last executing test programs:

52.830750827s ago: executing program 0 (id=6):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0xffffff1f, 0xffffff7b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x8100}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}]}}}]}, 0x58}}, 0x40804)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=[@increfs]})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]})
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000880)={0x2020}, 0x2020)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

52.726036464s ago: executing program 0 (id=13):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f0000000140)=@delqdisc={0x48, 0x25, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x801f, 0x9}, {0x10, 0x7}, {0x5, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffff12, 0x2, {0x9, "4e017200000300001a6cfb55585c9d78"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141101)
sendmsg$nl_route(r2, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB], 0xe38}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008890}, 0x10)

52.670165578s ago: executing program 0 (id=15):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x100027)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) (async)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x220000, 0xe6, 0x29}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2840, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2840, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
pipe2$watch_queue(&(0x7f0000000340)={<r8=>0xffffffffffffffff}, 0x80)
add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async)
r9 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xdd)
keyctl$chown(0x4, r9, 0x0, 0xee01)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x39, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x58}}, 0x4) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x39, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x58}}, 0x4)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006)

51.969916782s ago: executing program 0 (id=31):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7b, @ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fe}, 0x6}, 0x1c)
r4 = syz_io_uring_setup(0xefd, &(0x7f00000001c0)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x15961, 0x10000, 0x0, 0x4e}, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000580)=<r10=>0x0, &(0x7f00000005c0)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000600)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0xd8000004}], 0x1, 0x0, 0x1, {0x0, r12}})
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000340)=@IORING_OP_PIPE={0x3e, 0x18, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x8, 0xfff], 0x0, 0x200, 0x1, {0x0, 0x0, 0x3}})
io_uring_enter(r4, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r13 = socket(0x10, 0x803, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0xc, 0x6, 0x2)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x3ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40888)

51.869426513s ago: executing program 0 (id=35):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000012c0)='./mnt\x00', &(0x7f0000001300)='tmpfs\x00', 0x0, &(0x7f0000001340)='casefold,strict_encoding\x00')
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000013c0)='./sys\x00', &(0x7f0000001400)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0)
write(r4, &(0x7f0000001480)='1', 0x1)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0xbe2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioperm(0x0, 0x2, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x0, 0x6, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

51.530435437s ago: executing program 0 (id=39):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000100)={0x48})
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x4) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0)

35.711919564s ago: executing program 32 (id=39):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000100)={0x48})
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x4) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0)

32.227937331s ago: executing program 4 (id=252):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000070000000400000001000100410100001e5dfc43570ca53d75f97f3a8012dd328749e50503bd995697148a8473956bb516ace8cf7f6d8cd0c6ca7f71bd87c7002fb3ee0c2e0eee4e7f6e9391c1b20d18ec86f82a4f58d9e0c41417169d82f9fe3651215628d197061cc661cf7be62188b1bc937242022525ae6624b030ccb44d342c5de89875b19f7c30cd821a949cbe4532e1b09fb23245a83f14ab67b846361c8b0c035c436dbf115f89791da82b4802e9df282ba069a80b2574653841c7113f4c95758cdd17353d3a7c5d1f2db92ac0c51773e35e33ddd157873680f2dc", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50)
syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x402001)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x406}}}, 0x7)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000700)={{0x0, 0x3938700}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/183, 0xb7)
clock_adjtime(0x0, &(0x7f0000000800)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x3, 0xb, 0x3, 0x8000000000005a, 0x3})
syz_open_procfs(0x0, &(0x7f0000000900)='fd/3\x00')
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = semget$private(0x0, 0x6, 0x0)
semtimedop(r5, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0)
semop(r5, &(0x7f0000000380)=[{0x3, 0x8000, 0x1000}], 0x1)
semop(r5, &(0x7f00000003c0)=[{}, {0x0, 0x0, 0x2000}], 0x2)
semctl$GETZCNT(r5, 0x0, 0xf, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x5, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0x3, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xa, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x8, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0x7f}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}})
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x3, 0x0, @SEQ_CONTROLLER=0xfe, 0x0, 0x4})

30.776991322s ago: executing program 4 (id=262):
r0 = memfd_create(&(0x7f0000000300)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000340)="0600", 0x2)
sendfile(r0, r0, &(0x7f0000000380), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x6)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000400)={0x800, 0xffff7fff, 0xa, 0xf7ff, 0x3, "dfe790060000c0c033d40fa1ba00000100", 0x7, 0x4})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x6)
r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_tun_dev_create\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x5, 0x9, 0xa, 0x10, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x800, 0x22, &(0x7f0000000140)=""/34, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="41b05b5b8c073e7c442be4f043ac80a7a7bf26c6661bcc30178fc648ad081c4555f4e404adef3f038cc27131536e3ad4db85f33b635f60dded10980a382927038e053019150e26c4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, r2, r3}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

30.180404896s ago: executing program 4 (id=263):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x26022, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4603000702420000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000330d000005003800020078000700090051e57464"], 0xb0)
pipe(&(0x7f00000002c0))
lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0)
close(r9)
execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
r10 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
io_uring_setup(0xb52, 0x0)
syz_ublk_setup_queues(r8, r7, &(0x7f0000001400)={0x0, 0xf233, 0x10, 0x1, 0x3a9, 0x0, r1}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf4d, 0x4000, 0x2, 0x12c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa95e, 0x80, 0x3, 0x316, 0x0, r1}, 0xffffffffffffffff, 0x0, <r11=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd715, 0x10, 0x3, 0x7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x1, 0x15, 0x0, r1}, 0xffffffffffffffff, 0x0, 0x0, <r12=>0x0}], 0x4, &(0x7f00000033c0)={0x2e, 0x4, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5ba4}, 0x0, r6, '\x00', {0x4, 0x758, 0x0, &(0x7f00000023c0)=@buf_1k="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"}}, &(0x7f0000003440))
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x4, 0x8, 0x8}, 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r13}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb4, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r14, 0x0, 0xe, 0x0, &(0x7f00000007c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_io_uring_submit$UBLK(r2, r11, r12, &(0x7f0000000140)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, '\x00', {r10}})

30.127370391s ago: executing program 4 (id=264):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f00000004c0)='./file0/../file0\x00', 0x4)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2ddc4a, 0x0) (async)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2ddc4a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtaction={0xe8, 0x30, 0x216822a75a8bdd29, 0x0, 0x2, {}, [{0xd4, 0x1, [@m_vlan={0xd0, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffe}]}, {0x99, 0x6, "38543605e2a1675da7281dffc9ded3d1064104751bfd3a6c37b44acd688f582873a81b448f186efd7670726c7a897ee88a6a43538ff439dae3fc7992c6535d4c930989d055034ca71892c75f5997af2621c0ed2ce6d1e2ac01960d0de6e85288927d21c4b75fa63f3d0a4a9b4c798d29a6b606e802c3bf4dfc6551d295cbf5409b09dd4fa18566550f0878417d93f676e43862c31d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xe8}}, 0x40004)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

30.126687294s ago: executing program 4 (id=265):
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x50}, 0x10) (async)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0)
ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000900)={0x7fffffff, 0x2, 0x1000, 0x682d4618}) (async)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
syz_io_uring_setup(0x7065, &(0x7f0000000480)={0x0, 0x920d, 0x1000, 0x0, 0x3d1}, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540), &(0x7f0000000580))
syz_ublk_setup_io_uring(0x3fa5, &(0x7f00000005c0)={0x0, 0x6c4b, 0x404, 0x0, 0x2e9}, &(0x7f0000000640), &(0x7f0000000680)=<r3=>0x0, &(0x7f00000006c0))
syz_io_uring_setup(0x4e07, &(0x7f0000000700)={0x0, 0xfb7f, 0x80, 0x0, 0x389}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000840)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x6d, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) (async)
memfd_create(&(0x7f0000000080)=':/^$\x00', 0x2) (async)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) (async)
ioctl(r5, 0x8b32, &(0x7f00000000c0)="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") (async)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000))

29.909480189s ago: executing program 4 (id=268):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

29.829335833s ago: executing program 33 (id=268):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.338505428s ago: executing program 2 (id=452):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x7fffffff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x48001)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)

12.338224169s ago: executing program 2 (id=453):
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='debugfs\x00', 0x1214040, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000840)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r7, &(0x7f0000000980)='0', 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000009c0)={0x90000, 0x3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r8 = syz_open_dev$video(&(0x7f0000000400), 0x3, 0x40)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000440)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000480)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000500)}, 0x400000})
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000540)={0x1, 0x1, 0x2})
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x91ac7e, &(0x7f0000000740)=ANY=[@ANYBLOB="6d6f64653d3030303030303030303030303030303030b030353735352c006f03f815bd62ce481ec6be7b30d22582bfbd00abdf7cc9bfd235ab1d7472edf9b40b1e2ce1996b53325c69f5512f176395721d0dad396c092512e68bbe1a1b458365862d11c21561e95849534e6a1e996b64e31c6a5e2512053defa3740c4b"])

12.114407535s ago: executing program 2 (id=458):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004ffb000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.05991215s ago: executing program 2 (id=461):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2a10018, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2210088, 0x0)
chdir(&(0x7f0000000500)='./file0\x00')
r0 = syz_open_dev$loop(&(0x7f0000000540), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x1}, 0x90)
lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)

11.928451324s ago: executing program 2 (id=464):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)={0x80000004})
r4 = syz_usbip_server_init(0x4)
write$usbip_server(r4, &(0x7f0000000000)=@ret_submit={{0x3, 0x80000000, 0x0, 0x0, 0x9}, 0xe, 0x0, 0xfffffffd, 0x0, 0x3ff}, 0x30)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000003c0)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa0000001})
epoll_pwait(r3, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1fc, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11.469918852s ago: executing program 2 (id=475):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='6'], 0x1c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
syz_io_uring_submit(r2, 0x0, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x4, 0x24040871})
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000400))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000440)={0x0, 0x0, 0x10001, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000900))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap$dontunmap(&(0x7f00005a4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000125000/0x2000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
landlock_create_ruleset(&(0x7f0000000540)={0x4312, 0xa, 0x2, 0x10102, 0x1}, 0x30, 0x5)
r5 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r5, &(0x7f0000000540), 0x6f5, 0x2000000022, &(0x7f0000000580)={0x77359400})
sendmsg$key(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000840)="3242703ecfd6570416cc88c91c0e", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
listns(&(0x7f0000000880)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000008c0)=[0x0], 0x1, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000940)=0x1)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000380)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

11.437226912s ago: executing program 34 (id=475):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='6'], 0x1c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
syz_io_uring_submit(r2, 0x0, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x4, 0x24040871})
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000400))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000440)={0x0, 0x0, 0x10001, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000900))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap$dontunmap(&(0x7f00005a4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000125000/0x2000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
landlock_create_ruleset(&(0x7f0000000540)={0x4312, 0xa, 0x2, 0x10102, 0x1}, 0x30, 0x5)
r5 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r5, &(0x7f0000000540), 0x6f5, 0x2000000022, &(0x7f0000000580)={0x77359400})
sendmsg$key(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000840)="3242703ecfd6570416cc88c91c0e", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
listns(&(0x7f0000000880)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000008c0)=[0x0], 0x1, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000940)=0x1)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000380)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

3.358229794s ago: executing program 6 (id=556):
setns(0xc9, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0x80000000, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)=0x804)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000280)={@my=0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000001"], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x10, 0x80000)
sendto$llc(r2, &(0x7f0000000580)="1214b7cc87204f3cfdb5f2c63244ad3eba5cb87da8ea6c75cbaa74d3b67a451a5a20030824d2afea226a55550b41e46d87b3080ab749a9d47ddfd2abec19c96a74242625d82eece3c38723cb783843e7eed63e0fcd04b9f135a983f0c3e9acfe82f85b761862cfb06ac66a0f7149f4820868c76a9834321756c7c9b7562953b8709b2e2727ff20cea4c1b94321c045026b6e81aa8f6029bbe4c8ff", 0x9b, 0x20000000, &(0x7f0000000640)={0x1a, 0x10e, 0x17, 0x0, 0x0, 0x3, @multicast}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x1a, 0x0, 0xb, 0x4}, 0x28)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0)
write(r0, &(0x7f0000000100)="01", 0x1)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1ad782, 0x0)
syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
read(0xffffffffffffffff, &(0x7f0000001080)=""/4096, 0x1000)

2.008054322s ago: executing program 3 (id=580):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c80)={'bridge_slave_0\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2040800)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f00000000c0)=<r8=>0x0) (async, rerun: 32)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', <r12=>0x0}) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r12, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)

1.93016577s ago: executing program 6 (id=583):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4})
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x119a03)
r1 = socket$inet(0x2, 0x1, 0x0)
close(0x3)
r2 = socket$inet(0x2, 0x80001, 0x84)
listen(r2, 0x3)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000100)=0x7f, 0x4)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000400)={0x0, 0x0, 0x8000, 0x3ff})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)}, 0x0)
bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000600)='dctcp', 0x5)
connect$inet(r4, &(0x7f0000000640)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000680)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000840), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
socket$pppl2tp(0x18, 0x1, 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @multicast1}, 0x10)
shutdown(r4, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_open_dev$vim2m(&(0x7f00000008c0), 0x3, 0x2)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc539, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xb0, 0x4, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x95, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xeb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x5, 0x8}}}}}]}}]}}, 0x0)
r6 = syz_pidfd_open(r3, 0x0)
ioctl$EXT4_IOC_MIGRATE(r6, 0xff07)
listen(r1, 0x0)
unshare(0x26020400)

1.87900658s ago: executing program 3 (id=587):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x0, 0x4, 0xe3, 0x5}, {0x5, 0xa8, 0x9, 0x2}, {0x3, 0x9, 0x5, 0x4}, {0x0, 0x4, 0x5, 0xffffffff}, {0x7, 0x8, 0x2, 0x200}, {0x8000, 0x3, 0x89, 0x8}, {0x9e1f, 0xcb, 0x7, 0x200}, {0x800, 0x5, 0xa4}, {0x2, 0x10, 0x6, 0x2}]})
ioctl$OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f0000000140)=0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x121, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4044040)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvfrom$inet6(r4, &(0x7f0000000300)=""/39, 0x27, 0x30000, &(0x7f0000000340)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x9, &(0x7f0000000380)=[{0xf, 0xb0, 0x81, 0x1}, {0x4, 0x6, 0x3, 0x6}, {0x200, 0xff, 0x8, 0x6}, {0xb3e, 0x9, 0x5, 0xfffffffc}, {0x6, 0x1, 0x7, 0x6}, {0x8b5, 0xf, 0x4, 0x9}, {0xb61, 0xe, 0x4}, {0x3, 0xa, 0x1, 0x6}, {0x10, 0x7, 0x5, 0x8}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x4c89, 0x2, 0xbb, 0x9}]})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000600)=0x1)
sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv4_getnetconf={0x2c, 0x52, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x65)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/custom1\x00', 0x1800, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a40)=<r6=>0x0)
r7 = getpid()
syz_clone3(&(0x7f0000000ac0)={0x2000100, &(0x7f0000000780)=<r8=>0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800), {0x1c}, &(0x7f0000000840)=""/251, 0xfb, &(0x7f0000000940)=""/206, &(0x7f0000000a80)=[r6, r7], 0x2, {r2}}, 0x58)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000b40)={0x0, "afc87444ae180d17ca5be0dee779c1500ce6d30b157699ee90268545d6033cabf8e39cbe4dfe340496841df628cae1dd95f7e57e5594941eaa602a38f9aa258d", {0x8, 0x6}})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24008810}, 0x0)
mount$bind(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), 0x1101000, 0x0)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2081, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000e00)={{0x1, 0x1, 0x18, <r10=>r8, {0x101}}, './file0\x00'})
setxattr$trusted_overlay_upper(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80), &(0x7f0000000ec0)={0x0, 0xfb, 0x1015, 0x2, 0x2, "1481cd62a855c7b11e4437f79f5fe87d", "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"}, 0x1015, 0x3)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xa4, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0)

1.090453144s ago: executing program 1 (id=597):
r0 = socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='plat', 0x4) (async)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$sock_int(r2, 0x1, 0x2d, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x20000000)

1.08971978s ago: executing program 1 (id=599):
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='debugfs\x00', 0x1214040, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/test\x00', 0x777)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000840)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000980)='0', 0x1)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x91ac7e, &(0x7f0000000740)=ANY=[@ANYBLOB="6d6f64653d3030303030303030303030303030303030b030353735352c006f03f815bd62ce481ec6be7b30d22582bfbd00abdf7cc9bfd235ab1d7472edf9b40b1e2ce1996b53325c69f5512f176395721d0dad396c092512e68bbe1a1b458365862d11c21561e95849534e6a1e996b64e31c6a5e2512053defa3740c4b"])

1.089365176s ago: executing program 5 (id=600):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0)
landlock_restrict_self(r0, 0x1f)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(0x0, 0x0, 0xb9124f82075e45a4, 0x10, 0xffffffffffffffff, 0x3000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xaa}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000005c0), 0x40000000000009f, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
gettid()
timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000940)="bd67c57e1fca0c78bd4931cb327ee00781b639e8c292c19debe04a91f4c51413b3a431c5d4edfffc2ef9c369b33da1fe3887eb98c7a62c10315b2a14aff45e892ac0f8f596096499d8c69da668c6dd5c68825791977822d959a693fd335a15b3fac4554b0baae9cc8d46ce70b14667bad9ebbc1f3e632bcc92443b89719223fb0d73aea3cd3b9da45e69495382f40923245aea7c24a648a17c42b0ed00a2f0601ee9d7990cb5beaae77bb680f6b9b56289888ae9c8468e72358148a47ceb0ba33c2d25ae20c03db0c5ae0875f3fb399acb75542256f79e6c4983adac613361db227cbc5037cbec1a3828aebf", &(0x7f0000000a40)="c93716cf8c3fc818fd523a9fb9de7d72c05a36507f6cd9bf496c4ef31ceb1ea888b3ccb3ea0799d7e412b208c47eaa581bdd1c2aec044ee3ba5e52e3e4480d7327caabde8eb5c62bfa7b8e800bad4f04af35b36b23bcd3312575e3621dfcec4057cfda789cca56c456568b333f705b4f7cc480"}}, &(0x7f0000000140))
r6 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x100000000000000, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}, 0x18f)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r8=>0x0})
read(r7, &(0x7f0000000200)=""/90, 0x5a)
bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r8, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg(r7, &(0x7f0000000300)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000340)=[{&(0x7f0000000380)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4)

998.424088ms ago: executing program 3 (id=601):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14)
sendmmsg$sock(r2, &(0x7f00000005c0)=[{{&(0x7f0000000600)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x7, 0x7, 0xd6, 0x9d, 0x5, 0x8}, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000200)={0xcf10, 0x0, 0xffff, 0x9dff, 0x15, "0500"})
r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x4ae60)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000500)={0xfffffffffffffbf7, 0x1, 0x3, 0x0, 0x1, 0x8000, "7fa000", 0xb8, 0x56, 0x0, 0xfa, 0x9, 0x1, 0xfd})
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0xfffffff9, 0x0, 0x12, "0062007d8200000000000000830ff7ffffff00"})
r5 = syz_open_pts(r3, 0x0)
r6 = dup3(r5, r3, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000400)=0x17)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

928.741688ms ago: executing program 1 (id=602):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x149842, 0x0)
close(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0)

869.799434ms ago: executing program 1 (id=603):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23804800, &(0x7f0000000000)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x800)

869.606049ms ago: executing program 5 (id=604):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf09000000000000350901000000000095000000ff900000b7020000000000007b9ae8ff00000000b5090000000000007baaf8ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

810.346924ms ago: executing program 5 (id=605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x2}}, 0x10, 0x0}, 0x81)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = add_key(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x402, r4)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000008c0)={r5}, 0x0, &(0x7f0000000900), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000980)={0x3a, 0x2, 0x200})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40202}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x38, 0x20, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x10, 0xff, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000000) (async)
sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40202}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x38, 0x20, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x10, 0xff, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000000)
ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000280)) (async)
ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000280))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='fdinfo/4\x00')
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

670.039234ms ago: executing program 1 (id=606):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x880000, 0x1c0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8008}], 0x1, 0x0, 0x0) (async)
setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000140)=0x8, 0x4) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000180)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) (async)
sendto$inet6(r2, &(0x7f00000001c0), 0x3000, 0x0, 0x0, 0x0) (async)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x101) (async)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) (async)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r3}, 0x8)
close(r4)
r5 = syz_open_dev$vivid(&(0x7f0000000480), 0x0, 0x2)
ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000680)={{0x0, @addr=0x401}, 0x8, 0x7, 0x5}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)='%+9llu \x00'}, 0x20) (async)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000640), 0x0)
close(r9) (async)
close(0x4)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)

669.809201ms ago: executing program 5 (id=607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in=@private}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000680)=0xe8) (async)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x3})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) (async)
write$tun(r3, 0x0, 0xfdef) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x413, &(0x7f00000002c0)=ANY=[])
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f0000000340)='proc_dir\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000380)='proc_dir\x00', &(0x7f00000003c0)='v7\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000000440)=""/267, 0x10b, 0xb1) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

610.177515ms ago: executing program 6 (id=608):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000240)={&(0x7f0000000140)="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", 0xfd})
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) (async)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) (async)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004)
ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) (async)
ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8})
ptrace(0x11, r0) (async)
ptrace(0x11, r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0)
map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d1b"], 0x20)

560.423718ms ago: executing program 5 (id=609):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd)

128.389412ms ago: executing program 1 (id=610):
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='debugfs\x00', 0x1214040, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r4, &(0x7f0000000980)='0', 0x1)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x91ac7e, &(0x7f0000000740)=ANY=[@ANYBLOB="6d6f64653d3030303030303030303030303030303030b030353735352c006f03f815bd62ce481ec6be7b30d22582bfbd00abdf7cc9bfd235ab1d7472edf9b40b1e2ce1996b53325c69f5512f176395721d0dad396c092512e68bbe1a1b458365862d11c21561e95849534e6a1e996b64e31c6a5e2512053defa3740c4b"])

60.335622ms ago: executing program 3 (id=611):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff7a0b00000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

58.784195ms ago: executing program 6 (id=612):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0908000004", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x24, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x24, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)

58.337634ms ago: executing program 6 (id=613):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r1 = socket(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
lseek(r2, 0x7, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)

58.220184ms ago: executing program 3 (id=614):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf09000000000000350901000000000095000000ffa00000b7020000000000007b9ae8ff00000000b5090000000000007baaf8ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

57.755554ms ago: executing program 5 (id=615):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000840)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) (async)
ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000880)=@generic={0x0, 0x2})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6802b0c1723300"/22, @ANYRES32=0x0, @ANYBLOB="08000100feffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) (async, rerun: 64)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0200000000010700000000000000000a08"], 0x1c}}, 0x40000) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000ac0)=<r6=>0x0, &(0x7f0000000b00)=<r7=>0x0, &(0x7f0000000b40)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000b80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@any_dev={0x3, 0xbbd, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x9}}}, &(0x7f0000000c40)=<r10=>0x0) (async, rerun: 64)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x34, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r11, r10, &(0x7f0000000d40)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x2b1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x40, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f0000001040)={0x2e, 0x12, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)
r12 = syz_open_dev$sndpcmc(&(0x7f00000010c0), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x1, 0x13, r12, 0x81000000) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'xfrm0\x00', <r13=>0x0}) (async)
r14 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r14, &(0x7f00000009c0)='`', 0x500, 0x0, &(0x7f0000000a00)={0x2f, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x2) (async)
r15 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r15, 0xc08c5332, &(0x7f0000000100)={0x0, 0x7ff, 0x0, 'queue1\x00'}) (async, rerun: 32)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r15, 0xc08c5335, &(0x7f0000000280)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) (rerun: 32)

57.608255ms ago: executing program 6 (id=616):
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r4)
sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000002f00090027bd7000000000000400000004001d001800098014"], 0x30}, 0x1, 0x0, 0x0, 0x2004a884}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000)
sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x2404c804, 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000b40)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
pread64(r6, 0x0, 0x0, 0x1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000001848a2355c1a640c", @ANYBLOB="830495f9bb7470a952d3bc375ae81c0a66eacda06428e0294133d30d17c65f1f76999a9149ce364ab7604b6d18e4cf255f620301eb55d4558f883205a4f9ca176f48f3d68c877e6ffc1b9e7db290edd64bb2a5418c3ccb3f218232a446911408b8679de15cf42ed83b3dada51e11b6636cd7f40c24433e5838360791c38afa0e7f06c5b96900c70cad75515e14e7545321dbe684c5ff45e323451e024a2d7945998df07b4a870c550c0e4fc9f9e84bd2f9010f8eef"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c00000010001fff2cbd70000100000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x8000)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

0s ago: executing program 3 (id=617):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f00000001c0)='127.0\x00'/15, 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0)
r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', r1) (async)
epoll_pwait(r1, &(0x7f0000000080)=[{}, {}], 0x2, 0x81, &(0x7f00000000c0)={[0xc40a]}, 0x8) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ted_key: encrypted_key: insufficient parameters specified
[   65.456576][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'.
[   65.457215][ T6564] sctp: [Deprecated]: syz.3.202 (pid 6564) Use of int in max_burst socket option.
[   65.457215][ T6564] Use struct sctp_assoc_value instead
[   65.596195][ T6578] tipc: Can't bind to reserved service type 0
[   65.596242][ T6579] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57104 sclass=netlink_xfrm_socket pid=6579 comm=syz.1.207
[   65.721268][ T4588] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   65.871854][ T4588] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   65.872775][ T4588] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   65.872789][ T4588] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.872798][ T4588] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   65.872823][ T4588] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.874056][ T4588] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   65.874108][ T4588] usb 8-1: Product: syz
[   65.874116][ T4588] usb 8-1: Manufacturer: syz
[   65.877702][ T4588] cdc_wdm 8-1:1.0: skipping garbage
[   65.877711][ T4588] cdc_wdm 8-1:1.0: skipping garbage
[   65.908658][ T4588] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   65.908670][ T4588] cdc_wdm 8-1:1.0: Unknown control protocol
[   65.911394][   T57] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   66.062009][   T57] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   66.062973][   T57] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[   66.062992][   T57] usb 6-1: config 1 has no interface number 0
[   66.063012][   T57] usb 6-1: config 1 interface 3 has no altsetting 0
[   66.064909][   T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.064927][   T57] usb 6-1: Product: syz
[   66.064939][   T57] usb 6-1: Manufacturer: syz
[   66.064951][   T57] usb 6-1: SerialNumber: syz
[   66.076079][   T57] usb 6-1: 3:1 : does not exist
[   66.076098][   T57] usb 6-1: 3:2 : does not exist
[   66.085063][ T5954] usb 8-1: USB disconnect, device number 4
[   66.282465][ T1901] usb 6-1: USB disconnect, device number 8
[   66.531931][ T4588] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   66.682853][ T4588] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   66.683729][ T4588] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   66.683749][ T4588] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.683763][ T4588] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   66.683793][ T4588] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.685040][ T4588] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   66.685053][ T4588] usb 8-1: Product: syz
[   66.685061][ T4588] usb 8-1: Manufacturer: syz
[   66.689454][ T4588] cdc_wdm 8-1:1.0: skipping garbage
[   66.689463][ T4588] cdc_wdm 8-1:1.0: skipping garbage
[   66.690867][ T4588] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   66.690877][ T4588] cdc_wdm 8-1:1.0: Unknown control protocol
[   66.821294][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   66.981888][   T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   66.983030][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.983047][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.983064][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.985923][   T10] usb 7-1: config 0 descriptor??
[   67.241420][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout
[   67.241456][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout
[   67.251336][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.271365][ T5954] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   67.393269][   T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[   67.393364][   T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[   67.396320][   T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0008/input/input13
[   67.405185][   T10] cm6533_jd 0003:0D8C:0022.0008: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   67.421780][ T5954] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   67.422637][ T5954] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   67.422652][ T5954] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[   67.422663][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0
[   67.424339][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   67.424351][ T5954] usb 6-1: Product: syz
[   67.424358][ T5954] usb 6-1: Manufacturer: syz
[   67.424365][ T5954] usb 6-1: SerialNumber: syz
[   67.429204][ T5954] usb 6-1: config 0 descriptor??
[   67.433409][ T5954] usb 6-1: selecting invalid altsetting 0
[   67.598775][ T2318] usb 7-1: USB disconnect, device number 5
[   67.599085][ T6598] netlink: 'syz.3.204': attribute type 5 has an invalid length.
[   67.638011][   T10] usb 6-1: USB disconnect, device number 9
[   67.809658][ T5954] usb 8-1: USB disconnect, device number 5
[   68.201015][ T6601] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   68.218306][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   68.219895][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   68.220332][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   68.221020][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.221759][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.339722][ T6617] MINIX-fs: unable to read superblock
[   68.422576][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[   68.450170][ T6627] syzkaller0: entered promiscuous mode
[   68.450190][ T6627] syzkaller0: entered allmulticast mode
[   68.458513][   T43] kauditd_printk_skb: 45 callbacks suppressed
[   68.458529][   T43] audit: type=1400 audit(1792166622.422:437): avc:  denied  { mount } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   68.462690][   T43] audit: type=1400 audit(1792166622.422:438): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.462956][   T43] audit: type=1400 audit(1792166622.432:439): avc:  denied  { read } for  pid=6626 comm="syz.2.222" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[   68.463300][   T43] audit: type=1400 audit(1792166622.432:440): avc:  denied  { open } for  pid=6626 comm="syz.2.222" path="/46/nfsd/exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[   68.466254][   T43] audit: type=1400 audit(1792166622.432:441): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.466292][   T43] audit: type=1400 audit(1792166622.432:442): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.466324][   T43] audit: type=1400 audit(1792166622.432:443): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.466356][   T43] audit: type=1400 audit(1792166622.432:444): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.466613][   T43] audit: type=1400 audit(1792166622.432:445): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.466835][   T43] audit: type=1400 audit(1792166622.432:446): avc:  denied  { search } for  pid=6626 comm="syz.2.222" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   68.486024][ T1901] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[   68.547146][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.555116][ T6604] virt_wifi0 speed is unknown, defaulting to 1000
[   68.623022][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.632906][ T1901] usb 6-1: New USB device found, idVendor=1435, idProduct=0918, bcdDevice=4a.5b
[   68.634015][ T1901] usb 6-1: config 0 has an invalid interface number: 3 but max is 2
[   68.634034][ T1901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.634048][ T1901] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[   68.634064][ T1901] usb 6-1: config 0 has no interface number 0
[   68.634098][ T1901] usb 6-1: config 0 interface 3 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   68.634119][ T1901] usb 6-1: config 0 interface 3 has no altsetting 0
[   68.637701][ T1901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.637720][ T1901] usb 6-1: Product: 㸱ᯧ辋鑷삊忉�訴踚廂㥷�஡텕�蕑�뷟嫱愰焞ᓑ垰䔜᛼�鞷늠ݤ�跊��Ꜯ約�滹稂�蕉먞ੑ�챨ㆼ뵌䞋껦�ȭ�ꔳ뀑엊ᨳ⛒ꀀ裡銂뻘鳃
[   68.637741][ T1901] usb 6-1: Manufacturer: Ð’
[   68.637752][ T1901] usb 6-1: SerialNumber: �
[   68.641970][ T1901] usb 6-1: config 0 descriptor??
[   68.667690][ T6632] ACPI: Can not change Invalid GPE/Fixed Event status
[   68.689731][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.753428][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.805292][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.805362][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.805418][ T6604] bridge_slave_0: entered allmulticast mode
[   68.806183][ T6604] bridge_slave_0: entered promiscuous mode
[   68.807973][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.808040][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.808194][ T6604] bridge_slave_1: entered allmulticast mode
[   68.808933][ T6604] bridge_slave_1: entered promiscuous mode
[   68.822701][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.824180][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.848139][ T6609] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further
[   68.851919][ T6604] team0: Port device team_slave_0 added
[   68.855584][ T6604] team0: Port device team_slave_1 added
[   68.897728][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.897738][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.897750][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.899958][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.899966][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.899979][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.932280][   T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   68.946960][   T13] bridge_slave_1: left allmulticast mode
[   68.946995][   T13] bridge_slave_1: left promiscuous mode
[   68.949243][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.963011][   T13] bridge_slave_0: left allmulticast mode
[   68.963027][   T13] bridge_slave_0: left promiscuous mode
[   68.963123][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.966590][ T6643] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   68.966671][ T6643] SELinux: failed to load policy
[   68.992107][ T1901] usb 6-1: USB disconnect, device number 10
[   69.102031][   T58] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   69.102883][   T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.102904][   T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.102931][   T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.107916][   T58] usb 7-1: config 0 descriptor??
[   69.140621][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.144937][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.146265][   T13] bond0 (unregistering): Released all slaves
[   69.159362][ T6604] hsr_slave_0: entered promiscuous mode
[   69.160121][ T6604] hsr_slave_1: entered promiscuous mode
[   69.160675][ T6604] debugfs: 'hsr0' already exists in 'hsr'
[   69.160692][ T6604] Cannot create hsr debugfs directory
[   69.368103][ T6604] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.376952][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   69.380246][ T6604] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.392208][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.392600][ T6604] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.397360][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   69.416831][ T6604] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.420009][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   69.438039][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2
[   69.481954][ T6662] FAULT_INJECTION: forcing a failure.
[   69.481954][ T6662] name failslab, interval 1, probability 0, space 0, times 0
[   69.481972][ T6662] CPU: 0 UID: 0 PID: 6662 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) 
[   69.481985][ T6662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.481991][ T6662] Call Trace:
[   69.481996][ T6662]  <TASK>
[   69.482001][ T6662]  dump_stack_lvl+0x100/0x190
[   69.482021][ T6662]  should_fail_ex.cold+0x5/0xa
[   69.482037][ T6662]  should_failslab+0xc2/0x120
[   69.482055][ T6662]  __kmalloc_cache_noprof+0x91/0x6d0
[   69.482068][ T6662]  ? inode_doinit_with_dentry+0x70b/0x1340
[   69.482090][ T6662]  ? inode_doinit_with_dentry+0x7b1/0x1340
[   69.482109][ T6662]  inode_doinit_with_dentry+0x7b1/0x1340
[   69.482128][ T6662]  ? inode_set_ctime_current+0x283/0x850
[   69.482140][ T6662]  ? __pfx_inode_doinit_with_dentry+0x10/0x10
[   69.482157][ T6662]  ? __pfx_inode_set_ctime_current+0x10/0x10
[   69.482168][ T6662]  ? new_inode+0x15a/0x1c0
[   69.482184][ T6662]  selinux_d_instantiate+0x26/0x40
[   69.482200][ T6662]  security_d_instantiate+0x14c/0x1b0
[   69.482213][ T6662]  d_make_persistent+0x64/0x180
[   69.482228][ T6662]  __debugfs_create_file+0x261/0x500
[   69.482243][ T6662]  debugfs_create_file_full+0x41/0x60
[   69.482257][ T6662]  kvm_dev_ioctl+0x1560/0x1b50
[   69.482275][ T6662]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[   69.482291][ T6662]  ? selinux_file_ioctl+0x13b/0x290
[   69.482306][ T6662]  ? selinux_file_ioctl+0xb6/0x290
[   69.482322][ T6662]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[   69.482336][ T6662]  __x64_sys_ioctl+0x18e/0x210
[   69.482350][ T6662]  do_syscall_64+0x123/0x790
[   69.482367][ T6662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.482378][ T6662] RIP: 0033:0x7f29f8b9e559
[   69.482388][ T6662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.482398][ T6662] RSP: 002b:00007f29f9a6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   69.482409][ T6662] RAX: ffffffffffffffda RBX: 00007f29f8e26090 RCX: 00007f29f8b9e559
[   69.482415][ T6662] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[   69.482422][ T6662] RBP: 00007f29f8c358b0 R08: 0000000000000000 R09: 0000000000000000
[   69.482428][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.482434][ T6662] R13: 00007f29f8e26128 R14: 00007f29f8e26090 R15: 00007fff73dcc398
[   69.482448][ T6662]  </TASK>
[   69.519057][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.535955][ T6604] 8021q: adding VLAN 0 to HW filter on device team0
[   69.541951][   T58] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[   69.542025][   T58] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[   69.544022][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.544102][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.555540][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.555622][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.570526][   T58] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0009/input/input14
[   69.629664][   T58] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   69.739579][ T5852] usb 7-1: USB disconnect, device number 6
[   69.801949][   T13] hsr_slave_0: left promiscuous mode
[   69.803146][   T13] hsr_slave_1: left promiscuous mode
[   69.803810][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.803827][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.808983][   T13] veth1_macvtap: left promiscuous mode
[   69.809012][   T13] veth0_macvtap: left promiscuous mode
[   69.809058][   T13] veth1_vlan: left promiscuous mode
[   69.809124][   T13] veth0_vlan: left promiscuous mode
[   69.980904][   T13] team0 (unregistering): Port device team_slave_1 removed
[   69.989297][   T13] team0 (unregistering): Port device team_slave_0 removed
[   70.092831][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3
[   70.248204][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.264043][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4
[   70.281568][ T5735] Bluetooth: hci4: command tx timeout
[   70.454825][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5
[   70.463272][ T6604] veth0_vlan: entered promiscuous mode
[   70.473946][ T6604] veth1_vlan: entered promiscuous mode
[   70.490396][ T6732] ªªªªª»: renamed from vlan0 (while UP)
[   70.498864][ T6604] veth0_macvtap: entered promiscuous mode
[   70.501116][ T6604] veth1_macvtap: entered promiscuous mode
[   70.509053][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.520552][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.537002][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.537051][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.537088][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.537117][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.572958][ T6744] tipc: Started in network mode
[   70.572983][ T6744] tipc: Node identity d21e889f6a, cluster identity 4711
[   70.587168][ T6744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.587458][ T6746] syzkaller0: entered promiscuous mode
[   70.587517][ T6746] syzkaller0: entered allmulticast mode
[   70.613301][ T6752] netlink: 'syz.3.241': attribute type 21 has an invalid length.
[   70.613365][ T6752] netlink: 156 bytes leftover after parsing attributes in process `syz.3.241'.
[   70.619260][ T6748] tipc: Resetting bearer <eth:syzkaller0>
[   70.627821][ T6748] tipc: Disabling bearer <eth:syzkaller0>
[   70.639704][  T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.639717][  T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.655377][  T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.655390][  T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.682575][  T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.682596][  T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.744251][ T6762] batadv_slave_1: entered allmulticast mode
[   70.751121][ T6762] pimreg: entered allmulticast mode
[   70.765502][ T6762] input: syz0 as /devices/virtual/input/input17
[   70.791562][   T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   70.795577][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'.
[   70.820179][ T6767] bond1: entered promiscuous mode
[   70.820856][ T6761] batadv_slave_1: left allmulticast mode
[   70.820953][ T6761] pimreg: left allmulticast mode
[   70.861632][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.861948][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.861978][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.862004][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.907909][ T6778] netlink: 'syz.3.247': attribute type 1 has an invalid length.
[   70.928078][ T6778] 8021q: adding VLAN 0 to HW filter on device bond3
[   70.943789][   T57] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   70.945699][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.945716][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.945734][   T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.947436][   T57] usb 7-1: config 0 descriptor??
[   70.949145][ T6778] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.965929][ T6781] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   70.965951][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   70.968148][ T6781] vhci_hcd vhci_hcd.0: Device attached
[   70.975869][ T6786] vhci_hcd: connection closed
[   70.977734][ T5829] vhci_hcd vhci_hcd.4: stop threads
[   70.978005][ T5829] vhci_hcd vhci_hcd.4: release socket
[   70.978022][ T5829] vhci_hcd vhci_hcd.4: disconnect device
[   70.982274][ T6778] syz.3.247: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   70.982350][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.3.247 Not tainted syzkaller #0 PREEMPT(full) 
[   70.982363][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.982369][ T6778] Call Trace:
[   70.982374][ T6778]  <TASK>
[   70.982378][ T6778]  dump_stack_lvl+0x100/0x190
[   70.982398][ T6778]  warn_alloc.cold+0x9e/0xb2
[   70.982411][ T6778]  ? __pfx_warn_alloc+0x10/0x10
[   70.982423][ T6778]  ? policy_nodemask+0xed/0x4f0
[   70.982444][ T6778]  ? alloc_pages_mpol+0x260/0x550
[   70.982462][ T6778]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   70.982480][ T6778]  ? __get_vm_area_node+0x22b/0x350
[   70.982499][ T6778]  __vmalloc_node_range_noprof+0x111c/0x1420
[   70.982521][ T6778]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   70.982538][ T6778]  ? do_syscall_64+0x123/0x790
[   70.982555][ T6778]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   70.982577][ T6778]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   70.982592][ T6778]  __vmalloc_node_noprof+0xad/0xf0
[   70.982609][ T6778]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   70.982625][ T6778]  __vmalloc_noprof+0xa3/0x120
[   70.982642][ T6778]  ? __pfx___vmalloc_noprof+0x10/0x10
[   70.982663][ T6778]  bpf_prog_alloc_no_stats+0x59/0x690
[   70.982680][ T6778]  bpf_prog_alloc+0x3b/0x200
[   70.982697][ T6778]  bpf_prog_create_from_user+0xb4/0x2e0
[   70.982711][ T6778]  ? __pfx_seccomp_check_filter+0x10/0x10
[   70.982730][ T6778]  do_seccomp+0x870/0x27c0
[   70.982743][ T6778]  ? __pfx_do_seccomp+0x10/0x10
[   70.982754][ T6778]  ? xfd_validate_state+0x129/0x190
[   70.982771][ T6778]  do_syscall_64+0x123/0x790
[   70.982788][ T6778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.982799][ T6778] RIP: 0033:0x7f29f8b9e559
[   70.982810][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.982820][ T6778] RSP: 002b:00007f29f9a90028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   70.982831][ T6778] RAX: ffffffffffffffda RBX: 00007f29f8e25fa0 RCX: 00007f29f8b9e559
[   70.982837][ T6778] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000000000000001
[   70.982863][ T6778] RBP: 00007f29f8c358b0 R08: 0000000000000000 R09: 0000000000000000
[   70.982870][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.982877][ T6778] R13: 00007f29f8e26038 R14: 00007f29f8e25fa0 R15: 00007fff73dcc398
[   70.982891][ T6778]  </TASK>
[   70.983216][ T6778] Mem-Info:
[   70.983229][ T6778] active_anon:10559 inactive_anon:0 isolated_anon:0
[   70.983229][ T6778]  active_file:0 inactive_file:56084 isolated_file:0
[   70.983229][ T6778]  unevictable:1000 dirty:1912 writeback:0
[   70.983229][ T6778]  slab_reclaimable:11899 slab_unreclaimable:70982
[   70.983229][ T6778]  mapped:24887 shmem:1561 pagetables:1272
[   70.983229][ T6778]  sec_pagetables:293 bounce:0
[   70.983229][ T6778]  kernel_misc_reclaimable:0
[   70.983229][ T6778]  free:444112 free_pcp:18440 free_cma:0
[   70.983274][ T6778] Node 0 active_anon:42236kB inactive_anon:0kB active_file:0kB inactive_file:224140kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99548kB dirty:7640kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13568kB pagetables:4900kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   70.983320][ T6778] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   70.983361][ T6778] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.983411][ T6778] lowmem_reserve[]: 0 1204 1204 1204 1204
[   70.983442][ T6778] Node 0 DMA32 free:117948kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42236kB inactive_anon:0kB active_file:0kB inactive_file:224140kB unevictable:2000kB writepending:7640kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:71024kB local_pcp:23628kB free_cma:0kB
[   70.983497][ T6778] lowmem_reserve[]: 0 0 0 0 0
[   70.983530][ T6778] Node 1 Normal free:1643140kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:2736kB local_pcp:0kB free_cma:0kB
[   70.983577][ T6778] lowmem_reserve[]: 0 0 0 0 0
[   70.983602][ T6778] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   70.983737][ T6778] Node 0 DMA32: 351*4kB (UM) 312*8kB (UME) 21*16kB (UM) 20*32kB (UM) 36*64kB (UM) 16*128kB (UM) 15*256kB (UME) 15*512kB (UME) 3*1024kB (UME) 8*2048kB (UME) 19*4096kB (UM) = 118028kB
[   70.983872][ T6778] Node 1 Normal: 7*4kB (U) 5*8kB (UM) 18*16kB (UM) 3*32kB (M) 4*64kB (UM) 4*128kB (UM) 3*256kB (U) 5*512kB (UM) 0*1024kB 2*2048kB (UM) 399*4096kB (UM) = 1642948kB
[   70.984001][ T6778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   70.984013][ T6778] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.984028][ T6778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   70.984040][ T6778] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.984052][ T6778] 57641 total pagecache pages
[   70.984057][ T6778] 0 pages in swap cache
[   70.984064][ T6778] Free swap  = 124996kB
[   70.984070][ T6778] Total swap = 124996kB
[   70.984078][ T6778] 1048443 pages RAM
[   70.984083][ T6778] 0 pages HighMem/MovableOnly
[   70.984088][ T6778] 290717 pages reserved
[   70.984094][ T6778] 0 pages cma reserved
[   71.061361][ T5731] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   71.166177][    T9] cfg80211: failed to load regulatory.db
[   71.174949][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[   71.175038][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[   71.191275][ T5731] usb 6-1: device descriptor read/64, error -71
[   71.356839][   T57] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0
[   71.356920][   T57] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0
[   71.369253][   T57] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.000A/input/input18
[   71.383172][   T57] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   71.432262][ T5731] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   71.561963][ T5731] usb 6-1: device descriptor read/64, error -71
[   71.562142][   T57] usb 7-1: USB disconnect, device number 7
[   71.587496][ T6796] netlink: 'syz.4.251': attribute type 4 has an invalid length.
[   71.592913][ T6796] netlink: 'syz.4.251': attribute type 4 has an invalid length.
[   71.673735][ T5731] usb usb6-port1: attempt power cycle
[   71.850056][ T6802] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   71.850056][ T6802] The task syz.4.252 (6802) triggered the difference, watch for misbehavior.
[   72.011259][ T5731] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   72.031783][ T5731] usb 6-1: device descriptor read/8, error -71
[   72.271229][ T5731] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   72.291718][ T5731] usb 6-1: device descriptor read/8, error -71
[   72.401628][ T5731] usb usb6-port1: unable to enumerate USB device
[   72.781497][ T6823] netlink: 5 bytes leftover after parsing attributes in process `syz.2.258'.
[   72.781628][ T6823] 0ªî{X¹¦: renamed from gretap0 (while UP)
[   72.783350][ T6823] 0ªî{X¹¦: entered allmulticast mode
[   72.783726][ T6823] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   73.161547][   T57] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   73.332079][   T57] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   73.332983][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.332999][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.333016][   T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.335066][   T57] usb 7-1: config 0 descriptor??
[   73.648883][ T6835] process 'syz.4.263' launched './file0' with NULL argv: empty string added
[   73.649465][ T6835] Invalid argument reading file caps for ./file0
[   73.649851][   T43] kauditd_printk_skb: 98 callbacks suppressed
[   73.649860][   T43] audit: type=1400 audit(1792166883.662:545): avc:  denied  { execute_no_trans } for  pid=6834 comm="syz.4.263" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.651363][   T43] audit: type=1400 audit(1792166883.662:546): avc:  denied  { map } for  pid=6834 comm="syz.4.263" path="/dev/ublkc1" dev="devtmpfs" ino=3046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.705036][   T43] audit: type=1400 audit(1792166883.722:547): avc:  denied  { unmount } for  pid=6604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   73.748038][   T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[   73.748091][   T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[   73.750064][   T57] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.000B/input/input19
[   73.759450][   T57] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   73.845043][   T43] audit: type=1400 audit(1792166883.862:548): avc:  denied  { ioctl } for  pid=6842 comm="syz.1.266" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   73.849108][   T43] audit: type=1400 audit(1792166883.862:549): avc:  denied  { read } for  pid=6842 comm="syz.1.266" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   73.849252][   T43] audit: type=1400 audit(1792166883.862:550): avc:  denied  { open } for  pid=6842 comm="syz.1.266" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   73.849547][   T43] audit: type=1400 audit(1792166883.862:551): avc:  denied  { ioctl } for  pid=6842 comm="syz.1.266" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   73.948039][ T5954] usb 7-1: USB disconnect, device number 8
[   73.955587][   T43] audit: type=1400 audit(1792166883.972:552): avc:  denied  { unmount } for  pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   73.975821][ T5801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.039143][   T43] audit: type=1400 audit(1792166884.052:553): avc:  denied  { create } for  pid=6849 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.039185][   T43] audit: type=1400 audit(1792166884.052:554): avc:  denied  { getopt } for  pid=6849 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.052955][ T5801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.066363][ T6856] overlayfs: missing 'lowerdir'
[   74.085805][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.088017][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.088965][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.089596][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.090405][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.114761][ T5801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.115740][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'.
[   74.115752][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.274'.
[   74.167787][ T5801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.180858][ T6862] loop5: detected capacity change from 0 to 7
[   74.184511][ T6862]  loop5: p1 p3 p4
[   74.184525][ T6862] loop5: partition table partially beyond EOD, truncated
[   74.186043][ T6862] loop5: p1 size 128 extends beyond EOD, truncated
[   74.188134][ T6862] loop5: p3 size 3645588866 extends beyond EOD, truncated
[   74.233529][ T6013] udevd[6013]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   74.233565][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   74.235765][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   74.313280][ T6891] syzkaller0: entered promiscuous mode
[   74.313295][ T6891] syzkaller0: entered allmulticast mode
[   74.355181][ T5801] bridge_slave_1: left allmulticast mode
[   74.355198][ T5801] bridge_slave_1: left promiscuous mode
[   74.355305][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.366979][ T5801] bridge_slave_0: left allmulticast mode
[   74.366995][ T5801] bridge_slave_0: left promiscuous mode
[   74.367110][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.488355][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.490946][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.504563][ T5801] bond0 (unregistering): Released all slaves
[   74.511938][ T5801] bond1 (unregistering): Released all slaves
[   74.539529][ T6857] rxe_eth0 speed is unknown, defaulting to 1000
[   74.571406][ T6900] netlink: 'syz.1.279': attribute type 4 has an invalid length.
[   74.577063][ T6907] syzkaller0: left promiscuous mode
[   74.577086][ T6907] syzkaller0: left allmulticast mode
[   74.760530][ T6909] virtio_blk virtio3: 1/0/0 default/read/poll queues
[   74.785989][ T6909] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[   74.899907][ T6857] virt_wifi0 speed is unknown, defaulting to 1000
[   74.920161][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6
[   75.120788][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[   75.149909][ T5801] hsr_slave_0: left promiscuous mode
[   75.155206][ T5801] hsr_slave_1: left promiscuous mode
[   75.155875][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.155890][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.157179][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.157195][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.183450][ T5801] veth1_macvtap: left promiscuous mode
[   75.183484][ T5801] veth0_macvtap: left promiscuous mode
[   75.183563][ T5801] veth1_vlan: left promiscuous mode
[   75.183650][ T5801] veth0_vlan: left promiscuous mode
[   75.227227][ T4588] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   75.468012][ T5801] team0 (unregistering): Port device team_slave_1 removed
[   75.492888][ T4588] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   75.493323][ T5801] team0 (unregistering): Port device team_slave_0 removed
[   75.645458][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7
[   75.829148][ T6950] befs: (nbd1): No write support. Marking filesystem read-only
[   75.833478][ T6950] befs: (nbd1): unable to read superblock
[   75.918850][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.918927][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.918984][ T6857] bridge_slave_0: entered allmulticast mode
[   75.919763][ T6857] bridge_slave_0: entered promiscuous mode
[   75.921107][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.921250][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.921306][ T6857] bridge_slave_1: entered allmulticast mode
[   75.922200][ T6857] bridge_slave_1: entered promiscuous mode
[   75.942422][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.943850][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.952458][ T6927] ceph: No mds server is up or the cluster is laggy
[   75.956765][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8
[   75.980466][ T6857] team0: Port device team_slave_0 added
[   75.984942][ T6857] team0: Port device team_slave_1 added
[   76.014311][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.014322][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.014335][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.015825][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.015835][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.015848][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.040698][ T6857] hsr_slave_0: entered promiscuous mode
[   76.044684][ T6857] hsr_slave_1: entered promiscuous mode
[   76.045053][ T6857] debugfs: 'hsr0' already exists in 'hsr'
[   76.045066][ T6857] Cannot create hsr debugfs directory
[   76.070399][ T6969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   76.123916][ T5735] Bluetooth: hci0: command tx timeout
[   76.158804][ T6857] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   76.161558][ T6857] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.161923][ T6857] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   76.165931][ T6857] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.169006][ T6857] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   76.175011][ T6857] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.175459][ T6857] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   76.178289][ T6857] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.194942][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.194998][ T6857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.195465][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.195512][ T6857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.221764][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.228121][  T813] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.228787][  T813] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.247147][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9
[   76.249398][ T6857] 8021q: adding VLAN 0 to HW filter on device team0
[   76.251670][ T4588] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   76.257703][  T813] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.257766][  T813] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.263152][  T813] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.263229][  T813] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.431810][ T4588] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   76.432882][ T4588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.432911][ T4588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.432943][ T4588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.437688][ T4588] usb 6-1: config 0 descriptor??
[   76.565874][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.582825][ T7004] cgroup: fork rejected by pids controller in /syz2
[   76.722870][ T6857] veth0_vlan: entered promiscuous mode
[   76.727485][ T6857] veth1_vlan: entered promiscuous mode
[   76.745392][ T6857] veth0_macvtap: entered promiscuous mode
[   76.747580][ T6857] veth1_macvtap: entered promiscuous mode
[   76.756896][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.760178][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.793474][ T5801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.794119][ T5801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.794454][ T5801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.794484][ T5801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.811092][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.811105][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.847099][ T4588] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[   76.847193][ T4588] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[   76.857464][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.857482][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.857832][ T4588] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000C/input/input20
[   76.888890][ T4588] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[   77.047936][ T4588] usb 6-1: USB disconnect, device number 15
[   77.138331][ T7091] loop5: detected capacity change from 0 to 7
[   77.140828][ T7091] Dev loop5: unable to read RDB block 7
[   77.140851][ T7091]  loop5: AHDI p1
[   77.140867][ T7091] loop5: partition table partially beyond EOD, truncated
[   77.287331][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.288194][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.443477][ T7111] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.443618][ T7111] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.443719][ T7111] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   77.443798][ T7111] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.443832][ T7111] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   77.447723][ T7111] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   77.453541][ T7111] netlink: 64 bytes leftover after parsing attributes in process `syz.5.300'.
[   77.467677][ T7117] netlink: 'syz.2.302': attribute type 10 has an invalid length.
[   77.475589][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.477480][ T7117] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   77.484479][ T7120] netlink: 'syz.2.302': attribute type 10 has an invalid length.
[   77.531692][ T7126] tmpfs: Bad value for 'mpol'
[   77.655656][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'.
[   77.691394][ T7139] ip_tables: iptables: counters copy to user failed while replacing table
[   78.487913][ T7147] phram: parameter too long
[   78.522528][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.522871][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.577244][ T7154] fuse: Bad value for 'rootmode'
[   78.637367][ T7155] netlink: 'syz.3.312': attribute type 10 has an invalid length.
[   78.637389][ T7155] netlink: 55 bytes leftover after parsing attributes in process `syz.3.312'.
[   78.761471][ T5852] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   78.932011][ T5852] usb 7-1: Using ep0 maxpacket: 32
[   78.932454][ T5852] usb 7-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40
[   78.933248][ T5852] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.933264][ T5852] usb 7-1: config 1 interface 0 has no altsetting 0
[   78.934797][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.934809][ T5852] usb 7-1: Product: syz
[   78.934816][ T5852] usb 7-1: Manufacturer: syz
[   78.934823][ T5852] usb 7-1: SerialNumber: syz
[   79.131744][ T5085] Bluetooth: hci2: unexpected event for opcode 0x0406
[   79.271388][   T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   79.441880][   T57] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   79.442682][   T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.442699][   T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.442716][   T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.444110][   T57] usb 8-1: config 0 descriptor??
[   79.492033][ T5085] Bluetooth: hci0: command 0x040f tx timeout
[   79.492251][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout
[   79.492269][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.850614][   T57] usbhid 8-1:0.0: can't add hid device: -71
[   79.850665][   T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   79.852200][   T57] usb 8-1: USB disconnect, device number 6
[   79.863912][   T43] kauditd_printk_skb: 42 callbacks suppressed
[   79.863968][   T43] audit: type=1400 audit(1792167401.997:597): avc:  denied  { write } for  pid=7168 comm="syz.5.316" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   79.915375][   T43] audit: type=1400 audit(1792167402.047:598): avc:  denied  { write } for  pid=7176 comm="syz.5.318" name="001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   79.945649][   T43] audit: type=1400 audit(1792167402.077:599): avc:  denied  { write } for  pid=7179 comm="syz.5.319" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   79.947904][ T7180] loop4: detected capacity change from 0 to 2640
[   79.952626][ T7180] Buffer I/O error on dev loop4, logical block 0, lost async page write
[   79.953766][ T6013] Buffer I/O error on dev loop4, logical block 3, async page read
[   80.217057][ T7189] openvswitch: netlink: nsh attr 350 is out of range max 3
[   80.609072][   T43] audit: type=1400 audit(1792167402.737:600): avc:  denied  { write } for  pid=7209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.647106][ T7216] bond0: (slave bond_slave_1): Releasing backup interface
[   80.655819][   T43] audit: type=1400 audit(1792167402.787:601): avc:  denied  { write } for  pid=7215 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.655912][ T7216] bond0: option mode: unable to set because the bond device is up
[   80.690601][ T7219] netlink: 56 bytes leftover after parsing attributes in process `syz.1.329'.
[   80.698039][   T43] audit: type=1400 audit(1792167402.827:602): avc:  denied  { setopt } for  pid=7218 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.700904][   T43] audit: type=1400 audit(1792167402.827:603): avc:  denied  { execute } for  pid=7218 comm="syz.1.329" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.730038][   T43] audit: type=1400 audit(1792167402.857:604): avc:  denied  { read } for  pid=7218 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.756748][   T43] audit: type=1400 audit(1792167402.887:605): avc:  denied  { write } for  pid=7220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.812378][   T43] audit: type=1400 audit(1792167402.947:606): avc:  denied  { write } for  pid=7224 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.111260][   T58] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   81.261997][   T58] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   81.262940][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.262966][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.262998][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.265393][   T58] usb 6-1: config 0 descriptor??
[   81.419257][ T5852] usbhid 7-1:1.0: can't add hid device: -71
[   81.419301][ T5852] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[   81.423212][ T5852] usb 7-1: USB disconnect, device number 9
[   81.561965][ T5735] Bluetooth: hci0: command 0x040f tx timeout
[   81.562020][   T66] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.674795][   T58] usbhid 6-1:0.0: can't add hid device: -71
[   81.674877][   T58] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   81.678258][   T58] usb 6-1: USB disconnect, device number 16
[   83.163467][   T66] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   83.163507][   T66] Bluetooth: hci2: Injecting HCI hardware error event
[   83.164503][   T66] Bluetooth: hci2: hardware error 0x00
[   83.642435][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout
[   83.642472][ T5085] Bluetooth: hci0: command 0x040f tx timeout
[   84.025055][ T7246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.089275][ T7318] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   84.109138][ T7318] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.120886][ T7322] ip_tables: iptables: counters copy to user failed while replacing table
[   84.206169][ T7318] syz.1.342: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.206235][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.1.342 Not tainted syzkaller #0 PREEMPT(full) 
[   84.206257][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.206268][ T7318] Call Trace:
[   84.206275][ T7318]  <TASK>
[   84.206283][ T7318]  dump_stack_lvl+0x100/0x190
[   84.206315][ T7318]  warn_alloc.cold+0x9e/0xb2
[   84.206340][ T7318]  ? __pfx_warn_alloc+0x10/0x10
[   84.206361][ T7318]  ? policy_nodemask+0xed/0x4f0
[   84.206391][ T7318]  ? alloc_pages_mpol+0x260/0x550
[   84.206420][ T7318]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   84.206451][ T7318]  ? __get_vm_area_node+0x22b/0x350
[   84.206490][ T7318]  __vmalloc_node_range_noprof+0x111c/0x1420
[   84.206530][ T7318]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   84.206559][ T7318]  ? do_syscall_64+0x123/0x790
[   84.206588][ T7318]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.206627][ T7318]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   84.206669][ T7318]  __vmalloc_node_noprof+0xad/0xf0
[   84.206700][ T7318]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   84.206729][ T7318]  __vmalloc_noprof+0xa3/0x120
[   84.206757][ T7318]  ? __pfx___vmalloc_noprof+0x10/0x10
[   84.206795][ T7318]  bpf_prog_alloc_no_stats+0x59/0x690
[   84.206826][ T7318]  bpf_prog_alloc+0x3b/0x200
[   84.206853][ T7318]  bpf_prog_create_from_user+0xb4/0x2e0
[   84.206878][ T7318]  ? __pfx_seccomp_check_filter+0x10/0x10
[   84.206910][ T7318]  do_seccomp+0x870/0x27c0
[   84.206935][ T7318]  ? __pfx_do_seccomp+0x10/0x10
[   84.206956][ T7318]  ? xfd_validate_state+0x129/0x190
[   84.206986][ T7318]  do_syscall_64+0x123/0x790
[   84.207015][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.207035][ T7318] RIP: 0033:0x7f4b33d9e559
[   84.207051][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.207070][ T7318] RSP: 002b:00007f4b34c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   84.207087][ T7318] RAX: ffffffffffffffda RBX: 00007f4b34025fa0 RCX: 00007f4b33d9e559
[   84.207100][ T7318] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000000000000001
[   84.207111][ T7318] RBP: 00007f4b33e358b0 R08: 0000000000000000 R09: 0000000000000000
[   84.207122][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.207133][ T7318] R13: 00007f4b34026038 R14: 00007f4b34025fa0 R15: 00007ffe209b1a08
[   84.207160][ T7318]  </TASK>
[   84.207307][ T7318] Mem-Info:
[   84.207318][ T7318] active_anon:13206 inactive_anon:0 isolated_anon:0
[   84.207318][ T7318]  active_file:5183 inactive_file:56867 isolated_file:0
[   84.207318][ T7318]  unevictable:1000 dirty:70 writeback:0
[   84.207318][ T7318]  slab_reclaimable:12206 slab_unreclaimable:80641
[   84.207318][ T7318]  mapped:27025 shmem:3550 pagetables:1419
[   84.207318][ T7318]  sec_pagetables:298 bounce:0
[   84.207318][ T7318]  kernel_misc_reclaimable:0
[   84.207318][ T7318]  free:394949 free_pcp:11601 free_cma:0
[   84.207363][ T7318] Node 0 active_anon:52820kB inactive_anon:0kB active_file:20732kB inactive_file:219340kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:108068kB dirty:272kB writeback:0kB shmem:12200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14048kB pagetables:5488kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   84.207412][ T7318] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8128kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   84.207457][ T7318] Node 0 DMA free:5136kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:1828kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB
[   84.207514][ T7318] lowmem_reserve[]: 0 1204 1204 1204 1204
[   84.207548][ T7318] Node 0 DMA32 free:36892kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52820kB inactive_anon:0kB active_file:18904kB inactive_file:219340kB unevictable:2000kB writepending:272kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:22332kB local_pcp:3896kB free_cma:0kB
[   84.207603][ T7318] lowmem_reserve[]: 0 0 0 0 0
[   84.207633][ T7318] Node 1 Normal free:1537768kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8128kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:23896kB local_pcp:6228kB free_cma:0kB
[   84.207685][ T7318] lowmem_reserve[]: 0 0 0 0 0
[   84.207715][ T7318] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (U) 1*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 1*4096kB (M) = 5136kB
[   84.207867][ T7318] Node 0 DMA32: 1*4kB (M) 2*8kB (UE) 37*16kB (UM) 166*32kB (UME) 62*64kB (UME) 51*128kB (UME) 14*256kB (UME) 14*512kB (UME) 9*1024kB (ME) 0*2048kB 0*4096kB = 36388kB
[   84.208001][ T7318] Node 1 Normal: 60*4kB (UM) 51*8kB (UME) 40*16kB (UME) 25*32kB (UME) 17*64kB (UME) 11*128kB (UME) 9*256kB (UME) 10*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 367*4096kB (M) = 1537768kB
[   84.208145][ T7318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   84.208159][ T7318] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[   84.208173][ T7318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   84.208188][ T7318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.208202][ T7318] 65627 total pagecache pages
[   84.208209][ T7318] 0 pages in swap cache
[   84.208215][ T7318] Free swap  = 124996kB
[   84.208222][ T7318] Total swap = 124996kB
[   84.208229][ T7318] 1048443 pages RAM
[   84.208235][ T7318] 0 pages HighMem/MovableOnly
[   84.208241][ T7318] 290717 pages reserved
[   84.208248][ T7318] 0 pages cma reserved
[   84.545807][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.355'.
[   84.545852][ T7347] netlink: 3 bytes leftover after parsing attributes in process `syz.5.355'.
[   84.582842][ T7349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7349 comm=syz.5.356
[   84.662922][ T5731] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   84.706124][ T7351] jffs2: notice: (7351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   84.807740][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.359'.
[   84.811919][ T5731] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   84.814881][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.814896][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.814914][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.818885][ T5731] usb 8-1: config 0 descriptor??
[   84.915438][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.361'.
[   84.915525][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.361'.
[   85.001757][   T43] kauditd_printk_skb: 28 callbacks suppressed
[   85.001770][   T43] audit: type=1400 audit(1792167407.137:635): avc:  denied  { read write } for  pid=7366 comm="syz.2.363" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   85.002046][   T43] audit: type=1400 audit(1792167407.137:636): avc:  denied  { open } for  pid=7366 comm="syz.2.363" path="/75/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   85.002534][   T43] audit: type=1400 audit(1792167407.137:637): avc:  denied  { ioctl } for  pid=7366 comm="syz.2.363" path="/75/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   85.068174][ T7362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.102615][   T43] audit: type=1400 audit(1792167407.237:638): avc:  denied  { write } for  pid=7368 comm="syz.2.364" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   85.102798][   T43] audit: type=1400 audit(1792167407.237:639): avc:  denied  { connect } for  pid=7368 comm="syz.2.364" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   85.102959][   T43] audit: type=1400 audit(1792167407.237:640): avc:  denied  { name_connect } for  pid=7368 comm="syz.2.364" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   85.197286][ T7371] can: request_module (can-proto-0) failed.
[   85.225858][ T5731] usbhid 8-1:0.0: can't add hid device: -71
[   85.225913][ T5731] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   85.229721][ T5731] usb 8-1: USB disconnect, device number 7
[   85.231299][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'.
[   85.243622][   T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   85.280021][ T7376] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   85.282893][ T7376] FAULT_INJECTION: forcing a failure.
[   85.282893][ T7376] name failslab, interval 1, probability 0, space 0, times 0
[   85.282920][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.2.366 Not tainted syzkaller #0 PREEMPT(full) 
[   85.282933][ T7376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   85.282940][ T7376] Call Trace:
[   85.282944][ T7376]  <TASK>
[   85.282948][ T7376]  dump_stack_lvl+0x100/0x190
[   85.282969][ T7376]  should_fail_ex.cold+0x5/0xa
[   85.282985][ T7376]  should_failslab+0xc2/0x120
[   85.283003][ T7376]  __kmalloc_cache_noprof+0x91/0x6d0
[   85.283016][ T7376]  ? bpf_prog_alloc_no_stats+0x161/0x690
[   85.283035][ T7376]  bpf_prog_alloc_no_stats+0x161/0x690
[   85.283052][ T7376]  bpf_prog_alloc+0x3b/0x200
[   85.283067][ T7376]  bpf_prog_create_from_user+0xb4/0x2e0
[   85.283082][ T7376]  ? __pfx_seccomp_check_filter+0x10/0x10
[   85.283100][ T7376]  do_seccomp+0x870/0x27c0
[   85.283113][ T7376]  ? __pfx_do_seccomp+0x10/0x10
[   85.283124][ T7376]  ? xfd_validate_state+0x129/0x190
[   85.283141][ T7376]  do_syscall_64+0x123/0x790
[   85.283159][ T7376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.283171][ T7376] RIP: 0033:0x7faa20d9e559
[   85.283180][ T7376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.283191][ T7376] RSP: 002b:00007faa21c9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   85.283202][ T7376] RAX: ffffffffffffffda RBX: 00007faa21025fa0 RCX: 00007faa20d9e559
[   85.283209][ T7376] RDX: 0000200000001340 RSI: 0000000000000000 RDI: 0000000000000001
[   85.283215][ T7376] RBP: 00007faa20e358b0 R08: 0000000000000000 R09: 0000000000000000
[   85.283222][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.283228][ T7376] R13: 00007faa21026038 R14: 00007faa21025fa0 R15: 00007fff923d37d8
[   85.283241][ T7376]  </TASK>
[   85.335042][   T66] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   85.343973][ T7383] xt_NETMAP: bad rangesize 37.
[   85.516651][   T43] audit: type=1400 audit(1792167407.647:641): avc:  denied  { read } for  pid=7389 comm="syz.5.368" name="trace" dev="tracefs" ino=3211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   85.519445][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.368'.
[   85.721287][   T66] Bluetooth: hci0: command 0x040f tx timeout
[   85.778088][ T7400] FAULT_INJECTION: forcing a failure.
[   85.778088][ T7400] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   85.778120][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT(full) 
[   85.778141][ T7400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   85.778153][ T7400] Call Trace:
[   85.778160][ T7400]  <TASK>
[   85.778167][ T7400]  dump_stack_lvl+0x100/0x190
[   85.778203][ T7400]  should_fail_ex.cold+0x5/0xa
[   85.778227][ T7400]  ? prepare_alloc_pages+0x16d/0x5b0
[   85.778258][ T7400]  should_fail_alloc_page+0xeb/0x140
[   85.778312][ T7400]  prepare_alloc_pages+0x1f0/0x5b0
[   85.778345][ T7400]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   85.778374][ T7400]  ? lock_acquire+0x1d1/0x380
[   85.778399][ T7400]  ? __lock_acquire+0x5c0/0x1f40
[   85.778426][ T7400]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   85.778454][ T7400]  ? do_raw_spin_lock+0x128/0x260
[   85.778484][ T7400]  ? __lock_acquire+0x5c0/0x1f40
[   85.778508][ T7400]  ? do_raw_spin_unlock+0x145/0x1e0
[   85.778539][ T7400]  ? rcu_is_watching+0x13/0xc0
[   85.778566][ T7400]  ? trace_hrtimer_start+0x77/0x220
[   85.778597][ T7400]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[   85.778627][ T7400]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   85.778654][ T7400]  ? policy_nodemask+0xed/0x4f0
[   85.778686][ T7400]  alloc_pages_mpol+0x201/0x550
[   85.778718][ T7400]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   85.778746][ T7400]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[   85.778770][ T7400]  ? lockdep_hardirqs_on+0x7d/0x110
[   85.778802][ T7400]  folio_alloc_mpol_noprof+0x36/0x260
[   85.778826][ T7400]  shmem_alloc_folio+0x135/0x160
[   85.778856][ T7400]  shmem_alloc_and_add_folio+0x371/0xd40
[   85.778884][ T7400]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   85.778913][ T7400]  ? shmem_allowable_huge_orders+0x1d7/0x470
[   85.778932][ T7400]  ? __bpf_trace_sched_exit_tp+0x90/0xc0
[   85.778953][ T7400]  ? __lock_acquire+0x5c0/0x1f40
[   85.778979][ T7400]  shmem_get_folio_gfp+0x75b/0x1980
[   85.779008][ T7400]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   85.779034][ T7400]  ? __pfx___might_resched+0x10/0x10
[   85.779054][ T7400]  ? noop_dirty_folio+0x98/0x160
[   85.779078][ T7400]  shmem_fallocate+0x6f7/0x1090
[   85.779111][ T7400]  ? __pfx_shmem_fallocate+0x10/0x10
[   85.779131][ T7400]  ? futex_wait+0x11e/0x370
[   85.779157][ T7400]  ? __lock_acquire+0x5c0/0x1f40
[   85.779182][ T7400]  ? __lock_acquire+0x5c0/0x1f40
[   85.779206][ T7400]  ? ksys_write+0x190/0x250
[   85.779233][ T7400]  ? lock_acquire+0x1d1/0x380
[   85.779254][ T7400]  ? __x64_sys_fallocate+0xd5/0x140
[   85.779287][ T7400]  ? __pfx_shmem_fallocate+0x10/0x10
[   85.779309][ T7400]  vfs_fallocate+0x576/0x10a0
[   85.779336][ T7400]  ? __pfx_vfs_fallocate+0x10/0x10
[   85.779369][ T7400]  __x64_sys_fallocate+0xd5/0x140
[   85.779396][ T7400]  do_syscall_64+0x123/0x790
[   85.779427][ T7400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.779448][ T7400] RIP: 0033:0x7f29f8b9e559
[   85.779464][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.779482][ T7400] RSP: 002b:00007f29f9a90028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   85.779502][ T7400] RAX: ffffffffffffffda RBX: 00007f29f8e25fa0 RCX: 00007f29f8b9e559
[   85.779514][ T7400] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000005
[   85.779525][ T7400] RBP: 00007f29f8c358b0 R08: 0000000000000000 R09: 0000000000000000
[   85.779536][ T7400] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000
[   85.779547][ T7400] R13: 00007f29f8e26038 R14: 00007f29f8e25fa0 R15: 00007fff73dcc398
[   85.779576][ T7400]  </TASK>
[   85.969062][ T7406] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   85.969675][   T43] audit: type=1400 audit(1792167408.097:642): avc:  denied  { connect } for  pid=7405 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   85.973292][   T43] audit: type=1400 audit(1792167408.107:643): avc:  denied  { shutdown } for  pid=7405 comm="syz.3.373" lport=34067 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.072727][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.097370][ T7414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   86.351347][ T4588] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[   86.376504][   T43] audit: type=1400 audit(1792167408.507:644): avc:  denied  { write } for  pid=7423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.411226][ T2318] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   86.503103][ T4588] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   86.504752][ T4588] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10
[   86.504778][ T4588] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64
[   86.504799][ T4588] usb 7-1: config 0 interface 0 has no altsetting 0
[   86.506877][ T4588] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   86.506895][ T4588] usb 7-1: Product: syz
[   86.506909][ T4588] usb 7-1: Manufacturer: syz
[   86.506921][ T4588] usb 7-1: SerialNumber: syz
[   86.509727][ T4588] usb 7-1: config 0 descriptor??
[   86.513246][ T7418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   86.518122][ T4588] usb 7-1: selecting invalid altsetting 0
[   86.563678][ T2318] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   86.564499][ T2318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.564515][ T2318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.564532][ T2318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.567529][ T2318] usb 8-1: config 0 descriptor??
[   86.644891][ T7436] fuse: Unknown parameter 'roï'
[   86.720280][ T5731] usb 7-1: USB disconnect, device number 10
[   86.974298][ T2318] usbhid 8-1:0.0: can't add hid device: -71
[   86.974351][ T2318] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   86.979467][ T2318] usb 8-1: USB disconnect, device number 8
[   87.248281][ T7453] rxe_eth0 speed is unknown, defaulting to 1000
[   87.369555][ T7453] virt_wifi0 speed is unknown, defaulting to 1000
[   87.372743][ T7456] rxe_eth0 speed is unknown, defaulting to 1000
[   87.477730][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'.
[   87.477744][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.477752][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.483464][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.483476][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.536930][ T7456] virt_wifi0 speed is unknown, defaulting to 1000
[   87.647617][ T7492] vcan0: tx drop: invalid sa for name 0x0102030405060708
[   87.801937][   T66] Bluetooth: hci0: command 0x040f tx timeout
[   88.031362][ T2318] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[   88.091867][ T5731] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   88.182264][ T2318] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   88.183217][ T2318] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10
[   88.183242][ T2318] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64
[   88.183263][ T2318] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.185083][ T2318] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   88.185103][ T2318] usb 8-1: Product: syz
[   88.185115][ T2318] usb 8-1: Manufacturer: syz
[   88.185126][ T2318] usb 8-1: SerialNumber: syz
[   88.187103][ T2318] usb 8-1: config 0 descriptor??
[   88.187801][ T7511] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   88.195844][ T2318] usb 8-1: selecting invalid altsetting 0
[   88.258556][ T5731] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   88.259447][ T5731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.259469][ T5731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.259489][ T5731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.264148][ T5731] usb 10-1: config 0 descriptor??
[   88.394708][ T2318] usb 8-1: USB disconnect, device number 9
[   88.442843][ T7542] tmpfs: Unknown parameter 'quot'
[   88.488231][ T7544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.404'.
[   88.493875][ T7544] syzkaller1: entered promiscuous mode
[   88.493887][ T7544] syzkaller1: entered allmulticast mode
[   88.628460][ T7550] netlink: 'syz.2.406': attribute type 42 has an invalid length.
[   88.687594][ T5731] usbhid 10-1:0.0: can't add hid device: -71
[   88.687677][ T5731] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[   88.695700][ T5731] usb 10-1: USB disconnect, device number 2
[   89.077660][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[   89.126637][ T7576] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[   89.135695][ T7576] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.287535][ T7596] syzkaller1: entered promiscuous mode
[   89.287551][ T7596] syzkaller1: entered allmulticast mode
[   89.359583][  T111] Bluetooth: hci4: Frame reassembly failed (-84)
[   89.740564][ T7604] cgroup: fork rejected by pids controller in /syz3
[   89.891287][ T5085] Bluetooth: hci0: command 0x040f tx timeout
[   90.279447][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.431'.
[   90.322450][ T7683] netlink: 'syz.2.432': attribute type 1 has an invalid length.
[   90.336262][ T7683] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.576239][   T43] kauditd_printk_skb: 30 callbacks suppressed
[   90.576258][   T43] audit: type=1400 audit(1792167412.707:675): avc:  denied  { map } for  pid=7689 comm="syz.3.435" path="socket:[18214]" dev="sockfs" ino=18214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.655923][   T43] audit: type=1400 audit(1792167412.787:676): avc:  denied  { read } for  pid=7695 comm="syz.2.437" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   90.655971][   T43] audit: type=1400 audit(1792167412.787:677): avc:  denied  { open } for  pid=7695 comm="syz.2.437" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   90.656640][   T43] audit: type=1400 audit(1792167412.787:678): avc:  denied  { ioctl } for  pid=7695 comm="syz.2.437" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   90.671212][   T43] audit: type=1400 audit(1792167412.797:679): avc:  denied  { write } for  pid=7699 comm="syz.3.438" name="nullb" dev="configfs" ino=6290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   90.726530][ T7703] 9p: Could not find request transport: uniZ
[   90.833432][ T7716] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   90.844534][ T7716] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.054248][   T43] audit: type=1400 audit(1792167413.187:680): avc:  denied  { connect } for  pid=7724 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   91.210741][ T7731] binder: 7730:7731 ioctl c0306201 200000000480 returned -14
[   91.213441][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213514][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213557][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213598][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213640][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213682][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213723][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.213767][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214136][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214252][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214321][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214384][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214456][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214523][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214590][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214652][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214717][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214781][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214846][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214913][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.214980][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215053][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215121][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215187][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215257][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215325][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215392][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215464][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215530][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215599][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.215666][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.218298][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218402][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218488][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218565][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218678][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218760][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218837][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218915][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.218991][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219069][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219146][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219224][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219301][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219379][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219462][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219540][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219609][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219680][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219758][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219842][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.219919][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220000][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220075][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220152][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220229][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220333][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220413][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.220496][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.221808][   T43] audit: type=1400 audit(1792167413.357:681): avc:  denied  { map } for  pid=7730 comm="syz.5.447" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   91.222273][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.222363][ T7731] binder: 7730:7731 ioctl c0306201 2000000005c0 returned -14
[   91.223699][ T7743] binder: 7730:7743 ioctl c0306201 200000000700 returned -14
[   91.227698][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.227787][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.227884][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.227953][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.228024][ T7732] binder: 7730:7732 ioctl c0306201 200000000640 returned -14
[   91.394992][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[   91.395021][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'.
[   91.398933][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[   91.398955][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'.
[   91.401380][   T66] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   91.472917][ T7754] netlink: 156 bytes leftover after parsing attributes in process `syz.2.452'.
[   91.518616][ T7756] netlink: 'syz.2.453': attribute type 1 has an invalid length.
[   91.533578][   T43] audit: type=1400 audit(1792167413.667:682): avc:  denied  { ioctl } for  pid=7758 comm="syz.1.454" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4b66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   91.537643][ T7756] 8021q: adding VLAN 0 to HW filter on device bond6
[   91.715334][ T7770] netlink: 868 bytes leftover after parsing attributes in process `syz.3.457'.
[   91.829958][   T43] audit: type=1400 audit(1792167413.957:683): avc:  denied  { mounton } for  pid=7781 comm="syz.2.461" path="/119/file0" dev="9p" ino=71827633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   91.830104][ T7782] 9pnet_virtio: no channels available for device syz
[   91.834378][   T43] audit: type=1400 audit(1792167413.967:684): avc:  denied  { write } for  pid=7781 comm="syz.2.461" name="/" dev="9p" ino=71827633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   91.976579][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'.
[   92.094708][ T7802] netlink: 'syz.5.467': attribute type 1 has an invalid length.
[   92.125524][ T7802] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.129836][ T7805] input: syz0 as /devices/virtual/input/input21
[   92.202726][ T7809] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[   92.211599][ T7809] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.247505][ T7814] netlink: 44 bytes leftover after parsing attributes in process `syz.3.472'.
[   92.247530][ T7814] netlink: 'syz.3.472': attribute type 6 has an invalid length.
[   92.247541][ T7814] netlink: 'syz.3.472': attribute type 5 has an invalid length.
[   92.247551][ T7814] netlink: 'syz.3.472': attribute type 4 has an invalid length.
[   92.295336][ T7820] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   92.351940][ T7821] befs: (nbd5): No write support. Marking filesystem read-only
[   92.352149][ T7821] befs: (nbd5): unable to read superblock
[   92.356612][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.489886][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.499867][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.500639][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.502455][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.504575][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.508416][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.549037][ T7832] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   92.550279][ T7832] batman_adv: batadv0: Adding interface: gretap1
[   92.550293][ T7832] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.550319][ T7832] batman_adv: batadv0: Interface activated: gretap1
[   92.589959][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.677635][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.716351][ T7853] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   92.738778][ T7853] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.765731][ T7824] rxe_eth0 speed is unknown, defaulting to 1000
[   92.831477][   T13] bridge_slave_1: left allmulticast mode
[   92.831493][   T13] bridge_slave_1: left promiscuous mode
[   92.831598][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.837237][   T13] bridge_slave_0: left allmulticast mode
[   92.837252][   T13] bridge_slave_0: left promiscuous mode
[   92.837348][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.989958][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.996958][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.998510][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   92.999833][   T13] bond0 (unregistering): Released all slaves
[   93.004521][   T13] bond1 (unregistering): Released all slaves
[   93.010423][   T13] bond2 (unregistering): Released all slaves
[   93.015806][   T13] bond3 (unregistering): Released all slaves
[   93.024948][   T13] bond4 (unregistering): Released all slaves
[   93.035587][   T13] bond5 (unregistering): Released all slaves
[   93.048058][   T13] bond6 (unregistering): Released all slaves
[   93.069378][ T7824] virt_wifi0 speed is unknown, defaulting to 1000
[   93.070489][ T5438] 8021q: adding VLAN 0 to HW filter on device eth10
[   93.198244][ T7870] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.308801][ T5438] 8021q: adding VLAN 0 to HW filter on device eth11
[   93.391469][   T42] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   93.473769][   T13] hsr_slave_0: left promiscuous mode
[   93.474217][   T13] hsr_slave_1: left promiscuous mode
[   93.474590][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.474601][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.475526][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.475536][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.498626][   T13] veth1_macvtap: left promiscuous mode
[   93.498649][   T13] veth0_macvtap: left promiscuous mode
[   93.498707][   T13] veth1_vlan: left promiscuous mode
[   93.498736][   T13] veth0_vlan: left promiscuous mode
[   93.551434][   T42] usb 6-1: Using ep0 maxpacket: 8
[   93.552688][   T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   93.553534][   T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   93.553558][   T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   93.553570][   T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   93.553583][   T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   93.553600][   T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   93.553628][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.678127][ T1164] smbdirect: ib_dev[ÿ] removed
[   93.687645][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'.
[   93.721119][   T13] team0 (unregistering): Port device team_slave_1 removed
[   93.729731][   T13] team0 (unregistering): Port device team_slave_0 removed
[   93.846543][ T5438] 8021q: adding VLAN 0 to HW filter on device eth12
[   93.883559][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.883638][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.883733][ T7824] bridge_slave_0: entered allmulticast mode
[   93.885665][ T7824] bridge_slave_0: entered promiscuous mode
[   93.887658][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.887758][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.887850][ T7824] bridge_slave_1: entered allmulticast mode
[   93.889195][ T7824] bridge_slave_1: entered promiscuous mode
[   93.912588][ T7824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.924128][ T7824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.945072][ T7824] team0: Port device team_slave_0 added
[   93.947306][ T7824] team0: Port device team_slave_1 added
[   93.974067][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.974082][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.974103][ T7824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.975406][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.975416][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.975433][ T7824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.019047][ T7824] hsr_slave_0: entered promiscuous mode
[   94.019485][ T7824] hsr_slave_1: entered promiscuous mode
[   94.019799][ T7824] debugfs: 'hsr0' already exists in 'hsr'
[   94.019811][ T7824] Cannot create hsr debugfs directory
[   94.129846][ T7928] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.180917][ T5438] 8021q: adding VLAN 0 to HW filter on device eth13
[   94.295299][ T7824] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   94.300206][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.300590][ T7824] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   94.307301][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.307765][ T7824] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   94.314878][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.316111][ T7824] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   94.317915][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.330974][ T7938] usbtmc 6-1:16.0: simple usb_control_msg returned 0
[   94.429302][ T7957] bond4: (slave veth0_to_bridge): Device is not bonding slave
[   94.429325][ T7957] bond4: option active_slave: invalid value (veth0_to_bridge)
[   94.430736][ T7957] bond4 (unregistering): Released all slaves
[   94.572893][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.579528][ T7824] 8021q: adding VLAN 0 to HW filter on device team0
[   94.588197][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.588307][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.595470][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.595519][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.601340][ T5085] Bluetooth: hci3: command tx timeout
[   94.871130][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.895045][ T7989] validate_nla: 5 callbacks suppressed
[   94.895063][ T7989] netlink: 'syz.5.502': attribute type 1 has an invalid length.
[   94.914896][ T7989] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.959263][ T7989] warn_alloc: 11 callbacks suppressed
[   94.959281][ T7989] syz.5.502: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   94.959337][ T7989] CPU: 2 UID: 0 PID: 7989 Comm: syz.5.502 Not tainted syzkaller #0 PREEMPT(full) 
[   94.959358][ T7989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.959368][ T7989] Call Trace:
[   94.959373][ T7989]  <TASK>
[   94.959380][ T7989]  dump_stack_lvl+0x100/0x190
[   94.959433][ T7989]  warn_alloc.cold+0x9e/0xb2
[   94.959456][ T7989]  ? __pfx_warn_alloc+0x10/0x10
[   94.959482][ T7989]  ? policy_nodemask+0xed/0x4f0
[   94.959511][ T7989]  ? alloc_pages_mpol+0x260/0x550
[   94.959539][ T7989]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   94.959565][ T7989]  ? __get_vm_area_node+0x22b/0x350
[   94.959598][ T7989]  __vmalloc_node_range_noprof+0x111c/0x1420
[   94.959638][ T7989]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   94.959663][ T7989]  ? do_syscall_64+0x123/0x790
[   94.959700][ T7989]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.959739][ T7989]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   94.959766][ T7989]  __vmalloc_node_noprof+0xad/0xf0
[   94.959795][ T7989]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   94.959826][ T7989]  __vmalloc_noprof+0xa3/0x120
[   94.959853][ T7989]  ? __pfx___vmalloc_noprof+0x10/0x10
[   94.959892][ T7989]  bpf_prog_alloc_no_stats+0x59/0x690
[   94.959922][ T7989]  bpf_prog_alloc+0x3b/0x200
[   94.959950][ T7989]  bpf_prog_create_from_user+0xb4/0x2e0
[   94.959983][ T7989]  ? __pfx_seccomp_check_filter+0x10/0x10
[   94.960015][ T7989]  do_seccomp+0x870/0x27c0
[   94.960043][ T7989]  ? __pfx_do_seccomp+0x10/0x10
[   94.960065][ T7989]  ? xfd_validate_state+0x129/0x190
[   94.960096][ T7989]  do_syscall_64+0x123/0x790
[   94.960126][ T7989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.960147][ T7989] RIP: 0033:0x7fd2c3d9e559
[   94.960164][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.960183][ T7989] RSP: 002b:00007fd2c4cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   94.960201][ T7989] RAX: ffffffffffffffda RBX: 00007fd2c4025fa0 RCX: 00007fd2c3d9e559
[   94.960214][ T7989] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000000000000001
[   94.960227][ T7989] RBP: 00007fd2c3e358b0 R08: 0000000000000000 R09: 0000000000000000
[   94.960240][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.960252][ T7989] R13: 00007fd2c4026038 R14: 00007fd2c4025fa0 R15: 00007ffec40a5d18
[   94.960297][ T7989]  </TASK>
[   94.960307][ T7989] Mem-Info:
[   94.960315][ T7989] active_anon:11426 inactive_anon:0 isolated_anon:0
[   94.960315][ T7989]  active_file:5460 inactive_file:56347 isolated_file:0
[   94.960315][ T7989]  unevictable:1000 dirty:244 writeback:0
[   94.960315][ T7989]  slab_reclaimable:11863 slab_unreclaimable:70699
[   94.960315][ T7989]  mapped:25123 shmem:1571 pagetables:1503
[   94.960315][ T7989]  sec_pagetables:298 bounce:0
[   94.960315][ T7989]  kernel_misc_reclaimable:0
[   94.960315][ T7989]  free:405963 free_pcp:10426 free_cma:0
[   94.960362][ T7989] Node 0 active_anon:45616kB inactive_anon:0kB active_file:21840kB inactive_file:216812kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100456kB dirty:976kB writeback:0kB shmem:4284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14368kB pagetables:5764kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   94.960416][ T7989] Node 1 active_anon:88kB inactive_anon:0kB active_file:0kB inactive_file:8576kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   94.960462][ T7989] Node 0 DMA free:5136kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:1828kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:96kB free_cma:0kB
[   94.960515][ T7989] lowmem_reserve[]: 0 1204 1204 1204 1204
[   94.960549][ T7989] Node 0 DMA32 free:83668kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:45616kB inactive_anon:0kB active_file:20012kB inactive_file:216812kB unevictable:2000kB writepending:976kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:15420kB local_pcp:6644kB free_cma:0kB
[   94.960602][ T7989] lowmem_reserve[]: 0 0 0 0 0
[   94.960632][ T7989] Node 1 Normal free:1535048kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:0kB active_file:0kB inactive_file:8576kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:26116kB local_pcp:10436kB free_cma:0kB
[   94.960686][ T7989] lowmem_reserve[]: 0 0 0 0 0
[   94.960719][ T7989] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (U) 1*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 1*4096kB (M) = 5136kB
[   94.960902][ T7989] Node 0 DMA32: 473*4kB (UME) 323*8kB (UME) 412*16kB (UME) 626*32kB (UME) 198*64kB (UME) 92*128kB (UME) 24*256kB (UME) 14*512kB (UM) 6*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 83196kB
[   94.961047][ T7989] Node 1 Normal: 14*4kB (UM) 11*8kB (ME) 28*16kB (UME) 50*32kB (UME) 59*64kB (UME) 38*128kB (UME) 26*256kB (UME) 20*512kB (UME) 8*1024kB (ME) 10*2048kB (M) 361*4096kB (M) = 1535056kB
[   94.961671][ T7989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   94.961686][ T7989] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.961701][ T7989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   94.961715][ T7989] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[   94.961729][ T7989] 63367 total pagecache pages
[   94.961736][ T7989] 0 pages in swap cache
[   94.961742][ T7989] Free swap  = 124996kB
[   94.961747][ T7989] Total swap = 124996kB
[   94.961752][ T7989] 1048443 pages RAM
[   94.961757][ T7989] 0 pages HighMem/MovableOnly
[   94.961762][ T7989] 290717 pages reserved
[   94.961768][ T7989] 0 pages cma reserved
[   95.061630][ T7824] veth0_vlan: entered promiscuous mode
[   95.070725][ T7824] veth1_vlan: entered promiscuous mode
[   95.090726][ T7824] veth0_macvtap: entered promiscuous mode
[   95.095328][ T7824] veth1_macvtap: entered promiscuous mode
[   95.107901][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.119859][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.183587][ T5801] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.183616][ T5801] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.183658][ T5801] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.183678][ T5801] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.211041][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.211063][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.238739][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.238751][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.247845][ T8003] openvswitch: netlink: Message has 12 unknown bytes.
[   95.306431][ T5085] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[   95.335550][ T8011] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   95.360452][ T5085] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[   95.523852][ T8021] netlink: 'syz.3.510': attribute type 1 has an invalid length.
[   95.538180][ T8021] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.144126][ T1901] usb 6-1: USB disconnect, device number 17
[   96.216655][   T43] kauditd_printk_skb: 22 callbacks suppressed
[   96.216674][   T43] audit: type=1400 audit(1792167419.344:707): avc:  denied  { execute } for  pid=8034 comm="syz.1.513" dev="hugetlbfs" ino=23711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   96.217263][   T43] audit: type=1400 audit(1792167419.344:708): avc:  denied  { execute_no_trans } for  pid=8034 comm="syz.1.513" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=23711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   96.228812][ T8036] geneve3: entered promiscuous mode
[   96.347138][   T43] audit: type=1400 audit(1792167419.474:709): avc:  denied  { bind } for  pid=8042 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   96.347211][ T8045] __nla_validate_parse: 4 callbacks suppressed
[   96.347227][ T8045] netlink: 456 bytes leftover after parsing attributes in process `syz.3.516'.
[   96.347242][ T8045] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   96.347393][   T43] audit: type=1400 audit(1792167419.474:710): avc:  denied  { listen } for  pid=8042 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   96.361127][   T43] audit: type=1400 audit(1792167419.484:711): avc:  denied  { write } for  pid=8042 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   96.443793][ T8049] netlink: 'syz.3.518': attribute type 3 has an invalid length.
[   96.443810][ T8049] netlink: 'syz.3.518': attribute type 21 has an invalid length.
[   96.443826][ T8049] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.444128][ T8049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.444138][ T8049] IPv6: NLM_F_CREATE should be set when creating new route
[   96.449261][   T43] audit: type=1400 audit(1792167419.574:712): avc:  denied  { mounton } for  pid=8048 comm="syz.3.518" path="/181/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   96.450894][ T8049] netlink: 'syz.3.518': attribute type 3 has an invalid length.
[   96.450905][ T8049] netlink: 'syz.3.518': attribute type 21 has an invalid length.
[   96.450980][ T8049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.495678][ T8055] netlink: 'syz.3.519': attribute type 1 has an invalid length.
[   96.512623][ T8055] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.653215][   T43] audit: type=1400 audit(1792167419.784:713): avc:  denied  { getattr } for  pid=8057 comm="syz.3.520" name="/" dev="9p" ino=71827633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   96.673695][   T43] audit: type=1400 audit(1792167419.804:714): avc:  denied  { mounton } for  pid=8057 comm="syz.3.520" path="/" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[   96.681374][ T5085] Bluetooth: hci3: command tx timeout
[   96.714429][   T43] audit: type=1400 audit(1792167419.844:715): avc:  denied  { map } for  pid=8061 comm="syz.5.522" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   96.725053][ T8063] syzkaller0: entered promiscuous mode
[   96.725073][ T8063] syzkaller0: entered allmulticast mode
[   96.770615][ T8062] usb usb7: usbfs: process 8062 (syz.5.522) did not claim interface 0 before use
[   96.822740][   T43] audit: type=1400 audit(1792167419.954:716): avc:  denied  { ioctl } for  pid=8061 comm="syz.5.522" path="socket:[24929]" dev="sockfs" ino=24929 ioctlcmd=0x4804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   96.841715][   T30] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[   96.992937][   T30] usb 6-1: Using ep0 maxpacket: 8
[   96.993524][   T30] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[   96.994063][   T30] usb 6-1: config 0 has no interfaces?
[   96.995933][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.995956][   T30] usb 6-1: Product: syz
[   96.995969][   T30] usb 6-1: Manufacturer: syz
[   96.995981][   T30] usb 6-1: SerialNumber: syz
[   96.998348][   T30] usb 6-1: config 0 descriptor??
[   97.047447][ T8069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.295235][ T8078] netlink: 'syz.5.528': attribute type 1 has an invalid length.
[   97.307134][ T8078] 8021q: adding VLAN 0 to HW filter on device bond5
[   97.319519][ T8078] debugfs: Bad value for 'mode'
[   97.329319][   T25] usb 6-1: USB disconnect, device number 18
[   97.331491][ T5085] Bluetooth: hci0: command 0x040f tx timeout
[   97.416177][ T8081] bridge0: port 3(syz_tun) entered blocking state
[   97.416327][ T8081] bridge0: port 3(syz_tun) entered disabled state
[   97.416411][ T8081] syz_tun: entered allmulticast mode
[   97.417535][ T8081] syz_tun: entered promiscuous mode
[   97.691296][ T5879] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   97.863135][ T5879] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   97.864416][ T5879] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   97.864434][ T5879] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   97.864452][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.867334][ T8083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   97.872847][ T5879] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[   98.013370][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'.
[   98.013522][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'.
[   98.049633][ T8108] netlink: 'syz.3.537': attribute type 1 has an invalid length.
[   98.065860][ T8108] 8021q: adding VLAN 0 to HW filter on device bond7
[   98.082801][ T8108] debugfs: Bad value for 'mode'
[   98.087947][ T5879] usb 10-1: USB disconnect, device number 3
[   98.411358][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.413951][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.540'.
[   98.414373][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.416412][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.417485][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.418553][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.419501][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.420559][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.422370][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.423433][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.424420][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.3.540
[   98.543046][ T8124] infiniband syz0: set active
[   98.543059][ T8124] infiniband syz0: added bond0
[   98.548214][ T8124] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   98.548236][ T8124] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   98.548257][ T8124] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   98.553240][ T8131] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   98.559459][ T8124] RDS/IB: syz0: added
[   98.559561][ T8124] smc: adding ib device syz0 with port count 1
[   98.559577][ T8124] smc:    ib device syz0 port 1 has no pnetid
[   98.764089][ T5085] Bluetooth: hci3: command tx timeout
[   99.402290][ T5085] Bluetooth: hci0: command 0x040f tx timeout
[   99.688436][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.6.543'.
[   99.709146][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.543'.
[   99.714362][ T8144] FAULT_INJECTION: forcing a failure.
[   99.714362][ T8144] name fail_futex, interval 1, probability 0, space 0, times 1
[   99.714392][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.6.543 Not tainted syzkaller #0 PREEMPT(full) 
[   99.714414][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.714425][ T8144] Call Trace:
[   99.714431][ T8144]  <TASK>
[   99.714439][ T8144]  dump_stack_lvl+0x100/0x190
[   99.714471][ T8144]  should_fail_ex.cold+0x5/0xa
[   99.714498][ T8144]  get_futex_key+0x1d0/0x14f0
[   99.714527][ T8144]  ? __pfx_get_futex_key+0x10/0x10
[   99.714554][ T8144]  ? ___sys_sendmsg+0x127/0x1e0
[   99.714585][ T8144]  futex_wake+0xf4/0x5e0
[   99.714603][ T8144]  ? futex_wait+0x11e/0x370
[   99.714624][ T8144]  ? __pfx_futex_wake+0x10/0x10
[   99.714649][ T8144]  ? find_held_lock+0x2b/0x80
[   99.714680][ T8144]  do_futex+0x2b2/0x440
[   99.714708][ T8144]  ? __pfx_do_futex+0x10/0x10
[   99.714737][ T8144]  ? fput+0x7c/0x100
[   99.714766][ T8144]  __x64_sys_futex+0x34f/0x4d0
[   99.714797][ T8144]  ? __pfx___x64_sys_futex+0x10/0x10
[   99.714832][ T8144]  do_syscall_64+0x123/0x790
[   99.714861][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.714885][ T8144] RIP: 0033:0x7fa1ae39e559
[   99.714901][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.714918][ T8144] RSP: 002b:00007fa1af3270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   99.714936][ T8144] RAX: ffffffffffffffda RBX: 00007fa1ae625fa8 RCX: 00007fa1ae39e559
[   99.714950][ T8144] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1ae625fac
[   99.714961][ T8144] RBP: 00007fa1ae625fa0 R08: 0000000000000001 R09: 0000000000000000
[   99.714971][ T8144] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000000
[   99.714982][ T8144] R13: 00007fa1ae626038 R14: 00007ffce12a7d20 R15: 00007ffce12a7e08
[   99.715007][ T8144]  </TASK>
[   99.840869][ T8150] binder: 8149:8150 ioctl c0306201 200000000140 returned -22
[   99.912440][ T8152] netlink: 'syz.6.546': attribute type 1 has an invalid length.
[   99.982455][ T8153] debugfs: Bad value for 'mode'
[  100.243616][ T8159] rxe_eth0 speed is unknown, defaulting to 1000
[  100.488471][ T8178] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  100.488656][ T8178] CIFS: Attempting to mount //127.0.0.1/test
[  100.494152][ T8178] CIFS: VFS: Error connecting to socket. Aborting operation.
[  100.494234][ T8178] CIFS: VFS: cifs_mount failed w/return code = -101
[  100.511923][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.555'.
[  100.511943][ T8178] netlink: 9 bytes leftover after parsing attributes in process `syz.5.555'.
[  100.556851][ T8183] netlink: 'syz.5.557': attribute type 1 has an invalid length.
[  100.570426][ T8183] 8021q: adding VLAN 0 to HW filter on device bond6
[  100.583272][ T8183] debugfs: Bad value for 'mode'
[  100.592443][ T5085] Bluetooth: hci3: failed to read key size for handle 200
[  100.697752][ T8191] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13
[  100.697764][ T8191] Unsupported digest algo: 106
[  100.727308][ T8194] SELinux:  Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped).
[  100.854750][ T8222] netlink: 'syz.3.566': attribute type 1 has an invalid length.
[  100.865846][ T8222] 8021q: adding VLAN 0 to HW filter on device bond8
[  100.877160][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  100.884110][ T8222] debugfs: Bad value for 'mode'
[  100.903253][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  100.943394][ T8228] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  101.137777][ T8246] FAULT_INJECTION: forcing a failure.
[  101.137777][ T8246] name failslab, interval 1, probability 0, space 0, times 0
[  101.137798][ T8246] CPU: 3 UID: 0 PID: 8246 Comm: syz.1.569 Not tainted syzkaller #0 PREEMPT(full) 
[  101.137811][ T8246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.137817][ T8246] Call Trace:
[  101.137822][ T8246]  <TASK>
[  101.137827][ T8246]  dump_stack_lvl+0x100/0x190
[  101.137847][ T8246]  should_fail_ex.cold+0x5/0xa
[  101.137862][ T8246]  should_failslab+0xc2/0x120
[  101.137880][ T8246]  __kvmalloc_node_noprof+0x113/0x9b0
[  101.137897][ T8246]  ? __pfx___mutex_lock+0x10/0x10
[  101.137914][ T8246]  ? nf_hook_entries_grow+0x255/0x870
[  101.137933][ T8246]  nf_hook_entries_grow+0x255/0x870
[  101.137950][ T8246]  ? __call_rcu_common.constprop.0+0x3f2/0x9b0
[  101.137970][ T8246]  __nf_register_net_hook+0x112/0x780
[  101.137988][ T8246]  nf_register_net_hook+0xdb/0x170
[  101.138005][ T8246]  nf_register_net_hooks+0x5d/0xd0
[  101.138031][ T8246]  ip_vs_register_hooks+0xe3/0x150
[  101.138045][ T8246]  ip_vs_add_service+0x515/0x2240
[  101.138062][ T8246]  ? __might_fault+0xc5/0x140
[  101.138082][ T8246]  ? do_ip_vs_set_ctl+0xb86/0xc90
[  101.138098][ T8246]  do_ip_vs_set_ctl+0xb86/0xc90
[  101.138117][ T8246]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  101.138134][ T8246]  ? rcu_is_watching+0x13/0xc0
[  101.138155][ T8246]  ? find_held_lock+0x2b/0x80
[  101.138172][ T8246]  ? nf_sockopt_find.isra.0+0x222/0x290
[  101.138184][ T8246]  ? nf_sockopt_find.isra.0+0x222/0x290
[  101.138200][ T8246]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  101.138225][ T8246]  ? nf_setsockopt+0x8d/0xf0
[  101.138235][ T8246]  nf_setsockopt+0x8d/0xf0
[  101.138247][ T8246]  ip_setsockopt+0xcb/0xf0
[  101.138264][ T8246]  sctp_setsockopt+0x161/0xb370
[  101.138285][ T8246]  ? __pfx_sctp_setsockopt+0x10/0x10
[  101.138302][ T8246]  ? __fget_files+0x215/0x3d0
[  101.138328][ T8246]  ? selinux_socket_setsockopt+0x6a/0x80
[  101.138352][ T8246]  ? sock_common_setsockopt+0x2e/0xf0
[  101.138374][ T8246]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  101.138401][ T8246]  do_sock_setsockopt+0xf3/0x1d0
[  101.138426][ T8246]  __sys_setsockopt+0x195/0x220
[  101.138449][ T8246]  __x64_sys_setsockopt+0xbd/0x160
[  101.138465][ T8246]  ? do_syscall_64+0xae/0x790
[  101.138490][ T8246]  ? lockdep_hardirqs_on+0x7d/0x110
[  101.138512][ T8246]  do_syscall_64+0x123/0x790
[  101.138531][ T8246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.138543][ T8246] RIP: 0033:0x7f4b33d9e559
[  101.138552][ T8246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.138563][ T8246] RSP: 002b:00007f4b34c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.138574][ T8246] RAX: ffffffffffffffda RBX: 00007f4b34025fa0 RCX: 00007f4b33d9e559
[  101.138581][ T8246] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000006
[  101.138587][ T8246] RBP: 00007f4b33e358b0 R08: 000000000000002c R09: 0000000000000000
[  101.138594][ T8246] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000
[  101.138600][ T8246] R13: 00007f4b34026038 R14: 00007f4b34025fa0 R15: 00007ffe209b1a08
[  101.138615][ T8246]  </TASK>
[  101.365288][ T8223] __nla_validate_parse: 18 callbacks suppressed
[  101.365302][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.390105][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.413107][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.442669][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.464555][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.481921][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.497591][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.518074][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.533912][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.555558][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.567'.
[  101.620164][ T8269] jffs2: notice: (8269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  101.623803][   T43] kauditd_printk_skb: 30 callbacks suppressed
[  101.623825][   T43] audit: type=1400 audit(1792167424.754:747): avc:  denied  { write } for  pid=8268 comm="syz.3.572" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  101.637015][   T43] audit: type=1400 audit(1792167424.764:748): avc:  denied  { ioctl } for  pid=8268 comm="syz.3.572" path="/199/mnt/fillfile" dev="jffs2" ino=3 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  101.642859][   T43] audit: type=1400 audit(1792167424.764:749): avc:  denied  { mount } for  pid=8268 comm="syz.3.572" name="/" dev="ramfs" ino=25787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  101.697145][   T43] audit: type=1400 audit(1792167424.824:750): avc:  denied  { read } for  pid=8268 comm="syz.3.572" dev="nsfs" ino=4026533052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  101.697794][   T43] audit: type=1400 audit(1792167424.824:751): avc:  denied  { open } for  pid=8268 comm="syz.3.572" path="net:[4026533052]" dev="nsfs" ino=4026533052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  101.697845][   T43] audit: type=1400 audit(1792167424.824:752): avc:  denied  { ioctl } for  pid=8268 comm="syz.3.572" path="socket:[25230]" dev="sockfs" ino=25230 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  101.740902][ T8283] netlink: 'syz.1.576': attribute type 1 has an invalid length.
[  101.751459][ T8283] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.761083][ T8283] debugfs: Bad value for 'mode'
[  101.997322][ T8333] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  101.997368][ T8333] SELinux: failed to load policy
[  102.011950][   T43] audit: type=1400 audit(1792167425.134:753): avc:  denied  { getopt } for  pid=8323 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  102.050031][   T43] audit: type=1400 audit(1792167425.174:754): avc:  denied  { write } for  pid=8327 comm="syz.3.587" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  102.128900][ T8348] netlink: 'syz.5.590': attribute type 1 has an invalid length.
[  102.139145][ T8348] 8021q: adding VLAN 0 to HW filter on device bond7
[  102.292005][   T58] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  102.451445][   T58] usb 11-1: Using ep0 maxpacket: 32
[  102.452332][   T58] usb 11-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40
[  102.453634][   T58] usb 11-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  102.453661][   T58] usb 11-1: config 1 interface 0 has no altsetting 0
[  102.455836][   T58] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.455856][   T58] usb 11-1: Product: syz
[  102.455867][   T58] usb 11-1: Manufacturer: syz
[  102.455881][   T58] usb 11-1: SerialNumber: syz
[  102.576123][ T8363] sch_fq: defrate 0 ignored.
[  102.579751][   T43] audit: type=1400 audit(1792167425.704:755): avc:  denied  { map } for  pid=8362 comm="syz.1.595" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  102.587960][ T8363] netlink: 'syz.1.595': attribute type 3 has an invalid length.
[  102.600978][ T8363] xt_cgroup: path and classid specified
[  102.602408][   T43] audit: type=1400 audit(1792167425.734:756): avc:  denied  { setopt } for  pid=8362 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  102.624725][ T8357] netlink: 'syz.5.593': attribute type 34 has an invalid length.
[  102.633779][ T8357] bond8: option lacp_strict: invalid value (102)
[  102.634854][ T8357] bond8 (unregistering): Released all slaves
[  102.649954][ T8368] overlayfs: unescaped trailing colons in lowerdir mount option.
[  102.650530][ T8370] ./dev/sda1: Can't open blockdev
[  102.761346][ T8379] netlink: 'syz.1.599': attribute type 1 has an invalid length.
[  102.772084][ T8379] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.913324][ T8354] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.913511][ T8354] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.913561][ T8354] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.922988][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.179656][   T58] usbhid 11-1:1.0: can't add hid device: -71
[  103.179702][   T58] usbhid 11-1:1.0: probe with driver usbhid failed with error -71
[  103.182603][   T58] usb 11-1: USB disconnect, device number 2
[  103.273328][   T66] Bluetooth: unknown link type 128
[  103.693322][ T8416] netlink: 'syz.1.610': attribute type 1 has an invalid length.
[  103.706765][ T8416] 8021q: adding VLAN 0 to HW filter on device bond6
[  103.809849][ T8432] netlink: 'syz.6.616': attribute type 9 has an invalid length.
[  103.826111][ T8432] dummy0: entered promiscuous mode
[  103.837933][ T8436] libceph: resolve '127.0' (ret=-3): failed
[  103.851493][ T8442] ------------[ cut here ]------------
[  103.851503][ T8442] kernel BUG at net/ceph/mon_client.c:211!
[  103.851516][ T8442] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  103.858889][ T8442] CPU: 2 UID: 0 PID: 8442 Comm: syz.3.617 Not tainted syzkaller #0 PREEMPT(full) 
[  103.862014][ T8446] vcan1: entered allmulticast mode
[  103.864783][ T8442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.867921][ T8442] RIP: 0010:__open_session+0x60f/0x740
[  103.869665][ T8442] Code: f6 44 89 e7 e8 e2 8d 25 fa 89 c5 e9 2b fb ff ff e8 f6 a6 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 e2 a6 7a f6 90 <0f> 0b e8 7a e8 ee f6 e9 7b fa ff ff 4c 89 f7 e8 6d e8 ee f6 e9 16
[  103.873888][ T8448] EXT4-fs warning (device sda1): verify_group_input:158: Reserved blocks too high (12)
[  103.878789][ T8442] RSP: 0018:ffffc90003a1fbe0 EFLAGS: 00010293
[  103.880698][ T8442] RAX: 0000000000000000 RBX: ffff888057b34290 RCX: 0000000000000000
[  103.883158][ T8442] RDX: ffff888037c48000 RSI: ffffffff8b91afae RDI: ffff888037c48000
[  103.885642][ T8442] RBP: ffff88802c8f0c40 R08: 0000000000000005 R09: 0000000000000000
[  103.888109][ T8442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  103.890562][ T8442] R13: 00000000ffffffff R14: ffff888057b34400 R15: ffff888057b34298
[  103.893017][ T8442] FS:  00007f29f9a0c6c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000
[  103.895789][ T8442] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.897866][ T8442] CR2: 00007f4b34c5eff8 CR3: 0000000023e54000 CR4: 0000000000352ef0
[  103.900365][ T8442] Call Trace:
[  103.901489][ T8442]  <TASK>
[  103.902432][ T8442]  ? __ceph_monc_want_map+0x189/0x360
[  103.904122][ T8442]  ceph_monc_open_session+0x46/0x60
[  103.905771][ T8442]  __ceph_open_session+0x135/0x590
[  103.907389][ T8442]  ? __pfx___mutex_lock+0x10/0x10
[  103.909012][ T8442]  ? super_setup_bdi_name+0x1a3/0x250
[  103.910726][ T8442]  ? __pfx___ceph_open_session+0x10/0x10
[  103.912505][ T8442]  ? __pfx_woken_wake_function+0x10/0x10
[  103.914269][ T8442]  ceph_get_tree+0xd98/0x1fd0
[  103.915758][ T8442]  ? security_capable+0x80/0x260
[  103.917330][ T8442]  vfs_get_tree+0x92/0x320
[  103.918747][ T8442]  vfs_cmd_create+0xd7/0x2a0
[  103.920207][ T8442]  __do_sys_fsconfig+0x55a/0xcb0
[  103.921776][ T8442]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  103.923486][ T8442]  do_syscall_64+0x123/0x790
[  103.924955][ T8442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.926817][ T8442] RIP: 0033:0x7f29f8b9e559
[  103.928248][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.934241][ T8442] RSP: 002b:00007f29f9a0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  103.936862][ T8442] RAX: ffffffffffffffda RBX: 00007f29f8e26360 RCX: 00007f29f8b9e559
[  103.939315][ T8442] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  103.941817][ T8442] RBP: 00007f29f8c358b0 R08: 0000000000000000 R09: 0000000000000000
[  103.944267][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.946727][ T8442] R13: 00007f29f8e263f8 R14: 00007f29f8e26360 R15: 00007fff73dcc398
[  103.949206][ T8442]  </TASK>
[  103.950189][ T8442] Modules linked in:
[  103.951947][ T8442] ---[ end trace 0000000000000000 ]---
[  103.954018][ T8442] RIP: 0010:__open_session+0x60f/0x740
[  103.954041][ T8442] Code: f6 44 89 e7 e8 e2 8d 25 fa 89 c5 e9 2b fb ff ff e8 f6 a6 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 e2 a6 7a f6 90 <0f> 0b e8 7a e8 ee f6 e9 7b fa ff ff 4c 89 f7 e8 6d e8 ee f6 e9 16
[  103.954052][ T8442] RSP: 0018:ffffc90003a1fbe0 EFLAGS: 00010293
[  103.954061][ T8442] RAX: 0000000000000000 RBX: ffff888057b34290 RCX: 0000000000000000
[  103.954067][ T8442] RDX: ffff888037c48000 RSI: ffffffff8b91afae RDI: ffff888037c48000
[  103.954074][ T8442] RBP: ffff88802c8f0c40 R08: 0000000000000005 R09: 0000000000000000
[  103.954080][ T8442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  103.954086][ T8442] R13: 00000000ffffffff R14: ffff888057b34400 R15: ffff888057b34298
[  103.954419][ T8442] FS:  00007f29f9a0c6c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000
[  103.954444][ T8442] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.954453][ T8442] CR2: 00007f4b34c5eff8 CR3: 0000000023e54000 CR4: 0000000000352ef0
[  103.954462][ T8442] Kernel panic - not syncing: Fatal exception
[  103.986195][ T8442] Kernel Offset: disabled
[  103.987557][ T8442] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:04:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000078134 RBX=ffffffff8fa91580 RCX=ffffffff8bd48275 RDX=0000000000000001
RSI=ffffffff8c625500 RDI=ffffffff81e0a4ae RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0
R8 =0000000000000000 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=ffffffff81d76a79
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000
RIP=ffffffff8bd467af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4946000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f4b34027dac CR3=000000002699b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b34c5ebe0 0000003000000010
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe209b1ef6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe209b1ef6 00007ffe209b1efc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b33e35eda
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b33e35f14
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b33e36078
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b33e35f06
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b33ff55f8 00007f4b33ff55c8 00007f4b33ff5600 00007f4b33ff55e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900032e7498 RBX=800000005285b007 RCX=ffffffff82629d66 RDX=0000000000000001
RSI=0000000000000008 RDI=ffffc900032e7490 RBP=1ffff9200065ce8e RSP=ffffc900032e7450
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001
R12=ffff88803e559900 R13=dffffc0000000000 R14=ffff88803e3612a0 R15=ffffea00014a16c0
RIP=ffffffff8280910a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555a568500 ffffffff 00c00000
GS =0000 ffff8880d4a46000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa1af1556c8 CR3=000000003e7b0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce12a82f6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce12a82f6 00007ffce12a82fc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1ae435eda
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1ae435f14
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1ae436078
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1ae435f06
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000084
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000084
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b2c955 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc90003a1f388
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043
R12=0000000000000000 R13=000000000000003a R14=0000000000000001 R15=ffffc90003a1f6a0
RIP=ffffffff85b2c97f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f29f9a0c6c0 ffffffff 00c00000
GS =0000 ffff8880d4b46000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f4b34c5eff8 CR3=0000000023e54000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec40a6206
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec40a6206 00007ffec40a620c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c3e35eda
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c3e35f14
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c3e36078
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c3e35f06
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffffff8a7d64d7 RBX=ffffc90003976ed0 RCX=ffffffff937e5d01 RDX=1ffff9200072ede3
RSI=ffffffff8a7d64d7 RDI=ffffc90003976f90 RBP=ffffc90003976f60 RSP=ffffc90003976ec8
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003976ed0 R11=000000000008a594
R12=ffffffff81f620c0 R13=ffffc90003976f90 R14=0000000000000000 R15=ffff888037c4cb00
RIP=ffffffff81f620c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f4b34c5f6c0 ffffffff 00c00000
GS =0000 ffff8880d4c46000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3234c4 CR3=000000002699b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f7df010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9217ff5e80
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9217ff5e80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555f7dec08
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c70800060144e400 020007007665642f 2e01ffffffffffff fffff30854800334
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060144e400766564 2f2e01ffffffffff fffffff308548003 07cc100054800401
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 662f2e01ffffffff ffffffffef080680 030001ffffffffff fffffffd08058003
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002080606800405 8004081000010000 0208060a0106e000 0200070030656c69
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000100000 10000c1000010000 0008060a0106d400 1000001000001000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c10000100000008 060a0106d4000200 0710100003800402 8208000410000280
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040100000208060c 0104ee0002000706 9094100003800301 0000020806068004
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0580040810000100 000208060a0106e0 000200070030656c 69662f2e01ffffff
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3966666666666666 660a30322e79656b 5f5f206220306332 3335656339666666
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3335656339666666 66666666660a3132 2e79656b5f5f2062 2030303333356563
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030383333356563 3966666666666666 660a32322e79656b 5f5f206220303433
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f206220303061 3735656339666666 66666666660a382e 79656b5f5f206220
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e79656b5f5f20 6220303461373565 6339666666666666 66660a392e79656b
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a7379656b5f7063 74706d2062203038 6137356563396666 6666666666660a34
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b5f6b636f6c735f 706374706d206220 3063613735656339 6666666666666666