last executing test programs:

1m13.292645298s ago: executing program 0 (id=64):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x4a0000, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async, rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) (async, rerun: 32)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r4 = openat$fault_inject(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f023}) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={r7, 0xc}, &(0x7f00000000c0)=0x8) (async)
poll(&(0x7f0000000200)=[{r0, 0x1000}, {r1, 0x442b}, {r2, 0x402}, {r4, 0x80}, {r5, 0x2094}], 0x5, 0x6) (async, rerun: 64)
r8 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone3(&(0x7f0000000380)={0x84000800, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="440f09c7442400e7570000c74424025e000000c7442406000000000f011c243e36410fc7690dc7442400df000000c74424026e483380c7442406000000000f011c24440f20c03503000000440f22c0660f690554000000460f1ee5c423e15fc7080f092ef30f30", 0x67}], 0x1, 0x4f, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r13, 0xae80, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd7000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="1c004f8018000180140005007f00ff7f000401000700090001010101ec8ab66a71ffd307eeab2d9379629c309f6b04abbbd18615efb55e816012afb661c769d62fc215f7c13daab0d24923bf53df9073db1d70198011e224895342db1aa74a9e9edc202dd90c69511ef673385a47350c464eedacc53f5147808a266766901fadfd3d3d8fc1f15650f3d79f84b6a06c0faa2a4dddf7cc3d2643310659d38f3a21812233d8617e2ad1acc97a5754a225c85c8d97c8d13c635bc8f132a76d14a2c1bf5cf8399f5c04631429d9eda9d01fc0a9118ef517"], 0x38}}, 0x0)

1m12.35191097s ago: executing program 0 (id=84):
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m12.304822111s ago: executing program 0 (id=86):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m12.302078379s ago: executing program 0 (id=87):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB])
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0xf, 0x7, 0x7, 0x8, 0x4})
chdir(&(0x7f0000000040)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x4a8e)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000000c0)=0x1, 0x4)
r2 = syz_open_dev$loop(&(0x7f0000000400), 0x886, 0xc28c2)
r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"})
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000005000000a30c"])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000019c0)={0x0, 'vlan0\x00', {0x2}, 0x7})
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}})

1m12.174688602s ago: executing program 0 (id=90):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) (async, rerun: 32)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x102) (rerun: 32)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) (async, rerun: 32)
unlinkat(r1, &(0x7f0000000680)='nullb1\x00', 0x200) (rerun: 32)

1m11.765098954s ago: executing program 0 (id=99):
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0xd, 0x2, 0xa}, {0x0, 0xc, 0x7, 0x7}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m11.657969937s ago: executing program 32 (id=99):
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0xd, 0x2, 0xa}, {0x0, 0xc, 0x7, 0x7}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1)
close_range(r0, 0xffffffffffffffff, 0x0)

27.073371807s ago: executing program 4 (id=626):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000740)='./cgroup.cpu/memory.force_empty\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f98f9446c6f746d6f64653d3030303030303030813030303030303030313030309799055df2b45ac381cd5b", @ANYRES8=r0, @ANYBLOB="64df58fb54e59337f85b7cc9e4f609b9788232255da790808743cdc64f7c", @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x29, 0x100001, 0x24ff8719b9e054e7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc597723dba20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x3d, 0x0, {0x6, 0x80004, 0x20000000, 0x403, 0xd, 0x2, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x200, 0x0, 0x0, 0x410, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r0, 0x3, 0x3)
syz_fuse_handle_req(r3, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x100)
write$FUSE_DIRENT(r3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_clone3(&(0x7f0000000680)={0x200000000, &(0x7f0000000080), &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000300), {0x1c}, &(0x7f0000000480)=""/111, 0x6f, &(0x7f0000000540)=""/99, &(0x7f00000005c0)=[0x0, 0x0], 0x2, {r4}}, 0x58)
write$FUSE_LK(r3, &(0x7f0000000700)={0x28, 0x0, 0x0, {{0xffffffff, 0x9, 0x1, r7}}}, 0x28)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x122, 0x0, 0x1}]})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r8, &(0x7f00000002c0)='0', 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2, 0x1}}, 0x2e)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0)
ioctl$CDROMCLOSETRAY(r11, 0x5319)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="250300000000000000000800000010303008f1652fa5355d9df8c71263f7009098c2fd6461e883b9b981239499150e594a88dc07392cbefa766423ac09630627a550e1e1def59aeaf2daa5b8c49262a19e5604ca46eeabc8842db97e3b18de34a054538c39ca21d02568649b6dd6cee0136ea0275aed8c756d1ee7f779f949f9ba14c4dc3a376a9d39425e50ab80b941d946286636f58575f8b8"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

26.083238081s ago: executing program 4 (id=639):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1f0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff, 0xff], 0x4e21, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x4, 0x4, 0x6, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x9, 0x8, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x87bf}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008854)
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81801)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./dev_mnt\x00', 0x141002, 0x151)
openat(r6, &(0x7f0000000300)='./dev_mnt\x00', 0x2, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)={0x40, 0x12, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0})

24.833588944s ago: executing program 3 (id=660):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0xfff5, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
socket$nl_netfilter(0x10, 0x3, 0xc)

24.762890333s ago: executing program 3 (id=661):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x67}, 0x8)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
close(r1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x439, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10200, 0x6500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xffffffffffffffe2}]}}}]}, 0x40}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r3=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r3, 0xffff}, &(0x7f00000002c0)=0x8)

24.762593081s ago: executing program 3 (id=662):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0xd0}, {0x2, "f479ed275767ae6597ab9ca12781e8fe", "352283a9e4433b7bcbef49b61cbbf5bc", "de6a4391adfbb03ac829172b1bb1acca", "73c628755817adaaa23b2915bef8f8b0"}}}}, 0x47)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/lo/dev_port\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/64, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/eth0/dev_port\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3)
sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
read(r1, &(0x7f00000001c0)=""/53, 0x35)

24.155026649s ago: executing program 3 (id=670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r0, &(0x7f0000000600)="64e9", 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404)
ioctl$SNDCTL_TMR_STOP(r5, 0x5403)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000140)=""/253, 0xfd}], 0x1, 0x8000, 0x3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
sendmsg$NFT_BATCH(r6, 0x0, 0x40)

24.043623174s ago: executing program 3 (id=671):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r6 = fanotify_init(0x81, 0x40000)
fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0)
read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

23.954949101s ago: executing program 3 (id=672):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r4], 0xb8}}, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800"], 0xfe33)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x804)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000840)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={<r7=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={r7})
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="84da0b85428d8eca319b8201d683f9d32194caa555a77417f1843d54ee9a5f4dd689628a5000d944e2f797c25c2e9160e9cd414bf7b262aa795a95352384b6ca6f96890becd4b9025fa4445e4ac36bfbec09eac3ec843a9574a0a646ff642931578a8ed0", 0x64}, {&(0x7f00000002c0)="47caf4d658b97cdf039640c3ba5e27cf75243e65ea6fd099051a", 0x1a}], 0x2}, 0x10)

23.012913772s ago: executing program 4 (id=686):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x600}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={<r3=>0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={<r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000100)={<r6=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000600)=[r6, r6], &(0x7f0000000180)=[0xfffe], 0x2, 0x2, 0x5}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={<r7=>0x0}) (async)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000000b1401012cbd7000fbdbdf25080001000100000072509b4b00b7b776df3fff7e50adf0ce1492896424816bc4030769b07510442a2ff6623ac856eb2788cff23ac542413263f1dea985f33a4b91b58836ac65c679ffd8f6c457c5cbbb0fbc7f66aea5a3ee00e9b28df3b5bbba21a8cad5b44e5fb8b9daa69242bff0a75ec97d0916140c61d9276fb136b11b753c51f0c1284943deb26470b27ba2f6ff96dc1f16e26597b58415087291b11d0ffd"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64)
setns(0xc9, 0x0) (rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000040)={<r10=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r10, r10], 0x0, 0x2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={<r11=>0x0}) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r12, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async)
setsockopt$inet6_tcp_int(r12, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r12, &(0x7f0000000240)={0xa, 0x5e25, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) (async, rerun: 64)
sendto$inet6(r12, 0x0, 0x0, 0x800, 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000240)=[r3, r4, r6, r7, r10, r11, r3, r4], &(0x7f00000001c0)=[0x100, 0x7], 0x4, 0x8, 0x3}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

22.932535267s ago: executing program 4 (id=689):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0xa00800, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xf6)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
mmap(&(0x7f00000ea000/0x4000)=nil, 0x4000, 0x5, 0x13, r1, 0x8a74ffea)

22.823420667s ago: executing program 4 (id=690):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4, r1}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x202a, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x200800000000, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xaa, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]})
ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0xff, 0x7ffffdbd}]})
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
getpid()
setns(0xc9, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

22.554797277s ago: executing program 4 (id=696):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xffff0929}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xa}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001100)={'dummy0\x00', &(0x7f0000001140)=@ethtool_sset_info={0x2b, 0x0, 0xffffffffffffffff}}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000001000000000000000000108000c000200000006000b000a00000008000200050000000800040000000000140006"], 0x78}, 0x1, 0x2000000, 0x0, 0x20004091}, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r7, @ANYBLOB="000229bd7000fbdbdf25040000005800088014000780080006009a00000008000600d900000000000780080006005800000008000500271854712c00078008000500d7098d45080006006500000008000600ea0000000800050087974e7e080005004bc6eb470800e8ff0200000008000100020000001c00048005000300060000000500030001000000050003000000000000010c8024000b8008000a00f4bd0000080009002c34552108000900a8b2472908000a0048b6000034000b800800090020bc870e08000900084c2552080009002a72fbcf940b5e269ff2b2da0d08000a00c7e4000008000a00f287000008000900c5fb850a44000b8008000a00cab50000080009008768462708000a00c3b1000008000a000adc000008000900f2c7017e0800090074666e5d08000a003c13000008000900d0f053731c000b8008000a009ec20000080009000f335a4308000900fc8c9c3744000b80080009007349774408000a0024be0000080009004075846c08000a0017c4000008000900889b954208000a00b5f5000008000a003e72000008000a004fef000008000100010000004400048007008be4effdc1a52430d490bf2eb4e49300000000000005000300070000000d0003000700000005000300020000000500030002000000050003210100000005000300000000000500030005000000"], 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
r8 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x3, 0x6361, 0x7, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xffffff80, 0x4, 0xffffffff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2d, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES8=r9, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x24000810) (async, rerun: 64)
r11 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

18.854026989s ago: executing program 1 (id=727):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801410018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c001880080002400000000008000140000000000800034000000000"], 0x80}}, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x44, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffd, 0x55}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xfff, 0x6, 0x400, 0xfe, 0x3, 0x4]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002dbd7000ffdbdf256600000008000300", @ANYRES32=r4, @ANYBLOB="040001000080b700180000000800b700710000000400b80008009f000100000008009f00050000000800a100010000000800a00001feffff0400b8000400b800"], 0x5c}, 0x1, 0x0, 0x0, 0x851}, 0x20000000)

18.763768172s ago: executing program 1 (id=728):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1)
r0 = io_uring_setup(0x126, &(0x7f0000000040)={0x0, 0xd248, 0x8000, 0x80000003, 0x340})
syz_io_uring_setup(0x45d2, &(0x7f0000000340)={0x0, 0x6253, 0x0, 0x2, 0x284, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))

18.715017833s ago: executing program 1 (id=729):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000030900010073797a300000004064000000060a01040000000000000000010000000900020073797a32000000000900010073797a300000000038000480340001800c0001007061796c6f61640024000280080001400000000e080004400000000408000240000000000800034000"], 0xec}, 0x1, 0x0, 0x0, 0x20050000}, 0x8090)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005200010000000100feffffff00"/28], 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r2, @ANYBLOB="000128bd7000ffdbdf251b000000080003006121cc2728f7ab318f56967f879db026bcf45e936185a32c041008410382f8e84be2a9b01541bac2fe3c7c290fc56af4df24bb8f2be1aa501374efc683fef6405ff0dc438b30d4ce2c428712e64a6536cc1f14a2f2ca3ea4472ab44e0011389099c03f18934941fd65f09f37372a403c42770996e83c73af04c35c64d10b030002a8546a57c170db043595f482051482f0309c4dcdde643928c43b64dae869f808294f14f172f1a11ef6771074007455ad1fd3b3631f5f6089ab4930364a7e180744de4ed5ce6be973a622bbcd7e1457c015a92c3b4e42002e6e7ce57d97d779c5346db6e2ffeb2448b56a70e66cb5d238fd71f327ca1c298bf836d3ff9256959dac201cc1904330fab5931567804579698dce88f479e88acd0f39f237e01f3db29639fc0a3ae71b2bfe7b6ab985cec8a07b5f6be530", @ANYRES32=r3, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x20044}, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', <r4=>0x0})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x1, 0x5000003a, r5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
read$FUSE(r6, &(0x7f0000000f40)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x1, 0x1, 0x500, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x3}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xba51}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1e8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}]}, 0xc8}}, 0x20000010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x54000000, 0x3ff, 0xc0, 0x4, 0xef, 0x2996}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1000}]}}}]}, 0x58}}, 0x4c840)
shutdown(r0, 0x1)

18.714765973s ago: executing program 1 (id=730):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0)

18.625015464s ago: executing program 1 (id=731):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
mkdirat(r0, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32)
r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00))
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="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", 0xd56}], 0x1}}], 0x1, 0x0)
r7 = open$dir(&(0x7f0000000140)='./mnt/test\x00', 0x400000, 0x2)
openat(r7, &(0x7f0000000180)='./mnt/test\x00', 0x501001, 0x160)

18.295305179s ago: executing program 1 (id=732):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="80000080000b210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

18.213963207s ago: executing program 33 (id=732):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="80000080000b210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

8.914403889s ago: executing program 34 (id=672):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r4], 0xb8}}, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800"], 0xfe33)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x804)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000840)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={<r7=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={r7})
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="84da0b85428d8eca319b8201d683f9d32194caa555a77417f1843d54ee9a5f4dd689628a5000d944e2f797c25c2e9160e9cd414bf7b262aa795a95352384b6ca6f96890becd4b9025fa4445e4ac36bfbec09eac3ec843a9574a0a646ff642931578a8ed0", 0x64}, {&(0x7f00000002c0)="47caf4d658b97cdf039640c3ba5e27cf75243e65ea6fd099051a", 0x1a}], 0x2}, 0x10)

7.291125985s ago: executing program 35 (id=696):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xffff0929}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xa}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001100)={'dummy0\x00', &(0x7f0000001140)=@ethtool_sset_info={0x2b, 0x0, 0xffffffffffffffff}}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000001000000000000000000108000c000200000006000b000a00000008000200050000000800040000000000140006"], 0x78}, 0x1, 0x2000000, 0x0, 0x20004091}, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
r8 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x3, 0x6361, 0x7, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xffffff80, 0x4, 0xffffffff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x2d, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES8=r9, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x24000810) (async, rerun: 64)
r11 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

4.591036561s ago: executing program 5 (id=804):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x6)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0xc9, 0x7}}}, 0x7)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r1, &(0x7f0000001c00)=[{0x0}], 0x1, 0x6, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200400, 0x34)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x13, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074657374")
ioctl(r5, 0xc138fd09, 0x0)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02ccc012005bedde910702040003010000000b68af0668f560e7acdc45047ef9a2332bc5862424fc397818e8865e960e7437bf1f73a665248aff1efc6d288da7d54ee5537c0b2d44eb8e0733c93b66ac637004ecac84025bb0101a1800225c3dc3705f658f96dd6d0392d5662d043bc348604aa21862cd174b8bb125a8a8b9238f7aad16d1920646b83fe516da49ecc25d51bc87b77fa40e198321f65c81f76a54"], 0x17)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000)
ioctl(r5, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400")
ioctl(r5, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000002000000000000000000000000000000000000007465737400")
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000050000000000000006000000950000000000000085100000faffffff18120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000c000000b7000000000000962d31c7b0f584cd8c", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x3d, &(0x7f0000000140)=""/61, 0x41000, 0x48, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x400, 0x8d35}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, r3, r2, r5, r2, r2, r3], &(0x7f0000000240)=[{0x4, 0x4, 0x2, 0x5}, {0x5, 0x2}], 0x10, 0x4}, 0x94)

4.015051577s ago: executing program 5 (id=806):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x18, 0x29, 0x4, 'k'}], 0x18}}], 0x1, 0x4000000)

4.014645326s ago: executing program 5 (id=808):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(0x0, 0x17)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
chdir(&(0x7f0000000100)='./debug/bluetooth/6lowpan_control\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002ff040140861246200001010203010902200001010080fa0904000002ff0401000705810200020007050102"], 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x2], 0x1c}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)=0x5000)
write(r0, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0', 0x1e)

3.304917712s ago: executing program 2 (id=825):
socket$can_j1939(0x1d, 0x2, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(r0)
syz_usb_connect$uac1(0x5, 0x7b, &(0x7f0000000500)=ANY=[], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

2.693570933s ago: executing program 7 (id=835):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0)=0x4000, 0x0)

2.692900643s ago: executing program 7 (id=836):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000db70b0a36d2f01da687fcb8c26b2094bdba2409d67f8d65ed4d27beb9e2360fccbb1b69f49e93c7453a687343b756a42959b95372ddc5396d548f4cb6e6b04c5bba3867d9fa372d46e2a227fa6", @ANYRES16=0x0, @ANYBLOB="010005000000020000003900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x32}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x50}}, 0x40)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000980)={&(0x7f00000009c0)=0x1, 0xd112, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)})
utimensat(r6, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/201, 0xc9)

1.474671673s ago: executing program 6 (id=841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}}, 0x4000080)

1.394748365s ago: executing program 6 (id=842):
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912\x00', &(0x7f0000000500)={0x400, 0x0, 0x30}, 0x18)

1.394347949s ago: executing program 6 (id=843):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000080)={0x4, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x2}, {0xd, 0xff, 0x2, 0xfff}, {0x7, 0x2, 0xfe, 0x9}, {0x6, 0x99, 0x8, 0xffff8000}]}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setreuid(0xee00, 0xee00)
faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8000, @empty, 0x2}], 0x1c)
listen(r2, 0xfffff789)
r3 = accept(r2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x1, 0xd0, 0x6, 0x2}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1000, 0x7ffe, 0x0, 0x2a, 0x4, 0xe0}, 0x9c)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)=0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2a163, 0x4010}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c040}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000080)={0x4, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x2}, {0xd, 0xff, 0x2, 0xfff}, {0x7, 0x2, 0xfe, 0x9}, {0x6, 0x99, 0x8, 0xffff8000}]}, 0x10) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setreuid(0xee00, 0xee00) (async)
faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8000, @empty, 0x2}], 0x1c) (async)
listen(r2, 0xfffff789) (async)
accept(r2, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x1, 0xd0, 0x6, 0x2}, 0x9c) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1000, 0x7ffe, 0x0, 0x2a, 0x4, 0xe0}, 0x9c) (async)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)=0x9) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2a163, 0x4010}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c040}, 0x0) (async)

1.274169988s ago: executing program 2 (id=844):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1f7)
mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1', 0xfdef)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="fc6fe7dd037ce4808baff0e23a21c0e27bcb8ec8579f09800bb45689b798ad32f95754aec9abeddadaa16eace8d6c2743ad365e4acd129e3b6223c3fa1bb07e428", 0x41}], 0x1}}], 0x1, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x2, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='0', 0x1)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e", 0x0, 0x14})
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000580)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x80001000000001, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x10, 0xa1b, 0x2000000008, 0x8, 0x0, 0x5ff, 0x2, 0x0, 0x8], 0x200000, 0x202})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0xa, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.002054589s ago: executing program 2 (id=845):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
r3 = socket(0x10, 0x80002, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010c30104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)

952.659012ms ago: executing program 2 (id=846):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20004090)
r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0xbe})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="a45408362e6d63c7d864eab09a48b823dd7d138d848db148034f5ec211f747395f31f70ae507f64db85981e5f30befa09aaac8012e035a170672d48c68773b996179ff40e981476509d52bf23d5066bb6a698bf5195fd394708c94a383b098940455899c5a4e9b056bfd3f6fdd3fecce960f36f84501845fb208f0417a18a1e1d9cc2ce51c81ca46b137a3093fa526e81e3583", 0x93, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000300)={r2, 0x37, &(0x7f00000002c0)=""/55})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

952.433745ms ago: executing program 7 (id=847):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
sendto(r0, &(0x7f0000000240)="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", 0x10e, 0xd63a66976f7dfbe1, 0x0, 0x0)
close(0x3)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r1, 0x29, 0x1, 0x0, 0x0)

903.027188ms ago: executing program 2 (id=848):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc)
close(r0)
write(0xffffffffffffffff, &(0x7f00000005c0)="e465289d9ff77127e24fc4ebff43", 0xe)

902.812669ms ago: executing program 5 (id=849):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20840, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

843.896337ms ago: executing program 7 (id=850):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x4000080)

843.250545ms ago: executing program 7 (id=851):
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912\x00', &(0x7f0000000500)={0x400, 0x0, 0x30}, 0x18)

775.166898ms ago: executing program 7 (id=852):
socket$can_j1939(0x1d, 0x2, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(r0)
syz_usb_connect$uac1(0x5, 0x7b, &(0x7f0000000500)=ANY=[], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

575.098886ms ago: executing program 5 (id=853):
setns(0xc9, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1, 0x0, 0xf000}, 0x0)

574.959204ms ago: executing program 5 (id=854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r1, 0x5)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e00050017420a008000000200020a0040"], 0x17)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4048000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x80)
r5 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) (fail_nth: 2)

494.247655ms ago: executing program 6 (id=855):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

494.09469ms ago: executing program 6 (id=856):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='aufs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7ff)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x98, &(0x7f0000000400)=""/152}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0xfffffff9, 0x10012, 0x0, 0x0})

404.509403ms ago: executing program 6 (id=857):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r1, 0x5)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e00050017420a008000000200020a0040"], 0x17)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4048000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', <r8=>0x0, 0x29, 0x0, 0x5, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0xd42dfb79, 0xdc}})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000400)={'gretap0\x00', <r11=>0x0, 0x1, 0x1, 0x5, 0x6, {{0x40, 0x4, 0x3, 0x4, 0x100, 0x67, 0x0, 0x46, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x45, 0x0, 0x5, [0x3, 0x7f, 0x7, 0x8, 0x5, 0x0]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xd7, [@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, @empty]}, @lsrr={0x83, 0x17, 0xdc, [@multicast1, @loopback, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x3e, 0x3, [{0x5, 0xb, "25366a994b63c9f2f8"}, {0x0, 0x9, "f06bb7bf97248a"}, {0x6, 0xc, "f47014528e055261f3f2"}, {0x6, 0x5, "4b7b1a"}, {0x7, 0x10, "b143b6e60216d1f790b36f8718a3"}, {0x1, 0x3, "c1"}]}, @lsrr={0x83, 0x7, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x87, 0x12, "c79ee6264a8f248740b261d40add7680"}, @timestamp_addr={0x44, 0x2c, 0xce, 0x1, 0x0, [{@private=0xa010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x25}, {@empty, 0x7ff}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0x23, 0x94, [@broadcast, @broadcast, @multicast1, @multicast2, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0xb}]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', <r14=>0x0, 0x40, 0x7800, 0x8, 0xc09, {{0x1c, 0x4, 0x0, 0x3, 0x70, 0x64, 0x0, 0x1f, 0x29, 0x0, @multicast2, @private=0xa010101, {[@cipso={0x86, 0x48, 0x3, [{0x0, 0x4, "d195"}, {0x6, 0x4, "cb84"}, {0x5, 0xc, "e958bb2b573964784eb0"}, {0x5, 0x7, "31679660a9"}, {0x7, 0x10, "d2c0de7c384a2dc5d0ee1fd7f4a5"}, {0x5, 0x5, "80654a"}, {0x2, 0x7, "05b79a7b67"}, {0x2, 0xb, "e6a7608e7b9a560f26"}]}, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffeff}, {@multicast2, 0x2f}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1ac, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x80)
r15 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r15)

0s ago: executing program 2 (id=858):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x88201, 0x130)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r1, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095)
write(r0, &(0x7f0000000a00)="19", 0x1)
quotactl$Q_SETINFO(0x0, &(0x7f0000004240)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@filename='./config\x00', r3, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000005d00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd63269fe000403a01fc010000000000000000000000000000fe8000000000000000000000000000aa03019078020000006339afb8f6480001200100000000000000000000000000020001000000000000000000000000000111000400fc68050032000400ff000500"], 0x0)

kernel console output (not intermixed with test programs):

0007f062a426038 R14: 00007f062a425fa0 R15: 00007ffe29e32bd8
[   91.799416][ T7525]  </TASK>
[   91.858872][   T30] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[   91.988743][   T30] usb 9-1: device descriptor read/64, error -71
[   92.205679][ T7532] FAULT_INJECTION: forcing a failure.
[   92.205679][ T7532] name failslab, interval 1, probability 0, space 0, times 0
[   92.205698][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.2.518 Not tainted syzkaller #0 PREEMPT(full) 
[   92.205712][ T7532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.205718][ T7532] Call Trace:
[   92.205722][ T7532]  <TASK>
[   92.205727][ T7532]  dump_stack_lvl+0x100/0x190
[   92.205748][ T7532]  should_fail_ex.cold+0x5/0xa
[   92.205763][ T7532]  should_failslab+0xc2/0x120
[   92.205779][ T7532]  __kmalloc_noprof+0xfc/0x840
[   92.205791][ T7532]  ? kernfs_fop_write_iter+0x26a/0x5f0
[   92.205807][ T7532]  kernfs_fop_write_iter+0x26a/0x5f0
[   92.205820][ T7532]  vfs_write+0x6af/0x1050
[   92.205833][ T7532]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   92.205846][ T7532]  ? __pfx_vfs_write+0x10/0x10
[   92.205857][ T7532]  ? find_held_lock+0x2b/0x80
[   92.205882][ T7532]  ksys_write+0x12a/0x250
[   92.205894][ T7532]  ? __pfx_ksys_write+0x10/0x10
[   92.205910][ T7532]  do_syscall_64+0x123/0x790
[   92.205928][ T7532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.205939][ T7532] RIP: 0033:0x7fc99cf9e159
[   92.205949][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.205961][ T7532] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   92.205972][ T7532] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[   92.205979][ T7532] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004
[   92.205985][ T7532] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[   92.205991][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.205998][ T7532] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[   92.206012][ T7532]  </TASK>
[   92.231559][   T30] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[   92.358660][   T30] usb 9-1: device descriptor read/64, error -71
[   92.468878][   T30] usb usb9-port1: attempt power cycle
[   92.628674][   T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   92.764617][ T5747] Bluetooth: hci1: ACL packet for unknown connection handle 204
[   92.779164][   T57] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.780271][   T57] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.780292][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   92.780310][   T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   92.780326][   T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   92.780355][   T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.782123][   T57] usb 7-1: config 0 descriptor??
[   92.808684][   T30] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[   92.829659][   T30] usb 9-1: device descriptor read/8, error -71
[   92.991948][  T851] usb 6-1: USB disconnect, device number 18
[   92.999620][  T851] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1
[   92.999888][  T851] spcp8x5 6-1:1.0: device disconnected
[   93.016988][ T7550] 8021q: VLANs not supported on ip_vti0
[   93.018871][ T7550] Bluetooth: MGMT ver 1.23
[   93.079365][   T30] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[   93.099395][   T30] usb 9-1: device descriptor read/8, error -71
[   93.140267][   T43] kauditd_printk_skb: 17 callbacks suppressed
[   93.140280][   T43] audit: type=1400 audit(1790109457.373:596): avc:  denied  { node_bind } for  pid=7555 comm="syz.1.528" saddr=172.20.20.170 src=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   93.204623][   T57] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   93.208854][   T30] usb usb9-port1: unable to enumerate USB device
[   93.236927][ T7561] lo speed is unknown, defaulting to 1000
[   93.236974][ T7561] lo speed is unknown, defaulting to 1000
[   93.242030][ T7561] lo speed is unknown, defaulting to 1000
[   93.242820][ T7561] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   93.242840][ T7561] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   93.242862][ T7561] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   93.244891][ T7561] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.248359][ T7561] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   93.271738][ T7561] lo speed is unknown, defaulting to 1000
[   93.272628][ T7561] lo speed is unknown, defaulting to 1000
[   93.273366][ T7561] lo speed is unknown, defaulting to 1000
[   93.274047][ T7561] lo speed is unknown, defaulting to 1000
[   93.314438][ T7564] mmap: syz.3.531 (7564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   93.377966][   T43] audit: type=1400 audit(1790109457.603:597): avc:  denied  { setopt } for  pid=7567 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   93.403565][ T7569] FAULT_INJECTION: forcing a failure.
[   93.403565][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.403594][ T7569] CPU: 3 UID: 0 PID: 7569 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) 
[   93.403614][ T7569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.403624][ T7569] Call Trace:
[   93.403631][ T7569]  <TASK>
[   93.403638][ T7569]  dump_stack_lvl+0x100/0x190
[   93.403670][ T7569]  should_fail_ex.cold+0x5/0xa
[   93.403696][ T7569]  _copy_from_user+0x2e/0xd0
[   93.403725][ T7569]  core_sys_select+0x2d0/0xbb0
[   93.403752][ T7569]  ? get_pid_task+0x2a/0x250
[   93.403776][ T7569]  ? __pfx_core_sys_select+0x10/0x10
[   93.403796][ T7569]  ? find_held_lock+0x2b/0x80
[   93.403821][ T7569]  ? get_pid_task+0xfc/0x250
[   93.403868][ T7569]  ? __pfx_set_user_sigmask+0x10/0x10
[   93.403888][ T7569]  ? __mutex_unlock_slowpath+0x35d/0x930
[   93.403921][ T7569]  do_pselect.constprop.0+0x238/0x270
[   93.403948][ T7569]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[   93.403974][ T7569]  ? ksys_write+0x1ac/0x250
[   93.403997][ T7569]  __x64_sys_pselect6+0x149/0x1c0
[   93.404023][ T7569]  do_syscall_64+0x123/0x790
[   93.404053][ T7569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.404072][ T7569] RIP: 0033:0x7f062a19e159
[   93.404086][ T7569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.404102][ T7569] RSP: 002b:00007f062b0fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   93.404120][ T7569] RAX: ffffffffffffffda RBX: 00007f062a426090 RCX: 00007f062a19e159
[   93.404132][ T7569] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040
[   93.404143][ T7569] RBP: 00007f062b0fc090 R08: 0000000000000000 R09: 0000000000000000
[   93.404154][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.404164][ T7569] R13: 00007f062a426128 R14: 00007f062a426090 R15: 00007ffe29e32bd8
[   93.404190][ T7569]  </TASK>
[   93.435815][ T7571] 8021q: VLANs not supported on ip_vti0
[   93.806351][   T43] audit: type=1400 audit(1790109458.033:598): avc:  denied  { getopt } for  pid=7533 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   93.819960][ T7578] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   93.821680][ T7578] 
@0Ù: renamed from bond_slave_1 (while UP)
[   93.826250][ T5747] Bluetooth: hci1: unexpected event for opcode 0x0803
[   93.826362][   T43] audit: type=1400 audit(1790109458.053:599): avc:  denied  { setopt } for  pid=7577 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   93.869686][ T7535] FAULT_INJECTION: forcing a failure.
[   93.869686][ T7535] name failslab, interval 1, probability 0, space 0, times 0
[   93.869709][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(full) 
[   93.869724][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.869731][ T7535] Call Trace:
[   93.869736][ T7535]  <TASK>
[   93.869741][ T7535]  dump_stack_lvl+0x100/0x190
[   93.869762][ T7535]  should_fail_ex.cold+0x5/0xa
[   93.869781][ T7535]  ? __pfx_kyber_init_hctx+0x10/0x10
[   93.869797][ T7535]  should_failslab+0xc2/0x120
[   93.869814][ T7535]  __kmalloc_cache_node_noprof+0x94/0x720
[   93.869829][ T7535]  ? kyber_init_hctx+0x82/0xab0
[   93.869848][ T7535]  ? __pfx_kyber_init_hctx+0x10/0x10
[   93.869861][ T7535]  kyber_init_hctx+0x82/0xab0
[   93.869879][ T7535]  ? __pfx_kyber_init_hctx+0x10/0x10
[   93.869894][ T7535]  blk_mq_init_sched+0x39e/0x6c0
[   93.869911][ T7535]  elevator_switch+0x1e3/0x7e0
[   93.869923][ T7535]  elevator_change+0x352/0x530
[   93.869936][ T7535]  elv_iosched_store+0x3be/0x460
[   93.869949][ T7535]  ? __pfx_elv_iosched_store+0x10/0x10
[   93.869966][ T7535]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[   93.869979][ T7535]  ? __pfx_elv_iosched_store+0x10/0x10
[   93.869992][ T7535]  queue_attr_store+0x25f/0x2f0
[   93.870009][ T7535]  ? __pfx_queue_attr_store+0x10/0x10
[   93.870025][ T7535]  ? __lock_acquire+0x5c0/0x1f40
[   93.870042][ T7535]  ? lock_acquire+0x1d1/0x380
[   93.870053][ T7535]  ? sysfs_file_kobj+0x21/0x290
[   93.870067][ T7535]  ? find_held_lock+0x2b/0x80
[   93.870083][ T7535]  ? sysfs_file_kobj+0xe4/0x290
[   93.870095][ T7535]  ? sysfs_file_kobj+0xe4/0x290
[   93.870112][ T7535]  ? __pfx_queue_attr_store+0x10/0x10
[   93.870129][ T7535]  sysfs_kf_write+0xf2/0x150
[   93.870144][ T7535]  kernfs_fop_write_iter+0x3e0/0x5f0
[   93.870156][ T7535]  ? __pfx_sysfs_kf_write+0x10/0x10
[   93.870171][ T7535]  vfs_write+0x6af/0x1050
[   93.870183][ T7535]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   93.870196][ T7535]  ? __pfx_vfs_write+0x10/0x10
[   93.870207][ T7535]  ? find_held_lock+0x2b/0x80
[   93.870232][ T7535]  ksys_write+0x12a/0x250
[   93.870243][ T7535]  ? __pfx_ksys_write+0x10/0x10
[   93.870259][ T7535]  do_syscall_64+0x123/0x790
[   93.870285][ T7535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.870299][ T7535] RIP: 0033:0x7fc99cf9e159
[   93.870309][ T7535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.870320][ T7535] RSP: 002b:00007fc99de4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   93.870332][ T7535] RAX: ffffffffffffffda RBX: 00007fc99d226090 RCX: 00007fc99cf9e159
[   93.870339][ T7535] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000006
[   93.870347][ T7535] RBP: 00007fc99d03506b R08: 0000000000000000 R09: 0000000000000000
[   93.870355][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.870362][ T7535] R13: 00007fc99d226128 R14: 00007fc99d226090 R15: 00007ffdb2a9e018
[   93.870378][ T7535]  </TASK>
[   93.870675][ T7535] elv: switch to "kyber" failed, falling back to "none"
[   93.918340][   T43] audit: type=1400 audit(1790109458.143:600): avc:  denied  { ioctl } for  pid=7579 comm="syz.1.538" path="socket:[16310]" dev="sockfs" ino=16310 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   93.986325][ T5747] Bluetooth: hci0: ACL packet for unknown connection handle 204
[   94.006798][   T30] usb 7-1: USB disconnect, device number 6
[   94.039574][  T225] wlan0: Trigger new scan to find an IBSS to join
[   94.464485][   T43] audit: type=1400 audit(1790109458.693:601): avc:  denied  { read } for  pid=7585 comm="syz.3.541" path="socket:[17375]" dev="sockfs" ino=17375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   94.565951][ T7594] 8021q: VLANs not supported on ip6_vti0
[   94.644809][ T7602] FAULT_INJECTION: forcing a failure.
[   94.644809][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.644830][ T7602] CPU: 3 UID: 0 PID: 7602 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(full) 
[   94.644843][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.644849][ T7602] Call Trace:
[   94.644853][ T7602]  <TASK>
[   94.644858][ T7602]  dump_stack_lvl+0x100/0x190
[   94.644879][ T7602]  should_fail_ex.cold+0x5/0xa
[   94.644895][ T7602]  _copy_to_user+0x32/0xd0
[   94.644908][ T7602]  simple_read_from_buffer+0xcb/0x170
[   94.644924][ T7602]  proc_fail_nth_read+0x1af/0x230
[   94.644939][ T7602]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.644954][ T7602]  ? rw_verify_area+0xce/0x6d0
[   94.644971][ T7602]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.644985][ T7602]  vfs_read+0x1e4/0xb40
[   94.644996][ T7602]  ? lock_acquire+0x1d1/0x380
[   94.645008][ T7602]  ? __fget_files+0x34/0x3d0
[   94.645022][ T7602]  ? __pfx_vfs_read+0x10/0x10
[   94.645032][ T7602]  ? find_held_lock+0x2b/0x80
[   94.645048][ T7602]  ? __fget_files+0x215/0x3d0
[   94.645064][ T7602]  ? __fget_files+0x21f/0x3d0
[   94.645082][ T7602]  ksys_read+0x12a/0x250
[   94.645093][ T7602]  ? __pfx_ksys_read+0x10/0x10
[   94.645108][ T7602]  do_syscall_64+0x123/0x790
[   94.645126][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.645138][ T7602] RIP: 0033:0x7fc99cf5e98e
[   94.645147][ T7602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   94.645158][ T7602] RSP: 002b:00007fc99de6bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.645169][ T7602] RAX: ffffffffffffffda RBX: 00007fc99de6c6c0 RCX: 00007fc99cf5e98e
[   94.645176][ T7602] RDX: 000000000000000f RSI: 00007fc99de6c0a0 RDI: 0000000000000004
[   94.645182][ T7602] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[   94.645189][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.645195][ T7602] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[   94.645209][ T7602]  </TASK>
[   94.707569][ T5747] Bluetooth: hci2: ACL packet for unknown connection handle 204
[   94.712673][ T7610] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   94.729692][   T43] audit: type=1400 audit(1790109458.963:602): avc:  denied  { write } for  pid=7606 comm="syz.4.549" name="/" dev="9p" ino=73924703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.732256][   T43] audit: type=1400 audit(1790109458.963:603): avc:  denied  { write } for  pid=7606 comm="syz.4.549" name="/" dev="9p" ino=73924703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.733560][   T43] audit: type=1400 audit(1790109458.963:604): avc:  denied  { write } for  pid=7606 comm="syz.4.549" name="/" dev="9p" ino=73924703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.734575][ T7608] netfs: Duplicate cookie detected
[   94.734582][ T7608] netfs: O-cookie c=00000006 [fl=4008 na=0 nA=0 s=-]
[   94.734591][ T7608] netfs: O-cookie V=00000003 [9p,syz,]
[   94.734597][ T7608] netfs: O-key=[8] '6100680400000000'
[   94.734604][ T7608] netfs: N-cookie c=00000007 [fl=8 na=0 nA=0 s=-]
[   94.734612][ T7608] netfs: N-cookie V=00000003 [9p,syz,]
[   94.734617][ T7608] netfs: N-key=[8] '6100680400000000'
[   94.739233][ T7610] netlink: 76 bytes leftover after parsing attributes in process `syz.1.551'.
[   94.739252][ T7610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.551'.
[   94.798272][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798306][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798326][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798346][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798363][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798383][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798403][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798421][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798440][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.798459][   T35] hid-generic 0007:FFFFFF1D:0102.0007: unknown main item tag 0x0
[   94.804891][   T35] hid-generic 0007:FFFFFF1D:0102.0007: hidraw1: <UNKNOWN> HID v0.04 Device [syz0] on syz1
[   94.940797][ T7616] 8021q: VLANs not supported on ip6_vti0
[   94.943217][ T7617] tipc: Started in network mode
[   94.943228][ T7617] tipc: Node identity 2000004, cluster identity 4711
[   94.943237][ T7617] tipc: Node number set to 33554436
[   94.989292][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.555'.
[   94.989314][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.555'.
[   95.035671][   T43] audit: type=1400 audit(1790109459.263:605): avc:  denied  { read } for  pid=7623 comm="syz.1.556" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   95.239151][   T30] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[   95.312614][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[   95.321640][ T7630] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   95.330572][ T7632] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.560'.
[   95.353462][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'.
[   95.353483][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'.
[   95.368763][   T30] usb 9-1: device descriptor read/64, error -71
[   95.618627][   T30] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[   95.748694][   T30] usb 9-1: device descriptor read/64, error -71
[   95.859064][   T30] usb usb9-port1: attempt power cycle
[   95.901145][ T7644] 8021q: VLANs not supported on ip6_vti0
[   96.208597][   T30] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[   96.229071][   T30] usb 9-1: device descriptor read/8, error -71
[   96.468681][   T30] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[   96.489700][   T30] usb 9-1: device descriptor read/8, error -71
[   96.599440][   T30] usb usb9-port1: unable to enumerate USB device
[   96.998675][  T225] wlan0: Trigger new scan to find an IBSS to join
[   98.326719][ T7632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.390948][ T7654] kAFS: unparsable volume name
[   98.391303][ T5747] Bluetooth: hci0: ACL packet for unknown connection handle 204
[   98.392598][ T7655] kAFS: unparsable volume name
[   98.436105][   T43] kauditd_printk_skb: 1 callbacks suppressed
[   98.436120][   T43] audit: type=1326 audit(1790109462.663:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.436272][   T43] audit: type=1326 audit(1790109462.663:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.436899][   T43] audit: type=1326 audit(1790109462.663:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.437036][   T43] audit: type=1326 audit(1790109462.663:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.437243][   T43] audit: type=1326 audit(1790109462.663:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.437801][   T43] audit: type=1326 audit(1790109462.663:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.462285][   T43] audit: type=1326 audit(1790109462.693:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.462485][   T43] audit: type=1326 audit(1790109462.693:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.463223][   T43] audit: type=1326 audit(1790109462.693:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.2.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99cf9e159 code=0x7ffc0000
[   98.559739][ T7671] 8021q: VLANs not supported on ip_vti0
[   98.578060][   T43] audit: type=1400 audit(1790109462.803:616): avc:  denied  { search } for  pid=7672 comm="syz.2.574" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   98.615058][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'.
[   98.615094][ T7674] netlink: 'syz.4.572': attribute type 18 has an invalid length.
[   98.615106][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'.
[   98.627265][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'.
[   98.627285][ T7674] netlink: 'syz.4.572': attribute type 18 has an invalid length.
[   98.627293][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'.
[   98.640399][ T5809] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.640660][ T5809] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.640702][ T5809] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.640730][ T5809] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.932637][ T7696] 8021q: VLANs not supported on ip_vti0
[   98.938353][ T7697] For dev_enable ops, only valid value is "1"
[   99.003316][ T7692] tipc: New replicast peer: 172.20.20.187
[   99.005333][ T7692] tipc: Enabled bearer <udp:syz0>, priority 10
[   99.171323][ T7706] tipc: Cannot configure node identity twice
[   99.228768][ T5816] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[   99.379474][ T5816] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   99.380594][ T5816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.380631][ T5816] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   99.382983][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.383003][ T5816] usb 6-1: Product: syz
[   99.383014][ T5816] usb 6-1: Manufacturer: syz
[   99.383050][ T5816] usb 6-1: SerialNumber: syz
[   99.636613][ T7710] Rounding down aligned max_sectors from 4294967295 to 4294967288
[   99.752112][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'.
[   99.752129][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'.
[   99.752138][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'.
[   99.766789][ T5747] Bluetooth: hci1: ACL packet for unknown connection handle 204
[   99.801834][ T7718] affs: No valid root block on device nullb0
[   99.877860][ T7722] 8021q: VLANs not supported on ip_vti0
[   99.958649][  T192] wlan0: Trigger new scan to find an IBSS to join
[  100.120224][ T5727] tipc: Node number set to 4278190081
[  100.289764][ T7751] batman_adv: batadv0: Adding interface: dummy0
[  100.289775][ T7751] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.289794][ T7751] batman_adv: batadv0: Interface activated: dummy0
[  100.302111][ T7751] batadv0: mtu less than device minimum
[  100.302707][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.304164][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.304703][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.305274][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.305846][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.306410][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.306946][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.307517][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.308045][ T7751] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  100.339276][ T7754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.604'.
[  100.356871][ T7756] FAULT_INJECTION: forcing a failure.
[  100.356871][ T7756] name failslab, interval 1, probability 0, space 0, times 0
[  100.356891][ T7756] CPU: 2 UID: 0 PID: 7756 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) 
[  100.356904][ T7756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.356911][ T7756] Call Trace:
[  100.356914][ T7756]  <TASK>
[  100.356919][ T7756]  dump_stack_lvl+0x100/0x190
[  100.356939][ T7756]  should_fail_ex.cold+0x5/0xa
[  100.356955][ T7756]  should_failslab+0xc2/0x120
[  100.356970][ T7756]  __kmalloc_noprof+0xfc/0x840
[  100.356982][ T7756]  ? rcu_is_watching+0x13/0xc0
[  100.356997][ T7756]  ? tomoyo_realpath_from_path+0xb6/0x690
[  100.357015][ T7756]  tomoyo_realpath_from_path+0xb6/0x690
[  100.357032][ T7756]  tomoyo_path_number_perm+0x23c/0x580
[  100.357044][ T7756]  ? tomoyo_path_number_perm+0x22e/0x580
[  100.357056][ T7756]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  100.357073][ T7756]  ? __lock_acquire+0x5c0/0x1f40
[  100.357092][ T7756]  ? __fget_files+0x34/0x3d0
[  100.357106][ T7756]  ? find_held_lock+0x2b/0x80
[  100.357121][ T7756]  ? hook_file_ioctl_common+0x140/0x440
[  100.357140][ T7756]  ? __fget_files+0x21f/0x3d0
[  100.357156][ T7756]  security_file_ioctl+0xd3/0x230
[  100.357169][ T7756]  __x64_sys_ioctl+0xb7/0x210
[  100.357182][ T7756]  do_syscall_64+0x123/0x790
[  100.357200][ T7756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.357212][ T7756] RIP: 0033:0x7fc99cf9e159
[  100.357221][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.357232][ T7756] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.357243][ T7756] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  100.357256][ T7756] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000006
[  100.357263][ T7756] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[  100.357269][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.357276][ T7756] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  100.357290][ T7756]  </TASK>
[  100.357295][ T7756] ERROR: Out of memory at tomoyo_realpath_from_path.
[  100.432774][ T7759] 8021q: VLANs not supported on ip6_vti0
[  100.641313][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[  100.744373][ T7778] FAULT_INJECTION: forcing a failure.
[  100.744373][ T7778] name failslab, interval 1, probability 0, space 0, times 0
[  100.744460][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT(full) 
[  100.744481][ T7778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.744492][ T7778] Call Trace:
[  100.744498][ T7778]  <TASK>
[  100.744505][ T7778]  dump_stack_lvl+0x100/0x190
[  100.744536][ T7778]  should_fail_ex.cold+0x5/0xa
[  100.744562][ T7778]  should_failslab+0xc2/0x120
[  100.744601][ T7778]  kmem_cache_alloc_noprof+0x92/0x6a0
[  100.744622][ T7778]  ? skb_clone+0x190/0x400
[  100.744648][ T7778]  skb_clone+0x190/0x400
[  100.744671][ T7778]  nfnetlink_rcv_batch+0x1c8/0x2880
[  100.744700][ T7778]  ? kmem_cache_free+0x127/0x6c0
[  100.744731][ T7778]  ? __lock_acquire+0x5c0/0x1f40
[  100.744755][ T7778]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  100.744785][ T7778]  ? lock_acquire+0x1d1/0x380
[  100.744803][ T7778]  ? avc_has_perm_noaudit+0x56/0x470
[  100.744838][ T7778]  ? avc_has_perm_noaudit+0x145/0x470
[  100.744865][ T7778]  ? __asan_memset+0x23/0x50
[  100.744882][ T7778]  ? __nla_validate_parse+0x1e7/0x28b0
[  100.744916][ T7778]  ? __pfx___nla_validate_parse+0x10/0x10
[  100.744944][ T7778]  ? rcu_is_watching+0x13/0xc0
[  100.744968][ T7778]  ? cap_capable+0x107/0x430
[  100.745002][ T7778]  ? __nla_parse+0x40/0x60
[  100.745032][ T7778]  nfnetlink_rcv+0x3bd/0x440
[  100.745058][ T7778]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  100.745090][ T7778]  netlink_unicast+0x585/0x850
[  100.745115][ T7778]  ? __pfx_netlink_unicast+0x10/0x10
[  100.745142][ T7778]  netlink_sendmsg+0x8b0/0xda0
[  100.745166][ T7778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.745195][ T7778]  ? selinux_socket_sendmsg+0x198/0x2f0
[  100.745219][ T7778]  ____sys_sendmsg+0xa4d/0xbe0
[  100.745244][ T7778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.745267][ T7778]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.745300][ T7778]  ? lock_acquire+0x1d1/0x380
[  100.745318][ T7778]  ? get_pid_task+0x2a/0x250
[  100.745345][ T7778]  ___sys_sendmsg+0x190/0x1e0
[  100.745364][ T7778]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.745382][ T7778]  ? get_pid_task+0x106/0x250
[  100.745416][ T7778]  ? find_held_lock+0x2b/0x80
[  100.745460][ T7778]  __sys_sendmsg+0x160/0x210
[  100.745484][ T7778]  ? __pfx___sys_sendmsg+0x10/0x10
[  100.745521][ T7778]  do_syscall_64+0x123/0x790
[  100.745551][ T7778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.745571][ T7778] RIP: 0033:0x7f062a19e159
[  100.745586][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.745604][ T7778] RSP: 002b:00007f062b11d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.745622][ T7778] RAX: ffffffffffffffda RBX: 00007f062a425fa0 RCX: 00007f062a19e159
[  100.745634][ T7778] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  100.745644][ T7778] RBP: 00007f062b11d090 R08: 0000000000000000 R09: 0000000000000000
[  100.745655][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.745665][ T7778] R13: 00007f062a426038 R14: 00007f062a425fa0 R15: 00007ffe29e32bd8
[  100.745689][ T7778]  </TASK>
[  100.803687][ T7782] 8021q: VLANs not supported on ip6_vti0
[  100.863379][ T5727] usb 6-1: USB disconnect, device number 19
[  100.930848][  T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.029237][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'.
[  101.797908][ T7831] netlink: 'syz.2.632': attribute type 11 has an invalid length.
[  101.940864][   T74] nvmet: connect request for invalid subsystem testsubsys!
[  101.941527][ T7837] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  102.257591][ T7855] xt_HMARK: spi-set and port-set can't be combined
[  102.519410][ T7871] FAULT_INJECTION: forcing a failure.
[  102.519410][ T7871] name failslab, interval 1, probability 0, space 0, times 0
[  102.519441][ T7871] CPU: 3 UID: 0 PID: 7871 Comm: syz.1.644 Not tainted syzkaller #0 PREEMPT(full) 
[  102.519460][ T7871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.519471][ T7871] Call Trace:
[  102.519477][ T7871]  <TASK>
[  102.519484][ T7871]  dump_stack_lvl+0x100/0x190
[  102.519516][ T7871]  should_fail_ex.cold+0x5/0xa
[  102.519542][ T7871]  should_failslab+0xc2/0x120
[  102.519566][ T7871]  kmem_cache_alloc_noprof+0x92/0x6a0
[  102.519586][ T7871]  ? vm_area_dup+0x27/0x9d0
[  102.519615][ T7871]  vm_area_dup+0x27/0x9d0
[  102.519641][ T7871]  dup_mmap+0x72d/0x2370
[  102.519673][ T7871]  ? __pfx_dup_mmap+0x10/0x10
[  102.519695][ T7871]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  102.519721][ T7871]  ? lockdep_hardirqs_on+0x7d/0x110
[  102.519747][ T7871]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  102.519775][ T7871]  ? __lock_acquire+0x5c0/0x1f40
[  102.519807][ T7871]  ? lock_acquire+0x1d1/0x380
[  102.519826][ T7871]  ? copy_process+0x4806/0x8370
[  102.519858][ T7871]  copy_process+0x4811/0x8370
[  102.519893][ T7871]  ? __pfx_copy_process+0x10/0x10
[  102.519921][ T7871]  ? _copy_from_user+0x59/0xd0
[  102.519945][ T7871]  kernel_clone+0x176/0x9d0
[  102.519964][ T7871]  ? get_pid_task+0xfc/0x250
[  102.519990][ T7871]  ? __pfx_kernel_clone+0x10/0x10
[  102.520016][ T7871]  ? find_held_lock+0x2b/0x80
[  102.520048][ T7871]  __do_sys_clone3+0x214/0x290
[  102.520069][ T7871]  ? __pfx___do_sys_clone3+0x10/0x10
[  102.520088][ T7871]  ? ksys_write+0x190/0x250
[  102.520117][ T7871]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  102.520145][ T7871]  ? __fget_files+0x21f/0x3d0
[  102.520196][ T7871]  do_syscall_64+0x123/0x790
[  102.520225][ T7871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.520266][ T7871] RIP: 0033:0x7f8b7fd9e159
[  102.520281][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.520298][ T7871] RSP: 002b:00007f8b80d22ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  102.520316][ T7871] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8b7fd9e159
[  102.520327][ T7871] RDX: 00007f8b80d22f10 RSI: 0000000000000058 RDI: 00007f8b80d22f10
[  102.520339][ T7871] RBP: 00007f8b80d23090 R08: 0000000000000000 R09: 0000000000000058
[  102.520349][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  102.520360][ T7871] R13: 00007f8b80026038 R14: 00007f8b80025fa0 R15: 00007ffffe082828
[  102.520386][ T7871]  </TASK>
[  102.528622][ T1346] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  102.574342][ T7873] syzkaller1: entered promiscuous mode
[  102.574363][ T7873] syzkaller1: entered allmulticast mode
[  102.678599][ T1346] usb 9-1: Using ep0 maxpacket: 8
[  102.679738][ T1346] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  102.681593][ T1346] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  102.681616][ T1346] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  102.681645][ T1346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.688321][ T1346] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected
[  102.716224][ T1346] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  102.799789][ T7881] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  103.222441][ T7902] 8021q: VLANs not supported on ip6_vti0
[  103.233466][ T7904] netlink: 'syz.3.654': attribute type 5 has an invalid length.
[  103.269387][ T7907] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  103.272987][ T7908] netlink: 'syz.3.656': attribute type 1 has an invalid length.
[  103.344096][ T7911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  103.391646][ T7911] md: invalid raid superblock magic on ram0
[  103.391665][ T7911] md: ram0 does not have a valid v0.0 superblock, not importing!
[  103.391730][ T7911] md: md_import_device returned -22
[  103.392267][ T7911] md: md0 stopped.
[  103.501864][ T7919] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  103.607136][ T5747] Bluetooth: hci1: unexpected event for opcode 0x0c7d
[  103.637067][ T7926] 8021q: VLANs not supported on ip6_vti0
[  103.672465][ T7928] __nla_validate_parse: 2 callbacks suppressed
[  103.672487][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  103.709169][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'.
[  103.828299][ T7936] FAULT_INJECTION: forcing a failure.
[  103.828299][ T7936] name failslab, interval 1, probability 0, space 0, times 0
[  103.828329][ T7936] CPU: 1 UID: 0 PID: 7936 Comm: syz.2.668 Not tainted syzkaller #0 PREEMPT(full) 
[  103.828350][ T7936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.828361][ T7936] Call Trace:
[  103.828368][ T7936]  <TASK>
[  103.828377][ T7936]  dump_stack_lvl+0x100/0x190
[  103.828406][ T7936]  should_fail_ex.cold+0x5/0xa
[  103.828432][ T7936]  should_failslab+0xc2/0x120
[  103.828456][ T7936]  __kmalloc_noprof+0xfc/0x840
[  103.828478][ T7936]  ? hash_ipport_create+0x84a/0x1b10
[  103.828523][ T7936]  hash_ipport_create+0x84a/0x1b10
[  103.828550][ T7936]  ? __find_set_type_get+0x78/0x440
[  103.828572][ T7936]  ? __pfx_hash_ipport_create+0x10/0x10
[  103.828612][ T7936]  ? __pfx_hash_ipport_create+0x10/0x10
[  103.828640][ T7936]  ? ip_set_create+0x6c4/0x1510
[  103.828656][ T7936]  ? ip_set_create+0x59a/0x1510
[  103.828671][ T7936]  ip_set_create+0x6c4/0x1510
[  103.828697][ T7936]  ? __pfx_ip_set_create+0x10/0x10
[  103.828734][ T7936]  ? find_held_lock+0x2b/0x80
[  103.828775][ T7936]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  103.828807][ T7936]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  103.828835][ T7936]  ? __lock_acquire+0x5c0/0x1f40
[  103.828877][ T7936]  ? avc_has_perm_noaudit+0x145/0x470
[  103.828909][ T7936]  netlink_rcv_skb+0x159/0x420
[  103.828931][ T7936]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  103.828959][ T7936]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.828990][ T7936]  ? ns_capable+0xd2/0xf0
[  103.829013][ T7936]  nfnetlink_rcv+0x1b3/0x440
[  103.829040][ T7936]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  103.829067][ T7936]  ? netlink_deliver_tap+0x1ae/0xcc0
[  103.829091][ T7936]  netlink_unicast+0x585/0x850
[  103.829115][ T7936]  ? __pfx_netlink_unicast+0x10/0x10
[  103.829139][ T7936]  netlink_sendmsg+0x8b0/0xda0
[  103.829163][ T7936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.829186][ T7936]  ? selinux_socket_sendmsg+0x198/0x2f0
[  103.829211][ T7936]  ____sys_sendmsg+0xa4d/0xbe0
[  103.829237][ T7936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.829262][ T7936]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.829297][ T7936]  ? lock_acquire+0x1d1/0x380
[  103.829315][ T7936]  ? get_pid_task+0x2a/0x250
[  103.829339][ T7936]  ___sys_sendmsg+0x190/0x1e0
[  103.829358][ T7936]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.829378][ T7936]  ? get_pid_task+0x106/0x250
[  103.829413][ T7936]  ? find_held_lock+0x2b/0x80
[  103.829455][ T7936]  __sys_sendmsg+0x160/0x210
[  103.829479][ T7936]  ? __pfx___sys_sendmsg+0x10/0x10
[  103.829515][ T7936]  do_syscall_64+0x123/0x790
[  103.829547][ T7936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.829569][ T7936] RIP: 0033:0x7fc99cf9e159
[  103.829585][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.829602][ T7936] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.829621][ T7936] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  103.829632][ T7936] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000003
[  103.829642][ T7936] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[  103.829652][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.829664][ T7936] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  103.829688][ T7936]  </TASK>
[  103.864220][ T5747] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1
[  103.864250][ T5747] Bluetooth: hci2: unexpected event for opcode 0x200b
[  104.294758][ T7942] ptp ptp0: only physical clock in use now
[  104.404027][ T7945] CIFS: VFS: bad security option: krb5iý
[  104.609886][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  104.611689][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  104.651598][ T7955] FAULT_INJECTION: forcing a failure.
[  104.651598][ T7955] name failslab, interval 1, probability 0, space 0, times 0
[  104.651628][ T7955] CPU: 3 UID: 0 PID: 7955 Comm: syz.2.678 Not tainted syzkaller #0 PREEMPT(full) 
[  104.651655][ T7955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.651666][ T7955] Call Trace:
[  104.651673][ T7955]  <TASK>
[  104.651681][ T7955]  dump_stack_lvl+0x100/0x190
[  104.651713][ T7955]  should_fail_ex.cold+0x5/0xa
[  104.651739][ T7955]  should_failslab+0xc2/0x120
[  104.651762][ T7955]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  104.651783][ T7955]  ? __alloc_skb+0x5b7/0x710
[  104.651804][ T7955]  ? __alloc_skb+0x140/0x710
[  104.651830][ T7955]  __alloc_skb+0x140/0x710
[  104.651849][ T7955]  ? __alloc_skb+0x5b7/0x710
[  104.651869][ T7955]  ? __pfx___alloc_skb+0x10/0x10
[  104.651890][ T7955]  ? __lock_acquire+0x5c0/0x1f40
[  104.651915][ T7955]  alloc_skb_with_frags+0xdd/0x760
[  104.651941][ T7955]  ? __lock_acquire+0x5c0/0x1f40
[  104.651967][ T7955]  sock_alloc_send_pskb+0x801/0x980
[  104.651991][ T7955]  ? lock_acquire+0x1d1/0x380
[  104.652014][ T7955]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  104.652034][ T7955]  ? lock_acquire+0x1d1/0x380
[  104.652052][ T7955]  ? is_bpf_text_address+0x25/0x1a0
[  104.652076][ T7955]  ? find_held_lock+0x2b/0x80
[  104.652109][ T7955]  __ip6_append_data+0x272f/0x4bd0
[  104.652138][ T7955]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  104.652173][ T7955]  ? __pfx___ip6_append_data+0x10/0x10
[  104.652193][ T7955]  ? ip6_dst_mtu_maybe_forward.constprop.0+0x259/0x550
[  104.652218][ T7955]  ? __pfx_ip6_mtu+0x10/0x10
[  104.652235][ T7955]  ? ip6_setup_cork+0x619/0x15b0
[  104.652261][ T7955]  ip6_make_skb+0x2a3/0x3b0
[  104.652287][ T7955]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  104.652312][ T7955]  ? __pfx_ip6_make_skb+0x10/0x10
[  104.652343][ T7955]  ? sk_dst_check+0x1e6/0x540
[  104.652368][ T7955]  ? udpv6_sendmsg+0x2231/0x2c20
[  104.652384][ T7955]  udpv6_sendmsg+0x2231/0x2c20
[  104.652400][ T7955]  ? avc_has_perm_noaudit+0x56/0x470
[  104.652436][ T7955]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  104.652452][ T7955]  ? avc_has_perm_noaudit+0x145/0x470
[  104.652483][ T7955]  ? __pfx_avc_has_perm+0x10/0x10
[  104.652517][ T7955]  ? sock_has_perm+0x25a/0x2f0
[  104.652553][ T7955]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  104.652572][ T7955]  ? inet6_sendmsg+0x105/0x140
[  104.652590][ T7955]  inet6_sendmsg+0x105/0x140
[  104.652609][ T7955]  ____sys_sendmsg+0x704/0xbe0
[  104.652642][ T7955]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.652672][ T7955]  ? _kstrtoull+0x144/0x200
[  104.652696][ T7955]  ? __pfx__kstrtoull+0x10/0x10
[  104.652726][ T7955]  ___sys_sendmsg+0x190/0x1e0
[  104.652745][ T7955]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.652773][ T7955]  ? __fget_files+0x34/0x3d0
[  104.652815][ T7955]  __sys_sendmmsg+0x20c/0x440
[  104.652841][ T7955]  ? __pfx___sys_sendmmsg+0x10/0x10
[  104.652864][ T7955]  ? ksys_write+0x190/0x250
[  104.652902][ T7955]  ? fput+0x7c/0x100
[  104.652925][ T7955]  ? ksys_write+0x1ac/0x250
[  104.652942][ T7955]  ? __pfx_ksys_write+0x10/0x10
[  104.652964][ T7955]  __x64_sys_sendmmsg+0x9c/0x100
[  104.652989][ T7955]  ? lockdep_hardirqs_on+0x7d/0x110
[  104.653017][ T7955]  do_syscall_64+0x123/0x790
[  104.653046][ T7955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.653066][ T7955] RIP: 0033:0x7fc99cf9e159
[  104.653081][ T7955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.653098][ T7955] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  104.653115][ T7955] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  104.653127][ T7955] RDX: 0000000000000001 RSI: 0000200000004440 RDI: 0000000000000003
[  104.653137][ T7955] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[  104.653148][ T7955] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  104.653158][ T7955] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  104.653184][ T7955]  </TASK>
[  105.107428][   T43] kauditd_printk_skb: 22 callbacks suppressed
[  105.107445][   T43] audit: type=1400 audit(1790109469.333:639): avc:  denied  { write } for  pid=7968 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  105.208721][ T7969] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  105.273355][ T5823] usb 9-1: USB disconnect, device number 22
[  105.294988][ T5823] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  105.295465][ T5823] kobil_sct 9-1:1.0: device disconnected
[  105.503183][ T7984] pim6reg: entered allmulticast mode
[  105.525349][ T7989] jffs2: notice: (7989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  105.656331][   T43] audit: type=1400 audit(1790109469.883:640): avc:  denied  { mounton } for  pid=7995 comm="syz.1.693" path="/proc/395/cgroup" dev="proc" ino=21870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  105.815083][ T8000] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  105.953787][   T43] audit: type=1400 audit(1790109470.183:641): avc:  denied  { write } for  pid=8006 comm="syz.2.698" path="socket:[21889]" dev="sockfs" ino=21889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.156618][   T43] audit: type=1400 audit(1790109470.383:642): avc:  denied  { map } for  pid=8014 comm="syz.1.701" path="/163/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  106.488193][ T8024] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  106.488942][ T8024] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  106.490724][ T8024] overlayfs: conflicting lowerdir path
[  106.596242][ T8026] netlink: 'syz.1.705': attribute type 1 has an invalid length.
[  106.597451][   T43] audit: type=1400 audit(1790109470.823:643): avc:  denied  { setopt } for  pid=8025 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  106.837007][ T8031] syzkaller0: entered promiscuous mode
[  106.837028][ T8031] syzkaller0: entered allmulticast mode
[  106.919621][ T8033] syzkaller0: entered promiscuous mode
[  106.919635][ T8033] syzkaller0: entered allmulticast mode
[  106.922461][ T8033] FAULT_INJECTION: forcing a failure.
[  106.922461][ T8033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.922478][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.2.708 Not tainted syzkaller #0 PREEMPT(full) 
[  106.922490][ T8033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  106.922497][ T8033] Call Trace:
[  106.922501][ T8033]  <TASK>
[  106.922505][ T8033]  dump_stack_lvl+0x100/0x190
[  106.922541][ T8033]  should_fail_ex.cold+0x5/0xa
[  106.922562][ T8033]  _copy_from_user+0x2e/0xd0
[  106.922575][ T8033]  copy_msghdr_from_user+0x9f/0x4c0
[  106.922586][ T8033]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  106.922600][ T8033]  ? lock_acquire+0x1d1/0x380
[  106.922612][ T8033]  ? get_pid_task+0x2a/0x250
[  106.922628][ T8033]  ___sys_sendmsg+0x106/0x1e0
[  106.922639][ T8033]  ? __pfx____sys_sendmsg+0x10/0x10
[  106.922650][ T8033]  ? get_pid_task+0x106/0x250
[  106.922670][ T8033]  ? find_held_lock+0x2b/0x80
[  106.922694][ T8033]  __sys_sendmsg+0x160/0x210
[  106.922709][ T8033]  ? __pfx___sys_sendmsg+0x10/0x10
[  106.922730][ T8033]  do_syscall_64+0x123/0x790
[  106.922748][ T8033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.922760][ T8033] RIP: 0033:0x7fc99cf9e159
[  106.922769][ T8033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.922780][ T8033] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.922792][ T8033] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  106.922799][ T8033] RDX: 0000000020004014 RSI: 00002000000000c0 RDI: 0000000000000004
[  106.922805][ T8033] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[  106.922811][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.922818][ T8033] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  106.922831][ T8033]  </TASK>
[  107.089723][ T8039] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  107.093219][ T8040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.711'.
[  107.445720][ T5747] Bluetooth: hci2: unexpected event for opcode 0x2041
[  108.015856][   T43] audit: type=1400 audit(1790109472.243:644): avc:  denied  { bind } for  pid=8057 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  108.016132][   T43] audit: type=1400 audit(1790109472.243:645): avc:  denied  { node_bind } for  pid=8057 comm="syz.1.716" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  108.214965][ T8063] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1
[  108.266533][   T43] audit: type=1400 audit(1790109472.493:646): avc:  denied  { read } for  pid=8062 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  108.269683][   T43] audit: type=1400 audit(1790109472.503:647): avc:  denied  { ioctl } for  pid=8062 comm="syz.1.718" path="/177/tracing/trace_marker" dev="tracefs" ino=2511 ioctlcmd=0x5314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  109.238717][ T1346] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  109.388672][ T1346] usb 7-1: Using ep0 maxpacket: 32
[  109.389338][ T1346] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  109.390940][ T1346] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.390959][ T1346] usb 7-1: config 0 has no interfaces?
[  109.393383][ T1346] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  109.393403][ T1346] usb 7-1: Product: syz
[  109.393415][ T1346] usb 7-1: Manufacturer: syz
[  109.393426][ T1346] usb 7-1: SerialNumber: syz
[  109.401878][ T1346] usb 7-1: config 0 descriptor??
[  109.507063][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507218][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507341][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507461][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507582][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507702][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507833][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.507995][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.508118][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.508246][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.512369][   T43] audit: type=1400 audit(1790109473.743:648): avc:  denied  { ioctl } for  pid=8084 comm="syz.1.727" path="socket:[22095]" dev="sockfs" ino=22095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  109.612848][ T8093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8093 comm=syz.1.729
[  109.619358][ T5816] usb 7-1: USB disconnect, device number 7
[  110.034837][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.034859][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.059191][ T5816] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  110.131795][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.131818][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.208588][ T5816] usb 7-1: Using ep0 maxpacket: 32
[  110.209067][ T5816] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  110.209897][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.209909][ T5816] usb 7-1: config 0 has no interfaces?
[  110.212645][ T5816] usb 7-1: string descriptor 0 read error: -22
[  110.212699][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  110.216774][ T5816] usb 7-1: config 0 descriptor??
[  110.235658][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.244950][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.246382][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.247502][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.251871][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.293085][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[  110.295590][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.295611][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.399859][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.399881][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.433708][ T5816] usb 7-1: USB disconnect, device number 8
[  110.486936][ T8097] lo speed is unknown, defaulting to 1000
[  110.654734][   T12] bridge_slave_1: left allmulticast mode
[  110.654752][   T12] bridge_slave_1: left promiscuous mode
[  110.654871][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.659939][   T12] bridge_slave_0: left allmulticast mode
[  110.659958][   T12] bridge_slave_0: left promiscuous mode
[  110.660077][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.700186][   T43] kauditd_printk_skb: 1 callbacks suppressed
[  110.700204][   T43] audit: type=1400 audit(1790109474.933:650): avc:  denied  { write } for  pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.781046][   T43] audit: type=1400 audit(1790109475.013:651): avc:  denied  { write } for  pid=8113 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.887532][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.893819][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.895325][   T12] bond0 (unregistering): Released all slaves
[  110.922594][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6
[  110.957433][   T12] tipc: Left network mode
[  111.046155][ T5747] Bluetooth: hci2: unexpected event for opcode 0x100c
[  111.059426][   T43] audit: type=1400 audit(1790109475.293:652): avc:  denied  { write } for  pid=8120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.124658][   T43] audit: type=1400 audit(1790109475.353:653): avc:  denied  { write } for  pid=8129 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.130555][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.130598][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.130652][ T8097] bridge_slave_0: entered allmulticast mode
[  111.132112][ T8097] bridge_slave_0: entered promiscuous mode
[  111.133674][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.134340][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.134422][ T8097] bridge_slave_1: entered allmulticast mode
[  111.136619][ T8097] bridge_slave_1: entered promiscuous mode
[  111.181765][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7
[  111.183449][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.186307][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.207134][ T8097] team0: Port device team_slave_0 added
[  111.208331][ T8097] team0: Port device team_slave_1 added
[  111.264412][   T12] hsr_slave_0: left promiscuous mode
[  111.265052][   T12] hsr_slave_1: left promiscuous mode
[  111.265648][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.265663][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.268136][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.268146][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.277838][   T12] veth1_macvtap: left promiscuous mode
[  111.277859][   T12] veth0_macvtap: left promiscuous mode
[  111.277955][   T12] veth1_vlan: left promiscuous mode
[  111.277984][   T12] veth0_vlan: left promiscuous mode
[  111.351819][   T43] audit: type=1400 audit(1790109475.583:654): avc:  denied  { write } for  pid=8132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.428594][   T43] audit: type=1400 audit(1790109475.653:655): avc:  denied  { write } for  pid=8135 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.464455][   T12] team_slave_1 (unregistering): left allmulticast mode
[  111.465023][   T12] team0 (unregistering): Port device team_slave_1 removed
[  111.477985][   T12] team_slave_0 (unregistering): left allmulticast mode
[  111.486502][   T12] team0 (unregistering): Port device team_slave_0 removed
[  111.600305][ T1163] smbdirect: ib_dev[syz0] removed
[  111.612545][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.612560][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.612580][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.613974][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.613985][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.614005][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.624960][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8
[  111.629602][ T5727] infiniband syz0: ib_query_port failed (-19)
[  111.726345][ T8097] hsr_slave_0: entered promiscuous mode
[  111.726807][ T8097] hsr_slave_1: entered promiscuous mode
[  111.727327][ T8097] debugfs: 'hsr0' already exists in 'hsr'
[  111.727339][ T8097] Cannot create hsr debugfs directory
[  111.780285][   T43] audit: type=1400 audit(1790109476.013:656): avc:  denied  { write } for  pid=8140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.863008][ T8147] xt_hashlimit: size too large, truncated to 1048576
[  111.875531][   T43] audit: type=1400 audit(1790109476.103:657): avc:  denied  { write } for  pid=8145 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.935174][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9
[  111.938081][   T12] IPVS: stop unused estimator thread 0...
[  112.071955][ T8097] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  112.077746][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.078909][ T8097] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  112.084670][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  112.085847][ T8097] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  112.093119][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  112.094059][ T8097] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  112.099904][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  112.173379][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.181243][ T8097] 8021q: adding VLAN 0 to HW filter on device team0
[  112.187132][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.187215][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.196903][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.196984][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.289016][ T5747] Bluetooth: hci0: command tx timeout
[  112.531893][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.695717][ T8097] veth0_vlan: entered promiscuous mode
[  112.702740][ T8097] veth1_vlan: entered promiscuous mode
[  112.731435][ T8097] veth0_macvtap: entered promiscuous mode
[  112.736554][ T8097] veth1_macvtap: entered promiscuous mode
[  112.748418][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.759725][ T8181] netlink: 'syz.2.739': attribute type 11 has an invalid length.
[  112.779470][ T8181] netlink: 'syz.2.739': attribute type 11 has an invalid length.
[  112.782803][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.809854][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.810219][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.810497][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.810613][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.810641][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.810667][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.810693][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.810720][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.952509][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.952520][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.975862][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.975876][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.986779][   T43] audit: type=1400 audit(1790109477.213:658): avc:  denied  { write } for  pid=8188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  112.997766][   T43] audit: type=1400 audit(1790109477.233:659): avc:  denied  { mounton } for  pid=8097 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  113.428640][   T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  113.581187][   T25] usb 10-1: Using ep0 maxpacket: 32
[  113.581775][   T25] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  113.582748][   T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.582781][   T25] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  113.585278][   T25] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  113.585291][   T25] usb 10-1: Product: syz
[  113.585298][   T25] usb 10-1: Manufacturer: syz
[  113.585305][   T25] usb 10-1: SerialNumber: syz
[  113.588819][   T25] usb 10-1: config 0 descriptor??
[  113.591663][   T25] hub 10-1:0.0: bad descriptor, ignoring hub
[  113.591676][   T25] hub 10-1:0.0: probe with driver hub failed with error -5
[  113.725601][ T8218] Bluetooth: MGMT ver 1.23
[  113.727104][ T8218] Bluetooth: hci0: unsupported parameter 5135
[  113.727115][ T8218] Bluetooth: hci0: unsupported parameter 8192
[  113.727122][ T8218] Bluetooth: hci0: unsupported parameter 5135
[  113.727129][ T8218] Bluetooth: hci0: unsupported parameter 8192
[  113.852109][ T5747] Bluetooth: hci2: Malformed Event: 0x2f
[  113.899116][  T851] usb 10-1: USB disconnect, device number 2
[  114.238704][  T851] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  114.358696][ T5747] Bluetooth: hci0: command tx timeout
[  114.389223][  T851] usb 10-1: Using ep0 maxpacket: 32
[  114.391462][  T851] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  114.392436][  T851] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.392469][  T851] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  114.395179][  T851] usb 10-1: string descriptor 0 read error: -22
[  114.395269][  T851] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  114.397847][  T851] usb 10-1: config 0 descriptor??
[  114.401568][  T851] hub 10-1:0.0: bad descriptor, ignoring hub
[  114.401586][  T851] hub 10-1:0.0: probe with driver hub failed with error -5
[  114.709558][  T851] usb 10-1: USB disconnect, device number 3
[  114.738152][ T8232] FAULT_INJECTION: forcing a failure.
[  114.738152][ T8232] name failslab, interval 1, probability 0, space 0, times 0
[  114.738174][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.2.751 Not tainted syzkaller #0 PREEMPT(full) 
[  114.738186][ T8232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.738193][ T8232] Call Trace:
[  114.738201][ T8232]  <TASK>
[  114.738206][ T8232]  dump_stack_lvl+0x100/0x190
[  114.738234][ T8232]  should_fail_ex.cold+0x5/0xa
[  114.738250][ T8232]  should_failslab+0xc2/0x120
[  114.738269][ T8232]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  114.738283][ T8232]  ? trace_kmalloc+0xeb/0x110
[  114.738296][ T8232]  ? __kasan_kmalloc+0xaa/0xb0
[  114.738308][ T8232]  ? ovl_mount_dir+0x26/0x1c0
[  114.738322][ T8232]  kstrdup+0x51/0xe0
[  114.738333][ T8232]  ovl_mount_dir+0x26/0x1c0
[  114.738346][ T8232]  ovl_parse_param+0xde0/0x1600
[  114.738360][ T8232]  ? __pfx_ovl_parse_param+0x10/0x10
[  114.738374][ T8232]  ? static_key_count+0x5a/0x70
[  114.738393][ T8232]  ? __pfx_ovl_parse_param+0x10/0x10
[  114.738404][ T8232]  vfs_parse_fs_param+0x200/0x3b0
[  114.738422][ T8232]  vfs_parse_fs_qstr+0x138/0x1c0
[  114.738439][ T8232]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[  114.738461][ T8232]  ? ovl_next_opt+0x143/0x1c0
[  114.738472][ T8232]  ? __pfx_ovl_next_opt+0x10/0x10
[  114.738483][ T8232]  vfs_parse_monolithic_sep+0x195/0x210
[  114.738526][ T8232]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  114.738553][ T8232]  ? alloc_fs_context+0x65a/0xf40
[  114.738583][ T8232]  path_mount+0x77f/0x24c0
[  114.738614][ T8232]  ? __pfx_path_mount+0x10/0x10
[  114.738635][ T8232]  ? lockdep_hardirqs_on+0x7d/0x110
[  114.738659][ T8232]  ? putname+0xb1/0x110
[  114.738673][ T8232]  ? kmem_cache_free+0x127/0x6c0
[  114.738694][ T8232]  ? __x64_sys_mount+0x293/0x310
[  114.738712][ T8232]  __x64_sys_mount+0x293/0x310
[  114.738729][ T8232]  ? __pfx___x64_sys_mount+0x10/0x10
[  114.738749][ T8232]  do_syscall_64+0x123/0x790
[  114.738767][ T8232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.738778][ T8232] RIP: 0033:0x7fc99cf9e159
[  114.738788][ T8232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.738799][ T8232] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  114.738811][ T8232] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  114.738818][ T8232] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000
[  114.738825][ T8232] RBP: 00007fc99de6c090 R08: 0000200000000200 R09: 0000000000000000
[  114.738831][ T8232] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002
[  114.738837][ T8232] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  114.738851][ T8232]  </TASK>
[  115.156367][ T8244] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  115.215771][ T8246] __nla_validate_parse: 10 callbacks suppressed
[  115.215788][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'.
[  115.548733][ T5747] Bluetooth: hci2: ACL packet for unknown connection handle 204
[  116.132858][ T8257] FAULT_INJECTION: forcing a failure.
[  116.132858][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.132889][ T8257] CPU: 1 UID: 0 PID: 8257 Comm: syz.2.760 Not tainted syzkaller #0 PREEMPT(full) 
[  116.132909][ T8257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  116.132920][ T8257] Call Trace:
[  116.132926][ T8257]  <TASK>
[  116.132933][ T8257]  dump_stack_lvl+0x100/0x190
[  116.132963][ T8257]  should_fail_ex.cold+0x5/0xa
[  116.132991][ T8257]  _copy_from_iter+0x1f4/0x1690
[  116.133018][ T8257]  ? __pfx__copy_from_iter+0x10/0x10
[  116.133036][ T8257]  ? __lock_acquire+0x5c0/0x1f40
[  116.133057][ T8257]  ? _parse_integer_limit+0x1ac/0x220
[  116.133100][ T8257]  ? _kstrtoull+0x144/0x200
[  116.133126][ T8257]  ? __pfx__kstrtoull+0x10/0x10
[  116.133152][ T8257]  tun_get_user+0x265/0x3cc0
[  116.133194][ T8257]  ? __lock_acquire+0x5c0/0x1f40
[  116.133219][ T8257]  ? __lock_acquire+0x5c0/0x1f40
[  116.133240][ T8257]  ? __pfx_tun_get_user+0x10/0x10
[  116.133265][ T8257]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  116.133298][ T8257]  ? find_held_lock+0x2b/0x80
[  116.133318][ T8257]  ? tun_get+0x191/0x370
[  116.133338][ T8257]  ? tun_get+0x191/0x370
[  116.133359][ T8257]  tun_chr_write_iter+0xdc/0x200
[  116.133383][ T8257]  vfs_write+0x6af/0x1050
[  116.133405][ T8257]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  116.133429][ T8257]  ? __pfx_vfs_write+0x10/0x10
[  116.133443][ T8257]  ? find_held_lock+0x2b/0x80
[  116.133478][ T8257]  ksys_write+0x12a/0x250
[  116.133497][ T8257]  ? __pfx_ksys_write+0x10/0x10
[  116.133523][ T8257]  do_syscall_64+0x123/0x790
[  116.133554][ T8257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.133573][ T8257] RIP: 0033:0x7fc99cf9e159
[  116.133589][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.133604][ T8257] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  116.133622][ T8257] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  116.133635][ T8257] RDX: 0000000000000088 RSI: 0000200000000140 RDI: 0000000000000003
[  116.133647][ T8257] RBP: 00007fc99de6c090 R08: 0000000000000000 R09: 0000000000000000
[  116.133657][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.133668][ T8257] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  116.133691][ T8257]  </TASK>
[  116.316621][   T43] kauditd_printk_skb: 10 callbacks suppressed
[  116.316633][   T43] audit: type=1400 audit(1790109480.543:670): avc:  denied  { listen } for  pid=8258 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  116.316983][   T43] audit: type=1400 audit(1790109480.543:671): avc:  denied  { write } for  pid=8258 comm="syz.5.761" name="usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  116.365216][   T43] audit: type=1400 audit(1790109480.593:672): avc:  denied  { write } for  pid=8262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.439804][ T5747] Bluetooth: hci0: command tx timeout
[  116.481736][   T43] audit: type=1400 audit(1790109480.713:673): avc:  denied  { write } for  pid=8268 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.495076][ T8270] se_dev->se_dev_ptr already set for storage object
[  116.608454][   T43] audit: type=1400 audit(1790109480.833:674): avc:  denied  { write } for  pid=8274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.628607][ T5823] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  116.641874][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'.
[  116.642505][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'.
[  116.712110][ T5737] Bluetooth: hci0: ACL packet for unknown connection handle 204
[  116.727086][   T43] audit: type=1400 audit(1790109480.953:675): avc:  denied  { write } for  pid=8281 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.779979][ T5823] usb 7-1: Using ep0 maxpacket: 32
[  116.780538][ T5823] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  116.783489][ T5823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.783523][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.785576][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  116.785594][ T5823] usb 7-1: Product: syz
[  116.785605][ T5823] usb 7-1: Manufacturer: syz
[  116.785617][ T5823] usb 7-1: SerialNumber: syz
[  116.789402][ T5823] usb 7-1: config 0 descriptor??
[  116.794282][ T5823] hub 7-1:0.0: bad descriptor, ignoring hub
[  116.794301][ T5823] hub 7-1:0.0: probe with driver hub failed with error -5
[  117.108870][ T5823] usb 7-1: USB disconnect, device number 9
[  117.438627][ T5823] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  117.588612][ T5823] usb 7-1: Using ep0 maxpacket: 32
[  117.589152][ T5823] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  117.590091][ T5823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.590126][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  117.592689][ T5823] usb 7-1: string descriptor 0 read error: -22
[  117.592788][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  117.600455][ T5823] usb 7-1: config 0 descriptor??
[  117.603164][ T5823] hub 7-1:0.0: bad descriptor, ignoring hub
[  117.603183][ T5823] hub 7-1:0.0: probe with driver hub failed with error -5
[  117.637072][ T8299] For dev_enable ops, only valid value is "1"
[  117.919384][  T851] usb 7-1: USB disconnect, device number 10
[  118.375381][ T8304] bridge0: port 3(ipvlan2) entered blocking state
[  118.375518][ T8304] bridge0: port 3(ipvlan2) entered disabled state
[  118.375626][ T8304] ipvlan2: entered allmulticast mode
[  118.375640][ T8304] bridge0: entered allmulticast mode
[  118.383497][ T8304] ipvlan2: left allmulticast mode
[  118.383516][ T8304] bridge0: left allmulticast mode
[  118.418772][   T43] audit: type=1400 audit(1790109482.643:676): avc:  denied  { setattr } for  pid=8303 comm="syz.2.771" name="RAWv6" dev="sockfs" ino=21349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  118.518665][ T5737] Bluetooth: hci0: command tx timeout
[  118.559930][   T43] audit: type=1400 audit(1790109482.793:677): avc:  denied  { load_policy } for  pid=8310 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  118.647559][ T8311] SELinux: failed to load policy
[  119.436172][ T5747] Bluetooth: hci0: ACL packet for unknown connection handle 204
[  119.506172][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.510631][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.513024][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.518864][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.519313][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.771839][   T43] audit: type=1400 audit(1790109484.003:678): avc:  denied  { read } for  pid=8337 comm="syz.2.780" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  119.772013][   T43] audit: type=1400 audit(1790109484.003:679): avc:  denied  { open } for  pid=8337 comm="syz.2.780" path="/254/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  119.899872][ T8341] FAULT_INJECTION: forcing a failure.
[  119.899872][ T8341] name failslab, interval 1, probability 0, space 0, times 0
[  119.899893][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(full) 
[  119.899905][ T8341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.899911][ T8341] Call Trace:
[  119.899915][ T8341]  <TASK>
[  119.899920][ T8341]  dump_stack_lvl+0x100/0x190
[  119.899941][ T8341]  should_fail_ex.cold+0x5/0xa
[  119.899958][ T8341]  should_failslab+0xc2/0x120
[  119.899974][ T8341]  __kmalloc_node_noprof+0xff/0x880
[  119.899987][ T8341]  ? __get_vm_area_node+0x1ff/0x350
[  119.900001][ T8341]  ? __get_vm_area_node+0x22b/0x350
[  119.900014][ T8341]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[  119.900031][ T8341]  __vmalloc_node_range_noprof+0x3d4/0x1420
[  119.900051][ T8341]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  119.900068][ T8341]  ? find_held_lock+0x2b/0x80
[  119.900083][ T8341]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  119.900098][ T8341]  ? avc_has_perm_noaudit+0x11e/0x470
[  119.900117][ T8341]  ? avc_has_perm_noaudit+0x145/0x470
[  119.900133][ T8341]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  119.900147][ T8341]  __vmalloc_node_noprof+0xad/0xf0
[  119.900162][ T8341]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  119.900178][ T8341]  __vmalloc_noprof+0xa3/0x120
[  119.900193][ T8341]  ? __pfx___vmalloc_noprof+0x10/0x10
[  119.900210][ T8341]  ? rcu_is_watching+0x13/0xc0
[  119.900226][ T8341]  ? cap_capable+0x107/0x430
[  119.900243][ T8341]  bpf_prog_alloc_no_stats+0x59/0x690
[  119.900257][ T8341]  ? security_capable+0x80/0x260
[  119.900275][ T8341]  bpf_prog_alloc+0x3b/0x200
[  119.900287][ T8341]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  119.900301][ T8341]  bpf_prog_load+0x49e/0x2a80
[  119.900319][ T8341]  ? __pfx_bpf_prog_load+0x10/0x10
[  119.900345][ T8341]  __sys_bpf+0x1f46/0x4a30
[  119.900359][ T8341]  ? __pfx___sys_bpf+0x10/0x10
[  119.900369][ T8341]  ? find_held_lock+0x2b/0x80
[  119.900383][ T8341]  ? futex_wake+0x4ea/0x5e0
[  119.900402][ T8341]  ? rcu_read_lock_any_held+0x6a/0x90
[  119.900418][ T8341]  ? find_held_lock+0x2b/0x80
[  119.900433][ T8341]  ? ksys_write+0x190/0x250
[  119.900444][ T8341]  ? ksys_write+0x190/0x250
[  119.900462][ T8341]  ? __x64_sys_futex+0x34f/0x4d0
[  119.900477][ T8341]  ? __x64_sys_futex+0x358/0x4d0
[  119.900493][ T8341]  ? xfd_validate_state+0x129/0x190
[  119.900507][ T8341]  ? __x64_sys_bpf+0xce/0x140
[  119.900518][ T8341]  __x64_sys_bpf+0xce/0x140
[  119.900551][ T8341]  ? do_syscall_64+0xae/0x790
[  119.900575][ T8341]  do_syscall_64+0x123/0x790
[  119.900593][ T8341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.900606][ T8341] RIP: 0033:0x7fc99cf9e159
[  119.900616][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.900627][ T8341] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  119.900639][ T8341] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  119.900647][ T8341] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  119.900654][ T8341] RBP: 00007fc99d03506b R08: 0000000000000000 R09: 0000000000000000
[  119.900661][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.900667][ T8341] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  119.900681][ T8341]  </TASK>
[  119.902847][ T8341] syz.2.781: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  119.903357][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(full) 
[  119.903379][ T8341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.903389][ T8341] Call Trace:
[  119.903395][ T8341]  <TASK>
[  119.903402][ T8341]  dump_stack_lvl+0x100/0x190
[  119.903429][ T8341]  warn_alloc.cold+0x9e/0xb2
[  119.903470][ T8341]  ? __pfx_warn_alloc+0x10/0x10
[  119.903490][ T8341]  ? dump_stack_lvl+0x17c/0x190
[  119.903515][ T8341]  ? rcu_is_watching+0x13/0xc0
[  119.903538][ T8341]  ? __kasan_kmalloc+0x8a/0xb0
[  119.903558][ T8341]  ? __kmalloc_node_noprof+0x360/0x880
[  119.903583][ T8341]  ? __get_vm_area_node+0x1ff/0x350
[  119.903601][ T8341]  ? __get_vm_area_node+0x22b/0x350
[  119.903618][ T8341]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[  119.903649][ T8341]  __vmalloc_node_range_noprof+0x10f4/0x1420
[  119.903682][ T8341]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  119.903703][ T8341]  ? find_held_lock+0x2b/0x80
[  119.903728][ T8341]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  119.903751][ T8341]  ? avc_has_perm_noaudit+0x11e/0x470
[  119.903775][ T8341]  ? avc_has_perm_noaudit+0x145/0x470
[  119.903801][ T8341]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  119.903822][ T8341]  __vmalloc_node_noprof+0xad/0xf0
[  119.903845][ T8341]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  119.903865][ T8341]  __vmalloc_noprof+0xa3/0x120
[  119.903888][ T8341]  ? __pfx___vmalloc_noprof+0x10/0x10
[  119.903914][ T8341]  ? rcu_is_watching+0x13/0xc0
[  119.903934][ T8341]  ? cap_capable+0x107/0x430
[  119.903958][ T8341]  bpf_prog_alloc_no_stats+0x59/0x690
[  119.903980][ T8341]  ? security_capable+0x80/0x260
[  119.904008][ T8341]  bpf_prog_alloc+0x3b/0x200
[  119.904024][ T8341]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  119.904044][ T8341]  bpf_prog_load+0x49e/0x2a80
[  119.904073][ T8341]  ? __pfx_bpf_prog_load+0x10/0x10
[  119.904109][ T8341]  __sys_bpf+0x1f46/0x4a30
[  119.904132][ T8341]  ? __pfx___sys_bpf+0x10/0x10
[  119.904148][ T8341]  ? find_held_lock+0x2b/0x80
[  119.904172][ T8341]  ? futex_wake+0x4ea/0x5e0
[  119.904197][ T8341]  ? rcu_read_lock_any_held+0x6a/0x90
[  119.904222][ T8341]  ? find_held_lock+0x2b/0x80
[  119.904245][ T8341]  ? ksys_write+0x190/0x250
[  119.904263][ T8341]  ? ksys_write+0x190/0x250
[  119.904288][ T8341]  ? __x64_sys_futex+0x34f/0x4d0
[  119.904311][ T8341]  ? __x64_sys_futex+0x358/0x4d0
[  119.904337][ T8341]  ? xfd_validate_state+0x129/0x190
[  119.904356][ T8341]  ? __x64_sys_bpf+0xce/0x140
[  119.904370][ T8341]  __x64_sys_bpf+0xce/0x140
[  119.904388][ T8341]  ? do_syscall_64+0xae/0x790
[  119.904416][ T8341]  do_syscall_64+0x123/0x790
[  119.904439][ T8341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.904453][ T8341] RIP: 0033:0x7fc99cf9e159
[  119.904468][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.904484][ T8341] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  119.904500][ T8341] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  119.904511][ T8341] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  119.904520][ T8341] RBP: 00007fc99d03506b R08: 0000000000000000 R09: 0000000000000000
[  119.904527][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.904536][ T8341] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  119.904567][ T8341]  </TASK>
[  119.904620][ T8341] Mem-Info:
[  119.904629][ T8341] active_anon:12333 inactive_anon:5 isolated_anon:0
[  119.904629][ T8341]  active_file:372 inactive_file:64999 isolated_file:0
[  119.904629][ T8341]  unevictable:1000 dirty:46 writeback:0
[  119.904629][ T8341]  slab_reclaimable:12042 slab_unreclaimable:70548
[  119.904629][ T8341]  mapped:25351 shmem:1567 pagetables:1440
[  119.904629][ T8341]  sec_pagetables:295 bounce:0
[  119.904629][ T8341]  kernel_misc_reclaimable:0
[  119.904629][ T8341]  free:443108 free_pcp:11567 free_cma:0
[  119.904676][ T8341] Node 0 active_anon:49284kB inactive_anon:20kB active_file:1488kB inactive_file:259792kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:85028kB dirty:184kB writeback:0kB shmem:4252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13792kB pagetables:5448kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  119.904718][ T8341] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:16376kB dirty:0kB writeback:0kB shmem:2016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  119.904762][ T8341] Node 0 DMA free:14920kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:104kB free_cma:0kB
[  119.904803][ T8341] lowmem_reserve[]: 0 1223 1223 1223 1223
[  119.904834][ T8341] Node 0 DMA32 free:156388kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:49284kB inactive_anon:20kB active_file:1488kB inactive_file:259792kB unevictable:2000kB writepending:184kB zspages:0kB present:2080628kB managed:1253224kB mlocked:0kB bounce:0kB free_pcp:27780kB local_pcp:2196kB free_cma:0kB
[  119.904875][ T8341] lowmem_reserve[]: 0 0 0 0 0
[  119.904904][ T8341] Node 1 Normal free:1601124kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:18168kB local_pcp:0kB free_cma:0kB
[  119.904946][ T8341] lowmem_reserve[]: 0 0 0 0 0
[  119.904972][ T8341] Node 0 DMA: 14*4kB (UM) 14*8kB (UM) 10*16kB (UME) 10*32kB (UME) 9*64kB (UM) 9*128kB (UME) 7*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 14920kB
[  119.905151][ T8341] Node 0 DMA32: 681*4kB (M) 36*8kB (UME) 237*16kB (UME) 142*32kB (UME) 99*64kB (UME) 46*128kB (UM) 70*256kB (UM) 50*512kB (UME) 33*1024kB (UME) 11*2048kB (UM) 8*4096kB (U) = 156180kB
[  119.905280][ T8341] Node 1 Normal: 946*4kB (ME) 6*8kB (UE) 19*16kB (ME) 26*32kB (ME) 12*64kB (ME) 6*128kB (UE) 5*256kB (M) 12*512kB (M) 8*1024kB (M) 7*2048kB (ME) 382*4096kB (M) = 1601128kB
[  119.905400][ T8341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  119.905413][ T8341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.905426][ T8341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  119.905439][ T8341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.905451][ T8341] 66936 total pagecache pages
[  119.905455][ T8341] 2 pages in swap cache
[  119.905459][ T8341] Free swap  = 124988kB
[  119.905464][ T8341] Total swap = 124996kB
[  119.905471][ T8341] 1048443 pages RAM
[  119.905476][ T8341] 0 pages HighMem/MovableOnly
[  119.905482][ T8341] 285827 pages reserved
[  119.905488][ T8341] 0 pages cma reserved
[  119.911614][   T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.995452][ T8348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.783'.
[  120.051567][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.783'.
[  120.066042][ T8352] xt_hashlimit: size too large, truncated to 1048576
[  120.132897][   T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.242222][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.242308][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.242404][ T8320] bridge_slave_0: entered allmulticast mode
[  120.243841][ T8320] bridge_slave_0: entered promiscuous mode
[  120.286622][   T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.293753][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.293797][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.293875][ T8320] bridge_slave_1: entered allmulticast mode
[  120.294631][ T8320] bridge_slave_1: entered promiscuous mode
[  120.312766][ T8320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.314140][ T8320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.332021][ T8320] team0: Port device team_slave_0 added
[  120.333303][ T8320] team0: Port device team_slave_1 added
[  120.361479][   T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.366367][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.366383][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  120.366402][ T8320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.367849][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.367859][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  120.367878][ T8320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.393259][ T8320] hsr_slave_0: entered promiscuous mode
[  120.393696][ T8320] hsr_slave_1: entered promiscuous mode
[  120.394105][ T8320] debugfs: 'hsr0' already exists in 'hsr'
[  120.394116][ T8320] Cannot create hsr debugfs directory
[  120.564363][   T14] bridge_slave_1: left allmulticast mode
[  120.564389][   T14] bridge_slave_1: left promiscuous mode
[  120.566517][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.570024][   T14] bridge_slave_0: left allmulticast mode
[  120.570045][   T14] bridge_slave_0: left promiscuous mode
[  120.570201][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.579762][ T5823] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  120.588574][   T14] dvmrp0: left allmulticast mode
[  120.598984][ T5747] Bluetooth: hci0: command 0x0406 tx timeout
[  120.716471][   T14] bond2 (unregistering): (slave erspan1): Releasing active interface
[  120.716497][   T14] erspan1 (unregistering): left promiscuous mode
[  120.748339][   T14] bond1 (unregistering): (slave geneve2): Releasing active interface
[  120.758754][ T5823] usb 10-1: Using ep0 maxpacket: 32
[  120.761037][ T5823] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  120.762007][ T5823] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.762041][ T5823] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  120.764004][ T5823] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  120.764022][ T5823] usb 10-1: Product: syz
[  120.764034][ T5823] usb 10-1: Manufacturer: syz
[  120.764045][ T5823] usb 10-1: SerialNumber: syz
[  120.766345][ T5823] usb 10-1: config 0 descriptor??
[  120.768613][ T5823] hub 10-1:0.0: bad descriptor, ignoring hub
[  120.768634][ T5823] hub 10-1:0.0: probe with driver hub failed with error -5
[  120.806410][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.812193][   T14] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  120.813760][   T14] bond0 (unregistering): Released all slaves
[  120.820371][   T14] bond1 (unregistering): Released all slaves
[  120.830352][   T14] bond2 (unregistering): Released all slaves
[  120.887066][ T8320] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  120.891432][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  120.892275][ T8320] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  120.913836][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  120.914989][ T8320] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  120.920528][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  120.921260][ T8320] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  120.935201][ T8320] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  120.935483][   T14] tipc: Disabling bearer <udp:syz0>
[  120.937981][   T14] tipc: Left network mode
[  121.089869][   T35] usb 10-1: USB disconnect, device number 4
[  121.157711][ T8320] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.188166][ T8320] 8021q: adding VLAN 0 to HW filter on device team0
[  121.194055][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.194101][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.201900][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.201977][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.212914][ T5440] 8021q: adding VLAN 0 to HW filter on device eth10
[  121.219012][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.222409][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.228287][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.233734][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.233831][   T14] hsr_slave_0: left promiscuous mode
[  121.234265][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.235619][ T8382] For dev_enable ops, only valid value is "1"
[  121.235660][   T14] hsr_slave_1: left promiscuous mode
[  121.236061][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.236071][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.236561][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.236571][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.265613][   T14] veth1_macvtap: left promiscuous mode
[  121.265635][   T14] veth0_macvtap: left promiscuous mode
[  121.265688][   T14] veth1_vlan: left promiscuous mode
[  121.265717][   T14] veth0_vlan: left promiscuous mode
[  121.413451][   T14] team0 (unregistering): Port device team_slave_1 removed
[  121.419991][   T14] team0 (unregistering): Port device team_slave_0 removed
[  121.429348][   T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  121.560193][ T5737] Bluetooth: hci4: command tx timeout
[  121.578941][   T35] usb 10-1: Using ep0 maxpacket: 32
[  121.580874][   T35] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  121.586481][   T35] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.586517][   T35] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  121.594057][   T35] usb 10-1: string descriptor 0 read error: -22
[  121.594164][   T35] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  121.597037][   T35] usb 10-1: config 0 descriptor??
[  121.599637][ T8320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  121.599650][ T8320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.600665][   T35] hub 10-1:0.0: bad descriptor, ignoring hub
[  121.600684][   T35] hub 10-1:0.0: probe with driver hub failed with error -5
[  121.740614][   T43] kauditd_printk_skb: 6 callbacks suppressed
[  121.740633][   T43] audit: type=1400 audit(1790109485.973:686): avc:  denied  { write } for  pid=8393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.814582][   T43] audit: type=1400 audit(1790109486.043:687): avc:  denied  { write } for  pid=8402 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.897685][ T5440] 8021q: adding VLAN 0 to HW filter on device eth11
[  121.908800][   T35] usb 10-1: USB disconnect, device number 5
[  121.955655][   T14] IPVS: stop unused estimator thread 0...
[  122.008647][   T43] audit: type=1400 audit(1790109486.233:688): avc:  denied  { write } for  pid=8414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.030838][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.030993][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.031085][ T8380] bridge_slave_0: entered allmulticast mode
[  122.032399][ T8380] bridge_slave_0: entered promiscuous mode
[  122.034528][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.034700][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.034787][ T8380] bridge_slave_1: entered allmulticast mode
[  122.036038][ T8380] bridge_slave_1: entered promiscuous mode
[  122.068653][   T43] audit: type=1400 audit(1790109486.293:689): avc:  denied  { write } for  pid=8421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.107490][ T8424] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  122.107546][ T8424] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  122.108367][ T8424] overlayfs: conflicting lowerdir path
[  122.135854][   T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.135887][   T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.151554][ T5440] 8021q: adding VLAN 0 to HW filter on device eth12
[  122.156126][ T8320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.157459][ T8380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.159685][ T8380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.174552][ T8380] team0: Port device team_slave_0 added
[  122.175814][ T8380] team0: Port device team_slave_1 added
[  122.189473][ T5737] Bluetooth: hci2: ACL packet for unknown connection handle 204
[  122.191367][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.191375][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.191388][ T8380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.192184][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.192192][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.192204][ T8380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.203827][   T43] audit: type=1400 audit(1790109486.433:690): avc:  denied  { write } for  pid=8428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.212920][ T8380] hsr_slave_0: entered promiscuous mode
[  122.213381][ T8380] hsr_slave_1: entered promiscuous mode
[  122.213676][ T8380] debugfs: 'hsr0' already exists in 'hsr'
[  122.213686][ T8380] Cannot create hsr debugfs directory
[  122.247732][   T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.247753][   T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.261599][   T43] audit: type=1400 audit(1790109486.493:691): avc:  denied  { write } for  pid=8434 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.336788][ T8440] xt_hashlimit: size too large, truncated to 1048576
[  122.358985][   T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.359007][   T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.432650][   T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.432682][   T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.440958][ T8320] veth0_vlan: entered promiscuous mode
[  122.446095][ T8320] veth1_vlan: entered promiscuous mode
[  122.465980][ T8380] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  122.471409][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  122.472386][ T8380] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  122.479244][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  122.479645][ T8380] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  122.482256][   T43] audit: type=1400 audit(1790109486.713:692): avc:  denied  { write } for  pid=8445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.484473][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  122.490902][ T8380] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  122.502574][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  122.516548][ T8320] veth0_macvtap: entered promiscuous mode
[  122.529758][ T8320] veth1_macvtap: entered promiscuous mode
[  122.560333][   T43] audit: type=1400 audit(1790109486.793:693): avc:  denied  { write } for  pid=8456 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.569035][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.572283][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.609236][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.609369][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.617897][   T14] bridge_slave_1: left allmulticast mode
[  122.617919][   T14] bridge_slave_1: left promiscuous mode
[  122.618061][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.631216][   T14] bridge_slave_0: left allmulticast mode
[  122.631233][   T14] bridge_slave_0: left promiscuous mode
[  122.631351][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.643408][   T14] pim6reg: left allmulticast mode
[  122.744107][ T8471] For dev_enable ops, only valid value is "1"
[  122.757786][   T14] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  122.764911][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.766451][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.767256][   T14] bond0 (unregistering): Released all slaves
[  122.789069][ T5809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.789108][ T5809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.794640][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13
[  122.835296][   T14] tipc: Left network mode
[  122.892097][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.892117][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.940334][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.940349][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.948349][ T8380] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.956747][ T8380] 8021q: adding VLAN 0 to HW filter on device team0
[  122.965289][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.965374][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.981944][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.982028][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.988715][   T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  123.073709][   T43] audit: type=1400 audit(1790109487.303:694): avc:  denied  { write } for  pid=8477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.107914][   T14] hsr_slave_0: left promiscuous mode
[  123.110107][   T14] hsr_slave_1: left promiscuous mode
[  123.110785][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.110802][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.112162][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.112177][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.130846][   T14] veth1_macvtap: left promiscuous mode
[  123.130894][   T14] veth0_macvtap: left promiscuous mode
[  123.131011][   T14] veth1_vlan: left promiscuous mode
[  123.132110][   T14] veth0_vlan: left promiscuous mode
[  123.138647][   T30] usb 7-1: Using ep0 maxpacket: 32
[  123.143839][   T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  123.154706][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  123.156225][   T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  123.156238][   T30] usb 7-1: Product: syz
[  123.156247][   T30] usb 7-1: Manufacturer: syz
[  123.156255][   T30] usb 7-1: SerialNumber: syz
[  123.169402][   T43] audit: type=1400 audit(1790109487.403:695): avc:  denied  { write } for  pid=8482 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.170006][ T8483] FAULT_INJECTION: forcing a failure.
[  123.170006][ T8483] name failslab, interval 1, probability 0, space 0, times 0
[  123.170037][ T8483] CPU: 2 UID: 0 PID: 8483 Comm: syz.6.777 Not tainted syzkaller #0 PREEMPT(full) 
[  123.170060][ T8483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  123.170073][ T8483] Call Trace:
[  123.170080][ T8483]  <TASK>
[  123.170088][ T8483]  dump_stack_lvl+0x100/0x190
[  123.170121][ T8483]  should_fail_ex.cold+0x5/0xa
[  123.170148][ T8483]  should_failslab+0xc2/0x120
[  123.170173][ T8483]  __kmalloc_noprof+0xfc/0x840
[  123.170193][ T8483]  ? __memcg_list_lru_alloc+0x418/0x680
[  123.170229][ T8483]  __memcg_list_lru_alloc+0x418/0x680
[  123.170258][ T8483]  ? xa_load+0x149/0x2c0
[  123.170285][ T8483]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  123.170315][ T8483]  ? rcu_read_unlock+0x17/0x60
[  123.170349][ T8483]  memcg_list_lru_alloc+0xd3/0x100
[  123.170385][ T8483]  __memcg_slab_post_alloc_hook+0x280/0x10c0
[  123.170427][ T8483]  ? kasan_save_track+0x14/0x30
[  123.170448][ T8483]  kmem_cache_alloc_lru_noprof+0x4f6/0x6a0
[  123.170469][ T8483]  ? __d_alloc+0x35/0xa50
[  123.170501][ T8483]  __d_alloc+0x35/0xa50
[  123.170530][ T8483]  d_alloc+0x4a/0x1e0
[  123.170560][ T8483]  lookup_one_qstr_excl+0x171/0x250
[  123.170617][ T8483]  ? mnt_get_write_access+0x52/0x2f0
[  123.170639][ T8483]  __start_renaming+0x16d/0x520
[  123.170674][ T8483]  filename_renameat2+0x538/0xa60
[  123.170712][ T8483]  ? __pfx_filename_renameat2+0x10/0x10
[  123.170742][ T8483]  ? lock_acquire+0x1d1/0x380
[  123.170767][ T8483]  ? __might_fault+0xc5/0x140
[  123.170798][ T8483]  ? __might_fault+0xc5/0x140
[  123.170842][ T8483]  ? do_getname+0x191/0x390
[  123.170876][ T8483]  __x64_sys_renameat2+0xef/0x140
[  123.170933][ T8483]  do_syscall_64+0x123/0x790
[  123.170969][ T8483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.170992][ T8483] RIP: 0033:0x7f073cf9e159
[  123.171009][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.171028][ T8483] RSP: 002b:00007f073b1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  123.171049][ T8483] RAX: ffffffffffffffda RBX: 00007f073d226090 RCX: 00007f073cf9e159
[  123.171062][ T8483] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c
[  123.171073][ T8483] RBP: 00007f073b1f6090 R08: 0000000000000004 R09: 0000000000000000
[  123.171083][ T8483] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.171095][ T8483] R13: 00007f073d226128 R14: 00007f073d226090 R15: 00007ffda940dac8
[  123.171122][ T8483]  </TASK>
[  123.188184][   T30] usb 7-1: config 0 descriptor??
[  123.229993][   T30] hub 7-1:0.0: bad descriptor, ignoring hub
[  123.230018][   T30] hub 7-1:0.0: probe with driver hub failed with error -5
[  123.329977][ T5737] Bluetooth: hci1: command tx timeout
[  123.368181][ T8488] usb usb7: usbfs: process 8488 (syz.6.800) did not claim interface 0 before use
[  123.369770][ T8488] netlink: 124 bytes leftover after parsing attributes in process `syz.6.800'.
[  123.461317][   T14] team0 (unregistering): Port device team_slave_1 removed
[  123.471607][   T14] team0 (unregistering): Port device team_slave_0 removed
[  123.528879][   T30] usb 7-1: USB disconnect, device number 11
[  123.535469][ T5440] 8021q: adding VLAN 0 to HW filter on device eth14
[  123.654751][ T5737] Bluetooth: hci4: command tx timeout
[  123.759724][ T5737] Bluetooth: hci0: ACL packet for unknown connection handle 204
[  123.818548][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.868651][   T30] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  123.965105][ T5440] 8021q: adding VLAN 0 to HW filter on device eth15
[  123.992984][ T8380] veth0_vlan: entered promiscuous mode
[  123.997157][ T8380] veth1_vlan: entered promiscuous mode
[  124.022350][ T8380] veth0_macvtap: entered promiscuous mode
[  124.025817][ T8380] veth1_macvtap: entered promiscuous mode
[  124.034322][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.039108][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.043546][   T30] usb 7-1: Using ep0 maxpacket: 32
[  124.043900][ T5544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.043952][ T5544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.046185][   T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  124.047482][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  124.053698][   T30] usb 7-1: string descriptor 0 read error: -22
[  124.053797][   T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  124.060486][   T30] usb 7-1: config 0 descriptor??
[  124.062100][   T30] hub 7-1:0.0: bad descriptor, ignoring hub
[  124.062120][   T30] hub 7-1:0.0: probe with driver hub failed with error -5
[  124.099247][ T5808] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.099291][ T5808] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.122422][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.122460][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.145325][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.145338][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.225117][ T8543] FAULT_INJECTION: forcing a failure.
[  124.225117][ T8543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.225137][ T8543] CPU: 2 UID: 0 PID: 8543 Comm: syz.7.805 Not tainted syzkaller #0 PREEMPT(full) 
[  124.225150][ T8543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  124.225157][ T8543] Call Trace:
[  124.225161][ T8543]  <TASK>
[  124.225165][ T8543]  dump_stack_lvl+0x100/0x190
[  124.225185][ T8543]  should_fail_ex.cold+0x5/0xa
[  124.225202][ T8543]  _copy_from_user+0x2e/0xd0
[  124.225215][ T8543]  lowpan_control_write+0x101/0x970
[  124.225228][ T8543]  ? __pfx_lowpan_control_write+0x10/0x10
[  124.225242][ T8543]  ? __debugfs_file_get+0x1fc/0x860
[  124.225257][ T8543]  ? lock_acquire+0x1d1/0x380
[  124.225269][ T8543]  ? ksys_write+0x12a/0x250
[  124.225284][ T8543]  full_proxy_write+0x135/0x1a0
[  124.225302][ T8543]  vfs_write+0x2aa/0x1050
[  124.225314][ T8543]  ? __pfx_full_proxy_write+0x10/0x10
[  124.225328][ T8543]  ? lock_acquire+0x1d1/0x380
[  124.225339][ T8543]  ? __fget_files+0x34/0x3d0
[  124.225353][ T8543]  ? __pfx_vfs_write+0x10/0x10
[  124.225364][ T8543]  ? find_held_lock+0x2b/0x80
[  124.225380][ T8543]  ? __fget_files+0x215/0x3d0
[  124.225396][ T8543]  ? __fget_files+0x21f/0x3d0
[  124.225414][ T8543]  ksys_write+0x12a/0x250
[  124.225425][ T8543]  ? __pfx_ksys_write+0x10/0x10
[  124.225441][ T8543]  do_syscall_64+0x123/0x790
[  124.225459][ T8543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.225470][ T8543] RIP: 0033:0x7f720039e159
[  124.225485][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.225496][ T8543] RSP: 002b:00007f72012eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.225507][ T8543] RAX: ffffffffffffffda RBX: 00007f7200625fa0 RCX: 00007f720039e159
[  124.225515][ T8543] RDX: 000000000000001e RSI: 0000200000000280 RDI: 0000000000000003
[  124.225521][ T8543] RBP: 00007f72012eb090 R08: 0000000000000000 R09: 0000000000000000
[  124.225528][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.225534][ T8543] R13: 00007f7200626038 R14: 00007f7200625fa0 R15: 00007ffff56cdff8
[  124.225549][ T8543]  </TASK>
[  124.378901][   T30] usb 7-1: USB disconnect, device number 12
[  124.493953][ T5440] 8021q: adding VLAN 0 to HW filter on device eth16
[  124.586298][ T5747] Bluetooth: hci4: ACL packet for unknown connection handle 204
[  124.588883][ T5823] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  124.691537][ T5440] 8021q: adding VLAN 0 to HW filter on device eth17
[  124.741907][ T5823] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  124.743029][ T5823] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  124.743050][ T5823] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  124.746457][ T5823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.746477][ T5823] usb 10-1: Product: syz
[  124.746489][ T5823] usb 10-1: Manufacturer: syz
[  124.746502][ T5823] usb 10-1: SerialNumber: syz
[  124.755559][ T5823] usb 10-1: NFC: intf ffff888013ac1000 id ffffffff8fe921a0
[  124.797094][ T5823] nfcmrvl 10-1:1.0: NFC: registered with nci successfully
[  124.901941][ T8602] netlink: 104 bytes leftover after parsing attributes in process `syz.2.820'.
[  124.904816][ T8600] netlink: 104 bytes leftover after parsing attributes in process `syz.2.820'.
[  124.973265][ T5544] nfcmrvl 10-1:1.0: NFC: send entry, len 4
[  124.973555][ T5544] usb 10-1: NFC: urb ffff88801faeb200 submission failed (90)
[  125.079512][ T8617] SELinux: syz.7.826 (8617) wrote to user. This is no longer supported.
[  125.146594][ T8621] syzkaller0: entered promiscuous mode
[  125.146609][ T8621] syzkaller0: entered allmulticast mode
[  125.308617][ T5823] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  125.399208][ T5747] Bluetooth: hci1: command tx timeout
[  125.479442][ T5823] usb 7-1: Using ep0 maxpacket: 32
[  125.480286][ T5823] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  125.484347][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  125.489151][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  125.489180][ T5823] usb 7-1: Product: syz
[  125.489193][ T5823] usb 7-1: Manufacturer: syz
[  125.489207][ T5823] usb 7-1: SerialNumber: syz
[  125.495757][ T5823] usb 7-1: config 0 descriptor??
[  125.499535][ T5823] hub 7-1:0.0: bad descriptor, ignoring hub
[  125.499557][ T5823] hub 7-1:0.0: probe with driver hub failed with error -5
[  125.728640][ T5747] Bluetooth: hci4: command tx timeout
[  125.808904][ T5846] usb 7-1: USB disconnect, device number 13
[  126.148627][ T5823] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  126.298542][ T5823] usb 7-1: Using ep0 maxpacket: 32
[  126.299247][ T5823] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  126.300300][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  126.302885][ T5823] usb 7-1: string descriptor 0 read error: -22
[  126.302999][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  126.304848][ T5823] usb 7-1: config 0 descriptor??
[  126.308676][ T5823] hub 7-1:0.0: bad descriptor, ignoring hub
[  126.308690][ T5823] hub 7-1:0.0: probe with driver hub failed with error -5
[  126.618750][ T5823] usb 7-1: USB disconnect, device number 14
[  126.832629][ T8657] block2mtd: illegal erase size
[  126.834576][ T8657] PKCS8: Unsupported PKCS#8 version
[  126.835971][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.840'.
[  126.841806][   T43] kauditd_printk_skb: 21 callbacks suppressed
[  126.841818][   T43] audit: type=1400 audit(1790109491.073:717): avc:  denied  { map } for  pid=8656 comm="syz.6.840" path="socket:[24737]" dev="sockfs" ino=24737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  127.077359][ T8673] smpboot: CPU 1 is now offline
[  127.304965][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'.
[  127.323861][ T8678] vlan3: entered allmulticast mode
[  127.323881][ T8678] bridge2: entered allmulticast mode
[  127.325745][ T8678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=8678 comm=syz.2.845
[  127.348448][ T8551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.372419][ T5835] usb 10-1: USB disconnect, device number 6
[  127.374297][ T5835] usb 10-1: NFC: intf ffff888013ac1000
[  127.478656][ T5737] Bluetooth: hci1: command tx timeout
[  127.788171][   T43] audit: type=1400 audit(1790109492.013:718): avc:  denied  { listen } for  pid=8698 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  127.788443][ T5737] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  127.800055][ T5737] Bluetooth: hci4: command 0x0419 tx timeout
[  127.818951][ T5517] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  127.844299][ T8702] FAULT_INJECTION: forcing a failure.
[  127.844299][ T8702] name failslab, interval 1, probability 0, space 0, times 0
[  127.844323][ T8702] CPU: 2 UID: 0 PID: 8702 Comm: syz.5.854 Not tainted syzkaller #0 PREEMPT(full) 
[  127.844340][ T8702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  127.844349][ T8702] Call Trace:
[  127.844354][ T8702]  <TASK>
[  127.844360][ T8702]  dump_stack_lvl+0x100/0x190
[  127.844398][ T8702]  should_fail_ex.cold+0x5/0xa
[  127.844418][ T8702]  should_failslab+0xc2/0x120
[  127.844442][ T8702]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  127.844459][ T8702]  ? sock_alloc_inode+0x26/0x2c0
[  127.844484][ T8702]  ? __pfx_sock_alloc_inode+0x10/0x10
[  127.844505][ T8702]  sock_alloc_inode+0x26/0x2c0
[  127.844524][ T8702]  ? __pfx_sock_alloc_inode+0x10/0x10
[  127.844543][ T8702]  alloc_inode+0x68/0x250
[  127.844557][ T8702]  sock_alloc+0x44/0x280
[  127.844574][ T8702]  ? security_socket_create+0x7f/0x250
[  127.844590][ T8702]  __sock_create+0xc2/0x860
[  127.844607][ T8702]  __sys_socket+0x14d/0x260
[  127.844627][ T8702]  ? __pfx___sys_socket+0x10/0x10
[  127.844646][ T8702]  __x64_sys_socket+0x72/0xb0
[  127.844659][ T8702]  ? lockdep_hardirqs_on+0x7d/0x110
[  127.844684][ T8702]  do_syscall_64+0x123/0x790
[  127.844707][ T8702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.844722][ T8702] RIP: 0033:0x7fa20cb9f9c7
[  127.844734][ T8702] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.844748][ T8702] RSP: 002b:00007fa20dacef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  127.844762][ T8702] RAX: ffffffffffffffda RBX: 00007fa20ce26090 RCX: 00007fa20cb9f9c7
[  127.844771][ T8702] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  127.844780][ T8702] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  127.844788][ T8702] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000001
[  127.844797][ T8702] R13: 00007fa20ce26128 R14: 00007fa20ce26090 R15: 00007ffedee9f678
[  127.844816][ T8702]  </TASK>
[  127.844823][ T8702] net_ratelimit: 11 callbacks suppressed
[  127.844831][ T8702] socket: no more sockets
[  127.916558][ T5737] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  127.968714][ T5517] usb 12-1: Using ep0 maxpacket: 32
[  127.969510][ T5517] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  127.970589][ T5517] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.972419][ T5517] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  127.972432][ T5517] usb 12-1: Product: syz
[  127.972445][ T5517] usb 12-1: Manufacturer: syz
[  127.972453][ T5517] usb 12-1: SerialNumber: syz
[  127.973990][ T5517] usb 12-1: config 0 descriptor??
[  127.975404][ T5517] hub 12-1:0.0: bad descriptor, ignoring hub
[  127.975417][ T5517] hub 12-1:0.0: probe with driver hub failed with error -5
[  128.279769][ T6473] usb 12-1: USB disconnect, device number 2
[  128.300115][   T43] audit: type=1400 audit(1790109492.533:719): avc:  
** replaying previous printk message **
[  128.300115][   T43] audit: type=1400 audit(1790109492.533:719): avc:  denied  { write } for  pid=8714 comm="syz.2.858" name="functions" dev="configfs" ino=19055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  128.305529][   T43] audit: type=1400 audit(1790109492.533:720): avc:  denied  { write } for  pid=8714 comm="syz.2.858" name="uncompressed" dev="configfs" ino=26423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  128.306250][   T43] audit: type=1400 audit(1790109492.533:721): avc:  denied  { write } for  pid=8714 comm="syz.2.858" name="u" dev="configfs" ino=26432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  128.311235][ T8715] 
[  128.334375][ T8715] ======================================================
[  128.336607][ T8715] WARNING: possible circular locking dependency detected
[  128.339138][ T8715] syzkaller #0 Not tainted
[  128.340829][ T8715] ------------------------------------------------------
[  128.343355][ T8715] syz.2.858/8715 is trying to acquire lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  128.345756][ T8715] ffffffff903fde68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.350435][ T8715] 
[  128.350435][ T8715] but task is already holding lock:
[  128.353407][ T8715] ffff888026946870 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0
[  128.357246][ T8715] 
[  128.357246][ T8715] which lock already depends on the new lock.
[  128.357246][ T8715] 
[  128.361491][ T8715] 
[  128.361491][ T8715] the existing dependency chain (in reverse order) is:
[  128.365165][ T8715] 
[  128.365165][ T8715] -> #4 (&p->frag_sem){++++}-{4:4}:
[  128.368106][ T8715]        lock_acquire+0x1d1/0x380
[  128.370136][ T8715]        down_write_killable+0x93/0x240
[  128.372539][ T8715]        configfs_rmdir+0x3fa/0x950
[  128.374641][ T8715]        vfs_rmdir+0x328/0x8a0
[  128.376575][ T8715]        filename_rmdir+0x31a/0x5c0
[  128.378660][ T8715]        __x64_sys_unlinkat+0xf5/0x130
[  128.380859][ T8715]        do_syscall_64+0x123/0x790
[  128.382992][ T8715]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.385570][ T8715] 
[  128.385570][ T8715] -> #3 (&sb->s_type->i_mutex_key#30){++++}-{4:4}:
[  128.389055][ T8715]        lock_acquire+0x1d1/0x380
[  128.391161][ T8715]        down_write+0x8b/0x1f0
[  128.393080][ T8715]        configfs_depend_item_unlocked+0xf3/0x6a0
[  128.395651][ T8715]        usbg_make_tpg+0x251/0x610
[  128.397693][ T8715]        target_fabric_make_tpg+0xab/0x8c0
[  128.400190][ T8715]        configfs_mkdir+0x525/0xd40
[  128.402395][ T8715]        vfs_mkdir+0x364/0x850
[  128.404459][ T8715]        filename_mkdirat+0x48b/0x5e0
[  128.406619][ T8715]        __x64_sys_mkdirat+0x89/0xc0
[  128.408738][ T8715]        do_syscall_64+0x123/0x790
[  128.410779][ T8715]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.413298][ T8715] 
[  128.413298][ T8715] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[  128.416400][ T8715]        lock_acquire+0x1d1/0x380
[  128.418398][ T8715]        __mutex_lock+0x1a4/0x1bd0
[  128.420525][ T8715]        tcm_alloc_inst+0x5f/0x1e0
[  128.422611][ T8715]        try_get_usb_function_instance+0x136/0x1f0
[  128.425170][ T8715]        usb_get_function_instance+0x16/0x70
[  128.427583][ T8715]        function_make+0x18c/0x3f0
[  128.429646][ T8715]        configfs_mkdir+0x525/0xd40
[  128.431732][ T8715]        vfs_mkdir+0x364/0x850
[  128.433625][ T8715]        filename_mkdirat+0x48b/0x5e0
[  128.435890][ T8715]        __x64_sys_mkdirat+0x89/0xc0
[  128.438107][ T8715]        do_syscall_64+0x123/0x790
[  128.440281][ T8715]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.442967][ T8715] 
[  128.442967][ T8715] -> #1 (func_lock){+.+.}-{4:4}:
[  128.445928][ T8715]        lock_acquire+0x1d1/0x380
[  128.448038][ T8715]        __mutex_lock+0x1a4/0x1bd0
[  128.450202][ T8715]        try_get_usb_function_instance+0x26/0x1f0
[  128.452892][ T8715]        usb_get_function_instance+0x16/0x70
[  128.455359][ T8715]        function_make+0x18c/0x3f0
[  128.457524][ T8715]        configfs_mkdir+0x525/0xd40
[  128.459742][ T8715]        vfs_mkdir+0x364/0x850
[  128.461727][ T8715]        filename_mkdirat+0x48b/0x5e0
[  128.464009][ T8715]        __x64_sys_mkdirat+0x89/0xc0
[  128.466188][ T8715]        do_syscall_64+0x123/0x790
[  128.468328][ T8715]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.470995][ T8715] 
[  128.470995][ T8715] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  128.474370][ T8715]        check_prev_add+0xeb/0xe60
[  128.476516][ T8715]        __lock_acquire+0x1528/0x1f40
[  128.478760][ T8715]        lock_acquire+0x1d1/0x380
[  128.480939][ T8715]        __mutex_lock+0x1a4/0x1bd0
[  128.483201][ T8715]        uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.486001][ T8715]        configfs_write_iter+0x302/0x4e0
[  128.488336][ T8715]        vfs_write+0x6af/0x1050
[  128.490349][ T8715]        ksys_write+0x12a/0x250
[  128.492371][ T8715]        do_syscall_64+0x123/0x790
[  128.494283][ T8715]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.496527][ T8715] 
[  128.496527][ T8715] other info that might help us debug this:
[  128.496527][ T8715] 
[  128.500993][ T8715] Chain exists of:
[  128.500993][ T8715]   gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#30 --> &p->frag_sem
[  128.500993][ T8715] 
[  128.506791][ T8715]  Possible unsafe locking scenario:
[  128.506791][ T8715] 
[  128.509776][ T8715]        CPU0                    CPU1
[  128.511985][ T8715]        ----                    ----
[  128.514173][ T8715]   rlock(&p->frag_sem);
[  128.515983][ T8715]                                lock(&sb->s_type->i_mutex_key#30);
[  128.519178][ T8715]                                lock(&p->frag_sem);
[  128.521880][ T8715]   lock(gadget_subsys.su_mutex);
[  128.523979][ T8715] 
[  128.523979][ T8715]  *** DEADLOCK ***
[  128.523979][ T8715] 
[  128.527266][ T8715] locks held by syz.2.858/8715: 4, last CPU#3:
[  128.529729][ T8715]  #0: ffff8880254d62b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  128.532458][ T8715]  #1: ffff888024152460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  128.535346][ T8715]  #2: ffff8880369e1c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0
[  128.538300][ T8715]  #3: ffff888026946870 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0
[  128.541191][ T8715] 
[  128.541191][ T8715] stack backtrace:
[  128.542979][ T8715] CPU: 3 UID: 0 PID: 8715 Comm: syz.2.858 Not tainted syzkaller #0 PREEMPT(full) 
[  128.545823][ T8715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  128.548795][ T8715] Call Trace:
[  128.549822][ T8715]  <TASK>
[  128.550739][ T8715]  dump_stack_lvl+0x100/0x190
[  128.552203][ T8715]  print_circular_bug.cold+0x178/0x1be
[  128.553877][ T8715]  check_noncircular+0x146/0x160
[  128.555375][ T8715]  check_prev_add+0xeb/0xe60
[  128.556809][ T8715]  __lock_acquire+0x1528/0x1f40
[  128.558292][ T8715]  ? __pfx_stack_trace_save+0x10/0x10
[  128.559919][ T8715]  lock_acquire+0x1d1/0x380
[  128.561291][ T8715]  ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.563355][ T8715]  ? __pfx___might_resched+0x10/0x10
[  128.565111][ T8715]  ? __lock_acquire+0x5c0/0x1f40
[  128.566596][ T8715]  __mutex_lock+0x1a4/0x1bd0
[  128.567996][ T8715]  ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.569923][ T8715]  ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.571882][ T8715]  ? __pfx___mutex_lock+0x10/0x10
[  128.573442][ T8715]  ? find_held_lock+0x2b/0x80
[  128.575298][ T8715]  ? __might_fault+0xc5/0x140
[  128.577234][ T8715]  ? __might_fault+0xc5/0x140
[  128.579213][ T8715]  ? lock_acquire+0x1d1/0x380
[  128.581080][ T8715]  ? configfs_write_iter+0x218/0x4e0
[  128.583257][ T8715]  ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.585907][ T8715]  uvcg_frame_dw_frame_interval_store+0xdf/0x4b0
[  128.588532][ T8715]  ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10
[  128.591438][ T8715]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  128.593640][ T8715]  ? configfs_write_iter+0x388/0x4e0
[  128.595599][ T8715]  configfs_write_iter+0x302/0x4e0
[  128.597571][ T8715]  vfs_write+0x6af/0x1050
[  128.599336][ T8715]  ? __pfx_configfs_write_iter+0x10/0x10
[  128.601572][ T8715]  ? __pfx_vfs_write+0x10/0x10
[  128.603587][ T8715]  ? find_held_lock+0x2b/0x80
[  128.605685][ T8715]  ksys_write+0x12a/0x250
[  128.607566][ T8715]  ? __pfx_ksys_write+0x10/0x10
[  128.609590][ T8715]  do_syscall_64+0x123/0x790
[  128.611542][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.613949][ T8715] RIP: 0033:0x7fc99cf9e159
[  128.615885][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.623804][ T8715] RSP: 002b:00007fc99de6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  128.627148][ T8715] RAX: ffffffffffffffda RBX: 00007fc99d225fa0 RCX: 00007fc99cf9e159
[  128.630251][ T8715] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003
[  128.633513][ T8715] RBP: 00007fc99d03506b R08: 0000000000000000 R09: 0000000000000000
[  128.636852][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.640119][ T8715] R13: 00007fc99d226038 R14: 00007fc99d225fa0 R15: 00007ffdb2a9e018
[  128.643284][ T8715]  </TASK>
[  129.034554][   T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.083495][   T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.114067][   T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.151682][   T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.213759][   T14] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.263577][   T14] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.273319][   T43] audit: type=1400 audit(1790109493.503:722): avc:  denied  { write } for  pid=8718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.303835][   T14] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.316593][   T43] audit: type=1400 audit(1790109493.543:723): avc:  denied  { write } for  pid=8721 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.341652][   T14] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.348479][ T5440] 8021q: adding VLAN 0 to HW filter on device eth18
[  129.410010][   T43] audit: type=1400 audit(1790109493.643:724): avc:  denied  { write } for  pid=8724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.410863][   T14] bridge_slave_1: left allmulticast mode
[  129.410877][   T14] bridge_slave_1: left promiscuous mode
[  129.410968][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.412434][   T14] bridge_slave_0: left allmulticast mode
[  129.412446][   T14] bridge_slave_0: left promiscuous mode
[  129.412508][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.416317][   T14] bridge_slave_1: left allmulticast mode
[  129.416329][   T14] bridge_slave_1: left promiscuous mode
[  129.416398][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.417293][   T14] bridge_slave_0: left allmulticast mode
[  129.417310][   T14] bridge_slave_0: left promiscuous mode
[  129.417397][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.453704][   T43] audit: type=1400 audit(1790109493.683:725): avc:  denied  { write } for  pid=8727 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.508183][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.513345][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.514343][   T14] bond0 (unregistering): Released all slaves
[  129.544180][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.545679][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.546504][   T14] bond0 (unregistering): Released all slaves
[  129.549035][ T5440] 8021q: adding VLAN 0 to HW filter on device eth20
[  129.612671][   T43] audit: type=1400 audit(1790109493.843:726): avc:  denied  { write } for  pid=8731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.694223][ T5440] 8021q: adding VLAN 0 to HW filter on device eth19
[  129.845349][ T5440] 8021q: adding VLAN 0 to HW filter on device eth21
[  129.867271][   T14] hsr_slave_0: left promiscuous mode
[  129.867742][   T14] hsr_slave_1: left promiscuous mode
[  129.868104][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.868116][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.881041][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.881056][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.885795][   T14] hsr_slave_0: left promiscuous mode
[  129.888010][   T14] hsr_slave_1: left promiscuous mode
[  129.888466][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.888483][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.892743][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.892755][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.901560][   T14] veth1_macvtap: left promiscuous mode
[  129.901587][   T14] veth0_macvtap: left promiscuous mode
[  129.901641][   T14] veth1_vlan: left promiscuous mode
[  129.901671][   T14] veth0_vlan: left promiscuous mode
[  129.912151][   T14] veth1_macvtap: left promiscuous mode
[  129.912178][   T14] veth0_macvtap: left promiscuous mode
[  129.912228][   T14] veth1_vlan: left promiscuous mode
[  129.912262][   T14] veth0_vlan: left promiscuous mode
[  130.007198][   T14] team0 (unregistering): Port device team_slave_1 removed
[  130.011946][   T14] team0 (unregistering): Port device team_slave_0 removed
[  130.069123][   T14] team0 (unregistering): Port device team_slave_1 removed
[  130.071147][   T14] team0 (unregistering): Port device team_slave_0 removed
[  130.098212][ T5440] 8021q: adding VLAN 0 to HW filter on device eth22
[  130.216104][ T5440] 8021q: adding VLAN 0 to HW filter on device eth23
[  130.368822][ T5440] 8021q: adding VLAN 0 to HW filter on device eth24
[  130.454715][   T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.454744][   T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.495978][   T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.495999][   T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.499332][ T5440] 8021q: adding VLAN 0 to HW filter on device eth25
[  130.535168][   T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.535193][   T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.584031][   T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.584055][   T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.662924][   T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.682493][   T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.731387][   T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.767106][ T5440] 8021q: adding VLAN 0 to HW filter on device eth26
[  130.783920][   T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.844606][   T14] bridge_slave_1: left allmulticast mode
[  130.844632][   T14] bridge_slave_1: left promiscuous mode
[  130.844778][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.846173][   T14] bridge_slave_0: left allmulticast mode
[  130.846191][   T14] bridge_slave_0: left promiscuous mode
[  130.846307][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.861836][   T14] bridge_slave_1: left allmulticast mode
[  130.861859][   T14] bridge_slave_1: left promiscuous mode
[  130.861975][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.863572][   T14] bridge_slave_0: left allmulticast mode
[  130.863590][   T14] bridge_slave_0: left promiscuous mode
[  130.863687][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.924754][   T14] bond1 (unregistering): (slave bridge1): Releasing active interface
[  130.936470][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.937469][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.938311][   T14] bond0 (unregistering): Released all slaves
[  130.950205][   T14] bond1 (unregistering): Released all slaves
[  130.978436][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.982248][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.983107][   T14] bond0 (unregistering): Released all slaves
[  130.987622][ T5440] 8021q: adding VLAN 0 to HW filter on device eth27
[  131.039791][   T14] tipc: Left network mode
[  131.124307][ T5440] 8021q: adding VLAN 0 to HW filter on device eth28
[  131.260445][ T5440] 8021q: adding VLAN 0 to HW filter on device eth29
[  131.281482][   T14] hsr_slave_0: left promiscuous mode
[  131.281834][   T14] hsr_slave_1: left promiscuous mode
[  131.282237][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.282252][   T14] batadv0: mtu less than device minimum
[  131.282671][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.283108][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.283560][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.283958][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.284365][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.284776][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.285180][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.285586][   T14] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  131.291528][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.293372][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.301124][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.303577][   T14] batman_adv: batadv0: Interface deactivated: dummy0
[  131.303591][   T14] batman_adv: batadv0: Removing interface: dummy0
[  131.324583][   T14] hsr_slave_0: left promiscuous mode
[  131.330070][   T14] hsr_slave_1: left promiscuous mode
[  131.330471][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.330485][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.333482][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.333496][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.342798][   T14] veth1_macvtap: left promiscuous mode
[  131.342822][   T14] veth0_macvtap: left promiscuous mode
[  131.342899][   T14] veth1_vlan: left promiscuous mode
[  131.342935][   T14] veth0_vlan: left promiscuous mode
[  131.350698][   T14] veth1_macvtap: left promiscuous mode
[  131.350724][   T14] veth0_macvtap: left promiscuous mode
[  131.350776][   T14] veth1_vlan: left promiscuous mode
[  131.350823][   T14] veth0_vlan: left promiscuous mode
[  131.462589][   T14] team0 (unregistering): Port device team_slave_1 removed
[  131.465970][   T14] team0 (unregistering): Port device team_slave_0 removed
[  131.543362][   T14] team0 (unregistering): Port device team_slave_1 removed
[  131.545794][   T14] team0 (unregistering): Port device team_slave_0 removed
[  131.741255][ T5440] 8021q: adding VLAN 0 to HW filter on device eth30
[  131.866212][   T43] kauditd_printk_skb: 22 callbacks suppressed
[  131.866225][   T43] audit: type=1400 audit(1790109496.093:749): avc:  denied  { write } for  pid=8821 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.893967][ T5440] 8021q: adding VLAN 0 to HW filter on device eth31
[  131.948175][   T43] audit: type=1400 audit(1790109496.173:750): avc:  denied  { write } for  pid=8827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.979094][   T43] audit: type=1400 audit(1790109496.213:751): avc:  denied  { write } for  pid=8830 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.997766][ T5440] 8021q: adding VLAN 0 to HW filter on device eth32
[  132.056438][   T43] audit: type=1400 audit(1790109496.283:752): avc:  denied  { write } for  pid=8834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  132.083369][   T43] audit: type=1400 audit(1790109496.313:753): avc:  denied  { write } for  pid=8839 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  132.102494][ T5440] 8021q: adding VLAN 0 to HW filter on device eth33
[  132.999657][   T55] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  133.001991][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[  133.002027][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  134.472845][   T43] audit: type=1400 audit(1790109498.703:754): avc:  denied  { write } for  pid=8860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.509057][   T43] audit: type=1400 audit(1790109498.743:755): avc:  denied  { write } for  pid=8863 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.542882][   T43] audit: type=1400 audit(1790109499.773:756): avc:  denied  { write } for  pid=8867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.585321][   T43] audit: type=1400 audit(1790109499.813:757): avc:  denied  { write } for  pid=8870 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.660714][   T43] audit: type=1400 audit(1790109499.893:758): avc:  denied  { write } for  pid=8873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.875121][   T43] kauditd_printk_skb: 7 callbacks suppressed
[  136.875139][   T43] audit: type=1400 audit(1790109501.103:766): avc:  denied  { write } for  pid=8900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.917836][   T43] audit: type=1400 audit(1790109501.143:767): avc:  denied  { write } for  pid=8903 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  137.128272][   T43] audit: type=1400 audit(1790109501.353:768): avc:  denied  { write } for  pid=8907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  137.177111][   T43] audit: type=1400 audit(1790109501.403:769): avc:  denied  { write } for  pid=8910 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1