last executing test programs:

52.739311933s ago: executing program 3 (id=55):
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
close(r0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = getpid()
syz_pidfd_open(r1, 0x0)
capget(&(0x7f0000000300)={0x19980330, r1}, &(0x7f0000000340)={0x1, 0x0, 0x9, 0x40100, 0x5, 0x9})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000001100), 0x0, 0x80)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x4000000}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = semget(0x3, 0x2, 0x88)
semop(r6, 0x0, 0x0)
semctl$GETPID(r6, 0x0, 0xb, 0x0)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f00000000c0)=[0x8, 0xe78b, 0x5, 0x3800])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x7, 0x2, @TCA_ETF_PARMS={0xffffff7f, 0x1, {0xffffffc0, 0xb, 0x1}}}}]}, 0x40}}, 0x0)

52.704180105s ago: executing program 3 (id=56):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000180)=""/45, &(0x7f00000001c0)=0x2d)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24880, 0x0)
ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000dc6f8bc6452f5a0b107e0bf10e6c0068000c7900000d820000"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r3=>0x0})
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b", 0x21, r4)
r5 = socket$inet6(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14)
r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
unshare(0x2040400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
shutdown(r10, 0x2)
ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000500)={0x1, 0x0, '\x00', {0x0, @bt={0xfffffff1, 0x8, 0x0, 0x0, 0xfff, 0x6, 0x280000, 0x3, 0x0, 0x5, 0xd, 0x9, 0x93f, 0x0, 0x4, 0x34, {0x4, 0xe2a4}, 0xca, 0x8}}})
socket$netlink(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000001100000000000f874610f05ee3751427fabcd756c18f6a66c7e59742e9bdc4f53ddef15b11f55413367dd20b7710fcb5f9794c466e492a14b89455bf8f555cd32cfddd480a264a399599f350c03027826d6d136e3c329fa1787155ae6a4f0407cd635af88e936b4e4c0f800"/124, @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x0)

52.590856735s ago: executing program 3 (id=57):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x5, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xf, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0xff14)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x5, @empty}, 0x20) (async)
sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xf, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0xff14) (async)

52.590584629s ago: executing program 3 (id=58):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x83}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2181099, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2528a0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643dc912f84aaf88b1712132e90236daaf41afb2b4a6339c8c138a9e9c27db6b42f210e04908791fa87b690d738e892c517051f945d4807cd30a5730d35cbe643c5e6be568243056", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYRESDEC=r0])
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async)
write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x83}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) (async)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2181099, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2528a0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643dc912f84aaf88b1712132e90236daaf41afb2b4a6339c8c138a9e9c27db6b42f210e04908791fa87b690d738e892c517051f945d4807cd30a5730d35cbe643c5e6be568243056", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYRESDEC=r0]) (async)

52.540224537s ago: executing program 3 (id=59):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{r1}, "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"})
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000080)={@private1}, &(0x7f00000000c0)=0x14)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
r2 = socket$inet6(0x10, 0xa, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, r0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16, 0xfc, 0x1, 0x40000000}]}, 0x10)
unshare(0x6020400)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000000)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r10, @ANYBLOB='\b\x00+'], 0x34}}, 0xc088)
fsmount(r6, 0x0, 0x88)
sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0)

52.250947333s ago: executing program 3 (id=60):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r1, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

52.205923145s ago: executing program 32 (id=60):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r1, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

16.058526038s ago: executing program 1 (id=408):
r0 = socket(0x11, 0x800000002, 0x0)
r1 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}})

15.980123087s ago: executing program 1 (id=409):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x101, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0xfd3, 0x86}}, 0xe8)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="41a042e643143c348d6b0fe5810e076027f4400ed30288bd418df073c37606172ee152c92f124a928b24268028408081c57c6dae0e353da0a9f1446cf7dd78d09741f32abb534a02a658eb5ed68e6c7f9bf3b458391f6f0790476008a21b0aaf923248deb46af85c31f16fbce49d3a1c2b71b68554b8ecadb7193c471a5bc077fb893be1773f0691cfc5141fe657428069f22a843aa0a39d9048314825824b1181d8bbff868937bb9ff728c3802f42fb861e67ffc39530a7b5ff9b7286082dfa4e353126f8c9b1334fbad7a2ecb65dae16a007eee38e6e472526db49a6565aaf09fa00506db39cf1caec0ca00df07484fce3a17ffed2", 0xf6}], 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x101, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0xfd3, 0x86}}, 0xe8) (async)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="41a042e643143c348d6b0fe5810e076027f4400ed30288bd418df073c37606172ee152c92f124a928b24268028408081c57c6dae0e353da0a9f1446cf7dd78d09741f32abb534a02a658eb5ed68e6c7f9bf3b458391f6f0790476008a21b0aaf923248deb46af85c31f16fbce49d3a1c2b71b68554b8ecadb7193c471a5bc077fb893be1773f0691cfc5141fe657428069f22a843aa0a39d9048314825824b1181d8bbff868937bb9ff728c3802f42fb861e67ffc39530a7b5ff9b7286082dfa4e353126f8c9b1334fbad7a2ecb65dae16a007eee38e6e472526db49a6565aaf09fa00506db39cf1caec0ca00df07484fce3a17ffed2", 0xf6}], 0x1) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) (async)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) (async)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (async)

15.979621767s ago: executing program 1 (id=410):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x8ad01, 0x0)
write(r1, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r2, &(0x7f00000001c0)="4a777c7a6599ae20f7dcc746ca08b558ada83338b837b16686dcca1e3fae27eeda5cf58c473bb52ff60f62971d3faf7d2b7ce6d3ed5a61df716e549454f1f83e4747c4d27f01654917fa0e8df5b4d2ecd34916312c9657a9abfa32badff126", 0x5f, 0x40891, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="944cf7d9", 0x4}], 0x1}, 0x20004054)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="0d0000baa000ec0f01c40f01b2f707fec20fb43dbad004b006ee0f01d10f072e0f01c4", 0x23}], 0x1, 0x8, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
accept(r6, 0x0, &(0x7f00000003c0))
migrate_pages(r7, 0x9, &(0x7f0000000440)=0x9, &(0x7f00000006c0)=0x7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c)
listen(r8, 0x2)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000640)=0x652, 0x4)
sendto$inet6(r9, &(0x7f0000000240)="c4", 0xfffffffffffffedf, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x2, 0x4a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x40, 0x8000, 0xfffffff6, 0x5}})
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000300)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000340)=0x14)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2)

15.790317997s ago: executing program 1 (id=411):
mkdir(&(0x7f00000000c0)='./file1\x00', 0x1c)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000))
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x8000200, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0x5, 0x200, 0x0, 0x400000002c, 0x80000005, 0x2})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80041)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x10, r5)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x1, 0x5002)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x1, 0x5001)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x1, 0x5004)
ptrace$getregset(0x4204, r5, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
ptrace$setregset(0x4205, r5, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8})

15.730592221s ago: executing program 1 (id=412):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', <r1=>0x0, 0x7800, 0x10, 0x8, 0x7ff, {{0x24, 0x4, 0x0, 0x1, 0x90, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xc0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x81}, {@rand_addr=0x64010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0x5c, 0x1, 0x1, [{@remote, 0x7}, {@private=0xa010102}, {@private=0xa010102, 0xfffff001}]}, @timestamp_addr={0x44, 0x44, 0x68, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x5}, {@private=0xa010102, 0x101}, {@local, 0x6}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@multicast2, 0x10}, {@remote, 0x4}, {@multicast2, 0x101}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r1, @ANYBLOB="8c1271cf239e1dfd7b0012800900010076657468000800000400028008001300", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x407ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@private2, <r3=>0x0}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x40, 0x80, 0xfffffffc, 0x2, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp={0x44, 0x1c, 0xe3, 0x0, 0x3, [0x4, 0xd, 0x5, 0xe, 0x6, 0x4]}]}}}}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x278, 0x278, 0x1e0, 0x1e0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'sit0\x00', 'wg2\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff000}, 0x28)
r6 = socket(0x15, 0x5, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r6], 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a)
ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f00000000c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x50, 0x0, [{}, {@remote}, {}, {@dev}, {@multicast2}]}})
getresuid(&(0x7f0000000300), &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000380))
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x4e24, 0xe, 0x4e21, 0x80, 0x2, 0xa0, 0xa0, 0x2e, r3, r10}, {0xffffffffffff9714, 0x9, 0xa56, 0x9, 0x9, 0x80, 0xfff, 0x8}, {0x5, 0x9, 0x3, 0x400}, 0xf212, 0x6e6bba, 0x2, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0xff}, 0x2, @in6=@empty, 0x3500, 0x2, 0x0, 0x7, 0x97, 0x1, 0x5}}, 0xe8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0xab}}, './file0\x00'})

15.429728129s ago: executing program 1 (id=413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000f7fa4c4bd7947e278700", @ANYRES32=r2, @ANYBLOB="0800a000ea08000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1380, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x44, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}}}})
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x400000}])

15.401126201s ago: executing program 33 (id=413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000f7fa4c4bd7947e278700", @ANYRES32=r2, @ANYBLOB="0800a000ea08000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1380, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x44, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}}}})
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x400000}])

2.818158548s ago: executing program 0 (id=580):
r0 = socket(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000005040)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/47, 0x2f}], 0x1, &(0x7f0000000380)=""/226, 0xe2}, 0x7}, {{&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/81, 0x51}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001700)=""/202, 0xca}, 0x7}, {{&(0x7f0000001800)=@nfc, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/243, 0xf3}, {&(0x7f0000001980)=""/106, 0x6a}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=""/183, 0xb7}, 0xffffffff}, {{&(0x7f0000001b00)=@caif=@rfm, 0x80, &(0x7f0000004e00)=[{&(0x7f0000001b80)=""/117, 0x75}, {&(0x7f0000001c00)}, {&(0x7f0000002c80)=""/137, 0x89}, {&(0x7f0000001c40)=""/28, 0x1c}, {&(0x7f0000004d80)=""/72, 0x48}], 0x5, &(0x7f0000004e80)=""/140, 0x8c}, 0xe}], 0x4, 0x40000020, &(0x7f0000005080)={r1, r2+60000000})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8140, 0x0)
preadv(r3, &(0x7f0000002d40)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1, 0x40, 0x9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f0000000040)={'erspan0\x00', 0x0})
preadv(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/173, 0xad}], 0x2, 0x4, 0x79d)

2.817809434s ago: executing program 2 (id=581):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

2.107658967s ago: executing program 2 (id=585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000130001002dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0060000083010000080029004101000014000300766c616e30000000000000000000000008002800798592"], 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30)
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0)
close(r1)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, 0x0)
r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000040)={<r7=>0x0, 0xfffffffc, 0x6ad, 0x0, 0x6, 0xfffd, 0x8001, 0x1e8c6634, {0x0, @in6={{0xa, 0x4e23, 0x3744, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd7}}, 0x6, 0xfffff508, 0x3, 0xc7, 0xef}}, &(0x7f0000000100)=0xb0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000380)={<r8=>r7, @in={{0x2, 0x4e22, @broadcast}}, 0x1, 0x3}, &(0x7f0000000200)=0x90)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}}}, 0x84)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000000))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c20000009500000000006e0857c7e12b706886ff3aeb0000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90)
ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f00000001c0)={0xfffffffb, 0x7c30, {}, {<r10=>0xee00}, 0x9})
quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000801, r10, &(0x7f0000000300)={0xe, 0x1, 0x8, 0x40, 0x7fff, 0x0, 0x3, 0x6, 0x1})
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000130001002dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0060000083010000080029004101000014000300766c616e30000000000000000000000008002800798592"], 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async)
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) (async)
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) (async)
close(r1) (async)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async)
mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, 0x0) (async)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xfffffffc, 0x6ad, 0x0, 0x6, 0xfffd, 0x8001, 0x1e8c6634, {0x0, @in6={{0xa, 0x4e23, 0x3744, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd7}}, 0x6, 0xfffff508, 0x3, 0xc7, 0xef}}, &(0x7f0000000100)=0xb0) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000380)={r7, @in={{0x2, 0x4e22, @broadcast}}, 0x1, 0x3}, &(0x7f0000000200)=0x90) (async)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}}}, 0x84) (async)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000000)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c20000009500000000006e0857c7e12b706886ff3aeb0000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f00000001c0)={0xfffffffb, 0x7c30, {}, {0xee00}, 0x9}) (async)
quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000801, r10, &(0x7f0000000300)={0xe, 0x1, 0x8, 0x40, 0x7fff, 0x0, 0x3, 0x6, 0x1}) (async)

1.98687442s ago: executing program 0 (id=591):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
llistxattr(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0)

1.918033251s ago: executing program 2 (id=592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_type(r0, &(0x7f0000000580), 0x9)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000802, &(0x7f0000000280)={[{@userxattr}, {@redirect_dir_follow}]})
mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8001}}]}, 0x28}}, 0x20040000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0x0, 0x2}, 0x18, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0)
umount2(&(0x7f00000001c0)='./file0/file1\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0), 0x20412, 0x0)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00')

1.917706084s ago: executing program 2 (id=593):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4})
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) (async)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)

1.779808476s ago: executing program 2 (id=594):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r3, 0x80015b12, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001400010000000000ffdbdf2508000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="de256467660f38811e260f79700ec64237f5c3440f20c066350d000000440f22c0d21ed16e0f0f0b1c260f47050f81000066b8dc6d00000f23c80f21f86635000050000f23f80fc73a0f21f8663504003000f20f20c5", 0x56}], 0x1, 0x34, 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x9f0000, 0x7d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa20934, 0x5, '\x00', @value64=0x2}})
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x4}})
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000440)={<r6=>0x0, 0xb, 0x80000001})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000840)={r6, 0xfffffffffffffff7, 0x1, [0x80, 0x1, 0x5, 0x401, 0xf6], [0x100000001, 0x5, 0x10, 0xffffffff, 0x5, 0x3, 0x1, 0xe, 0xfffffffffffffffd, 0x0, 0x0, 0x8000, 0x7, 0x2000000000000, 0x0, 0x5, 0x2, 0x1, 0x1ff, 0x7cea, 0xfffffffffffffffb, 0x2c3, 0x74980, 0x2, 0x4, 0xbb, 0x7fffffff, 0xfffffffffffffffb, 0x3, 0x80b0, 0x0, 0x7fffffffffffffff, 0x8000000000000001, 0x7f, 0x99, 0xb5e, 0x40000, 0x101, 0x8, 0x499, 0x1, 0xb, 0x5, 0x7, 0x400, 0x645e, 0x5, 0x8, 0x8, 0x6, 0x9, 0xe8, 0x7, 0x8000000000000001, 0x5, 0x6, 0xac, 0x7, 0x6, 0xd5df, 0x8001, 0x70, 0x200, 0x4, 0xfffffffffffffffd, 0x7, 0xc, 0x4, 0x4, 0x1, 0x3a86, 0x401, 0x23e, 0x0, 0x6, 0xfff, 0x9, 0xd7f0, 0xce5, 0xe9, 0x7, 0x734, 0x4, 0x9, 0x34, 0x4, 0x6, 0x10000, 0x3ff, 0x3, 0xffffffff80000001, 0xfffffffffffffff8, 0xbec, 0x3, 0x2c04, 0x0, 0x2, 0xf, 0x80, 0x1, 0x8, 0x1, 0x2, 0x8, 0x0, 0x1, 0x66, 0x65c02aef, 0x8001, 0xd488, 0xd3, 0x10000, 0x3, 0xffffffffffffe1b7, 0x8, 0x5, 0x9, 0xc1f, 0x800000000000, 0x7, 0x2]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.119749226s ago: executing program 4 (id=596):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x5732c2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x31c}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff})
io_uring_enter(r3, 0x7a91, 0x0, 0x0, 0x0, 0x18)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x44040001, 0x1})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000580)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8}, 0x1)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xf)

1.119563695s ago: executing program 0 (id=597):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x1, 0x3}, 0x10)
bind$tipc(r1, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x80, 0x0, 0x3c9, 0x3, 0x3e, 0x4, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x5, 0x3}, [{0x3, 0x5, 0x8, 0x10, 0x1, 0x31, 0x6, 0x146}]}, 0x78)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

1.038796935s ago: executing program 0 (id=598):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03f5ff00000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002"], 0x428}}, 0x40088)

980.098109ms ago: executing program 0 (id=599):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x3c}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x0, 0x80800)
timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0)
clock_adjtime(0x0, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x801, 0x0, 0x20000000000})
timerfd_settime(r3, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
rmdir(&(0x7f0000000000)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

979.814121ms ago: executing program 4 (id=600):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x2)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

802.871915ms ago: executing program 4 (id=602):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
sendto$inet6(r3, 0x0, 0xffffffffffffff9c, 0x80, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in=@initdev}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

639.367783ms ago: executing program 5 (id=604):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
mq_open(&(0x7f0000000300)='queue1\x00', 0x40, 0x8, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, 0x0, &(0x7f0000001b00))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRES16=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id', @ANYBLOB])

510.482788ms ago: executing program 4 (id=605):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)

509.964809ms ago: executing program 4 (id=606):
read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, <r0=>0x0, <r1=>0x0}, 0x2020)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$setlease(r3, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = getpid()
fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5})
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=<r6=>0x0)
fcntl$setown(r3, 0x8, r6)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, r0, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r1}}}, 0x78)

373.744783ms ago: executing program 5 (id=607):
syz_emit_ethernet(0x8a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000ec8f780000080a00000000fffffffefe55e2d4c3d922080803000000d113122b74a1678fadf674cece5030bac9e9ffdd8e00"/65], 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000ec8f780000080a00000000fffffffefe55e2d4c3d922080803000000d113122b74a1678fadf674cece5030bac9e9ffdd8e00"/65], 0x0) (async)

300.58551ms ago: executing program 4 (id=608):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x6c}}, 0x20000000)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x48, 0x800000, 0x8, 0x9, 0x5})
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0x1, 0x4)

299.119672ms ago: executing program 5 (id=609):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x4000, 0x0, 0x6}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2})
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x7fffffffffffffff, 0x0, 0x10003, 0x9, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0xc, 0x89, 0xfffffffffffffffa, 0xa, 0x8d], 0x100000, 0x2c8046})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

120.550111ms ago: executing program 0 (id=610):
r0 = socket(0x21, 0x2, 0xa)
r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r6, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040040}, 0x810)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
close_range(r0, r1, 0x0)

70.499969ms ago: executing program 5 (id=611):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xa, 0x3, 0x50e1}, &(0x7f0000000400)=0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000500), r5)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r9 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x100012, 0x4, @tid=r9}, &(0x7f0000000380)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
r11 = gettid()
tkill(r11, 0x16)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0)

70.201873ms ago: executing program 2 (id=612):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r0=>0x0, 0x7, 0x1, 0xeb82, 0x6, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x67, 0x0, 0x8, 0x4, 0x0, @broadcast, @multicast2, {[@generic={0x94, 0xc, "19af9d7cccef515986c6"}, @ssrr={0x89, 0x7, 0xc1, [@remote]}, @generic={0x83, 0xa, "be32254a21eddeb0"}, @noop, @lsrr={0x83, 0x13, 0xa9, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0xf7, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010101]}]}}}}})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050003"], 0x28}}, 0x80)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000840)=""/4096, 0x1000, <r6=>0x0, &(0x7f0000001840)=""/4096, 0x1000}}, 0x10)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x29a301, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r8, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r9, 0x0, '\x00', 0x0, r8, 0x0, 0x5}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x7, 0x4, 0x9, 0x4881, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
r11 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r11, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000)
r12 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0})
prlimit64(0x0, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd39}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x4d, &(0x7f0000000140)=""/77, 0x41000, 0x60, '\x00', r0, @fallback=0xd, r5, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xb}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000000440)=[r7, r9, r10, r11, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x4, 0x4, 0x9, 0xb}, {0x0, 0x1, 0x3, 0x5}, {0x4, 0x4, 0x6, 0x6}, {0x4, 0x4, 0x4, 0x2}, {0x4, 0x1, 0x1, 0xa}, {0x4, 0x2, 0xb, 0x3}, {0x2, 0x2, 0x10, 0xa}], 0x10, 0x1}, 0x94)

134.895µs ago: executing program 5 (id=613):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000040000004fcff0700040500000100000004004880180001801400108010000f800c001e8008004d00c6", @ANYRES32=r3, @ANYBLOB="0c0002000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

0s ago: executing program 5 (id=614):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
r1 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x600)
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x346, 0x3, 0x5)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

kernel console output (not intermixed with test programs):

ounton } for  pid=5900 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   47.954551][   T40] audit: type=1400 audit(1773745286.548:66): avc:  denied  { mount } for  pid=5900 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   47.956505][ T5900] cgroup: Unknown subsys name 'net'
[   48.092903][ T5900] cgroup: Unknown subsys name 'cpuset'
[   48.097007][ T5900] cgroup: Unknown subsys name 'rlimit'
[   48.286224][ T5914] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   49.005254][ T5900] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.240395][   T40] kauditd_printk_skb: 15 callbacks suppressed
[   52.240406][   T40] audit: type=1400 audit(1773745290.838:82): avc:  denied  { execmem } for  pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   52.386165][   T40] audit: type=1400 audit(1773745290.978:83): avc:  denied  { create } for  pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.393559][   T40] audit: type=1400 audit(1773745290.978:84): avc:  denied  { create } for  pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.401520][   T40] audit: type=1400 audit(1773745290.978:85): avc:  denied  { read write } for  pid=5927 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.409297][   T40] audit: type=1400 audit(1773745290.978:86): avc:  denied  { read write } for  pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.416845][   T40] audit: type=1400 audit(1773745290.978:87): avc:  denied  { read write } for  pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.424376][   T40] audit: type=1400 audit(1773745290.978:88): avc:  denied  { open } for  pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.431939][   T40] audit: type=1400 audit(1773745290.978:89): avc:  denied  { open } for  pid=5927 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.439317][   T40] audit: type=1400 audit(1773745290.988:90): avc:  denied  { ioctl } for  pid=5928 comm="syz-executor" path="socket:[2799]" dev="sockfs" ino=2799 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.444666][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.445328][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.446085][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.447169][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.450516][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   52.454420][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.454983][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.455328][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.455920][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.456478][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   52.457036][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   52.457464][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   52.457963][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   52.459408][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.472266][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.474435][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.475835][   T40] audit: type=1400 audit(1773745291.068:91): avc:  denied  { read } for  pid=5935 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.478744][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.487988][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.506825][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.510281][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.793036][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   52.821381][ T5926] chnl_net:caif_netlink_parms(): no params data found
[   52.868260][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   52.963898][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.967345][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.970297][ T5926] bridge_slave_0: entered allmulticast mode
[   52.973871][ T5926] bridge_slave_0: entered promiscuous mode
[   52.983693][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.985986][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.988641][ T5935] bridge_slave_0: entered allmulticast mode
[   52.991278][ T5935] bridge_slave_0: entered promiscuous mode
[   52.995353][ T5927] chnl_net:caif_netlink_parms(): no params data found
[   53.000632][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.002729][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.004845][ T5935] bridge_slave_1: entered allmulticast mode
[   53.007388][ T5935] bridge_slave_1: entered promiscuous mode
[   53.015375][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.017889][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.020231][ T5926] bridge_slave_1: entered allmulticast mode
[   53.022986][ T5926] bridge_slave_1: entered promiscuous mode
[   53.054605][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.079061][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.083921][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.119253][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.123754][ T5926] team0: Port device team_slave_0 added
[   53.127478][ T5926] team0: Port device team_slave_1 added
[   53.200366][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.203293][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.206265][ T5928] bridge_slave_0: entered allmulticast mode
[   53.210051][ T5928] bridge_slave_0: entered promiscuous mode
[   53.214845][ T5935] team0: Port device team_slave_0 added
[   53.217250][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.219888][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.229820][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.243522][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.246684][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.250192][ T5927] bridge_slave_0: entered allmulticast mode
[   53.254130][ T5927] bridge_slave_0: entered promiscuous mode
[   53.258127][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.261238][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.264413][ T5928] bridge_slave_1: entered allmulticast mode
[   53.268786][ T5928] bridge_slave_1: entered promiscuous mode
[   53.281224][ T5935] team0: Port device team_slave_1 added
[   53.283323][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.285610][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.294765][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.302313][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.305336][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.308441][ T5927] bridge_slave_1: entered allmulticast mode
[   53.312259][ T5927] bridge_slave_1: entered promiscuous mode
[   53.338869][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.350873][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.376982][ T5928] team0: Port device team_slave_0 added
[   53.390347][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.393010][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.401599][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.407684][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.412374][ T5928] team0: Port device team_slave_1 added
[   53.430740][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.433331][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.443507][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.449809][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.467195][ T5926] hsr_slave_0: entered promiscuous mode
[   53.469527][ T5926] hsr_slave_1: entered promiscuous mode
[   53.500515][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.502914][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.511943][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.529015][ T5927] team0: Port device team_slave_0 added
[   53.531642][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.533986][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.542285][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.562463][ T5927] team0: Port device team_slave_1 added
[   53.600159][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.603179][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.615805][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.627120][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.630220][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.641010][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.650788][ T5935] hsr_slave_0: entered promiscuous mode
[   53.653971][ T5935] hsr_slave_1: entered promiscuous mode
[   53.656573][ T5935] debugfs: 'hsr0' already exists in 'hsr'
[   53.659493][ T5935] Cannot create hsr debugfs directory
[   53.705306][ T5928] hsr_slave_0: entered promiscuous mode
[   53.710056][ T5928] hsr_slave_1: entered promiscuous mode
[   53.713036][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[   53.715583][ T5928] Cannot create hsr debugfs directory
[   53.833039][ T5927] hsr_slave_0: entered promiscuous mode
[   53.836104][ T5927] hsr_slave_1: entered promiscuous mode
[   53.839144][ T5927] debugfs: 'hsr0' already exists in 'hsr'
[   53.841460][ T5927] Cannot create hsr debugfs directory
[   54.023188][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.037309][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.053848][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.074572][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.141288][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.147417][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.154370][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.171017][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.219878][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.227237][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.234487][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.245779][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.300608][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.305093][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.310322][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.314573][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.326236][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.367440][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[   54.373764][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.388712][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.391909][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.404199][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.406515][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.421358][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   54.435410][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.438586][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.448636][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.451031][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.455246][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.478662][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   54.498010][ T5942] Bluetooth: hci3: command tx timeout
[   54.499100][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.502192][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.511257][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.513585][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.523343][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.555388][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[   54.566768][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.569924][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.578925][ T5942] Bluetooth: hci0: command tx timeout
[   54.581506][ T5942] Bluetooth: hci2: command tx timeout
[   54.583935][ T5942] Bluetooth: hci1: command tx timeout
[   54.584972][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.589273][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.660902][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.694559][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.719830][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.729616][ T5935] veth0_vlan: entered promiscuous mode
[   54.744327][ T5935] veth1_vlan: entered promiscuous mode
[   54.768735][ T5926] veth0_vlan: entered promiscuous mode
[   54.774827][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.790996][ T5926] veth1_vlan: entered promiscuous mode
[   54.794906][ T5928] veth0_vlan: entered promiscuous mode
[   54.801693][ T5928] veth1_vlan: entered promiscuous mode
[   54.810646][ T5935] veth0_macvtap: entered promiscuous mode
[   54.818952][ T5935] veth1_macvtap: entered promiscuous mode
[   54.840579][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.850863][ T5926] veth0_macvtap: entered promiscuous mode
[   54.858405][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.866489][ T5926] veth1_macvtap: entered promiscuous mode
[   54.877168][   T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.884184][ T5927] veth0_vlan: entered promiscuous mode
[   54.887140][ T5928] veth0_macvtap: entered promiscuous mode
[   54.896365][ T5928] veth1_macvtap: entered promiscuous mode
[   54.899965][   T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.902926][   T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.910485][   T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.919296][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.923995][ T5927] veth1_vlan: entered promiscuous mode
[   54.932460][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.949803][   T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.952592][   T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.959606][   T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.962639][   T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.970392][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.993547][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.006797][  T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.012191][  T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.016050][   T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.035699][   T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.039407][   T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.046957][ T5927] veth0_macvtap: entered promiscuous mode
[   55.053861][   T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.062151][ T5927] veth1_macvtap: entered promiscuous mode
[   55.079554][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.086344][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.098102][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.105675][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.124308][   T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.128965][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.131371][  T118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.131957][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.146958][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.152529][   T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.155403][   T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.170163][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.172716][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.180426][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.183101][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.235371][  T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.239579][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.242140][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.243044][  T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.274442][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.277443][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.326670][ T6020] netlink: 'syz.3.5': attribute type 1 has an invalid length.
[   55.432907][ T6032] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   55.435725][ T6033] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   55.438700][ T6033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7'.
[   55.452621][ T6032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7'.
[   55.664158][ T6055] netlink: 880 bytes leftover after parsing attributes in process `syz.1.11'.
[   55.709901][ T6061] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0
[   55.768618][ T6069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.880755][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'.
[   55.884559][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'.
[   55.892019][ T6084] Option '�_n'�tr�1ZQ�3���-ֵ��k�X�v~�' to dns_resolver key: bad/missing value
[   55.941157][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'.
[   55.948444][ T6093] syz.1.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   55.954154][ T6089] Zero length message leads to an empty skb
[   55.955189][ T6080] trusted_key: encrypted_key: insufficient parameters specified
[   55.958415][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'.
[   55.962337][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.224554][ T6100] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.285920][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.497342][ T6117] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   56.555248][ T6119] kvm: kvm [6118]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   56.559197][ T6119] kvm: kvm [6118]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   56.567855][ T5933] Bluetooth: hci3: command tx timeout
[   56.631809][ T6119] kvm: kvm [6118]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xf6600
[   56.635202][ T6119] kvm: kvm [6118]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xf6600
[   56.657740][ T5933] Bluetooth: hci1: command tx timeout
[   56.657778][ T5942] Bluetooth: hci2: command tx timeout
[   56.658571][   T63] Bluetooth: hci0: command tx timeout
[   57.455159][ T6140] netlink: 872 bytes leftover after parsing attributes in process `syz.2.38'.
[   57.502126][ T6143] 9pnet_virtio: no channels available for device syz
[   57.507493][   T40] kauditd_printk_skb: 124 callbacks suppressed
[   57.507503][   T40] audit: type=1400 audit(1773745296.098:216): avc:  denied  { setopt } for  pid=6141 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.516588][   T40] audit: type=1400 audit(1773745296.108:217): avc:  denied  { add_name } for  pid=6141 comm="syz.2.39" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.533020][   T40] audit: type=1400 audit(1773745296.108:218): avc:  denied  { create } for  pid=6141 comm="syz.2.39" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   57.546512][   T40] audit: type=1400 audit(1773745296.108:219): avc:  denied  { associate } for  pid=6141 comm="syz.2.39" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   57.562224][   T40] audit: type=1400 audit(1773745296.118:220): avc:  denied  { create } for  pid=6141 comm="syz.2.39" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.569576][   T40] audit: type=1400 audit(1773745296.118:221): avc:  denied  { read append open } for  pid=6141 comm="syz.2.39" path="/12/file0/cpuset.effective_cpus" dev="9p" ino=72351977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.577925][   T40] audit: type=1400 audit(1773745296.128:222): avc:  denied  { write } for  pid=6141 comm="syz.2.39" name="cpuset.effective_cpus" dev="9p" ino=72351977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.585572][   T40] audit: type=1400 audit(1773745296.148:223): avc:  denied  { unmount } for  pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   57.615001][   T40] audit: type=1400 audit(1773745296.208:224): avc:  denied  { create } for  pid=6144 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.621411][   T40] audit: type=1400 audit(1773745296.218:225): avc:  denied  { bind } for  pid=6144 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.817151][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'.
[   57.822228][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6159 comm=syz.1.45
[   58.201545][ T6133] Set syz1 is full, maxelem 65536 reached
[   58.227717][ T5986] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   58.250237][ T6167] netlink: 872 bytes leftover after parsing attributes in process `syz.3.48'.
[   58.387705][ T5986] usb 6-1: Using ep0 maxpacket: 16
[   58.391318][ T5986] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   58.395071][ T5986] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   58.401305][ T5986] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[   58.405880][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0
[   58.409912][ T5986] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   58.413032][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.415649][ T5986] usb 6-1: Product: syz
[   58.417034][ T5986] usb 6-1: Manufacturer: syz
[   58.427683][ T5986] usb 6-1: SerialNumber: syz
[   58.431251][ T5986] usb 6-1: config 0 descriptor??
[   58.527290][ T6178] orangefs_devreq_open: device cannot be opened in blocking mode
[   58.563570][ T6185] capability: warning: `syz.3.55' uses 32-bit capabilities (legacy support in use)
[   58.643944][ T5986] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5
[   58.648220][ T5942] Bluetooth: hci3: command tx timeout
[   58.651775][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.655792][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.660716][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.667934][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.688148][ T6193] dlm: no locking on control device
[   58.690999][ T6193] tmpfs: Unknown parameter 'fd'
[   58.692767][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.697905][ T5937] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.708843][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.716336][ T5323] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.729044][ T5942] Bluetooth: hci2: command tx timeout
[   58.729077][ T5933] Bluetooth: hci0: command tx timeout
[   58.730931][ T5942] Bluetooth: hci1: command tx timeout
[   58.897916][ T6165] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.990809][ T1172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.067223][ T1172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.124998][ T1172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.135282][   T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.139025][   T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.142380][   T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.145607][   T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.149192][   T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.190933][ T1172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.244585][ T6176] orangefs_mount: mount request failed with -4
[   59.264140][ T6198] chnl_net:caif_netlink_parms(): no params data found
[   59.287877][ T6205] fuse: Bad value for 'user_id'
[   59.289499][ T6205] fuse: Bad value for 'user_id'
[   59.290183][ T6204] fuse: Bad value for 'user_id'
[   59.293184][ T6204] fuse: Bad value for 'user_id'
[   59.383701][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.386179][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.389104][ T6198] bridge_slave_0: entered allmulticast mode
[   59.392368][ T6198] bridge_slave_0: entered promiscuous mode
[   59.396232][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.399043][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.401562][ T6198] bridge_slave_1: entered allmulticast mode
[   59.409017][ T6198] bridge_slave_1: entered promiscuous mode
[   59.410869][ T6214] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure
[   59.440695][ T1172] bridge_slave_1: left allmulticast mode
[   59.443345][ T1172] bridge_slave_1: left promiscuous mode
[   59.447284][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.456816][ T1172] bridge_slave_0: left allmulticast mode
[   59.459785][ T1172] bridge_slave_0: left promiscuous mode
[   59.461676][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.607315][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.612267][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.616278][ T1172] bond0 (unregistering): Released all slaves
[   59.657362][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.665550][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.683442][ T6198] team0: Port device team_slave_0 added
[   59.686822][ T6198] team0: Port device team_slave_1 added
[   59.721254][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.724160][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.735204][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.749935][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.753007][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.763922][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.815089][ T6198] hsr_slave_0: entered promiscuous mode
[   59.817391][ T6198] hsr_slave_1: entered promiscuous mode
[   59.822631][ T6198] debugfs: 'hsr0' already exists in 'hsr'
[   59.824551][ T6198] Cannot create hsr debugfs directory
[   59.944342][ T1172] hsr_slave_0: left promiscuous mode
[   59.951954][ T1172] hsr_slave_1: left promiscuous mode
[   59.955112][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.961587][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.966351][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.969987][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.984151][ T1172] veth1_macvtap: left promiscuous mode
[   59.986660][ T1172] veth0_macvtap: left promiscuous mode
[   59.989437][ T1172] veth1_vlan: left promiscuous mode
[   59.991708][ T1172] veth0_vlan: left promiscuous mode
[   60.116223][ T1172] team0 (unregistering): Port device team_slave_1 removed
[   60.123431][ T1172] team0 (unregistering): Port device team_slave_0 removed
[   60.177695][   T54] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[   60.256022][ T6198] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   60.271749][ T6198] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   60.284494][ T6198] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   60.291019][ T6198] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   60.329278][   T54] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[   60.333406][   T54] usb 7-1: config 0 has no interface number 0
[   60.333415][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.336189][   T54] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   60.345122][   T54] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   60.347927][ T6198] 8021q: adding VLAN 0 to HW filter on device team0
[   60.348826][   T54] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   60.353980][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.354333][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.356426][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.360820][   T54] usb 7-1: config 0 descriptor??
[   60.364086][ T6243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   60.371132][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.371988][   T54] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   60.373346][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.515357][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.517704][ T1467] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   60.572648][    C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[   60.579212][ T5931] usb 7-1: USB disconnect, device number 2
[   60.667990][ T1467] usb 5-1: Using ep0 maxpacket: 32
[   60.671157][ T1467] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[   60.673986][ T1467] usb 5-1: config 0 has no interface number 0
[   60.676238][ T1467] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   60.680615][ T1467] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[   60.684620][ T1467] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 35355, setting to 1024
[   60.686062][ T6198] veth0_vlan: entered promiscuous mode
[   60.690056][ T1467] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[   60.696634][ T1467] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   60.705705][ T1467] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[   60.706765][ T6198] veth1_vlan: entered promiscuous mode
[   60.716246][ T1467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.721465][ T1467] usb 5-1: Product: syz
[   60.723583][ T1467] usb 5-1: Manufacturer: syz
[   60.731693][ T1467] usb 5-1: SerialNumber: syz
[   60.732881][ T6198] veth0_macvtap: entered promiscuous mode
[   60.737880][ T1467] usb 5-1: config 0 descriptor??
[   60.740935][ T6248] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   60.743206][ T6198] veth1_macvtap: entered promiscuous mode
[   60.749243][ T1467] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input6
[   60.755611][ T5323] usb 5-1: BOGUS urb xfer, pipe 1 != type 3
[   60.760255][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.774180][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.782992][   T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.785906][   T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.793957][   T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.796892][   T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.808057][ T5942] Bluetooth: hci0: command tx timeout
[   60.810164][ T5933] Bluetooth: hci1: command tx timeout
[   60.811973][   T63] Bluetooth: hci2: command tx timeout
[   60.846692][  T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.856549][  T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.871304][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.874375][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.937676][   T54] usb 6-1: USB disconnect, device number 2
[   60.956490][ T5931] usb 5-1: USB disconnect, device number 2
[   60.961101][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   61.207122][ T6309] __nla_validate_parse: 7 callbacks suppressed
[   61.207139][ T6309] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.82'.
[   61.210201][ T5942] Bluetooth: hci3: command tx timeout
[   61.368002][ T5931] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   61.537914][ T5931] usb 7-1: Using ep0 maxpacket: 8
[   61.543230][ T5931] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   61.545815][ T5931] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   61.548905][ T5931] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   61.550164][ T6329] mmap: syz.4.90 (6329) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   61.552068][ T5931] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   61.552081][ T5931] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   61.552102][ T5931] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   61.552114][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.662409][ T6335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   61.696274][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'.
[   61.756649][ T5931] usb 7-1: usb_control_msg returned -32
[   61.757228][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'.
[   61.758916][ T5931] usbtmc 7-1:16.0: can't read capabilities
[   61.760130][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'.
[   61.780165][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.784076][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.801685][ T4180] usb 7-1: USB disconnect, device number 3
[   61.903825][ T6358] Bluetooth: MGMT ver 1.23
[   61.922327][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'.
[   61.927055][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[   61.941468][ T6356] loop4: detected capacity change from 0 to 524287936
[   61.990783][ T6369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   61.993260][ T6369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   61.996690][ T6369] vhci_hcd vhci_hcd.0: Device attached
[   62.026050][ T6370] vhci_hcd: connection closed
[   62.038367][ T1152] vhci_hcd vhci_hcd.0: stop threads
[   62.043768][ T1152] vhci_hcd vhci_hcd.0: release socket
[   62.045631][ T1152] vhci_hcd vhci_hcd.0: disconnect device
[   62.403217][ T6404] netlink: 144 bytes leftover after parsing attributes in process `syz.4.112'.
[   62.410210][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.112'.
[   62.415179][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.718958][   T40] kauditd_printk_skb: 79 callbacks suppressed
[   62.718968][   T40] audit: type=1400 audit(1773745301.318:305): avc:  denied  { connect } for  pid=6428 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   62.725915][ T6430] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x0)
[   62.763775][ T6434] netlink: 'syz.0.122': attribute type 39 has an invalid length.
[   62.796225][   T40] audit: type=1400 audit(1773745301.388:306): avc:  denied  { allowed } for  pid=6422 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   63.038278][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'.
[   63.129711][   T40] audit: type=1400 audit(1773745301.728:307): avc:  denied  { read write } for  pid=6448 comm="syz.2.126" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   63.139531][   T40] audit: type=1400 audit(1773745301.728:308): avc:  denied  { open } for  pid=6448 comm="syz.2.126" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   63.149212][   T40] audit: type=1400 audit(1773745301.728:309): avc:  denied  { ioctl } for  pid=6448 comm="syz.2.126" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   63.162577][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'.
[   63.287853][ T5942] Bluetooth: hci3: command tx timeout
[   63.291003][   T40] audit: type=1400 audit(1773745301.888:310): avc:  denied  { read } for  pid=6456 comm="syz.2.128" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   63.305170][   T40] audit: type=1400 audit(1773745301.898:311): avc:  denied  { open } for  pid=6456 comm="syz.2.128" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   63.325779][   T40] audit: type=1400 audit(1773745301.908:312): avc:  denied  { getopt } for  pid=6456 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   63.341788][   T40] audit: type=1400 audit(1773745301.938:313): avc:  denied  { write } for  pid=6460 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   63.348280][   T40] audit: type=1400 audit(1773745301.938:314): avc:  denied  { ioctl } for  pid=6460 comm="syz.2.129" path="socket:[11205]" dev="sockfs" ino=11205 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   63.570813][ T6478] syzkaller0: entered promiscuous mode
[   63.572771][ T6478] syzkaller0: entered allmulticast mode
[   63.578694][ T6482] input: syz0 as /devices/virtual/input/input7
[   63.584279][ T6480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.606264][ T6478] hsr_slave_1 (unregistering): left promiscuous mode
[   63.614374][ T6481] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   65.369661][ T5942] Bluetooth: hci3: command tx timeout
[   67.447887][ T5942] Bluetooth: hci3: command tx timeout
[   75.181271][   T40] kauditd_printk_skb: 16 callbacks suppressed
[   75.181288][   T40] audit: type=1400 audit(1773745313.778:331): avc:  denied  { ioctl } for  pid=6524 comm="syz.0.139" path="socket:[14411]" dev="sockfs" ino=14411 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   75.186724][ T6533] __nla_validate_parse: 2 callbacks suppressed
[   75.186738][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'.
[   75.214570][   T40] audit: type=1400 audit(1773745313.778:332): avc:  denied  { nlmsg_write } for  pid=6527 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   75.227671][ T6533] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   75.270567][ T6540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.341056][   T40] audit: type=1400 audit(1773745313.938:333): avc:  denied  { connect } for  pid=6542 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   75.443802][   T40] audit: type=1400 audit(1773745314.038:334): avc:  denied  { ioctl } for  pid=6550 comm="syz.2.147" path="socket:[13527]" dev="sockfs" ino=13527 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   75.448917][ T6551] syz.2.147 uses old SIOCAX25GETINFO
[   75.503636][ T6547] blktrace: Concurrent blktraces are not allowed on sg0
[   75.707777][   T40] audit: type=1400 audit(1773745314.298:335): avc:  denied  { ioctl } for  pid=6555 comm="syz.1.149" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   75.709457][ T6556] binder: 6555:6556 ioctl c0306201 0 returned -14
[   75.718755][   T40] audit: type=1400 audit(1773745314.298:336): avc:  denied  { set_context_mgr } for  pid=6555 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   75.724663][ T6556] binder: BINDER_SET_CONTEXT_MGR already set
[   75.729461][   T40] audit: type=1400 audit(1773745314.308:337): avc:  denied  { map } for  pid=6555 comm="syz.1.149" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   75.732069][ T6556] binder: 6555:6556 ioctl 4018620d 2000000000c0 returned -16
[   75.747863][   T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   75.899325][   T54] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[   75.902616][   T54] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   75.906473][   T54] usb 7-1: config 0 interface 0 has no altsetting 0
[   75.912181][   T54] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   75.916923][   T54] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   75.920895][   T54] usb 7-1: Product: syz
[   75.922648][   T54] usb 7-1: Manufacturer: syz
[   75.924639][   T54] usb 7-1: SerialNumber: syz
[   75.930694][   T54] usb 7-1: config 0 descriptor??
[   75.934824][   T54] hub 7-1:0.0: bad descriptor, ignoring hub
[   75.937419][   T54] hub 7-1:0.0: probe with driver hub failed with error -5
[   75.942359][   T54] usb 7-1: selecting invalid altsetting 0
[   76.101857][   T40] audit: type=1400 audit(1773745314.698:338): avc:  denied  { create } for  pid=6573 comm="syz.1.153" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   76.117705][   T40] audit: type=1400 audit(1773745314.698:339): avc:  denied  { map } for  pid=6573 comm="syz.1.153" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   76.128184][   T40] audit: type=1400 audit(1773745314.698:340): avc:  denied  { read write } for  pid=6573 comm="syz.1.153" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   76.250249][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[   76.252616][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[   76.318400][ T6553] usb 7-1: reset high-speed USB device number 4 using dummy_hcd
[   76.357749][   T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   76.405555][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.408735][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.411830][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.414482][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.417044][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.419830][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.422545][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.425110][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.428503][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.430994][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.433629][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.436130][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.438916][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.441487][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.444122][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.446627][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.449237][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.451708][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.454339][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.456839][ T6582] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present
[   76.481958][ T6587] binder: BC_ATTEMPT_ACQUIRE not supported
[   76.483872][ T6587] binder: 6586:6587 ioctl c0306201 2000000003c0 returned -22
[   76.507852][   T39] usb 6-1: Using ep0 maxpacket: 8
[   76.512766][   T39] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.516746][   T39] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.521295][   T39] usb 6-1: config 0 interface 0 has no altsetting 0
[   76.532727][   T39] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   76.535644][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.552492][   T39] usb 6-1: config 0 descriptor??
[   76.669320][ T6553] usb 7-1: device not accepting address 4, error -71
[   77.007784][ T6553] usb 7-1: reset high-speed USB device number 4 using dummy_hcd
[   77.057760][  T830] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   77.209343][  T830] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[   77.212057][  T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.216448][  T830] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   77.219480][  T830] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   77.222060][  T830] usb 5-1: Manufacturer: syz
[   77.224962][  T830] usb 5-1: config 0 descriptor??
[   77.267728][  T830] rc_core: IR keymap rc-hauppauge not found
[   77.269723][  T830] Registered IR keymap rc-empty
[   77.272124][  T830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[   77.276262][  T830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8
[   77.347733][ T6553] usb 7-1: device descriptor read/64, error -71
[   77.434068][ T4180] usb 5-1: USB disconnect, device number 3
[   77.967532][ T6617] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   78.020897][ T6618] ipt_ECN: cannot use operation on non-tcp rule
[   78.239327][   T54] usb 7-1: USB disconnect, device number 4
[   78.387677][ T4180] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   78.490864][ T6627] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   78.494139][ T6627] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[   78.497712][ T6627] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   78.501570][ T6627] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[   78.605010][ T6637] tmpfs: Unknown parameter 'mp'
[   78.751800][ T6649] rtc_cmos 00:05: Alarms can be up to one day in the future
[   78.913637][ T6660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[   78.916619][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   78.921525][ T6660] vhci_hcd vhci_hcd.0: Device attached
[   78.925334][ T6661] vhci_hcd: connection closed
[   78.926109][ T1172] vhci_hcd vhci_hcd.0: stop threads
[   78.930018][ T1172] vhci_hcd vhci_hcd.0: release socket
[   78.932525][ T1172] vhci_hcd vhci_hcd.0: disconnect device
[   79.076553][ T5986] rtc_cmos 00:05: Alarms can be up to one day in the future
[   79.081935][ T5986] rtc_cmos 00:05: Alarms can be up to one day in the future
[   79.085941][ T5986] rtc_cmos 00:05: Alarms can be up to one day in the future
[   79.090029][ T5986] rtc_cmos 00:05: Alarms can be up to one day in the future
[   79.092634][ T5986] rtc rtc0: __rtc_set_alarm: err=-22
[   79.116639][   T39] usbhid 6-1:0.0: can't add hid device: -71
[   79.118799][   T39] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   79.125958][   T39] usb 6-1: USB disconnect, device number 3
[   79.239302][ T6666] overlay: filesystem on ./bus not supported as upperdir
[   79.291363][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'.
[   79.307404][ T6675] program syz.1.182 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.341118][ T6677] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in;
[   79.341118][ T6677]    program syz.1.183 not setting count and/or reply_len properly
[   79.512592][ T6696] random: crng reseeded on system resumption
[   79.519615][ T6696] netlink: 100 bytes leftover after parsing attributes in process `syz.1.185'.
[   79.522937][ T6696] netlink: 80 bytes leftover after parsing attributes in process `syz.1.185'.
[   79.555481][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'.
[   79.762408][ T6726] 
[   79.763635][ T6726] ata1.00: invalid cdb length 6
[   79.817709][    T9] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[   79.848829][   T54] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   79.904451][ T6736] syzkaller0: entered promiscuous mode
[   79.907003][ T6736] syzkaller0: entered allmulticast mode
[   79.969164][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.973052][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[   79.976409][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8
[   79.980860][    T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   79.984592][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.999220][ T6718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   79.999326][   T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.005219][    T9] hub 9-1:1.0: bad descriptor, ignoring hub
[   80.006179][   T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.010189][    T9] hub 9-1:1.0: probe with driver hub failed with error -5
[   80.015228][    T9] cdc_wdm 9-1:1.0: skipping garbage
[   80.016228][   T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.018198][    T9] cdc_wdm 9-1:1.0: skipping garbage
[   80.021740][   T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.027052][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.033468][    T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[   80.035504][   T54] usb 7-1: config 0 descriptor??
[   80.035893][    T9] cdc_wdm 9-1:1.0: Unknown control protocol
[   80.206476][   T40] kauditd_printk_skb: 20 callbacks suppressed
[   80.206487][   T40] audit: type=1400 audit(1773745318.798:361): avc:  denied  { read write } for  pid=6717 comm="syz.4.194" name="cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   80.216795][   T40] audit: type=1400 audit(1773745318.808:362): avc:  denied  { open } for  pid=6717 comm="syz.4.194" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   80.704916][   T40] audit: type=1400 audit(1773745319.298:363): avc:  denied  { mounton } for  pid=6722 comm="syz.2.196" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   80.778104][ T6718] usb 9-1: reset low-speed USB device number 2 using dummy_hcd
[   80.976445][   T40] audit: type=1400 audit(1773745319.568:364): avc:  denied  { read } for  pid=6749 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.087755][   T39] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   81.100675][ T6737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   81.106119][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[   81.109124][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[   81.112381][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[   81.115285][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[   81.118000][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[   81.120633][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[   81.123283][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[   81.124674][   T54] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   81.248892][   T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.252195][   T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[   81.255054][   T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8
[   81.258610][   T39] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   81.261906][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.266437][ T6746] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   81.271473][   T39] hub 6-1:1.0: bad descriptor, ignoring hub
[   81.273428][   T39] hub 6-1:1.0: probe with driver hub failed with error -5
[   81.275901][   T39] cdc_wdm 6-1:1.0: skipping garbage
[   81.277693][   T39] cdc_wdm 6-1:1.0: skipping garbage
[   81.280299][   T39] cdc_wdm 6-1:1.0: cdc-wdm2: USB WDM device
[   81.282302][   T39] cdc_wdm 6-1:1.0: Unknown control protocol
[   81.344134][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.347396][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.469066][   T50] usb 9-1: USB disconnect, device number 2
[   81.513888][ T6759] btrfs: Unknown parameter 'ba���'
[   81.518344][   T40] audit: type=1400 audit(1773745320.118:365): avc:  denied  { create } for  pid=6758 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   81.526398][   T40] audit: type=1400 audit(1773745320.118:366): avc:  denied  { sys_admin } for  pid=6758 comm="syz.4.207" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   81.578171][ T1467] usb 6-1: USB disconnect, device number 4
[   81.611084][   T40] audit: type=1400 audit(1773745320.208:367): avc:  denied  { ioctl } for  pid=6764 comm="syz.0.210" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13774 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   81.611303][ T6765] xt_l2tp: v2 doesn't support IP mode
[   81.668120][   T40] audit: type=1400 audit(1773745320.268:368): avc:  denied  { create } for  pid=6766 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   81.677584][   T40] audit: type=1400 audit(1773745320.268:369): avc:  denied  { ioctl } for  pid=6766 comm="syz.0.211" path="socket:[16502]" dev="sockfs" ino=16502 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   81.680231][ T6769] ceph: Path missing in source
[   81.686779][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   81.690471][   T40] audit: type=1400 audit(1773745320.278:370): avc:  denied  { bind } for  pid=6766 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   81.699125][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'.
[   81.710594][ T1172] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.710625][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   81.713726][ T1172] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.717448][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'.
[   81.720700][ T1172] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.720725][ T1172] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.779391][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'.
[   81.779855][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'.
[   81.929734][    T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   82.084533][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.089080][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[   82.092713][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8
[   82.097113][    T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   82.101306][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.107319][ T6746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   82.112582][    T9] hub 6-1:1.0: bad descriptor, ignoring hub
[   82.114823][    T9] hub 6-1:1.0: probe with driver hub failed with error -5
[   82.117503][    T9] cdc_wdm 6-1:1.0: skipping garbage
[   82.119373][    T9] cdc_wdm 6-1:1.0: skipping garbage
[   82.122287][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   82.124697][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[   82.241507][ T6818] loop4: detected capacity change from 0 to 7
[   82.255826][ T6572]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   82.259048][ T6572] loop4: partition table partially beyond EOD, truncated
[   82.262164][ T6572] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   82.282484][ T6818]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   82.284240][ T6818] loop4: partition table partially beyond EOD, truncated
[   82.287404][ T6818] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   82.403952][ T6818] process 'syz.0.217' launched '/dev/fd/9' with NULL argv: empty string added
[   82.450631][ T5338]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   82.452914][ T5338] loop4: partition table partially beyond EOD, truncated
[   82.455875][ T5338] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   82.488358][ T6572] udevd[6572]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   82.511658][   T54] usb 6-1: USB disconnect, device number 5
[   82.534009][ T6836] veth0: entered promiscuous mode
[   82.536031][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   82.627685][ T1467] usb 7-1: USB disconnect, device number 5
[   82.650122][ T6844] netlink: 136 bytes leftover after parsing attributes in process `syz.0.220'.
[   82.654108][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[   82.723305][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'.
[   82.734146][ T6846] team0: Port device team_slave_1 removed
[   84.163375][ T6877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.727794][   T63] Bluetooth: hci4: command 0x1003 tx timeout
[   84.730664][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   84.779791][ T6890] overlayfs: failed to resolve './file0': -2
[   84.890839][ T6907] batadv_slave_1: entered promiscuous mode
[   84.901590][ T6907] block device autoloading is deprecated and will be removed.
[   84.907009][ T6906] batadv_slave_1: left promiscuous mode
[   84.918051][ T6909] FAULT_INJECTION: forcing a failure.
[   84.918051][ T6909] name failslab, interval 1, probability 0, space 0, times 1
[   84.923467][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.0.242 Not tainted syzkaller #0 PREEMPT(full) 
[   84.923481][ T6909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.923487][ T6909] Call Trace:
[   84.923491][ T6909]  <TASK>
[   84.923496][ T6909]  dump_stack_lvl+0x100/0x190
[   84.923517][ T6909]  should_fail_ex.cold+0x5/0xa
[   84.923531][ T6909]  ? tomoyo_realpath_from_path+0xb6/0x690
[   84.923547][ T6909]  should_failslab+0xc2/0x120
[   84.923558][ T6909]  __kmalloc_noprof+0xe0/0x850
[   84.923576][ T6909]  tomoyo_realpath_from_path+0xb6/0x690
[   84.923595][ T6909]  tomoyo_path_number_perm+0x23c/0x580
[   84.923608][ T6909]  ? tomoyo_path_number_perm+0x22e/0x580
[   84.923624][ T6909]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   84.923651][ T6909]  ? find_held_lock+0x2b/0x80
[   84.923664][ T6909]  ? __fget_files+0x215/0x3d0
[   84.923675][ T6909]  ? hook_file_ioctl_common+0x146/0x410
[   84.923696][ T6909]  ? __fget_files+0x21f/0x3d0
[   84.923709][ T6909]  security_file_ioctl+0xd3/0x230
[   84.923724][ T6909]  __x64_sys_ioctl+0xb7/0x210
[   84.923741][ T6909]  do_syscall_64+0x106/0xf80
[   84.923755][ T6909]  ? clear_bhb_loop+0x40/0x90
[   84.923769][ T6909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.923780][ T6909] RIP: 0033:0x7f637319c799
[   84.923789][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.923798][ T6909] RSP: 002b:00007f6374073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   84.923809][ T6909] RAX: ffffffffffffffda RBX: 00007f6373415fa0 RCX: 00007f637319c799
[   84.923816][ T6909] RDX: 0000200000000140 RSI: 00000000c008ae67 RDI: 0000000000000004
[   84.923822][ T6909] RBP: 00007f6374073090 R08: 0000000000000000 R09: 0000000000000000
[   84.923828][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.923834][ T6909] R13: 00007f6373416038 R14: 00007f6373415fa0 R15: 00007ffcb3bfecb8
[   84.923847][ T6909]  </TASK>
[   84.923851][ T6909] ERROR: Out of memory at tomoyo_realpath_from_path.
[   85.175840][ T6924] syz.2.247 uses obsolete (PF_INET,SOCK_PACKET)
[   85.207860][ T6927] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[   85.215653][ T6927] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[   85.253353][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[   85.256407][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[   85.259483][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[   85.262801][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[   85.296951][   T40] kauditd_printk_skb: 21 callbacks suppressed
[   85.296966][   T40] audit: type=1400 audit(1773745323.888:392): avc:  denied  { ioctl } for  pid=6932 comm="syz.0.250" path="socket:[14814]" dev="sockfs" ino=14814 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   85.325918][ T6938] netlink: 'syz.4.252': attribute type 11 has an invalid length.
[   85.391696][   T40] audit: type=1400 audit(1773745323.988:393): avc:  denied  { accept } for  pid=6946 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   85.434397][ T6950] FAULT_INJECTION: forcing a failure.
[   85.434397][ T6950] name failslab, interval 1, probability 0, space 0, times 0
[   85.440722][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT(full) 
[   85.440742][ T6950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   85.440751][ T6950] Call Trace:
[   85.440757][ T6950]  <TASK>
[   85.440762][ T6950]  dump_stack_lvl+0x100/0x190
[   85.440791][ T6950]  should_fail_ex.cold+0x5/0xa
[   85.440811][ T6950]  ? tomoyo_encode2+0xfb/0x3c0
[   85.440831][ T6950]  should_failslab+0xc2/0x120
[   85.440847][ T6950]  __kmalloc_noprof+0xe0/0x850
[   85.440873][ T6950]  tomoyo_encode2+0xfb/0x3c0
[   85.440896][ T6950]  tomoyo_encode+0x29/0x50
[   85.440917][ T6950]  tomoyo_realpath_from_path+0x18c/0x690
[   85.440959][ T6950]  tomoyo_path_number_perm+0x23c/0x580
[   85.440984][ T6950]  ? tomoyo_path_number_perm+0x22e/0x580
[   85.441004][ T6950]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   85.441045][ T6950]  ? find_held_lock+0x2b/0x80
[   85.441065][ T6950]  ? __fget_files+0x215/0x3d0
[   85.441080][ T6950]  ? hook_file_ioctl_common+0x146/0x410
[   85.441108][ T6950]  ? __fget_files+0x21f/0x3d0
[   85.441128][ T6950]  security_file_ioctl+0xd3/0x230
[   85.441149][ T6950]  __x64_sys_ioctl+0xb7/0x210
[   85.441173][ T6950]  do_syscall_64+0x106/0xf80
[   85.441193][ T6950]  ? clear_bhb_loop+0x40/0x90
[   85.441212][ T6950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.441228][ T6950] RIP: 0033:0x7f74ff19c799
[   85.441242][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.441256][ T6950] RSP: 002b:00007f74fffa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.441271][ T6950] RAX: ffffffffffffffda RBX: 00007f74ff415fa0 RCX: 00007f74ff19c799
[   85.441281][ T6950] RDX: 0000200000000140 RSI: 00000000c008ae67 RDI: 0000000000000004
[   85.441290][ T6950] RBP: 00007f74fffa4090 R08: 0000000000000000 R09: 0000000000000000
[   85.441299][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.441307][ T6950] R13: 00007f74ff416038 R14: 00007f74ff415fa0 R15: 00007ffca3e7f0c8
[   85.441328][ T6950]  </TASK>
[   85.441613][ T6950] ERROR: Out of memory at tomoyo_realpath_from_path.
[   85.454158][   T40] audit: type=1400 audit(1773745324.048:394): avc:  denied  { create } for  pid=6954 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   85.527848][   T40] audit: type=1400 audit(1773745324.048:395): avc:  denied  { write } for  pid=6954 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   85.611429][ T6965] 0�: renamed from hsr0 (while UP)
[   85.618322][ T6965] 0�: entered allmulticast mode
[   85.620112][ T6965] hsr_slave_0: entered allmulticast mode
[   85.622381][ T6965] hsr_slave_1: entered allmulticast mode
[   85.625005][ T6965] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[   85.722446][   T40] audit: type=1326 audit(1773745324.318:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.265" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74ff19c799 code=0x0
[   85.778458][ T6983] openvswitch: netlink: Missing key (keys=40, expected=100)
[   85.923110][   T40] audit: type=1400 audit(1773745324.518:397): avc:  denied  { read } for  pid=6995 comm="syz.2.271" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   85.934644][   T40] audit: type=1400 audit(1773745324.518:398): avc:  denied  { open } for  pid=6995 comm="syz.2.271" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   85.944314][   T40] audit: type=1400 audit(1773745324.538:399): avc:  denied  { map } for  pid=6995 comm="syz.2.271" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   85.952747][   T40] audit: type=1400 audit(1773745324.548:400): avc:  denied  { ioctl } for  pid=6995 comm="syz.2.271" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   85.969431][ T6998] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   85.972531][ T6998] overlayfs: missing 'lowerdir'
[   85.987751][ T1467] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   86.172276][ T1467] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[   86.175404][ T1467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.181950][ T1467] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   86.185685][ T1467] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   86.187503][   T40] audit: type=1400 audit(1773745324.778:401): avc:  denied  { read write } for  pid=7015 comm="syz.0.278" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   86.189773][ T1467] usb 6-1: Manufacturer: syz
[   86.201622][ T1467] usb 6-1: config 0 descriptor??
[   86.258191][ T1467] rc_core: IR keymap rc-hauppauge not found
[   86.260737][ T1467] Registered IR keymap rc-empty
[   86.264537][ T1467] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   86.275831][ T1467] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input10
[   86.489407][   T10] cfg80211: failed to load regulatory.db
[   86.548258][   T24] usb 6-1: USB disconnect, device number 6
[   86.625025][ T7053] syz_tun: entered allmulticast mode
[   86.641660][ T7052] syz_tun: left allmulticast mode
[   86.701160][ T7063] evm: overlay not supported
[   86.730041][ T7063] __nla_validate_parse: 10 callbacks suppressed
[   86.730052][ T7063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'.
[   86.753484][ T7068] netlink: 72 bytes leftover after parsing attributes in process `syz.2.294'.
[   86.897805][ T7079] could not allocate digest TFM handle blake2s-256-x86
[   86.918537][ T7083] netlink: 872 bytes leftover after parsing attributes in process `syz.1.299'.
[   87.223511][ T7113] netlink: 872 bytes leftover after parsing attributes in process `syz.1.309'.
[   87.332676][ T7120] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   87.335526][ T7120] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   87.340421][ T7120] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   87.432277][ T7134] xt_TPROXY: Can be used only with -p tcp or -p udp
[   87.526109][ T7154] Falling back ldisc for ttyS3.
[   87.559660][ T7161] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   87.589856][ T7165] can: request_module (can-proto-0) failed.
[   87.693062][ T7185] IPv6: sit1: Disabled Multicast RS
[   87.700998][ T7185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=519 sclass=netlink_route_socket pid=7185 comm=syz.0.329
[   87.705565][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'.
[   87.746727][ T7190] netlink: 'syz.1.333': attribute type 3 has an invalid length.
[   87.758839][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'.
[   87.853220][ T7205] netlink: 'syz.0.339': attribute type 2 has an invalid length.
[   88.055626][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.060830][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.064254][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.067330][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.067755][   T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   88.070617][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.075844][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.087972][ T7214] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[   88.117426][ T7220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7220 comm=syz.1.343
[   88.200866][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'.
[   88.204782][ T7223] netlink: 2 bytes leftover after parsing attributes in process `syz.1.344'.
[   88.209777][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'.
[   88.213175][ T7224] netlink: 2 bytes leftover after parsing attributes in process `syz.1.344'.
[   88.217745][   T50] usb 7-1: device descriptor read/64, error -71
[   88.477705][   T50] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   88.607676][   T50] usb 7-1: device descriptor read/64, error -71
[   88.718282][   T50] usb usb7-port1: attempt power cycle
[   89.057725][   T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   89.078081][   T50] usb 7-1: device descriptor read/8, error -71
[   89.317866][   T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   89.338139][   T50] usb 7-1: device descriptor read/8, error -71
[   89.447703][   T63] Bluetooth: hci3: command 0x0405 tx timeout
[   89.448433][   T50] usb usb7-port1: unable to enumerate USB device
[   89.901241][ T7231] FAULT_INJECTION: forcing a failure.
[   89.901241][ T7231] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   89.906955][ T7231] CPU: 0 UID: 0 PID: 7231 Comm: syz.0.347 Not tainted syzkaller #0 PREEMPT(full) 
[   89.906976][ T7231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.906986][ T7231] Call Trace:
[   89.906992][ T7231]  <TASK>
[   89.906998][ T7231]  dump_stack_lvl+0x100/0x190
[   89.907039][ T7231]  should_fail_ex.cold+0x5/0xa
[   89.907062][ T7231]  _copy_to_user+0x32/0xd0
[   89.907095][ T7231]  simple_read_from_buffer+0xcb/0x170
[   89.907128][ T7231]  proc_fail_nth_read+0x1af/0x230
[   89.907156][ T7231]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   89.907183][ T7231]  ? rw_verify_area+0xce/0x6d0
[   89.907209][ T7231]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   89.907235][ T7231]  vfs_read+0x1e4/0xb30
[   89.907266][ T7231]  ? __pfx_vfs_read+0x10/0x10
[   89.907294][ T7231]  ? __fget_files+0x215/0x3d0
[   89.907321][ T7231]  ? __fget_files+0x21f/0x3d0
[   89.907347][ T7231]  ksys_read+0x12a/0x250
[   89.907374][ T7231]  ? __pfx_ksys_read+0x10/0x10
[   89.907409][ T7231]  do_syscall_64+0x106/0xf80
[   89.907432][ T7231]  ? clear_bhb_loop+0x40/0x90
[   89.907455][ T7231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.907474][ T7231] RIP: 0033:0x7f637315cfce
[   89.907487][ T7231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   89.907503][ T7231] RSP: 002b:00007f6374072fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   89.907522][ T7231] RAX: ffffffffffffffda RBX: 00007f63740736c0 RCX: 00007f637315cfce
[   89.907534][ T7231] RDX: 000000000000000f RSI: 00007f63740730a0 RDI: 0000000000000006
[   89.907544][ T7231] RBP: 00007f6374073090 R08: 0000000000000000 R09: 0000000000000000
[   89.907553][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.907564][ T7231] R13: 00007f6373416038 R14: 00007f6373415fa0 R15: 00007ffcb3bfecb8
[   89.907589][ T7231]  </TASK>
[   90.936711][   T40] kauditd_printk_skb: 38 callbacks suppressed
[   90.936722][   T40] audit: type=1400 audit(1773745329.528:440): avc:  denied  { getopt } for  pid=7241 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   91.056979][ T7213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.104179][ T7244] input: syz1 as /devices/virtual/input/input11
[   91.176714][   T40] audit: type=1400 audit(1773745329.768:441): avc:  denied  { name_bind } for  pid=7245 comm="syz.1.353" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   91.354087][ T7265] fuse: Unknown parameter ''
[   91.463471][ T7265] validate_nla: 60 callbacks suppressed
[   91.463483][ T7265] netlink: 'syz.1.359': attribute type 62 has an invalid length.
[   91.577884][   T40] audit: type=1400 audit(1773745330.168:442): avc:  denied  { write } for  pid=7270 comm="syz.4.360" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   91.670380][ T7278] hfsplus: unable to find HFS+ superblock
[   91.677867][   T40] audit: type=1326 audit(1773745330.268:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.689483][   T40] audit: type=1326 audit(1773745330.278:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.708703][   T40] audit: type=1326 audit(1773745330.278:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.718532][   T40] audit: type=1326 audit(1773745330.278:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.728697][   T40] audit: type=1326 audit(1773745330.278:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.739296][   T40] audit: type=1326 audit(1773745330.278:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.746512][   T40] audit: type=1326 audit(1773745330.278:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.1.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7e39c799 code=0x50000
[   91.847730][ T6800] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   91.987735][ T6800] usb 9-1: device descriptor read/64, error -71
[   92.200752][ T7287] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   92.228331][ T6800] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   92.353092][ T7293] __nla_validate_parse: 3 callbacks suppressed
[   92.353108][ T7293] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.370'.
[   92.365224][ T7293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.377666][ T6800] usb 9-1: device descriptor read/64, error -71
[   92.498115][ T6800] usb usb9-port1: attempt power cycle
[   92.717787][   T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   92.857748][ T6800] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   92.878916][ T6800] usb 9-1: device descriptor read/8, error -71
[   92.882028][   T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 256, setting to 64
[   92.886588][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[   92.897254][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   92.906789][   T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   92.910230][   T10] usb 5-1: Product: syz
[   92.912002][   T10] usb 5-1: Manufacturer: syz
[   92.913958][   T10] usb 5-1: SerialNumber: syz
[   92.928175][   T10] usb 5-1: config 0 descriptor??
[   92.933655][   T10] usb 5-1: selecting invalid altsetting 0
[   93.112687][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.115776][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.131563][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.135489][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[   93.139616][ T6800] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   93.140642][   T54] usb 5-1: USB disconnect, device number 5
[   93.161445][ T6800] usb 9-1: device descriptor read/8, error -71
[   93.230008][ T7309] xt_bpf: check failed: parse error
[   93.268059][ T6800] usb usb9-port1: unable to enumerate USB device
[   93.776153][ T7313] netlink: 'syz.0.377': attribute type 39 has an invalid length.
[   93.836999][ T7319] netlink: 872 bytes leftover after parsing attributes in process `syz.0.378'.
[   94.362469][ T7334] tmpfs: Group quota inode hardlimit too large.
[   94.482855][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   94.693025][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[   94.696278][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'.
[   94.701290][ T7347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7347 comm=syz.1.388
[   94.706371][ T7347] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   94.729764][ T7347] bond1: (slave bridge1): making interface the new active one
[   94.733226][ T7347] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   94.881704][ T7368] autofs4:pid:7368:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e)
[   94.885919][ T7368] autofs4:pid:7368:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[   95.012728][ T7385] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   95.037730][   T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   95.077286][ T7400] openvswitch: netlink: Flow actions attr not present in new flow.
[   95.082733][ T7400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.210655][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.213873][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[   95.216740][   T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   95.219926][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.223616][   T10] usb 5-1: config 0 descriptor??
[   95.231633][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   95.234413][   T10] dvb-usb: bulk message failed: -22 (3/0)
[   95.251299][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   95.255057][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   95.257982][   T10] usb 5-1: media controller created
[   95.267812][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   95.285510][   T10] dvb-usb: bulk message failed: -22 (6/0)
[   95.292780][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   95.299141][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input13
[   95.309688][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[   95.312854][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   95.432943][ T4180] usb 5-1: USB disconnect, device number 6
[   95.460583][ T4180] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   95.923232][   T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.995034][   T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.997361][ T7436] xt_cgroup: xt_cgroup: no path or classid specified
[   96.001799][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.005716][   T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.012684][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.017288][   T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.017326][   T40] kauditd_printk_skb: 342 callbacks suppressed
[   96.017336][   T40] audit: type=1400 audit(1773745334.608:792): avc:  denied  { map } for  pid=7434 comm="syz.0.416" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   96.038329][   T40] audit: type=1400 audit(1773745334.628:793): avc:  denied  { mount } for  pid=7434 comm="syz.0.416" name="/" dev="configfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   96.069802][   T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.113831][ T7447] netlink: 872 bytes leftover after parsing attributes in process `syz.4.420'.
[   96.135713][ T7448] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   96.166561][   T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.172061][   T40] audit: type=1400 audit(1773745334.768:794): avc:  denied  { mount } for  pid=7449 comm="syz.2.422" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   96.202531][ T7450] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20002
[   96.209407][   T40] audit: type=1400 audit(1773745334.808:795): avc:  denied  { mounton } for  pid=7449 comm="syz.2.422" path="/bus" dev="bpf" ino=19983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   96.213707][ T7450] overlayfs: upper fs does not support tmpfile.
[   96.241953][   T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.256077][ T7455] netlink: 'syz.0.424': attribute type 2 has an invalid length.
[   96.292250][   T40] audit: type=1400 audit(1773745334.888:796): avc:  denied  { append } for  pid=7463 comm="syz.2.426" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   96.306967][ T7433] chnl_net:caif_netlink_parms(): no params data found
[   96.418582][   T40] audit: type=1400 audit(1773745335.018:797): avc:  denied  { map } for  pid=7474 comm="syz.4.427" path="socket:[18098]" dev="sockfs" ino=18098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   96.456526][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.462833][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.465254][ T7433] bridge_slave_0: entered allmulticast mode
[   96.469493][ T7433] bridge_slave_0: entered promiscuous mode
[   96.472889][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.475192][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.477573][ T7433] bridge_slave_1: entered allmulticast mode
[   96.480245][ T7433] bridge_slave_1: entered promiscuous mode
[   96.482907][   T46] bridge_slave_1: left allmulticast mode
[   96.484725][   T46] bridge_slave_1: left promiscuous mode
[   96.486630][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.496295][   T46] bridge_slave_0: left allmulticast mode
[   96.499599][   T46] bridge_slave_0: left promiscuous mode
[   96.502097][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.633429][   T46] bond1 (unregistering): (slave bridge1): Releasing active interface
[   96.752335][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.756486][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.760258][   T46] bond0 (unregistering): Released all slaves
[   96.764840][   T46] bond1 (unregistering): Released all slaves
[   96.822455][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.841627][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   96.841964][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.874219][ T7433] team0: Port device team_slave_0 added
[   96.877511][ T7433] team0: Port device team_slave_1 added
[   96.922315][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.924866][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.933970][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.942509][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.944848][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.954077][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.979327][   T10] usb 7-1: device descriptor read/64, error -71
[   97.022980][ T7497] syzkaller0: entered promiscuous mode
[   97.024662][ T7497] syzkaller0: entered allmulticast mode
[   97.034773][ T7433] hsr_slave_0: entered promiscuous mode
[   97.037073][ T7433] hsr_slave_1: entered promiscuous mode
[   97.043701][ T7433] debugfs: 'hsr0' already exists in 'hsr'
[   97.046145][ T7433] Cannot create hsr debugfs directory
[   97.228746][   T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   97.360160][   T10] usb 7-1: device descriptor read/64, error -71
[   97.469665][   T10] usb usb7-port1: attempt power cycle
[   97.817791][   T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[   97.840031][   T10] usb 7-1: device descriptor read/8, error -71
[   97.930711][   T46] hsr_slave_0: left promiscuous mode
[   97.933732][   T46] hsr_slave_1: left promiscuous mode
[   97.936721][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.946467][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.951382][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.954733][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.963893][   T46] veth1_macvtap: left promiscuous mode
[   97.966388][   T46] veth0_macvtap: left promiscuous mode
[   97.969100][   T46] veth1_vlan: left promiscuous mode
[   97.971369][   T46] veth0_vlan: left promiscuous mode
[   98.078537][   T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[   98.087812][   T63] Bluetooth: hci1: command tx timeout
[   98.115015][   T46] team0 (unregistering): Port device team_slave_1 removed
[   98.117698][   T10] usb 7-1: device descriptor read/8, error -71
[   98.127573][   T46] team0 (unregistering): Port device team_slave_0 removed
[   98.228881][   T10] usb usb7-port1: unable to enumerate USB device
[   98.319824][ T7433] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   98.329257][ T7433] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   98.340842][ T7433] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   98.346025][ T7433] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   98.405587][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.420779][ T7433] 8021q: adding VLAN 0 to HW filter on device team0
[   98.425645][   T40] audit: type=1400 audit(1773745337.018:798): avc:  denied  { getopt } for  pid=7518 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   98.430073][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.435147][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.450947][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.453465][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.484174][   T40] audit: type=1400 audit(1773745337.078:799): avc:  denied  { mounton } for  pid=7518 comm="syz.4.436" path="/86/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   98.580108][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.750524][ T7433] veth0_vlan: entered promiscuous mode
[   98.755231][ T7433] veth1_vlan: entered promiscuous mode
[   98.768462][ T7433] veth0_macvtap: entered promiscuous mode
[   98.772181][ T7433] veth1_macvtap: entered promiscuous mode
[   98.780235][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.786329][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.793197][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.796174][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.800362][   T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.804057][   T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.842186][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.845556][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.860877][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.864064][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.878749][ T7556] netlink: 'syz.0.438': attribute type 12 has an invalid length.
[   98.882399][   T40] audit: type=1400 audit(1773745337.478:800): avc:  denied  { mounton } for  pid=7433 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   98.912693][   T40] audit: type=1400 audit(1773745337.508:801): avc:  denied  { mounton } for  pid=7557 comm="syz.0.439" path="/123/file0" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   98.954094][ T7565] __nla_validate_parse: 2 callbacks suppressed
[   98.954106][ T7565] netlink: 872 bytes leftover after parsing attributes in process `syz.0.440'.
[   98.986245][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'.
[   99.103283][ T7573] x_tables: duplicate underflow at hook 1
[   99.257459][ T7576] netlink: 'syz.5.444': attribute type 10 has an invalid length.
[   99.260649][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.444'.
[   99.264399][ T7576] batadv0: entered promiscuous mode
[   99.266621][ T7576] batadv0: entered allmulticast mode
[   99.269271][ T7576] bridge0: port 3(batadv0) entered blocking state
[   99.272390][ T7576] bridge0: port 3(batadv0) entered disabled state
[   99.276341][ T7576] bridge0: port 3(batadv0) entered blocking state
[   99.279585][ T7576] bridge0: port 3(batadv0) entered forwarding state
[   99.369911][   T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   99.374420][   T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   99.748605][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.4.454'.
[   99.787178][   T50] IPVS: starting estimator thread 0...
[   99.804135][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.4.454'.
[   99.807587][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.4.454'.
[   99.877866][ T7617] IPVS: using max 44 ests per chain, 105600 per kthread
[  100.050175][ T7625] futex_wake_op: syz.0.458 tries to shift op by 32; fix this program
[  100.170085][   T63] Bluetooth: hci1: command tx timeout
[  100.227879][ T4180] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  100.377709][ T4180] usb 7-1: Using ep0 maxpacket: 8
[  100.381410][ T4180] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  100.384365][ T4180] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.388032][ T4180] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.391368][ T4180] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.394699][ T4180] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.400044][ T4180] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  100.403748][ T4180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.626550][ T4180] usb 7-1: usb_control_msg returned -32
[  100.637731][ T4180] usbtmc 7-1:16.0: can't read capabilities
[  100.700407][ T7631] bond3: Unable to set down delay as MII monitoring is disabled
[  100.705560][ T7631] bond3 (unregistering): Released all slaves
[  100.716020][ T7634] afs: Unknown parameter 'uid>00000000000000000000'
[  100.738170][ T7638] ������: renamed from wg2 (while UP)
[  100.921533][ T7656] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[  100.923991][ T7656] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.469'.
[  100.974192][ T7668] netlink: 'syz.2.457': attribute type 5 has an invalid length.
[  100.983322][ T7671] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[  100.995422][ T7671] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.032877][ T7671] bond3: (slave veth1): Enslaving as an active interface with a down link
[  101.048286][ T7671] vlan3: entered allmulticast mode
[  101.050347][ T7671] bond3: entered allmulticast mode
[  101.053333][ T7671] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  101.173604][   T40] kauditd_printk_skb: 13 callbacks suppressed
[  101.173616][   T40] audit: type=1400 audit(1773745339.768:815): avc:  denied  { write } for  pid=7684 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.222419][ T7674] netlink: 44 bytes leftover after parsing attributes in process `syz.4.473'.
[  101.226109][ T7674] netlink: 43 bytes leftover after parsing attributes in process `syz.4.473'.
[  101.229258][ T7674] netlink: 'syz.4.473': attribute type 6 has an invalid length.
[  101.232366][ T7674] netlink: 'syz.4.473': attribute type 5 has an invalid length.
[  101.234935][ T7674] netlink: 43 bytes leftover after parsing attributes in process `syz.4.473'.
[  101.239487][   T40] audit: type=1400 audit(1773745339.838:816): avc:  denied  { getopt } for  pid=7673 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  101.256395][   T40] audit: type=1400 audit(1773745339.848:817): avc:  denied  { map } for  pid=7673 comm="syz.4.473" path="/94/file0/cgroup.kill" dev="9p" ino=72351981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  101.286221][   T40] audit: type=1400 audit(1773745339.878:818): avc:  denied  { create } for  pid=7694 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  101.294527][   T40] audit: type=1400 audit(1773745339.878:819): avc:  denied  { ioctl } for  pid=7694 comm="syz.0.479" path="socket:[21431]" dev="sockfs" ino=21431 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  101.558300][   T40] audit: type=1326 audit(1773745340.148:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.5.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ec19c799 code=0x7fc00000
[  101.565600][   T40] audit: type=1326 audit(1773745340.148:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.5.463" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f29ec19c799 code=0x7fc00000
[  101.573180][   T40] audit: type=1326 audit(1773745340.148:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.5.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ec19c799 code=0x7fc00000
[  101.580909][   T40] audit: type=1326 audit(1773745340.148:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.5.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ec19c799 code=0x7fc00000
[  101.588955][   T40] audit: type=1326 audit(1773745340.148:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.5.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ec19c799 code=0x7fc00000
[  101.731279][ T7725] netlink: 'syz.4.489': attribute type 3 has an invalid length.
[  101.741711][ T7729] tun0: tun_chr_ioctl cmd 1074025675
[  101.744091][ T7729] tun0: persist disabled
[  101.820081][ T7733] Bluetooth: hci4: Frame reassembly failed (-84)
[  101.828461][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  101.871837][ T7737] input: syz1 as /devices/virtual/input/input14
[  101.874116][ T7737] input: failed to attach handler leds to device input14, error: -6
[  101.961709][ T7745] netlink: 'syz.5.499': attribute type 11 has an invalid length.
[  101.968347][ T7745] syzkaller1: entered promiscuous mode
[  101.970169][ T7745] syzkaller1: entered allmulticast mode
[  101.974346][ T7746] netlink: 'syz.5.499': attribute type 11 has an invalid length.
[  102.137755][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  102.247725][ T5942] Bluetooth: hci1: command tx timeout
[  102.297748][    T9] usb 5-1: Using ep0 maxpacket: 8
[  102.300988][    T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  102.303658][    T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  102.306378][    T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  102.309516][    T9] usb 5-1: config 250 has no interface number 0
[  102.311570][    T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  102.315229][    T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  102.318761][    T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  102.321978][    T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  102.325611][    T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  102.330088][    T9] usb 5-1: config 250 interface 228 has no altsetting 0
[  102.333497][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  102.336509][    T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  102.339288][    T9] usb 5-1: Product: syz
[  102.340685][    T9] usb 5-1: SerialNumber: syz
[  102.344996][    T9] hub 5-1:250.228: bad descriptor, ignoring hub
[  102.347062][    T9] hub 5-1:250.228: probe with driver hub failed with error -5
[  102.550045][    T9] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  102.977918][ T5986] usb 5-1: USB disconnect, device number 7
[  102.984923][ T5986] usblp1: removed
[  102.996762][ T4180] usb 7-1: USB disconnect, device number 14
[  103.155062][ T7775] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  103.499451][ T7784] overlayfs: conflicting options: userxattr,redirect_dir=on
[  103.577101][ T7795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  103.580262][ T7795] block device autoloading is deprecated and will be removed.
[  103.619143][ T7794] md: superblock version 134217728 not known
[  103.621269][ T7794] md: couldn't set array info. -22
[  103.847741][ T5942] Bluetooth: hci4: command 0x1003 tx timeout
[  103.850079][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  103.989580][ T7827] openvswitch: netlink: Key type 31 is not supported
[  104.002043][ T7829] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  104.010354][ T7829] __nla_validate_parse: 17 callbacks suppressed
[  104.010370][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'.
[  104.016876][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'.
[  104.057894][ T7831] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  104.208619][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.211577][ T7841] bridge_slave_1: left allmulticast mode
[  104.213454][ T7841] bridge_slave_1: left promiscuous mode
[  104.216033][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.222385][ T7841] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  104.260895][ T7843] netlink: 'syz.5.528': attribute type 7 has an invalid length.
[  104.261338][ T7844] netlink: 'syz.5.528': attribute type 7 has an invalid length.
[  104.270197][ T7843] netlink: 'syz.5.528': attribute type 7 has an invalid length.
[  104.270264][ T7844] netlink: 'syz.5.528': attribute type 7 has an invalid length.
[  104.272807][ T1152] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.279214][ T1152] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.282272][ T1152] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.285049][ T1152] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.327711][   T63] Bluetooth: hci1: command tx timeout
[  104.729301][ T7852] macsec1: entered promiscuous mode
[  104.731596][ T7852] macsec1: entered allmulticast mode
[  104.942814][ T7869] netlink: 'syz.4.533': attribute type 11 has an invalid length.
[  104.946112][ T7869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.533'.
[  104.967481][ T7872] bridge1: entered promiscuous mode
[  104.973765][ T7872] bridge1: entered allmulticast mode
[  104.976981][ T7872] team0: Port device bridge1 added
[  105.021926][ T7881] netlink: 872 bytes leftover after parsing attributes in process `syz.0.538'.
[  105.026044][ T7881] netlink: 872 bytes leftover after parsing attributes in process `syz.0.538'.
[  105.044859][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[  105.053878][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[  105.166662][ T7900] netlink: 96 bytes leftover after parsing attributes in process `syz.0.545'.
[  105.209041][ T7907] ip6erspan0: entered promiscuous mode
[  105.400564][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'.
[  105.567717][ T4180] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  105.719225][ T4180] usb 5-1: config 64 has an invalid interface number: 186 but max is 2
[  105.722164][ T4180] usb 5-1: config 64 has an invalid interface number: 204 but max is 2
[  105.724967][ T4180] usb 5-1: config 64 has an invalid interface number: 116 but max is 2
[  105.727878][ T4180] usb 5-1: config 64 contains an unexpected descriptor of type 0x1, skipping
[  105.730792][ T4180] usb 5-1: config 64 contains an unexpected descriptor of type 0x1, skipping
[  105.733944][ T4180] usb 5-1: config 64 contains an unexpected descriptor of type 0x2, skipping
[  105.737069][ T4180] usb 5-1: config 64 has an invalid interface number: 4 but max is 2
[  105.739868][ T4180] usb 5-1: config 64 has 4 interfaces, different from the descriptor's value: 3
[  105.743199][ T4180] usb 5-1: config 64 has no interface number 0
[  105.745547][ T4180] usb 5-1: config 64 has no interface number 1
[  105.747573][ T4180] usb 5-1: config 64 has no interface number 2
[  105.753033][ T4180] usb 5-1: config 64 has no interface number 3
[  105.755108][ T4180] usb 5-1: config 64 interface 186 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  105.758650][ T4180] usb 5-1: config 64 interface 186 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  105.762238][ T4180] usb 5-1: config 64 interface 204 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  105.765833][ T4180] usb 5-1: config 64 interface 204 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  105.769680][ T4180] usb 5-1: config 64 interface 204 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  105.773164][ T4180] usb 5-1: config 64 interface 204 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  105.776686][ T4180] usb 5-1: config 64 interface 204 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  105.780637][ T4180] usb 5-1: config 64 interface 204 altsetting 3 has an endpoint descriptor with address 0xC6, changing to 0x86
[  105.784377][ T4180] usb 5-1: config 64 interface 204 altsetting 3 endpoint 0x86 has an invalid bInterval 64, changing to 7
[  105.788061][ T4180] usb 5-1: config 64 interface 204 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  105.791905][ T4180] usb 5-1: config 64 interface 204 altsetting 3 endpoint 0x9 has invalid wMaxPacketSize 0
[  105.795212][ T4180] usb 5-1: config 64 interface 204 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 13
[  105.799459][ T4180] usb 5-1: too many endpoints for config 64 interface 116 altsetting 104: 78, using maximum allowed: 30
[  105.803007][ T4180] usb 5-1: config 64 interface 116 altsetting 104 has a duplicate endpoint with address 0x9, skipping
[  105.806495][ T4180] usb 5-1: config 64 interface 116 altsetting 104 has a duplicate endpoint with address 0x6, skipping
[  105.810260][ T4180] usb 5-1: config 64 interface 116 altsetting 104 has a duplicate endpoint with address 0xB, skipping
[  105.813762][ T4180] usb 5-1: config 64 interface 116 altsetting 104 has an endpoint descriptor with address 0x16, changing to 0x6
[  105.817523][ T4180] usb 5-1: config 64 interface 116 altsetting 104 has 4 endpoint descriptors, different from the interface descriptor's value: 78
[  105.822187][ T4180] usb 5-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  105.825559][ T4180] usb 5-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  105.828995][ T4180] usb 5-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[  105.832345][ T4180] usb 5-1: config 64 interface 186 has no altsetting 0
[  105.834549][ T4180] usb 5-1: config 64 interface 204 has no altsetting 0
[  105.837146][ T4180] usb 5-1: config 64 interface 116 has no altsetting 0
[  105.839562][ T4180] usb 5-1: config 64 interface 4 has no altsetting 0
[  105.844938][ T4180] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=fe.c2
[  105.848015][ T4180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.850655][ T4180] usb 5-1: Product: ␊
[  105.852014][ T4180] usb 5-1: SerialNumber: 狎붺ꚺ弙췫ᒼ嫱㋵꿺㮬ꌝ듧옱斦볣텧痼寈户뗹郭폩⑑㱅픷ၦ⏖ਘ谓೻쪄옌契茟篏ꪤ獿Ѹ鈯쇄덙Ȼ뽩胀ꓗ㰹椹
[  105.921982][ T7933] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20001
[  105.954631][ T7938] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  105.956776][ T7938] [U] J"�e:��"


[  106.550602][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.559'.
[  106.592161][   T63] block nbd1: Receive control failed (result -107)
[  106.601626][ T7959] ipt_ECN: cannot use operation on non-tcp rule
[  106.634946][ T7957] delete_channel: no stack
[  106.675642][   T40] kauditd_printk_skb: 155 callbacks suppressed
[  106.675653][   T40] audit: type=1400 audit(1773745345.268:980): avc:  denied  { write } for  pid=7960 comm="syz.5.560" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  106.687262][ T7961] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  106.704081][   T40] audit: type=1400 audit(1773745345.298:981): avc:  denied  { append } for  pid=7962 comm="syz.4.561" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  106.725164][   T40] audit: type=1400 audit(1773745345.318:982): avc:  denied  { search } for  pid=7962 comm="syz.4.561" name="/" dev="configfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  106.734085][   T40] audit: type=1400 audit(1773745345.328:983): avc:  denied  { search } for  pid=7962 comm="syz.4.561" name="/" dev="configfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  106.742042][   T40] audit: type=1400 audit(1773745345.328:984): avc:  denied  { read open } for  pid=7962 comm="syz.4.561" path="/" dev="configfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  106.797290][   T40] audit: type=1400 audit(1773745345.388:985): avc:  denied  { create } for  pid=7966 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  106.805866][   T40] audit: type=1400 audit(1773745345.398:986): avc:  denied  { write } for  pid=7966 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  106.837895][   T40] audit: type=1400 audit(1773745345.438:987): avc:  denied  { create } for  pid=7966 comm="syz.4.562" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  106.840647][ T7967] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  106.846087][   T40] audit: type=1400 audit(1773745345.438:988): avc:  denied  { link } for  pid=7966 comm="syz.4.562" name="file1" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  107.425311][ T7985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.491284][ T7988] tmpfs: Bad value for 'mpol'
[  107.603043][ T7995] netlink: 'syz.4.570': attribute type 7 has an invalid length.
[  107.662867][   T40] audit: type=1400 audit(1773745346.258:989): avc:  denied  { listen } for  pid=7991 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  107.764735][ T8003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8003 comm=syz.4.572
[  107.775323][ T8003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8003 comm=syz.4.572
[  107.781300][ T8003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8003 comm=syz.4.572
[  107.896915][ T8010] netlink: 'syz.5.574': attribute type 4 has an invalid length.
[  107.908014][ T8011] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  107.994699][ T8014] bond3: invalid ARP target 0.0.0.0 specified for addition
[  107.997138][ T8014] bond3: option arp_ip_target: invalid value (0)
[  108.002093][ T8014] bond3 (unregistering): Released all slaves
[  108.004216][ T8016] 9p: Bad value for 'wfdno'
[  108.037875][ T8017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=8017 comm=syz.4.575
[  108.421204][ T8027] xt_recent: Unsupported userspace flags (000000b2)
[  108.429538][ T4180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  108.432897][ T4180] snd-usb-audio 5-1:64.186: probe with driver snd-usb-audio failed with error -2
[  108.456858][ T4180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  108.460147][ T4180] usb 5-1: invalid MIDI in EP 0
[  108.465993][ T4180] snd-usb-audio 5-1:64.204: probe with driver snd-usb-audio failed with error -22
[  108.482388][ T4180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  108.484845][ T4180] snd-usb-audio 5-1:64.116: probe with driver snd-usb-audio failed with error -2
[  108.490498][ T4180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  108.519044][ T4180] snd-usb-audio 5-1:64.4: probe with driver snd-usb-audio failed with error -2
[  108.526483][ T4180] usb 5-1: USB disconnect, device number 8
[  108.563751][ T6984] udevd[6984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:64.4/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.850807][ T8039] netlink: 'syz.5.583': attribute type 10 has an invalid length.
[  109.103300][ T8039] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.245541][ T8059] __nla_validate_parse: 3 callbacks suppressed
[  109.245552][ T8059] netlink: 872 bytes leftover after parsing attributes in process `syz.4.586'.
[  109.250660][ T8059] netlink: 872 bytes leftover after parsing attributes in process `syz.4.586'.
[  109.319193][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'.
[  109.341641][ T8076] netlink: 'syz.4.590': attribute type 3 has an invalid length.
[  109.345538][ T8078] overlayfs: conflicting options: userxattr,redirect_dir=on
[  109.384303][ T8081] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  109.401261][ T8081] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.417199][ T8081] bond2: (slave geneve2): making interface the new active one
[  109.421489][ T8081] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  109.426829][ T8064] block nbd5: shutting down sockets
[  109.426830][ T8081] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  109.455411][ T8067] sd 0:0:0:0: PR command failed: 1026
[  109.457267][ T8067] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  109.459637][ T8067] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  109.474150][ T8064] block nbd5: NBD_DISCONNECT
[  109.476715][ T8064] block nbd5: Send disconnect failed -32
[  109.707686][   T54] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  109.857699][   T54] usb 7-1: Using ep0 maxpacket: 8
[  109.860738][   T54] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  109.863470][   T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  109.866684][   T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  109.869985][   T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  109.873398][   T54] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.877577][   T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  109.880559][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.090048][   T54] usb 7-1: usb_control_msg returned -32
[  110.092064][   T54] usbtmc 7-1:16.0: can't read capabilities
[  110.241340][ T8105] netlink: 872 bytes leftover after parsing attributes in process `syz.0.598'.
[  110.244326][ T8105] netlink: 872 bytes leftover after parsing attributes in process `syz.0.598'.
[  110.471897][ T8120] usbtmc 7-1:16.0: stb usb_control_msg returned -32
[  110.525503][ T1467] usb 7-1: USB disconnect, device number 15
[  110.531816][ T8128] netlink: 'syz.4.602': attribute type 39 has an invalid length.
[  110.578000][ T8130] netlink: 604 bytes leftover after parsing attributes in process `syz.5.603'.
[  111.201180][ T4180] libceph: connect (1)[c::]:6789 error -101
[  111.203405][ T4180] libceph: mon0 (1)[c::]:6789 connect error
[  111.206993][ T8154] ceph: No mds server is up or the cluster is laggy
[  111.277997][ T8144] nbd2: detected capacity change from 0 to 63
[  111.284151][ T6984] 
[  111.285275][ T6984] ======================================================
[  111.288379][ T6984] WARNING: possible circular locking dependency detected
[  111.291684][ T6984] syzkaller #0 Tainted: G             L     
[  111.293550][   T63] block nbd2: Receive control failed (result -32)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  111.294123][ T5942] block nbd2: Receive control failed (result -32)
[  111.294369][ T6984] ------------------------------------------------------
[  111.302589][ T6984] udevd/6984 is trying to acquire lock:
[  111.305096][ T6984] ffff888030d12a70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080
[  111.309135][ T6984] 
[  111.309135][ T6984] but task is already holding lock:
[  111.312378][ T6984] ffff888057a98180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080
[  111.316002][ T6984] 
[  111.316002][ T6984] which lock already depends on the new lock.
[  111.316002][ T6984] 
[  111.320493][ T6984] 
[  111.320493][ T6984] the existing dependency chain (in reverse order) is:
[  111.324288][ T6984] 
[  111.324288][ T6984] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  111.327435][ T6984]        __mutex_lock+0x1a2/0x1b90
[  111.329690][ T6984]        nbd_queue_rq+0xba/0x1080
[  111.331923][ T6984]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  111.334604][ T6984]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  111.337603][ T6984]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  111.340483][ T6984]        blk_mq_run_hw_queue+0x23c/0x670
[  111.342963][ T6984]        blk_mq_dispatch_list+0x51d/0x1360
[  111.345551][ T6984]        blk_mq_flush_plug_list+0x130/0x600
[  111.348247][ T6984]        __blk_flush_plug+0x2c4/0x4b0
[  111.350645][ T6984]        __submit_bio+0x584/0x6c0
[  111.352916][ T6984]        submit_bio_noacct_nocheck+0x562/0xc10
[  111.355669][ T6984]        submit_bio_noacct+0xd17/0x2010
[  111.358104][ T6984]        submit_bh_wbc+0x59c/0x770
[  111.360347][ T6984]        block_read_full_folio+0x264/0x8e0
[  111.362957][ T6984]        filemap_read_folio+0xfc/0x3b0
[  111.365416][ T6984]        do_read_cache_folio+0x2d7/0x6b0
[  111.367886][ T6984]        read_part_sector+0xd1/0x370
[  111.370242][ T6984]        adfspart_check_ICS+0x93/0x910
[  111.372708][ T6984]        bdev_disk_changed+0x7f8/0xc80
[  111.375091][ T6984]        blkdev_get_whole+0x187/0x290
[  111.377425][ T6984]        bdev_open+0x2c7/0xe40
[  111.379455][ T6984]        blkdev_open+0x34e/0x4f0
[  111.381103][ T6984]        do_dentry_open+0x6d8/0x1660
[  111.382846][ T6984]        vfs_open+0x82/0x3f0
[  111.384427][ T6984]        path_openat+0x208c/0x31a0
[  111.386675][ T6984]        do_file_open+0x20e/0x430
[  111.388580][ T6984]        do_sys_openat2+0x10d/0x1e0
[  111.390543][ T6984]        __x64_sys_openat+0x12d/0x210
[  111.392946][ T6984]        do_syscall_64+0x106/0xf80
[  111.395120][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.397997][ T6984] 
[  111.397997][ T6984] -> #5 (set->srcu){.+.+}-{0:0}:
[  111.401203][ T6984]        __synchronize_srcu+0xa1/0x2a0
[  111.403680][ T6984]        blk_mq_quiesce_queue+0x149/0x1c0
[  111.406241][ T6984]        elevator_switch+0x17b/0x7e0
[  111.408518][ T6984]        elevator_change+0x352/0x530
[  111.410885][ T6984]        elevator_set_default+0x29e/0x360
[  111.413329][ T6984]        blk_register_queue+0x412/0x590
[  111.415823][ T6984]        __add_disk+0x73f/0xe40
[  111.418066][ T6984]        add_disk_fwnode+0x118/0x5c0
[  111.420492][ T6984]        nbd_dev_add+0x77a/0xb10
[  111.422784][ T6984]        nbd_init+0x291/0x2b0
[  111.424976][ T6984]        do_one_initcall+0x11d/0x760
[  111.427403][ T6984]        kernel_init_freeable+0x6e5/0x7a0
[  111.429947][ T6984]        kernel_init+0x1f/0x1e0
[  111.432162][ T6984]        ret_from_fork+0x754/0xd80
[  111.434515][ T6984]        ret_from_fork_asm+0x1a/0x30
[  111.436954][ T6984] 
[  111.436954][ T6984] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  111.440445][ T6984]        __mutex_lock+0x1a2/0x1b90
[  111.442821][ T6984]        elevator_change+0x1bc/0x530
[  111.445240][ T6984]        elevator_set_none+0x92/0xf0
[  111.447677][ T6984]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[  111.450568][ T6984]        nbd_start_device+0x1a6/0xbd0
[  111.452899][ T6984]        nbd_genl_connect+0xff2/0x1a40
[  111.454690][ T6984]        genl_family_rcv_msg_doit+0x214/0x300
[  111.456686][ T6984]        genl_rcv_msg+0x560/0x800
[  111.458341][ T6984]        netlink_rcv_skb+0x159/0x420
[  111.460066][ T6984]        genl_rcv+0x28/0x40
[  111.461570][ T6984]        netlink_unicast+0x5aa/0x870
[  111.463302][ T6984]        netlink_sendmsg+0x8b0/0xda0
[  111.465060][ T6984]        ____sys_sendmsg+0x9e1/0xb70
[  111.466780][ T6984]        ___sys_sendmsg+0x190/0x1e0
[  111.468442][ T6984]        __sys_sendmsg+0x170/0x220
[  111.470131][ T6984]        do_syscall_64+0x106/0xf80
[  111.471821][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.473924][ T6984] 
[  111.473924][ T6984] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  111.476695][ T6984]        blk_alloc_queue+0x610/0x790
[  111.478414][ T6984]        blk_mq_alloc_queue+0x174/0x290
[  111.480212][ T6984]        __blk_mq_alloc_disk+0x29/0x120
[  111.482030][ T6984]        nbd_dev_add+0x492/0xb10
[  111.483639][ T6984]        nbd_init+0x291/0x2b0
[  111.485195][ T6984]        do_one_initcall+0x11d/0x760
[  111.486915][ T6984]        kernel_init_freeable+0x6e5/0x7a0
[  111.488790][ T6984]        kernel_init+0x1f/0x1e0
[  111.490382][ T6984]        ret_from_fork+0x754/0xd80
[  111.492059][ T6984]        ret_from_fork_asm+0x1a/0x30
[  111.493784][ T6984] 
[  111.493784][ T6984] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  111.496113][ T6984]        fs_reclaim_acquire+0xc4/0x100
[  111.497902][ T6984]        kmem_cache_alloc_node_noprof+0x53/0x6f0
[  111.499955][ T6984]        __alloc_skb+0x140/0x710
[  111.501579][ T6984]        tcp_stream_alloc_skb+0x34/0x660
[  111.503382][ T6984]        tcp_sendmsg_locked+0x1396/0x45e0
[  111.505255][ T6984]        tcp_sendmsg+0x2e/0x50
[  111.506830][ T6984]        inet_sendmsg+0xb9/0x140
[  111.508444][ T6984]        sock_write_iter+0x4ea/0x5a0
[  111.510186][ T6984]        vfs_write+0x6ac/0x1070
[  111.511788][ T6984]        ksys_write+0x1f8/0x250
[  111.513415][ T6984]        do_syscall_64+0x106/0xf80
[  111.515088][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.517174][ T6984] 
[  111.517174][ T6984] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  111.519638][ T6984]        lock_sock_nested+0x41/0xf0
[  111.521334][ T6984]        inet_shutdown+0x67/0x410
[  111.522999][ T6984]        nbd_mark_nsock_dead+0xae/0x5c0
[  111.524817][ T6984]        recv_work+0x5fb/0x8c0
[  111.526383][ T6984]        process_one_work+0xa23/0x19a0
[  111.528158][ T6984]        worker_thread+0x5ef/0xe50
[  111.529833][ T6984]        kthread+0x370/0x450
[  111.531360][ T6984]        ret_from_fork+0x754/0xd80
[  111.533054][ T6984]        ret_from_fork_asm+0x1a/0x30
[  111.534778][ T6984] 
[  111.534778][ T6984] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  111.537234][ T6984]        __lock_acquire+0x14b8/0x2630
[  111.538970][ T6984]        lock_acquire+0x1cf/0x380
[  111.540634][ T6984]        __mutex_lock+0x1a2/0x1b90
[  111.542308][ T6984]        nbd_queue_rq+0x428/0x1080
[  111.543969][ T6984]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  111.545952][ T6984]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  111.548138][ T6984]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  111.550244][ T6984]        blk_mq_run_hw_queue+0x23c/0x670
[  111.552091][ T6984]        blk_mq_dispatch_list+0x51d/0x1360
[  111.554014][ T6984]        blk_mq_flush_plug_list+0x130/0x600
[  111.555936][ T6984]        __blk_flush_plug+0x2c4/0x4b0
[  111.557699][ T6984]        __submit_bio+0x584/0x6c0
[  111.559330][ T6984]        submit_bio_noacct_nocheck+0x562/0xc10
[  111.561327][ T6984]        submit_bio_noacct+0xd17/0x2010
[  111.563113][ T6984]        submit_bh_wbc+0x59c/0x770
[  111.564822][ T6984]        block_read_full_folio+0x264/0x8e0
[  111.566694][ T6984]        filemap_read_folio+0xfc/0x3b0
[  111.568420][ T6984]        do_read_cache_folio+0x2d7/0x6b0
[  111.570231][ T6984]        read_part_sector+0xd1/0x370
[  111.571942][ T6984]        adfspart_check_ICS+0x93/0x910
[  111.573707][ T6984]        bdev_disk_changed+0x7f8/0xc80
[  111.575461][ T6984]        blkdev_get_whole+0x187/0x290
[  111.577189][ T6984]        bdev_open+0x2c7/0xe40
[  111.578708][ T6984]        blkdev_open+0x34e/0x4f0
[  111.580263][ T6984]        do_dentry_open+0x6d8/0x1660
[  111.581938][ T6984]        vfs_open+0x82/0x3f0
[  111.583407][ T6984]        path_openat+0x208c/0x31a0
[  111.585005][ T6984]        do_file_open+0x20e/0x430
[  111.586564][ T6984]        do_sys_openat2+0x10d/0x1e0
[  111.588220][ T6984]        __x64_sys_openat+0x12d/0x210
[  111.589917][ T6984]        do_syscall_64+0x106/0xf80
[  111.591491][ T6984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.593472][ T6984] 
[  111.593472][ T6984] other info that might help us debug this:
[  111.593472][ T6984] 
[  111.596643][ T6984] Chain exists of:
[  111.596643][ T6984]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  111.596643][ T6984] 
[  111.600348][ T6984]  Possible unsafe locking scenario:
[  111.600348][ T6984] 
[  111.602591][ T6984]        CPU0                    CPU1
[  111.604240][ T6984]        ----                    ----
[  111.605884][ T6984]   lock(&cmd->lock);
[  111.607132][ T6984]                                lock(set->srcu);
[  111.609106][ T6984]                                lock(&cmd->lock);
[  111.611106][ T6984]   lock(&nsock->tx_lock);
[  111.612492][ T6984] 
[  111.612492][ T6984]  *** DEADLOCK ***
[  111.612492][ T6984] 
[  111.614955][ T6984] 3 locks held by udevd/6984:
[  111.616449][ T6984]  #0: ffff88802909f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  111.619331][ T6984]  #1: ffff888028deeb18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670
[  111.622374][ T6984]  #2: ffff888057a98180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080
[  111.625275][ T6984] 
[  111.625275][ T6984] stack backtrace:
[  111.627186][ T6984] CPU: 2 UID: 0 PID: 6984 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.627202][ T6984] Tainted: [L]=SOFTLOCKUP
[  111.627206][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  111.627212][ T6984] Call Trace:
[  111.627217][ T6984]  <TASK>
[  111.627222][ T6984]  dump_stack_lvl+0x100/0x190
[  111.627240][ T6984]  print_circular_bug.cold+0x178/0x1c7
[  111.627258][ T6984]  check_noncircular+0x146/0x160
[  111.627276][ T6984]  __lock_acquire+0x14b8/0x2630
[  111.627288][ T6984]  lock_acquire+0x1cf/0x380
[  111.627297][ T6984]  ? nbd_queue_rq+0x428/0x1080
[  111.627314][ T6984]  ? __pfx___might_resched+0x10/0x10
[  111.627327][ T6984]  __mutex_lock+0x1a2/0x1b90
[  111.627342][ T6984]  ? nbd_queue_rq+0x428/0x1080
[  111.627358][ T6984]  ? nbd_queue_rq+0x428/0x1080
[  111.627374][ T6984]  ? is_bpf_text_address+0x8a/0x1a0
[  111.627390][ T6984]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  111.627405][ T6984]  ? __pfx___mutex_lock+0x10/0x10
[  111.627419][ T6984]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  111.627434][ T6984]  ? is_bpf_text_address+0x94/0x1a0
[  111.627449][ T6984]  ? kernel_text_address+0x8d/0x100
[  111.627461][ T6984]  ? arch_stack_walk+0xa6/0xf0
[  111.627476][ T6984]  ? nbd_queue_rq+0x428/0x1080
[  111.627491][ T6984]  nbd_queue_rq+0x428/0x1080
[  111.627511][ T6984]  ? stack_trace_save+0x8e/0xc0
[  111.627527][ T6984]  ? __pfx_nbd_queue_rq+0x10/0x10
[  111.627543][ T6984]  ? add_lock_to_list+0x99/0x110
[  111.627558][ T6984]  ? lockdep_unlock+0x5a/0xc0
[  111.627571][ T6984]  ? __lock_acquire+0xd73/0x2630
[  111.627581][ T6984]  blk_mq_dispatch_rq_list+0x422/0x1e70
[  111.627598][ T6984]  ? sbitmap_get+0x1d7/0x360
[  111.627611][ T6984]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  111.627625][ T6984]  ? __blk_mq_alloc_driver_tag+0x27a/0x7a0
[  111.627639][ T6984]  __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  111.627654][ T6984]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  111.627670][ T6984]  blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  111.627682][ T6984]  blk_mq_run_hw_queue+0x23c/0x670
[  111.627693][ T6984]  ? blk_mq_run_hw_queue+0x22e/0x670
[  111.627705][ T6984]  blk_mq_dispatch_list+0x51d/0x1360
[  111.627719][ T6984]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  111.627732][ T6984]  ? blk_add_trace_plug+0xf5/0x290
[  111.627745][ T6984]  blk_mq_flush_plug_list+0x130/0x600
[  111.627758][ T6984]  ? trace_block_plug+0x6e/0x240
[  111.627773][ T6984]  ? blk_add_rq_to_plug+0x30a/0x540
[  111.627786][ T6984]  ? __pfx_wbt_track+0x10/0x10
[  111.627796][ T6984]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  111.627810][ T6984]  ? blk_mq_submit_bio+0x9aa/0x2bf0
[  111.627825][ T6984]  __blk_flush_plug+0x2c4/0x4b0
[  111.627838][ T6984]  ? __pfx___blk_flush_plug+0x10/0x10
[  111.627851][ T6984]  __submit_bio+0x584/0x6c0
[  111.627863][ T6984]  ? __pfx___submit_bio+0x10/0x10
[  111.627878][ T6984]  ? submit_bio_noacct_nocheck+0x562/0xc10
[  111.627890][ T6984]  submit_bio_noacct_nocheck+0x562/0xc10
[  111.627903][ T6984]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  111.627917][ T6984]  ? __pfx___might_resched+0x10/0x10
[  111.627928][ T6984]  ? bio_alloc_bioset+0x309/0x850
[  111.627946][ T6984]  submit_bio_noacct+0xd17/0x2010
[  111.627959][ T6984]  submit_bh_wbc+0x59c/0x770
[  111.627974][ T6984]  block_read_full_folio+0x264/0x8e0
[  111.627990][ T6984]  ? __pfx_blkdev_get_block+0x10/0x10
[  111.628003][ T6984]  ? __pfx_blkdev_read_folio+0x10/0x10
[  111.628016][ T6984]  filemap_read_folio+0xfc/0x3b0
[  111.628031][ T6984]  ? __pfx_filemap_read_folio+0x10/0x10
[  111.628047][ T6984]  do_read_cache_folio+0x2d7/0x6b0
[  111.628063][ T6984]  ? __pfx_blkdev_read_folio+0x10/0x10
[  111.628076][ T6984]  read_part_sector+0xd1/0x370
[  111.628087][ T6984]  adfspart_check_ICS+0x93/0x910
[  111.628098][ T6984]  ? snprintf+0xc7/0x100
[  111.628110][ T6984]  ? __pfx_snprintf+0x10/0x10
[  111.628121][ T6984]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  111.628132][ T6984]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  111.628145][ T6984]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  111.628156][ T6984]  bdev_disk_changed+0x7f8/0xc80
[  111.628169][ T6984]  ? __pfx_bdev_disk_changed+0x10/0x10
[  111.628181][ T6984]  blkdev_get_whole+0x187/0x290
[  111.628192][ T6984]  bdev_open+0x2c7/0xe40
[  111.628205][ T6984]  blkdev_open+0x34e/0x4f0
[  111.628218][ T6984]  do_dentry_open+0x6d8/0x1660
[  111.628234][ T6984]  ? __pfx_blkdev_open+0x10/0x10
[  111.628248][ T6984]  vfs_open+0x82/0x3f0
[  111.628261][ T6984]  path_openat+0x208c/0x31a0
[  111.628274][ T6984]  ? __pfx_path_openat+0x10/0x10
[  111.628287][ T6984]  do_file_open+0x20e/0x430
[  111.628298][ T6984]  ? __pfx_do_file_open+0x10/0x10
[  111.628314][ T6984]  ? alloc_fd+0x476/0x790
[  111.628325][ T6984]  ? do_getname+0x191/0x390
[  111.628339][ T6984]  do_sys_openat2+0x10d/0x1e0
[  111.628352][ T6984]  ? __pfx_do_sys_openat2+0x10/0x10
[  111.628365][ T6984]  ? __sys_recvmsg+0x18c/0x220
[  111.628378][ T6984]  ? __pfx___sys_recvmsg+0x10/0x10
[  111.628392][ T6984]  __x64_sys_openat+0x12d/0x210
[  111.628406][ T6984]  ? __pfx___x64_sys_openat+0x10/0x10
[  111.628422][ T6984]  do_syscall_64+0x106/0xf80
[  111.628435][ T6984]  ? clear_bhb_loop+0x40/0x90
[  111.628447][ T6984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.628475][ T6984] RIP: 0033:0x7fba15bdd407
[  111.628486][ T6984] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  111.628496][ T6984] RSP: 002b:00007ffefc85efc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  111.628510][ T6984] RAX: ffffffffffffffda RBX: 00007fba15b51880 RCX: 00007fba15bdd407
[  111.628516][ T6984] RDX: 00000000000a0800 RSI: 000055bf1d92fb10 RDI: ffffffffffffff9c
[  111.628523][ T6984] RBP: 000055bf1d6f82c0 R08: 0000000000000000 R09: 0000000000000000
[  111.628529][ T6984] R10: 0000000000000000 R11: 0000000000000202 R12: 000055bf1d93e320
[  111.628536][ T6984] R13: 000055bf1d9338d0 R14: 0000000000000000 R15: 000055bf1d93e320
[  111.628545][ T6984]  </TASK>
[  111.629779][   T54] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  111.655065][ T6984] block nbd2: Dead connection, failed to find a fallback
[  111.830972][ T6984] block nbd2: shutting down sockets
[  111.832716][ T6984] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.835783][ T6984] Buffer I/O error on dev nbd2, logical block 0, async page read
[  111.838727][ T6984] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.841849][ T6984] Buffer I/O error on dev nbd2, logical block 1, async page read
[  111.844507][ T6984] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.848205][ T6984] Buffer I/O error on dev nbd2, logical block 2, async page read
[  111.850791][ T6984] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.853917][ T6984] Buffer I/O error on dev nbd2, logical block 3, async page read
[  111.856596][ T6984] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.867694][ T6984] Buffer I/O error on dev nbd2, logical block 0, async page read
[  111.870359][ T6984] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.873561][ T6984] Buffer I/O error on dev nbd2, logical block 1, async page read
[  111.876195][ T6984] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.881010][ T6984] Buffer I/O error on dev nbd2, logical block 2, async page read
[  111.883609][ T6984] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.886668][ T6984] Buffer I/O error on dev nbd2, logical block 3, async page read
[  111.889312][ T6984] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.892398][ T6984] Buffer I/O error on dev nbd2, logical block 0, async page read
[  111.894945][ T6984] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  111.902370][ T6984] Buffer I/O error on dev nbd2, logical block 1, async page read
[  111.905196][ T6984] ldm_validate_partition_table(): Disk read failed.
[  111.907552][ T6984] Dev nbd2: unable to read RDB block 0
[  111.913563][ T6984]  nbd2: unable to read partition table
[  111.931739][ T6984] ldm_validate_partition_table(): Disk read failed.
[  111.934187][ T6984] Dev nbd2: unable to read RDB block 0
[  111.936245][ T6984]  nbd2: unable to read partition table
[  112.294656][  T118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.298870][  T118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.302984][  T118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  112.371653][  T118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.376131][  T118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.380732][  T118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  112.452507][  T118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.457125][  T118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.461991][  T118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  112.524192][  T118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.527452][  T118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.530891][  T118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  112.609664][  T118] bridge_slave_1: left allmulticast mode
[  112.611665][  T118] bridge_slave_1: left promiscuous mode
[  112.613815][  T118] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.616897][  T118] bridge_slave_0: left allmulticast mode
[  112.618916][  T118] bridge_slave_0: left promiscuous mode
[  112.620868][  T118] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.869478][  T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.874767][  T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.879805][  T118] bond0 (unregistering): Released all slaves
[  112.884366][  T118] bond1 (unregistering): Released all slaves
[  112.889641][  T118] bond2 (unregistering): Released all slaves
[  112.893732][  T118] bond3 (unregistering): (slave veth1): Releasing active interface
[  112.896823][  T118] bond3 (unregistering): Released all slaves
[  113.038885][  T118] IPVS: stopping master sync thread 6061 ...
[  113.041014][  T118] IPVS: stopping backup sync thread 6617 ...
[  113.302915][  T118] hsr_slave_0: left promiscuous mode
[  113.305563][  T118] hsr_slave_1: left promiscuous mode
[  113.307682][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.310234][  T118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.312996][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.315490][  T118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.321707][  T118] veth1_macvtap: left promiscuous mode
[  113.323630][  T118] veth0_macvtap: left promiscuous mode
[  113.326074][  T118] veth1_vlan: left promiscuous mode
[  113.328811][  T118] veth0_vlan: left promiscuous mode
[  113.435978][  T118] team0 (unregistering): Port device team_slave_1 removed
[  113.443127][  T118] team0 (unregistering): Port device team_slave_0 removed