_show+0x10d/0x9b0
[  989.089341][T22765]  netstat_seq_show+0x10d/0x9b0
[  989.089366][T22765]  ? __pfx_netstat_seq_show+0x10/0x10
[  989.089397][T22765]  seq_read_iter+0x32f/0x1270
[  989.089443][T22765]  seq_read+0x344/0x4d0
[  989.089469][T22765]  ? __pfx_seq_read+0x10/0x10
[  989.089503][T22765]  ? lock_acquire+0x1d1/0x380
[  989.089529][T22765]  ? fdget_pos+0x2aa/0x380
[  989.089564][T22765]  ? selinux_file_permission+0x8f/0x6d0
[  989.089597][T22765]  ? __pfx_seq_read+0x10/0x10
[  989.089623][T22765]  proc_reg_read+0x240/0x330
[  989.089652][T22765]  ? __pfx_proc_reg_read+0x10/0x10
[  989.089677][T22765]  vfs_read+0x1e4/0xb40
[  989.089704][T22765]  ? lock_acquire+0x1d1/0x380
[  989.089729][T22765]  ? __fget_files+0x34/0x3d0
[  989.089758][T22765]  ? __pfx_vfs_read+0x10/0x10
[  989.089781][T22765]  ? find_held_lock+0x2b/0x80
[  989.089813][T22765]  ? __fget_files+0x215/0x3d0
[  989.089846][T22765]  ? __fget_files+0x21f/0x3d0
[  989.089896][T22765]  ksys_read+0x12a/0x250
[  989.089922][T22765]  ? __pfx_ksys_read+0x10/0x10
[  989.089958][T22765]  do_syscall_64+0x123/0x790
[  989.089985][T22765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.090009][T22765] RIP: 0033:0x7fd5cf59e159
[  989.090028][T22765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  989.090048][T22765] RSP: 002b:00007fd5d044e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  989.090071][T22765] RAX: ffffffffffffffda RBX: 00007fd5cf826180 RCX: 00007fd5cf59e159
[  989.090087][T22765] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007
[  989.090101][T22765] RBP: 00007fd5cf63506b R08: 0000000000000000 R09: 0000000000000000
[  989.090116][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  989.090130][T22765] R13: 00007fd5cf826218 R14: 00007fd5cf826180 R15: 00007ffd91e64b58
[  989.090158][T22765]  </TASK>
[  989.531019][T22699] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.531108][T22699] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.531292][T22699] bridge_slave_1: entered allmulticast mode
[  989.576102][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  989.576117][   T30] audit: type=1400 audit(1790548608.724:2257): avc:  denied  { write } for  pid=22760 comm="syz.0.5534" name="netstat" dev="proc" ino=4026535258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  989.583984][T22699] bridge_slave_1: entered promiscuous mode
[  990.030539][T21599] Bluetooth: hci12: command tx timeout
[  990.108552][T22598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  990.108567][T22598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  991.129068][T22774] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5538'.
[  991.439785][    C0] net_ratelimit: 186 callbacks suppressed
[  992.309667][ T5801] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  992.331241][T22699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  992.413451][T22699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  992.533750][ T5801] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  992.554421][ T5801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.560981][ T5801] usb 8-1: config 0 descriptor??
[  993.558716][T22570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.625666][ T5801] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  993.626223][ T5801] [drm:udl_init] *ERROR* Selecting channel failed
[  993.652918][ T5801] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1
[  993.652939][ T5801] [drm] Initialized udl on minor 1
[  993.654950][ T5801] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  993.655291][ T5801] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  993.658041][T17646] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  993.698094][ T5801] usb 8-1: USB disconnect, device number 25
[  993.707032][T17646] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  993.707226][T17646] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  993.858601][T22699] team0: Port device team_slave_0 added
[  993.869287][T22699] team0: Port device team_slave_1 added
[  993.962908][T22570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.182205][T22699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  994.182216][T22699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  994.182238][T22699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  994.197064][T22699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  994.197075][T22699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  994.197097][T22699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  994.375324][T22570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.412531][T22793] overlayfs: failed to resolve './bus': -2
[  994.695035][T22570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.385886][T22699] hsr_slave_0: entered promiscuous mode
[  995.394349][T22699] hsr_slave_1: entered promiscuous mode
[  995.396232][T22699] debugfs: 'hsr0' already exists in 'hsr'
[  995.396247][T22699] Cannot create hsr debugfs directory
[  995.657153][T22806] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5547'.
[  995.766666][T22598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  996.195804][   T30] audit: type=1400 audit(1790548615.854:2258): avc:  denied  { read } for  pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  996.527719][   T30] audit: type=1400 audit(1790548616.184:2259): avc:  denied  { create } for  pid=22817 comm="syz.6.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  996.550382][    C0] net_ratelimit: 194 callbacks suppressed
[  996.667221][   T30] audit: type=1400 audit(1790548616.324:2260): avc:  denied  { write } for  pid=22817 comm="syz.6.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  996.691990][   T30] audit: type=1400 audit(1790548616.354:2261): avc:  denied  { listen } for  pid=22817 comm="syz.6.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  996.692184][   T30] audit: type=1400 audit(1790548616.354:2262): avc:  denied  { accept } for  pid=22817 comm="syz.6.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
** 13208 printk messages dropped **
** 130 printk messages dropped **
** 27122 printk messages dropped **
** 995 printk messages dropped **
** 262 printk messages dropped **
** 254 printk messages dropped **
** 259 printk messages dropped **
** 261 printk messages dropped **
** 251 printk messages dropped **
** 257 printk messages dropped **
** 259 printk messages dropped **
** 249 printk messages dropped **
** 264 printk messages dropped **
** 255 printk messages dropped **
** 258 printk messages dropped **
** 250 printk messages dropped **
** 255 printk messages dropped **
** 251 printk messages dropped **
** 518 printk messages dropped **
** 246 printk messages dropped **
** 250 printk messages dropped **
** 267 printk messages dropped **
** 252 printk messages dropped **
** 259 printk messages dropped **
** 270 printk messages dropped **
** 254 printk messages dropped **
** 245 printk messages dropped **
** 220 printk messages dropped **
** 108 printk messages dropped **
** 247 printk messages dropped **
** 257 printk messages dropped **
** 257 printk messages dropped **
** 254 printk messages dropped **
** 257 printk messages dropped **
** 257 printk messages dropped **
** 245 printk messages dropped **
** 254 printk messages dropped **
** 248 printk messages dropped **
** 250 printk messages dropped **
** 266 printk messages dropped **
** 253 printk messages dropped **
** 248 printk messages dropped **
** 249 printk messages dropped **
** 258 printk messages dropped **
** 256 printk messages dropped **
** 247 printk messages dropped **
** 261 printk messages dropped **
** 249 printk messages dropped **
** 235 printk messages dropped **
** 269 printk messages dropped **
** 256 printk messages dropped **
** 248 printk messages dropped **
** 249 printk messages dropped **
** 252 printk messages dropped **
** 249 printk messages dropped **
** 257 printk messages dropped **
** 255 printk messages dropped **
** 250 printk messages dropped **
** 326 printk messages dropped **
** 251 printk messages dropped **
** 174 printk messages dropped **
** 248 printk messages dropped **
** 252 printk messages dropped **
** 257 printk messages dropped **
** 273 printk messages dropped **
** 248 printk messages dropped **
** 248 printk messages dropped **
** 253 printk messages dropped **
** 249 printk messages dropped **
** 257 printk messages dropped **
** 243 printk messages dropped **
** 254 printk messages dropped **
** 247 printk messages dropped **
** 497 printk messages dropped **
** 246 printk messages dropped **
** 239 printk messages dropped **
** 257 printk messages dropped **
** 260 printk messages dropped **
** 247 printk messages dropped **
** 244 printk messages dropped **
** 254 printk messages dropped **
** 255 printk messages dropped **
** 240 printk messages dropped **
** 257 printk messages dropped **
** 248 printk messages dropped **
** 261 printk messages dropped **
** 254 printk messages dropped **
** 241 printk messages dropped **
** 114 printk messages dropped **
** 245 printk messages dropped **
** 250 printk messages dropped **
** 265 printk messages dropped **
** 389 printk messages dropped **
** 251 printk messages dropped **
** 257 printk messages dropped **
** 261 printk messages dropped **
** 254 printk messages dropped **
** 242 printk messages dropped **
** 262 printk messages dropped **
** 239 printk messages dropped **
** 244 printk messages dropped **
** 247 printk messages dropped **
** 241 printk messages dropped **
** 260 printk messages dropped **
** 261 printk messages dropped **
** 240 printk messages dropped **
** 258 printk messages dropped **
** 249 printk messages dropped **
** 238 printk messages dropped **
** 256 printk messages dropped **
** 262 printk messages dropped **
** 243 printk messages dropped **
** 205 printk messages dropped **
** 257 printk messages dropped **
** 275 printk messages dropped **
** 291 printk messages dropped **
[  999.666818][T22598] veth0_vlan: entered promiscuous mode
[  999.678658][   T30] audit: type=1400 audit(1790548619.334:2265): avc:  denied  { search } for  pid=5267 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  999.678772][   T30] audit: type=1400 audit(1790548619.334:2266): avc:  denied  { search } for  pid=5267 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  999.678896][   T30] audit: type=1400 audit(1790548619.334:2267): avc:  denied  { search } for  pid=5267 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  999.800508][ T5801] usb 1-1: device descriptor read/all, error -71
[  999.806136][T22570] bridge_slave_1: left allmulticast mode
[  999.806155][T22570] bridge_slave_1: left promiscuous mode
[  999.806370][T22570] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.955319][T22570] bridge_slave_0: left allmulticast mode
[  999.955337][T22570] bridge_slave_0: left promiscuous mode
[  999.955523][T22570] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.821458][T22570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1000.850058][T22570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1000.862835][T22570] bond0 (unregistering): Released all slaves
[ 1000.915207][T22598] veth1_vlan: entered promiscuous mode
[ 1001.125652][ T5608] Bluetooth: hci6: command 0x206a tx timeout
[ 1001.183341][T22699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
** 2224 printk messages dropped **
[ 1001.289418][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1001.289430][   T30] audit: type=1400 audit(1790548620.934:2280): avc:  denied  { read } for  pid=22845 comm="syz.0.5557" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1001.289480][   T30] audit: type=1400 audit(1790548620.934:2281): avc:  denied  { open } for  pid=22845 comm="syz.0.5557" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1001.446937][   T30] audit: type=1400 audit(1790548621.104:2282): avc:  denied  { create } for  pid=22845 comm="syz.0.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1001.474681][   T30] audit: type=1400 audit(1790548621.134:2283): avc:  denied  { append } for  pid=22845 comm="syz.0.5557" name="demux0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1001.477875][T22848] syz.0.5557: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1001.478051][T22848] CPU: 1 UID: 0 PID: 22848 Comm: syz.0.5557 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1001.478083][T22848] Tainted: [L]=SOFTLOCKUP
[ 1001.478092][T22848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1001.478106][T22848] Call Trace:
[ 1001.478114][T22848]  <TASK>
[ 1001.478123][T22848]  dump_stack_lvl+0x100/0x190
[ 1001.478161][T22848]  warn_alloc.cold+0x9e/0xb2
[ 1001.478187][T22848]  ? __pfx_warn_alloc+0x10/0x10
[ 1001.478210][T22848]  ? irqentry_exit+0x24d/0xa10
[ 1001.478253][T22848]  __vmalloc_node_range_noprof+0x123b/0x1420
[ 1001.478287][T22848]  ? rcu_is_watching+0x13/0xc0
[ 1001.478317][T22848]  ? trace_contention_end+0x126/0x160
[ 1001.478348][T22848]  ? dvb_demux_do_ioctl+0x929/0x1200
[ 1001.478373][T22848]  ? rcu_is_watching+0x13/0xc0
[ 1001.478402][T22848]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[ 1001.478441][T22848]  ? __pfx___mutex_lock+0x10/0x10
[ 1001.478466][T22848]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1001.478499][T22848]  ? trace_sched_exit_tp+0x120/0x160
[ 1001.478532][T22848]  ? tomoyo_path_number_perm+0x188/0x580
[ 1001.478564][T22848]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[ 1001.478588][T22848]  __vmalloc_node_noprof+0xad/0xf0
[ 1001.478618][T22848]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[ 1001.478646][T22848]  dvb_demux_do_ioctl+0x9e0/0x1200
[ 1001.478673][T22848]  ? do_vfs_ioctl+0x226/0x13e0
[ 1001.478702][T22848]  dvb_usercopy+0x167/0x340
[ 1001.478723][T22848]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1001.478752][T22848]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1001.478790][T22848]  ? selinux_file_ioctl+0x13b/0x290
[ 1001.478819][T22848]  ? selinux_file_ioctl+0xb6/0x290
[ 1001.478849][T22848]  dvb_demux_ioctl+0x29/0x40
[ 1001.478871][T22848]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1001.478894][T22848]  __x64_sys_ioctl+0x18e/0x210
[ 1001.478920][T22848]  do_syscall_64+0x123/0x790
[ 1001.478945][T22848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.478967][T22848] RIP: 0033:0x7fd5cf59e159
[ 1001.478986][T22848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1001.479005][T22848] RSP: 002b:00007fd5d044e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1001.479025][T22848] RAX: ffffffffffffffda RBX: 00007fd5cf826180 RCX: 00007fd5cf59e159
[ 1001.479040][T22848] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008
[ 1001.479054][T22848] RBP: 00007fd5cf63506b R08: 0000000000000000 R09: 0000000000000000
[ 1001.479068][T22848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1001.479082][T22848] R13: 00007fd5cf826218 R14: 00007fd5cf826180 R15: 00007ffd91e64b58
[ 1001.479114][T22848]  </TASK>
[ 1001.479222][T22848] Mem-Info:
[ 1001.508580][T22848] active_anon:22440 inactive_anon:27024 isolated_anon:0
[ 1001.508580][T22848]  active_file:8086 inactive_file:21107 isolated_file:0
[ 1001.508580][T22848]  unevictable:0 dirty:182 writeback:0
[ 1001.508580][T22848]  slab_reclaimable:10547 slab_unreclaimable:137277
[ 1001.508580][T22848]  mapped:74746 shmem:37795 pagetables:1916
[ 1001.508580][T22848]  sec_pagetables:0 bounce:0
[ 1001.508580][T22848]  kernel_misc_reclaimable:0
[ 1001.508580][T22848]  free:422900 free_pcp:20014 free_cma:0
** 2901 printk messages dropped **
[ 1002.079577][T22852] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5558'.
[ 1002.254351][   T30] audit: type=1400 audit(1790548621.914:2284): avc:  denied  { read } for  pid=22854 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1002.256900][   T30] audit: type=1400 audit(1790548621.914:2285): avc:  denied  { read open } for  pid=22854 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1002.333253][   T30] audit: type=1400 audit(1790548621.994:2286): avc:  denied  { getattr } for  pid=22854 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1002.909253][T22699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.051664][T22862] misc userio: The device must be registered before sending interrupts
[ 1003.589447][   T30] audit: type=1400 audit(1790548623.224:2287): avc:  denied  { write } for  pid=22849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1003.589503][   T30] audit: type=1400 audit(1790548623.224:2288): avc:  denied  { add_name } for  pid=22849 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1003.589540][   T30] audit: type=1400 audit(1790548623.224:2289): avc:  denied  { create } for  pid=22849 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1003.735602][T21016] cb->arg bucket: 1797383, t ffffc90012e000
** replaying previous printk message **
[ 1003.735602][T21016] cb->arg bucket: 1797383, t ffffc90012e00000 n 0000000000000000
[ 1003.735622][T21016] cb->arg bucket: 1797384, t ffffc90012e00000 n 0000000000000000
[ 1003.735637][T21016] cb->arg bucket: 1797385, t ffffc90012e00000 n 0000000000000000
[ 1003.735655][T21016] cb->arg bucket: 1797386, t ffffc90012e00000 n 0000000000000000
[ 1003.735670][T21016] cb->arg bucket: 1797387, t ffffc90012e00000 n 0000000000000000
[ 1003.735682][T21016] cb->arg bucket: 1797388, t ffffc90012e00000 n 0000000000000000
[ 1003.735692][T21016] cb->arg bucket: 1797389, t ffffc90012e00000 n 0000000000000000
[ 1003.735701][T21016] cb->arg bucket: 1797390, t ffffc90012e00000 n 0000000000000000
[ 1003.735710][T21016] cb->arg bucket: 1797391, t ffffc90012e00000 n 0000000000000000
[ 1003.735720][T21016] cb->arg bucket: 1797392, t ffffc90012e00000 n 0000000000000000
[ 1003.735729][T21016] cb->arg bucket: 1797393, t ffffc90012e00000 n 0000000000000000
[ 1003.735738][T21016] cb->arg bucket: 1797394, t ffffc90012e00000 n 0000000000000000
[ 1003.735748][T21016] cb->arg bucket: 1797395, t ffffc90012e00000 n 0000000000000000
[ 1003.735757][T21016] cb->arg bucket: 1797396, t ffffc90012e00000 n 0000000000000000
[ 1003.735766][T21016] cb->arg bucket: 1797397, t ffffc90012e00000 n 0000000000000000
[ 1003.735776][T21016] cb->arg bucket: 1797398, t ffffc90012e00000 n 0000000000000000
[ 1003.735785][T21016] cb->arg bucket: 1797399, t ffffc90012e00000 n 0000000000000000
[ 1003.735794][T21016] cb->arg bucket: 1797400, t ffffc90012e00000 n 0000000000000000
[ 1003.735804][T21016] cb->arg bucket: 1797401, t ffffc90012e00000 n 0000000000000000
[ 1003.735813][T21016] cb->arg bucket: 1797402, t ffffc90012e00000 n 0000000000000000
[ 1003.735822][T21016] cb->arg bucket: 1797403, t ffffc90012e00000 n 0000000000000000
[ 1003.735832][T21016] cb->arg bucket: 1797404, t ffffc90012e00000 n 0000000000000000
[ 1003.735841][T21016] cb->arg bucket: 1797405, t ffffc90012e00000 n 0000000000000000
[ 1003.735850][T21016] cb->arg bucket: 1797406, t ffffc90012e00000 n 0000000000000000
[ 1003.735859][T21016] cb->arg bucket: 1797407, t ffffc90012e00000 n 0000000000000000
[ 1003.735869][T21016] cb->arg bucket: 1797408, t ffffc90012e00000 n 0000000000000000
[ 1003.735878][T21016] cb->arg bucket: 1797409, t ffffc90012e00000 n 0000000000000000
[ 1003.735887][T21016] cb->arg bucket: 1797410, t ffffc90012e00000 n 0000000000000000
[ 1003.735897][T21016] cb->arg bucket: 1797411, t ffffc90012e00000 n 0000000000000000
[ 1003.735906][T21016] cb->arg bucket: 1797412, t ffffc90012e00000 n 0000000000000000
[ 1003.735915][T21016] cb->arg bucket: 1797413, t ffffc90012e00000 n 0000000000000000
[ 1003.735924][T21016] cb->arg bucket: 1797414, t ffffc90012e00000 n 0000000000000000
[ 1003.735934][T21016] cb->arg bucket: 1797415, t ffffc90012e00000 n 0000000000000000
[ 1003.735943][T21016] cb->arg bucket: 1797416, t ffffc90012e00000 n 0000000000000000
[ 1003.735952][T21016] cb->arg bucket: 1797417, t ffffc90012e00000 n 0000000000000000
[ 1003.735962][T21016] cb->arg bucket: 1797418, t ffffc90012e00000 n 0000000000000000
[ 1003.735971][T21016] cb->arg bucket: 1797419, t ffffc90012e00000 n 0000000000000000
[ 1003.735980][T21016] cb->arg bucket: 1797420, t ffffc90012e00000 n 0000000000000000
[ 1003.735989][T21016] cb->arg bucket: 1797421, t ffffc90012e00000 n 0000000000000000
[ 1003.735999][T21016] cb->arg bucket: 1797422, t ffffc90012e00000 n 0000000000000000
[ 1003.736008][T21016] cb->arg bucket: 1797423, t ffffc90012e00000 n 0000000000000000
[ 1003.736017][T21016] cb->arg bucket: 1797424, t ffffc90012e00000 n 0000000000000000
[ 1003.736027][T21016] cb->arg bucket: 1797425, t ffffc90012e00000 n 0000000000000000
[ 1003.736036][T21016] cb->arg bucket: 1797426, t ffffc90012e00000 n 0000000000000000
[ 1003.736045][T21016] cb->arg bucket: 1797427, t ffffc90012e00000 n 0000000000000000
[ 1003.736055][T21016] cb->arg bucket: 1797428, t ffffc90012e00000 n 0000000000000000
[ 1003.736064][T21016] cb->arg bucket: 1797429, t ffffc90012e00000 n 0000000000000000
[ 1003.736073][T21016] cb->arg bucket: 1797430, t ffffc90012e00000 n 0000000000000000
[ 1003.736082][T21016] cb->arg bucket: 1797431, t ffffc90012e00000 n 0000000000000000
[ 1003.736091][T21016] cb->arg bucket: 1797432, t ffffc90012e00000 n 0000000000000000
[ 1003.736101][T21016] cb->arg bucket: 1797433, t ffffc90012e00000 n 0000000000000000
[ 1003.736110][T21016] cb->arg bucket: 1797434, t ffffc90012e00000 n 0000000000000000
[ 1003.736119][T21016] cb->arg bucket: 1797435, t ffffc90012e00000 n 0000000000000000
[ 1003.736128][T21016] cb->arg bucket: 1797436, t ffffc90012e00000 n 0000000000000000
[ 1003.736138][T21016] cb->arg bucket: 1797437, t ffffc90012e00000 n 0000000000000000
[ 1003.736147][T21016] cb->arg bucket: 1797438, t ffffc90012e00000 n 0000000000000000
[ 1003.736156][T21016] cb->arg bucket: 1797439, t ffffc90012e00000 n 0000000000000000
[ 1003.736165][T21016] cb->arg bucket: 1797440, t ffffc90012e00000 n 0000000000000000
[ 1003.736174][T21016] cb->arg bucket: 1797441, t ffffc90012e00000 n 0000000000000000
[ 1003.736184][T21016] cb->arg bucket: 1797442, t ffffc90012e00000 n 0000000000000000
[ 1003.736193][T21016] cb->arg bucket: 1797443, t ffffc90012e00000 n 0000000000000000
[ 1003.736203][T21016] cb->arg bucket: 1797444, t ffffc90012e00000 n 0000000000000000
[ 1003.736212][T21016] cb->arg bucket: 1797445, t ffffc90012e00000 n 0000000000000000
[ 1003.736221][T21016] cb->arg bucket: 1797446, t ffffc90012e00000 n 0000000000000000
[ 1003.736237][T21016] cb->arg bucket: 1797447, t ffffc90012e00000 n 0000000000000000
[ 1003.736246][T21016] cb->arg bucket: 1797448, t ffffc90012e00000 n 0000000000000000
[ 1003.736256][T21016] cb->arg bucket: 1797449, t ffffc90012e00000 n 0000000000000000
[ 1003.736265][T21016] cb->arg bucket: 1797450, t ffffc90012e00000 n 0000000000000000
[ 1003.736274][T21016] cb->arg bucket: 1797451, t ffffc90012e00000 n 0000000000000000
[ 1003.736284][T21016] cb->arg bucket: 1797452, t ffffc90012e00000 n 0000000000000000
[ 1003.736293][T21016] cb->arg bucket: 1797453, t ffffc90012e00000 n 0000000000000000
[ 1003.736302][T21016] cb->arg bucket: 1797454, t ffffc90012e00000 n 0000000000000000
[ 1003.736312][T21016] cb->arg bucket: 1797455, t ffffc90012e00000 n 0000000000000000
[ 1003.736321][T21016] cb->arg bucket: 1797456, t ffffc90012e00000 n 0000000000000000
[ 1003.736330][T21016] cb->arg bucket: 1797457, t ffffc90012e00000 n 0000000000000000
[ 1003.736339][T21016] cb->arg bucket: 1797458, t ffffc90012e00000 n 0000000000000000
[ 1003.736348][T21016] cb->arg bucket: 1797459, t ffffc90012e00000 n 0000000000000000
[ 1003.736358][T21016] cb->arg bucket: 1797460, t ffffc90012e00000 n 0000000000000000
[ 1003.736367][T21016] cb->arg bucket: 1797461, t ffffc90012e00000 n 0000000000000000
[ 1003.736376][T21016] cb->arg bucket: 1797462, t ffffc90012e00000 n 0000000000000000
[ 1003.736385][T21016] cb->arg bucket: 1797463, t ffffc90012e00000 n 0000000000000000
[ 1003.736395][T21016] cb->arg bucket: 1797464, t ffffc90012e00000 n 0000000000000000
[ 1003.736404][T21016] cb->arg bucket: 1797465, t ffffc90012e00000 n 0000000000000000
[ 1003.736414][T21016] cb->arg bucket: 1797466, t ffffc90012e00000 n 0000000000000000
[ 1003.736423][T21016] cb->arg bucket: 1797467, t ffffc90012e00000 n 0000000000000000
[ 1003.736432][T21016] cb->arg bucket: 1797468, t ffffc90012e00000 n 0000000000000000
[ 1003.736441][T21016] cb->arg bucket: 1797469, t ffffc90012e00000 n 0000000000000000
[ 1003.736451][T21016] cb->arg bucket: 1797470, t ffffc90012e00000 n 0000000000000000
[ 1003.736460][T21016] cb->arg bucket: 1797471, t ffffc90012e00000 n 0000000000000000
[ 1003.736469][T21016] cb->arg bucket: 1797472, t ffffc90012e00000 n 0000000000000000
[ 1003.736479][T21016] cb->arg bucket: 1797473, t ffffc90012e00000 n 0000000000000000
[ 1003.736488][T21016] cb->arg bucket: 1797474, t ffffc90012e00000 n 0000000000000000
[ 1003.736497][T21016] cb->arg bucket: 1797475, t ffffc90012e00000 n 0000000000000000
[ 1003.736506][T21016] cb->arg bucket: 1797476, t ffffc90012e00000 n 0000000000000000
[ 1003.736515][T21016] cb->arg bucket: 1797477, t ffffc90012e00000 n 0000000000000000
[ 1003.736525][T21016] cb->arg bucket: 1797478, t ffffc90012e00000 n 0000000000000000
[ 1003.736534][T21016] cb->arg bucket: 1797479, t ffffc90012e00000 n 0000000000000000
[ 1003.736543][T21016] cb->arg bucket: 1797480, t ffffc90012e00000 n 0000000000000000
[ 1003.736552][T21016] cb->arg bucket: 1797481, t ffffc90012e00000 n 0000000000000000
[ 1003.736562][T21016] cb->arg bucket: 1797482, t ffffc90012e00000 n 0000000000000000
[ 1003.736571][T21016] cb->arg bucket: 1797483, t ffffc90012e00000 n 0000000000000000
[ 1003.736580][T21016] cb->arg bucket: 1797484, t ffffc90012e00000 n 0000000000000000
[ 1003.736590][T21016] cb->arg bucket: 1797485, t ffffc90012e00000 n 0000000000000000
[ 1003.736599][T21016] cb->arg bucket: 1797486, t ffffc90012e00000 n 0000000000000000
[ 1003.736608][T21016] cb->arg bucket: 1797487, t ffffc90012e00000 n 0000000000000000
[ 1003.736617][T21016] cb->arg bucket: 1797488, t ffffc90012e00000 n 0000000000000000
[ 1003.736627][T21016] cb->arg bucket: 1797489, t ffffc90012e00000 n 0000000000000000
[ 1003.736636][T21016] cb->arg bucket: 1797490, t ffffc90012e00000 n 0000000000000000
[ 1003.736645][T21016] cb->arg bucket: 1797491, t ffffc90012e00000 n 0000000000000000
[ 1003.736655][T21016] cb->arg bucket: 1797492, t ffffc90012e00000 n 0000000000000000
[ 1003.736664][T21016] cb->arg bucket: 1797493, t ffffc90012e00000 n 0000000000000000
[ 1003.736673][T21016] cb->arg bucket: 1797494, t ffffc90012e00000 n 0000000000000000
[ 1003.736683][T21016] cb->arg bucket: 1797495, t ffffc90012e00000 n 0000000000000000
[ 1003.736692][T21016] cb->arg bucket: 1797496, t ffffc90012e00000 n 0000000000000000
[ 1003.736701][T21016] cb->arg bucket: 1797497, t ffffc90012e00000 n 0000000000000000
[ 1003.736711][T21016] cb->arg bucket: 1797498, t ffffc90012e00000 n 0000000000000000
[ 1003.736720][T21016] cb->arg bucket: 1797499, t ffffc90012e00000 n 0000000000000000
[ 1003.736729][T21016] cb->arg bucket: 1797500, t ffffc90012e00000 n 0000000000000000
[ 1003.736738][T21016] cb->arg bucket: 1797501, t ffffc90012e00000 n 0000000000000000
[ 1003.736748][T21016] cb->arg bucket: 1797502, t ffffc90012e00000 n 0000000000000000
[ 1003.736757][T21016] cb->arg bucket: 1797503, t ffffc90012e00000 n 0000000000000000
[ 1003.736766][T21016] cb->arg bucket: 1797504, t ffffc90012e00000 n 0000000000000000
[ 1003.736775][T21016] cb->arg bucket: 1797505, t ffffc90012e00000 n 0000000000000000
[ 1003.736784][T21016] cb->arg bucket: 1797506, t ffffc90012e00000 n 0000000000000000
[ 1003.736794][T21016] cb->arg bucket: 1797507, t ffffc90012e00000 n 0000000000000000
[ 1003.736803][T21016] cb->arg bucket: 1797508, t ffffc90012e00000 n 0000000000000000
[ 1003.736812][T21016] cb->arg bucket: 1797509, t ffffc90012e00000 n 0000000000000000
[ 1003.736821][T21016] cb->arg bucket: 1797510, t ffffc90012e00000 n 0000000000000000
[ 1003.736831][T21016] cb->arg bucket: 1797511, t ffffc90012e00000 n 0000000000000000
[ 1003.736840][T21016] cb->arg bucket: 1797512, t ffffc90012e00000 n 0000000000000000
[ 1003.736849][T21016] cb->arg bucket: 1797513, t ffffc90012e00000 n 0000000000000000
[ 1003.736859][T21016] cb->arg bucket: 1797514, t ffffc90012e00000 n 0000000000000000
[ 1003.736868][T21016] cb->arg bucket: 1797515, t ffffc90012e00000 n 0000000000000000
[ 1003.736877][T21016] cb->arg bucket: 1797516, t ffffc90012e00000 n 0000000000000000
[ 1003.736886][T21016] cb->arg bucket: 1797517, t ffffc90012e00000 n 0000000000000000
[ 1003.736896][T21016] cb->arg bucket: 1797518, t ffffc90012e00000 n 0000000000000000
[ 1003.736905][T21016] cb->arg bucket: 1797519, t ffffc90012e00000 n 0000000000000000
[ 1003.736914][T21016] cb->arg bucket: 1797520, t ffffc90012e00000 n 0000000000000000
[ 1003.736923][T21016] cb->arg bucket: 1797521, t ffffc90012e00000 n 0000000000000000
[ 1003.736933][T21016] cb->arg bucket: 1797522, t ffffc90012e00000 n 0000000000000000
[ 1003.736942][T21016] cb->arg bucket: 1797523, t ffffc90012e00000 n 0000000000000000
[ 1003.736951][T21016] cb->arg bucket: 1797524, t ffffc90012e00000 n 0000000000000000
[ 1003.736960][T21016] cb->arg bucket: 1797525, t ffffc90012e00000 n 0000000000000000
[ 1003.736970][T21016] cb->arg bucket: 1797526, t ffffc90012e00000 n 0000000000000000
[ 1003.736979][T21016] cb->arg bucket: 1797527, t ffffc90012e00000 n 0000000000000000
[ 1003.736988][T21016] cb->arg bucket: 1797528, t ffffc90012e00000 n 0000000000000000
[ 1003.736997][T21016] cb->arg bucket: 1797529, t ffffc90012e00000 n 0000000000000000
[ 1003.737015][T21016] cb->arg bucket: 1797530, t ffffc90012e00000 n 0000000000000000
[ 1003.737025][T21016] cb->arg bucket: 1797531, t ffffc90012e00000 n 0000000000000000
[ 1003.737034][T21016] cb->arg bucket: 1797532, t ffffc90012e00000 n 0000000000000000
[ 1003.737043][T21016] cb->arg bucket: 1797533, t ffffc90012e00000 n 0000000000000000
[ 1003.737053][T21016] cb->arg bucket: 1797534, t ffffc90012e00000 n 0000000000000000
[ 1003.823000][T22872] kcov: kcov_start: t = ffff888034a72580, size = 524288, area = ffffc9002ebf4000
[ 1003.863495][    C0] virtqueue callback for ffff8880297be200 (ffffffff86ec6730)
[ 1003.863521][    C0] No more buffers in queue
[ 1003.863546][    C0] Receiving skb proto 0x0800 len 124 type 0
[ 1003.863564][    C0] No more buffers in queue
[ 1003.863756][    C0] eth0: xmit ffff88802c070500 42:01:0a:80:00:01
[ 1003.863775][    C0] Added buffer head 27 to ffff8880297be000
[ 1003.863801][    C0] virtqueue callback for ffff8880297be000 (ffffffff86ecf4e0)
[ 1003.863815][    C0] Sent skb ffff88802c070500
[ 1003.863846][    C0] No more buffers in queue
[ 1004.251736][T22874] kcov: kcov_start: t = ffff888014144b00, size = 524288, area = ffffc9002eff5000
[ 1004.363996][    C0] virtqueue callback for ffff8880297be200 (ffffffff86ec6730)
[ 1004.364045][    C0] No more buffers in queue
[ 1004.364162][    C0] Receiving skb proto 0x0800 len 156 type 0
[ 1004.364217][    C0] No more buffers in queue
[ 1004.364993][    C0] eth0: xmit ffff888058278140 42:01:0a:80:00:01
[ 1004.365053][    C0] Added buffer head 27 to ffff8880297be000
[ 1004.365089][    C0] virtqueue callback for ffff8880297be000 (ffffffff86ecf4e0)
[ 1004.365148][    C0] Sent skb ffff888058278140
[ 1004.365288][    C0] No more buffers in queue
[ 1004.365317][    C0] No more buffers in queue
[ 1004.680103][T22871] kcov: kcov_task_exit: t = ffff8880266ea580, kcov->t = ffff8880266ea580
[ 1004.680121][T22874] kcov: kcov_task_exit: t = ffff888014144b00, kcov->t = ffff888014144b00
[ 1004.680584][   T32] INFO: task syz.1.5122:21112 blocked for more than 143 seconds.
[ 1004.680606][   T32]       Tainted: G             L      syzkaller #0
[ 1004.680618][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1004.680627][   T32] task:syz.1.5122      state:D stack:28264 pid:21112 tgid:21111 ppid:15342  task_flags:0x400140 flags:0x00080002
[ 1004.680684][   T32] Call Trace:
[ 1004.680690][   T32]  <TASK>
[ 1004.680703][   T32]  __schedule+0x1259/0x6920
[ 1004.680736][   T32]  ? __lock_acquire+0x5c0/0x1f40
[ 1004.680766][   T32]  ? do_raw_spin_lock+0x128/0x260
[ 1004.680801][   T32]  ? __pfx___schedule+0x10/0x10
[ 1004.680827][   T32]  ? find_held_lock+0x2b/0x80
[ 1004.680856][   T32]  ? schedule+0x225/0x2c0
[ 1004.680889][   T32]  schedule+0xdd/0x2c0
[ 1004.680916][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1004.680945][   T32]  __mutex_lock+0xccb/0x1bd0
[ 1004.680967][   T32]  ? nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.680994][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1004.681022][   T32]  ? net_generic+0x25/0x2a0
[ 1004.681053][   T32]  ? find_held_lock+0x2b/0x80
[ 1004.681079][   T32]  ? nfnetlink_rcv_msg+0x87b/0x11e0
[ 1004.681098][   T32]  ? nfnetlink_rcv_msg+0x87b/0x11e0
[ 1004.681123][   T32]  ? nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.681142][   T32]  nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.681172][   T32]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1004.681202][   T32]  ? __lock_acquire+0x5c0/0x1f40
[ 1004.681252][   T32]  ? avc_has_perm_noaudit+0x145/0x470
[ 1004.681292][   T32]  netlink_rcv_skb+0x159/0x420
[ 1004.681317][   T32]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1004.681339][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1004.681379][   T32]  ? ns_capable+0xd2/0xf0
[ 1004.681404][   T32]  nfnetlink_rcv+0x1b3/0x440
[ 1004.681433][   T32]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1004.681462][   T32]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1004.681493][   T32]  netlink_unicast+0x585/0x850
[ 1004.681523][   T32]  ? __pfx_netlink_unicast+0x10/0x10
[ 1004.681557][   T32]  netlink_sendmsg+0x8b0/0xda0
[ 1004.681588][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1004.681616][   T32]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1004.681646][   T32]  ____sys_sendmsg+0xa4d/0xbe0
[ 1004.681666][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1004.681694][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1004.681740][   T32]  ___sys_sendmsg+0x190/0x1e0
[ 1004.681764][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1004.681788][   T32]  ? futex_wait+0x11e/0x370
[ 1004.681821][   T32]  ? find_held_lock+0x2b/0x80
[ 1004.683830][   T32]  __sys_sendmsg+0x160/0x210
[ 1004.683867][   T32]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1004.683911][   T32]  do_syscall_64+0x123/0x790
[ 1004.683937][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.683958][   T32] RIP: 0033:0x7f48a5f9e159
[ 1004.683975][   T32] RSP: 002b:00007f48a6e65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1004.683996][   T32] RAX: ffffffffffffffda RBX: 00007f48a6225fa0 RCX: 00007f48a5f9e159
[ 1004.684010][   T32] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1004.684023][   T32] RBP: 00007f48a603506b R08: 0000000000000000 R09: 0000000000000000
[ 1004.684036][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1004.684049][   T32] R13: 00007f48a6226038 R14: 00007f48a6225fa0 R15: 00007fff6d495ed8
[ 1004.684079][   T32]  </TASK>
[ 1004.684162][   T32] 
[ 1004.684162][   T32] Showing all locks held in the system:
[ 1004.684176][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[ 1004.684197][   T32]  #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1004.684257][   T32] locks held by kswapd0/86: 2, last CPU#0:
[ 1004.684271][   T32]  #0: ffffffff8efcb1e0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x243/0x1f00
[ 1004.684325][   T32]  #1: ffffe8ffffc27e68 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70
[ 1004.684391][   T32] locks held by getty/5363: 2, on CPU#1:
[ 1004.684403][   T32]  #0: ffff8880375ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1004.684447][   T32]  #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1004.684498][   T32] locks held by kworker/1:8/17626: 5, last CPU#1:
[ 1004.684511][   T32]  #0: ffff88807f28fd40 ((wq_completion)wg-crypt-wg0#17){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1004.684567][   T32]  #1: ffffc900036c7d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1004.684619][   T32]  #2: ffff888029c8c6d0 (&peer->endpoint_lock){++-.}-{3:3}, at: wg_socket_send_skb_to_peer+0x5f/0x210
[ 1004.684669][   T32]  #3: ffff8880b8526398 (&base->lock){-.-.}-{2:2}, at: send6+0x303/0xc40
[ 1004.684711][   T32]  #4: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: raw6_local_deliver+0x124/0xaf0
[ 1004.684761][   T32] locks held by kworker/u8:24/18000: 3, on CPU#0:
[ 1004.684774][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound
[ 1004.684785][T17626] nf_nat: Already setup manip DST for ct ffff888074c7e900 (status bits 0x188)
[ 1004.684792][   T32] ){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1004.684824][   T32]  #1: 
[ 1004.684825][T17626] nf_nat: Already setup manip SRC for ct ffff888074c7e900 (status bits 0x188)
[ 1004.684830][   T32] ffffc90011b8fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1004.684865][    C1] nf_nat: Already setup manip DST for ct ffff888074c7e900 (status bits 0x188)
[ 1004.684879][   T32]  #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1004.684911][    C1] nf_nat: Already setup manip SRC for ct ffff888074c7e900 (status bits 0x188)
[ 1004.684927][   T32] locks held by kworker/u8:25/18001: 3, on CPU#0:
[ 1004.684942][   T32]  #0: ffff88801e724140 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1004.684993][   T32]  #1: ffffc90011bafd08 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1004.685047][   T32]  #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb9/0x640
[ 1004.685098][   T32] locks held by syz.3.5084/21016: 3, last CPU#0:
[ 1004.685111][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685153][   T32]  #1: ffff88803704b6e8 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990
[ 1004.685206][   T32]  #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: hash_mac4_list+0x298/0x1040
[ 1004.685529][   T32] locks held by syz.1.5122/21112: 1, on CPU#0:
[ 1004.685544][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685592][   T32] locks held by syz.0.5149/21173: 1, on CPU#0:
[ 1004.685606][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685649][   T32] locks held by syz.0.5149/21178: 1, on CPU#1:
[ 1004.685663][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685705][   T32] locks held by syz.2.5155/21190: 1, on CPU#1:
[ 1004.685719][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685763][   T32] locks held by syz.2.5155/21191: 1, on CPU#1:
[ 1004.685776][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685820][   T32] locks held by syz.4.5185/21331: 1, on CPU#0:
[ 1004.685834][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685885][   T32] locks held by syz.9.5356/22057: 1, on CPU#1:
[ 1004.685899][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685942][   T32] locks held by syz.3.5366/22095: 1, on CPU#0:
[ 1004.685956][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.685999][   T32] locks held by syz.3.5366/22096: 1, on CPU#0:
[ 1004.686012][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.686057][   T32] locks held by syz.8.5459/22440: 1, on CPU#1:
[ 1004.686070][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.686116][   T32] locks held by kworker/u8:0/22570: 6, on CPU#0:
[ 1004.686130][   T32]  #0: ffff88801d2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1004.686183][   T32]  #1: ffffc90004ccfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1004.686242][   T32]  #2: ffffffff90cbbf48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 1004.686285][   T32]  #3: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x360
[ 1004.686330][   T32]  #4: ffff888074680800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x6e0
[ 1004.686382][   T32]  #5: ffffffff8edf84a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1004.686428][   T32] locks held by syz-executor/22598: 1, on CPU#0:
[ 1004.686442][   T32]  #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[ 1004.686494][   T32] locks held by syz-executor/22699: 7, on CPU#0:
[ 1004.686507][   T32]  #0: ffff88807ff56460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1004.686558][   T32]  #1: ffff88802d821c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1004.686604][   T32]  #2: ffff888029effc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1004.686655][   T32]  #3: ffffffff9023af40 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1004.686703][   T32]  #4: ffff8880569ce128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 1004.686767][   T32]  #5: ffff8880569cc258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[ 1004.686824][   T32]  #6: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360
[ 1004.686874][   T32] locks held by syz.6.5553/22858: 1, on CPU#1:
[ 1004.686888][   T32]  #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0
[ 1004.686931][   T32] locks held by syz.0.5559/22862: 2, last CPU#0:
[ 1004.686945][   T32]  #0: ffff88805236b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00
[ 1004.687444][   T32]  #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1f/0x220
[ 1004.687497][   T32] locks held by syz.0.5559/22864: 5, last CPU#0:
[ 1004.687511][   T32]  #0: ffff888078fac460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0
[ 1004.687561][   T32]  #1: ffff88801c080340 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0
[ 1004.687607][   T32]  #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830
[ 1004.687656][   T32]  #3: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2060
[ 1004.687707][   T32]  #4: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[ 1004.687753][   T32] locks held by syz.7.5560/22872: 2, on CPU#0:
[ 1004.687767][   T32]  #0: ffff88802a6746e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990
[ 1004.687816][   T32]  #1: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa53/0x14b0
[ 1004.687860][   T32] locks held by cmp/22870: 1, last CPU#0:
[ 1004.687873][   T32]  #0: ffff8880296c5900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470
[ 1004.687922][   T32] 
[ 1004.687927][   T32] =============================================
[ 1004.687927][   T32] 
[ 1004.687949][   T32] NMI backtrace for cpu 0
[ 1004.687963][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1004.687989][   T32] Tainted: [L]=SOFTLOCKUP
[ 1004.687996][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1004.688008][   T32] Call Trace:
[ 1004.688014][   T32]  <TASK>
[ 1004.688022][   T32]  dump_stack_lvl+0x100/0x190
[ 1004.688052][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1004.688081][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1004.688105][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[ 1004.688134][   T32]  sys_info+0x141/0x190
[ 1004.688156][   T32]  watchdog+0xcb1/0x1030
[ 1004.688190][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1004.688219][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1004.688243][   T32]  ? __kthread_parkme+0x18f/0x230
[ 1004.688269][   T32]  ? kthread+0x13a/0x450
[ 1004.688292][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1004.688314][   T32]  kthread+0x373/0x450
[ 1004.688338][   T32]  ? __pfx_kthread+0x10/0x10
[ 1004.688365][   T32]  ret_from_fork+0x730/0xd60
[ 1004.688389][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1004.688410][   T32]  ? __switch_to+0x800/0x10f0
[ 1004.688439][   T32]  ? __pfx_kthread+0x10/0x10
[ 1004.688467][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1004.688500][   T32]  </TASK>
[ 1004.688516][   T32] Sending NMI from CPU 0 to CPUs 1:
[ 1004.688546][    C1] NMI backtrace for cpu 1
[ 1004.688559][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1004.688583][    C1] Tainted: [L]=SOFTLOCKUP
[ 1004.688590][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1004.688600][    C1] RIP: 0010:io_serial_in+0x87/0xb0
[ 1004.688623][    C1] Code: a4 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 3d 07 24 06 e8 88 0e ce fc eb a2 e8 11 0f
[ 1004.688639][    C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[ 1004.688653][    C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[ 1004.688664][    C1] RDX: 00000000000003fd RSI: ffffffff85b19ff0 RDI: ffffffff9bc75f60
[ 1004.688676][    C1] RBP: ffffffff9bc75f20 R08: 0000000000000001 R09: 000000000000001f
[ 1004.688692][    C1] R10: 0000000000000000 R11: 205d363130313254 R12: 0000000000000000
[ 1004.688702][    C1] R13: 0000000000000020 R14: fffffbfff378ec41 R15: dffffc0000000000
[ 1004.688714][    C1] FS:  0000000000000000(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000
[ 1004.688731][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1004.688743][    C1] CR2: 00007f4052187780 CR3: 0000000182a9a000 CR4: 00000000003526f0
[ 1004.688755][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1004.688766][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1004.688777][    C1] Call Trace:
[ 1004.688783][    C1]  <TASK>
[ 1004.688791][    C1]  wait_for_lsr+0x13a/0x210
[ 1004.688816][    C1]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[ 1004.688842][    C1]  __serial8250_console_fifo_write+0xa5/0x290
[ 1004.688865][    C1]  ? __pfx_io_serial_out+0x10/0x10
[ 1004.688888][    C1]  serial8250_console_write+0xf46/0x1330
[ 1004.688919][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1004.688936][    C1]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[ 1004.688956][    C1]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[ 1004.688980][    C1]  nbcon_emit_next_record+0x8f7/0xa70
[ 1004.689000][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[ 1004.689019][    C1]  ? nbcon_context_try_acquire+0x3a6/0xc60
[ 1004.689037][    C1]  ? do_raw_spin_lock+0xf0/0x260
[ 1004.689064][    C1]  ? __pfx___cant_migrate+0x10/0x10
[ 1004.689087][    C1]  ? _raw_spin_lock_irqsave+0x42/0x60
[ 1004.689112][    C1]  nbcon_emit_one+0x1a8/0x2b0
[ 1004.689129][    C1]  ? __pfx_nbcon_emit_one+0x10/0x10
[ 1004.689151][    C1]  nbcon_kthread_func+0x613/0x7d0
[ 1004.689171][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1004.689192][    C1]  ? __kthread_parkme+0x18f/0x230
[ 1004.689214][    C1]  ? kthread+0x13a/0x450
[ 1004.689236][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1004.689253][    C1]  kthread+0x373/0x450
[ 1004.689276][    C1]  ? __pfx_kthread+0x10/0x10
[ 1004.689299][    C1]  ret_from_fork+0x730/0xd60
[ 1004.689318][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1004.689338][    C1]  ? __switch_to+0x800/0x10f0
[ 1004.689359][    C1]  ? __pfx_kthread+0x10/0x10
[ 1004.689383][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1004.689408][    C1]  </TASK>
[ 1004.689551][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1007.490037][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1007.500688][   T32] Tainted: [L]=SOFTLOCKUP
[ 1007.504994][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1007.515023][   T32] Call Trace:
[ 1007.518296][   T32]  <TASK>
[ 1007.521204][   T32]  dump_stack_lvl+0x100/0x190
[ 1007.525874][   T32]  vpanic+0x553/0x970
[ 1007.529828][   T32]  ? __pfx_vpanic+0x10/0x10
[ 1007.534305][   T32]  panic+0xd1/0xe0
[ 1007.537995][   T32]  ? __pfx_panic+0x10/0x10
[ 1007.542384][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[ 1007.548520][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[ 1007.554658][   T32]  ? watchdog.cold+0x1ec/0x234
[ 1007.559399][   T32]  watchdog.cold+0x1fd/0x234
[ 1007.563969][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1007.569755][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1007.574408][   T32]  ? __kthread_parkme+0x18f/0x230
[ 1007.579408][   T32]  ? kthread+0x13a/0x450
[ 1007.583643][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1007.588297][   T32]  kthread+0x373/0x450
[ 1007.592343][   T32]  ? __pfx_kthread+0x10/0x10
[ 1007.596909][   T32]  ret_from_fork+0x730/0xd60
[ 1007.601472][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1007.606561][   T32]  ? __switch_to+0x800/0x10f0
[ 1007.611217][   T32]  ? __pfx_kthread+0x10/0x10
[ 1007.615787][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1007.620530][   T32]  </TASK>
[ 1007.623746][   T32] Kernel Offset: disabled
[ 1007.628047][   T32] Rebooting in 86400 seconds..