last executing test programs:

13.990436885s ago: executing program 3 (id=311):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, &(0x7f0000000340))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)

13.989849572s ago: executing program 3 (id=312):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x8, 0x20}, {0x80000000, 0x0, 0x0, 0x31237648, 0xfffffffd, 0x9}]}) (async)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) (async)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13.878538783s ago: executing program 3 (id=316):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

13.809966799s ago: executing program 3 (id=317):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b8c07ced3d0e48baac0d9b1b66df0e6e8377587a57b58cb213c237dd77fc8965bb362b2618ca72b1059b7f50517866223d952f68f627c8b2712afd709b5f6f6e142f"], 0x48)
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40c4)
ioctl(r0, 0x6, &(0x7f0000000240)="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")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001600010324bd7022fcffffff2e"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2', 0x3c)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r6)
ptrace$cont(0x20, r6, 0x200, 0x7)
ptrace$getregs(0xc, r6, 0x4, &(0x7f00000002c0)=""/202)
ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001")

12.95014277s ago: executing program 3 (id=320):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x4a, 0x7ff, 0x44, 0x3, 0x7, 0x0, 0x40}, 0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x4, 0xfffe, 0xd, 0x40, 0x3, 0x46, 0x8}, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0)
ftruncate(r3, 0x2000009)
sendfile(r0, r3, 0x0, 0x7ffff004)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

12.880236613s ago: executing program 3 (id=321):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@local}, &(0x7f0000000340)=0xc)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x8001af85, &(0x7f000011fec0))

12.82424354s ago: executing program 32 (id=321):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@local}, &(0x7f0000000340)=0xc)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x8001af85, &(0x7f000011fec0))

10.228998673s ago: executing program 0 (id=331):
unshare(0x40021100)

10.1495549s ago: executing program 0 (id=332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x8802, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = epoll_create1(0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000800)={0x30000000})
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/205, 0xcd}], 0x1, 0x5c, 0x25c)
unshare(0x42000000)

9.877736615s ago: executing program 0 (id=341):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000131c0500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x0)

9.778284964s ago: executing program 0 (id=343):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000000)='romfs\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c84bbe1ddf6635334"], 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20048000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

8.999404352s ago: executing program 0 (id=357):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x26, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f71}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @ldst={0x1, 0x1, 0x3, 0x0, 0x7, 0x1, 0x10}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000023c0)={0x5, 0x1, 0x5, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002500)=[0xffffffffffffffff, r3, 0x1, r4], &(0x7f0000002540)=[{0x1, 0x4, 0xb, 0x6}, {0x0, 0x5, 0x5, 0xb}, {0x2, 0x3, 0xd, 0x3}, {0x5, 0x5, 0x1, 0x5}], 0x10, 0x2}, 0x94)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x54000, 0x200})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xb, 0x6, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5], 0x0, 0x41981})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000380)={r8, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0]})
sendto$inet(r6, &(0x7f0000000180)='!', 0x1, 0x448c4, 0x0, 0xd)
recvmmsg(r6, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x12103, 0x0)
bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x4, @dev, 0x6}, 0x1c)
write(r5, &(0x7f0000000080)="5235554fbd60e2bf183ed1b21d2bdc9fd83de7bd372cd7542bf38b436008719be46181fd7c9151b809e904b96f80339459fecf68e8d44a60864637c476bd7e62630865107287226e773d3562297f708f3af51d8aadc6840d9db7f49dc845c062ee3185bc121e18aa3bbff25223c54747d3de607f0489", 0x76)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x10, @mcast2, 0xc}, 0x1c)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x1}, 0x1c)

8.750355857s ago: executing program 0 (id=365):
openat(0xffffffffffffffff, 0x0, 0x602240, 0x195)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0xff0f0000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x1000003, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)

8.708420492s ago: executing program 33 (id=365):
openat(0xffffffffffffffff, 0x0, 0x602240, 0x195)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0xff0f0000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x1000003, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)

6.680213216s ago: executing program 2 (id=407):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r4=>0x0})
syz_emit_ethernet(0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007a00000000000190780a010102ac14140e0309907800800003471e000900670101072f0009640101000a01e301070fd764010102ac1e0001ac1414aa441434a300000000000000057f000001000000074424a191ac14142500000009ffffffff000000087f000001ffffffffe000000100000000008f8e"], 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="c3560400000000009000128009fb0000766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000f0f41cc3f0008bb614391577000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500d7d2fe4667f46104e09444776da71c726a13a6987ee49a5dd39eb728cee6de0bdb7ccdaa3b2d333635d02047e50bcc7b0f93ef3af03050141dbbca", @ANYRES32=r4, @ANYRES8=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004810}, 0x4000000)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040), 0x10)
listen(r5, 0x812)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8})
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x50a7, 0x200, 0x4, 0x282})
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)

6.61909754s ago: executing program 2 (id=410):
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/0:0:0:0\x00', 0x101000, 0x0)

6.519037618s ago: executing program 2 (id=411):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
socket$inet(0xa, 0x801, 0x84)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x5, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0xffffffffffffffff, 0xa4, 0x2}, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.550252696s ago: executing program 2 (id=423):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r1, 0x1a53e000)
sendfile(r0, r0, &(0x7f00000000c0)=0x7fffffff, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
write(r0, &(0x7f0000000000)='3', 0x4e) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r1, 0x1a53e000) (async)
sendfile(r0, r0, &(0x7f00000000c0)=0x7fffffff, 0x0) (async)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) (async)
read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020) (async)

5.438937837s ago: executing program 2 (id=428):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

4.980396708s ago: executing program 2 (id=440):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

4.890689024s ago: executing program 34 (id=440):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

2.428989613s ago: executing program 1 (id=469):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b0001000000000904320001ba40a4000905", @ANYRES64, @ANYRESDEC=r1], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000edf000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000edf000/0x4000)=nil, 0x0}, 0x68)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x528, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2000a, 0x20002fa})
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00))
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x48}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205)

2.14922548s ago: executing program 6 (id=441):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x4800a}, 0x91)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x179)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000680001040000000000000000020000000000000008000500", @ANYRES32=0x1, @ANYBLOB="74da3011b2d84f7db8635502b87dde015b3294f4e5e627e260748c65ea3df9241891a65a5b50459e931288cf666c1bd426e556000000000000000000"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x10, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x58}}, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0))

2.060219194s ago: executing program 6 (id=473):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x4000002, 0x200, &(0x7f0000003c40)="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"})
r1 = socket(0x10, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001580)={0x8, 0x0, [{0x80e17fc, 0x0, &(0x7f0000000100)}, {0x0, 0x1f, &(0x7f0000000140)=""/31}, {0xeeee8000, 0x1000, &(0x7f0000000200)=""/4096}, {0x60000, 0x89, &(0x7f0000001200)=""/137}, {0xeeee8000, 0xce, &(0x7f00000012c0)=""/206}, {0x50000, 0xeb, &(0x7f00000013c0)=""/235}, {0x100000, 0x2d, &(0x7f00000014c0)=""/45}, {0x60000, 0x4e, &(0x7f0000001500)=""/78}]})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24010}, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x0)

2.058471008s ago: executing program 6 (id=474):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

1.979991211s ago: executing program 6 (id=475):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/nr_hugepages\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)="33300aef41b1d30fa74216337aeac6fd83eb413d049d615d64dda628ecf94e03d8e5f40b0a2e", 0x26)

1.91946346s ago: executing program 6 (id=476):
r0 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", '\x00\x00_\x00'}, 0xfb, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1, 0xd)
dup3(r0, r0, 0xeb40b4ab040ed5e5)
syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
userfaultfd(0x801) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", '\x00\x00_\x00'}, 0xfb, 0x5}) (async)
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1, 0xd) (async)
dup3(r0, r0, 0xeb40b4ab040ed5e5) (async)

1.279850719s ago: executing program 5 (id=481):
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)
socket$l2tp(0x2, 0x2, 0x73)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4)

1.140100681s ago: executing program 5 (id=482):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) (async, rerun: 32)
capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000040)={0x208004, 0x2, 0x0, 0x8004, 0x2, 0xfffffffe}) (rerun: 32)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7})
chroot(&(0x7f00000001c0)='./file0\x00') (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c"], 0xb4}}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000380)={0x0, 0x5, 0x1})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000400000005000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000b901"], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x40) (async)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x20, r3, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40041)

1.139891289s ago: executing program 1 (id=483):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

1.046812034s ago: executing program 1 (id=484):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000700)={0x8f, 0x0, 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$vim2m(0x0, 0x1, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050008420a008000000200020a0050f01a00000000000005aca0ac6c23fa"], 0x17)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000004c0)={0x0, 0x0})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

748.624786ms ago: executing program 4 (id=490):
r0 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)
creat(&(0x7f0000000140)='./file0/file1\x00', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x2c})
openat$drirender128(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket(0x10, 0x3, 0x0)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x19f)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x14fdde9599d3cb12, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b/\xdfp\xab\xe8}\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x101080, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000001c0)='p\x06oc\x00', &(0x7f00000005c0), 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x9)
openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3)

458.496158ms ago: executing program 4 (id=491):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00d600", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8}}}}}}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @md5sig={0x13, 0x12, "aa8171546e58015ec38fba28f215b498"}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}]}}}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0xc2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r9], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000019200), 0xfa000, 0x0)
r10 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x6, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

458.2521ms ago: executing program 1 (id=492):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

410.449578ms ago: executing program 1 (id=493):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18)
unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80)
r1 = getpgid(0xffffffffffffffff)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

338.80657ms ago: executing program 1 (id=494):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x840, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004fa00000a0000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @ldst={0x1, 0x0, 0x3, 0x1, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000200)=0x1)
close(0x3)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x9010, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r6, &(0x7f00000001c0)='+', 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4)
sendto$inet(r0, &(0x7f00000003c0)="2e552f5d9fd8b0d9627c49409af4972bf8f617a67ab8dc8f2d9fd6b3d68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bede92eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe0", 0xce, 0x12, 0x0, 0x0)

338.480929ms ago: executing program 4 (id=495):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000e80)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbb00bb86dd6c00000000482cff00000000000000000000000000000000ff020000000000000000000000000001"], 0x0)

277.261001ms ago: executing program 4 (id=496):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66b8d0000f00d8652e26430f01f867666667f3470f90f8450f01ca66ba4200edc4a17a2c1e470f21d026640fc76ad7490fc72b66ba2100ed", 0x38}], 0x1, 0x42, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x3, 0x76000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b3", 0x2e}], 0x1}, 0x0)

219.3385ms ago: executing program 5 (id=497):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
fstatfs(r0, &(0x7f0000000140))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x58, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_COMMENT={0x0, 0x1a, '\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x11, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8b}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x58}}, 0x0)

206.89529ms ago: executing program 5 (id=498):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x3f00, 0xc0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@mss={0x2, 0x4, 0x3ff}]}}}}}}}, 0x0)

119.522847ms ago: executing program 5 (id=499):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000400)='>', 0x1, 0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000540)="d0dd201b", 0x4, 0x240080c0, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x80800)

115.007551ms ago: executing program 5 (id=500):
r0 = socket$inet6(0xa, 0x2, 0x3a)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
fchdir(r1)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x4, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0xf, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x7}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x7fffffff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x7, 0x9}, {0x1, 0xfffffffb, 0x6, 0x6, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x2}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0xd, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x1, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x1, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0xe628, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x1ff, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x4, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0x7fff, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x7}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x7}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0xcc, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b8}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x1, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x801, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x10, 0x0, &(0x7f0000000140)="345057c10e837846d905cbe99a8f5052", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

59.771175ms ago: executing program 4 (id=501):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

0s ago: executing program 4 (id=502):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000000c0)={0x4, 0x60000, 0x1, 0x0, 0x4})
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)

0s ago: executing program 5 (id=503):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x20fe, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x129802, 0x0)
io_setup(0x200, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r1, &(0x7f0000000040)="1d", 0x1, 0x801}])
io_pgetevents(r2, 0x7, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042b0401282003"], 0x7)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x40000000010001, 0x500)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000040), 0x4000031d})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
write(r4, &(0x7f00000006c0)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90)

kernel console output (not intermixed with test programs):

50:50
[   41.045131][ T5878] overlay: Unknown parameter 'measure'
[   41.120898][ T5880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'.
[   41.128572][ T5880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'.
[   41.354972][ T5908] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   41.354972][ T5908] Please contact the netfilter-devel mailing list or update your nftables rules.
[   41.374341][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374365][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374381][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374395][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374409][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374424][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374439][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374453][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374468][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.374482][ T5910] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[   41.500330][ T5915] Zero length message leads to an empty skb
[   41.502433][ T5920] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   41.542007][ T5920] kvm: pic: level sensitive irq not supported
[   41.669744][ T5933] FAULT_INJECTION: forcing a failure.
[   41.669744][ T5933] name failslab, interval 1, probability 0, space 0, times 1
[   41.669765][ T5933] CPU: 3 UID: 0 PID: 5933 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) 
[   41.669777][ T5933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   41.669783][ T5933] Call Trace:
[   41.669787][ T5933]  <TASK>
[   41.669791][ T5933]  dump_stack_lvl+0x100/0x190
[   41.669811][ T5933]  should_fail_ex.cold+0x5/0xa
[   41.669826][ T5933]  should_failslab+0xc2/0x120
[   41.669841][ T5933]  __kmalloc_cache_noprof+0x91/0x6d0
[   41.669858][ T5933]  ? nf_tables_newtable+0xd0a/0x1a90
[   41.669876][ T5933]  nf_tables_newtable+0xd0a/0x1a90
[   41.669895][ T5933]  ? __pfx_nf_tables_newtable+0x10/0x10
[   41.669910][ T5933]  ? net_generic+0x25/0x2a0
[   41.669928][ T5933]  ? __nla_parse+0x40/0x60
[   41.669963][ T5933]  nfnetlink_rcv_batch+0x1410/0x2880
[   41.669987][ T5933]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[   41.670006][ T5933]  ? lock_acquire+0x1d1/0x380
[   41.670018][ T5933]  ? avc_has_perm_noaudit+0x56/0x470
[   41.670039][ T5933]  ? avc_has_perm_noaudit+0x145/0x470
[   41.670069][ T5933]  ? __nla_parse+0x40/0x60
[   41.670087][ T5933]  nfnetlink_rcv+0x3bd/0x440
[   41.670103][ T5933]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   41.670123][ T5933]  netlink_unicast+0x585/0x850
[   41.670138][ T5933]  ? __pfx_netlink_unicast+0x10/0x10
[   41.670155][ T5933]  netlink_sendmsg+0x8b0/0xda0
[   41.670170][ T5933]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.670185][ T5933]  ? selinux_socket_sendmsg+0x198/0x2f0
[   41.670199][ T5933]  ____sys_sendmsg+0xa4d/0xbe0
[   41.670216][ T5933]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.670232][ T5933]  ? __pfx_____sys_sendmsg+0x10/0x10
[   41.670253][ T5933]  ? lock_acquire+0x1d1/0x380
[   41.670264][ T5933]  ? get_pid_task+0x2a/0x250
[   41.670280][ T5933]  ___sys_sendmsg+0x190/0x1e0
[   41.670291][ T5933]  ? __pfx____sys_sendmsg+0x10/0x10
[   41.670302][ T5933]  ? get_pid_task+0x106/0x250
[   41.670322][ T5933]  ? find_held_lock+0x2b/0x80
[   41.670346][ T5933]  __sys_sendmsg+0x160/0x210
[   41.670361][ T5933]  ? __pfx___sys_sendmsg+0x10/0x10
[   41.670383][ T5933]  do_syscall_64+0x123/0x790
[   41.670401][ T5933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.670413][ T5933] RIP: 0033:0x7f8b7079e159
[   41.670422][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.670431][ T5933] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.670442][ T5933] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   41.670449][ T5933] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[   41.670455][ T5933] RBP: 00007f8b715eb090 R08: 0000000000000000 R09: 0000000000000000
[   41.670461][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.670467][ T5933] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   41.670481][ T5933]  </TASK>
[   41.924447][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   42.076715][   T10] usb 8-1: Using ep0 maxpacket: 8
[   42.077744][   T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   42.079585][   T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   42.079605][   T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   42.079658][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   42.079703][   T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   42.079718][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   42.079731][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   42.079744][   T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   42.079757][   T10] usb 8-1: config 168 interface 0 has no altsetting 0
[   42.080712][   T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   42.080729][   T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   42.080745][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   42.080758][   T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   42.080770][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   42.080782][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   42.080794][   T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   42.080806][   T10] usb 8-1: config 168 interface 0 has no altsetting 0
[   42.081625][   T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   42.081640][   T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   42.081655][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   42.081668][   T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   42.081680][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   42.081692][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   42.081704][   T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   42.081716][   T10] usb 8-1: config 168 interface 0 has no altsetting 0
[   42.084309][   T10] usb 8-1: string descriptor 0 read error: -22
[   42.084362][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.098776][   T10] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   42.138840][ T5940] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   42.139436][ T5940] batman_adv: batadv0: Adding interface: gretap1
[   42.139449][ T5940] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   42.139473][ T5940] batman_adv: batadv0: Interface activated: gretap1
[   42.273931][ T5942] FAULT_INJECTION: forcing a failure.
[   42.273931][ T5942] name failslab, interval 1, probability 0, space 0, times 0
[   42.273951][ T5942] CPU: 2 UID: 0 PID: 5942 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) 
[   42.273963][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.273970][ T5942] Call Trace:
[   42.273973][ T5942]  <TASK>
[   42.273978][ T5942]  dump_stack_lvl+0x100/0x190
[   42.273999][ T5942]  should_fail_ex.cold+0x5/0xa
[   42.274015][ T5942]  should_failslab+0xc2/0x120
[   42.274029][ T5942]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   42.274043][ T5942]  ? sock_alloc_inode+0x26/0x2c0
[   42.274061][ T5942]  ? __pfx_sock_alloc_inode+0x10/0x10
[   42.274077][ T5942]  sock_alloc_inode+0x26/0x2c0
[   42.274093][ T5942]  ? __pfx_sock_alloc_inode+0x10/0x10
[   42.274107][ T5942]  alloc_inode+0x68/0x250
[   42.274118][ T5942]  sock_alloc+0x44/0x280
[   42.274132][ T5942]  ? security_socket_create+0x7f/0x250
[   42.274144][ T5942]  __sock_create+0xc2/0x860
[   42.274156][ T5942]  __sys_socket+0x14d/0x260
[   42.274167][ T5942]  ? __pfx___sys_socket+0x10/0x10
[   42.274181][ T5942]  __x64_sys_socket+0x72/0xb0
[   42.274192][ T5942]  ? lockdep_hardirqs_on+0x7d/0x110
[   42.274208][ T5942]  do_syscall_64+0x123/0x790
[   42.274248][ T5942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.274261][ T5942] RIP: 0033:0x7f8b7079e159
[   42.274271][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.274282][ T5942] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   42.274294][ T5942] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   42.274301][ T5942] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[   42.274308][ T5942] RBP: 00007f8b7083506b R08: 0000000000000000 R09: 0000000000000000
[   42.274314][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.274322][ T5942] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   42.274337][ T5942]  </TASK>
[   42.418663][ T5806] usb 8-1: USB disconnect, device number 2
[   42.464657][ T5737] Bluetooth: hci1: command tx timeout
[   42.464680][ T5737] Bluetooth: hci3: command tx timeout
[   42.464713][ T5088] Bluetooth: hci2: command tx timeout
[   42.487451][ T5958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'.
[   42.487991][ T5958] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   42.488001][ T5958] netlink: 'syz.1.31': attribute type 2 has an invalid length.
[   42.488208][ T5958] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   42.488215][ T5958] netlink: 'syz.1.31': attribute type 2 has an invalid length.
[   42.495699][ T5958] ovs-dp0: entered promiscuous mode
[   42.497543][ T5958] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61 sclass=netlink_xfrm_socket pid=5958 comm=syz.1.31
[   42.540066][ T5961] FAULT_INJECTION: forcing a failure.
[   42.540066][ T5961] name failslab, interval 1, probability 0, space 0, times 0
[   42.540088][ T5961] CPU: 2 UID: 0 PID: 5961 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) 
[   42.540119][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.540126][ T5961] Call Trace:
[   42.540129][ T5961]  <TASK>
[   42.540134][ T5961]  dump_stack_lvl+0x100/0x190
[   42.540153][ T5961]  should_fail_ex.cold+0x5/0xa
[   42.540170][ T5961]  should_failslab+0xc2/0x120
[   42.540184][ T5961]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   42.540198][ T5961]  ? __d_alloc+0x35/0xa50
[   42.540217][ T5961]  __d_alloc+0x35/0xa50
[   42.540233][ T5961]  d_alloc_pseudo+0x1c/0xc0
[   42.540245][ T5961]  alloc_file_pseudo+0x118/0x290
[   42.540261][ T5961]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   42.540277][ T5961]  ? _raw_spin_unlock+0x28/0x50
[   42.540292][ T5961]  ? alloc_fd+0x471/0x7a0
[   42.540307][ T5961]  __anon_inode_getfile+0xe8/0x280
[   42.540320][ T5961]  do_epoll_create+0x3ac/0x540
[   42.540336][ T5961]  __x64_sys_epoll_create1+0x30/0x40
[   42.540352][ T5961]  do_syscall_64+0x123/0x790
[   42.540370][ T5961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.540381][ T5961] RIP: 0033:0x7f725ed9e159
[   42.540390][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.540400][ T5961] RSP: 002b:00007f725fc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[   42.540411][ T5961] RAX: ffffffffffffffda RBX: 00007f725f025fa0 RCX: 00007f725ed9e159
[   42.540417][ T5961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[   42.540423][ T5961] RBP: 00007f725ee3506b R08: 0000000000000000 R09: 0000000000000000
[   42.540429][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.540435][ T5961] R13: 00007f725f026038 R14: 00007f725f025fa0 R15: 00007ffcfe1a0498
[   42.540449][ T5961]  </TASK>
[   42.626358][ T5930] netlink: 'syz.3.19': attribute type 10 has an invalid length.
[   42.633050][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.635000][ T5930] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   42.965088][ T6006] FAULT_INJECTION: forcing a failure.
[   42.965088][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   42.965107][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT(full) 
[   42.965119][ T6006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.965125][ T6006] Call Trace:
[   42.965129][ T6006]  <TASK>
[   42.965133][ T6006]  dump_stack_lvl+0x100/0x190
[   42.965153][ T6006]  should_fail_ex.cold+0x5/0xa
[   42.965169][ T6006]  _copy_to_user+0x32/0xd0
[   42.965182][ T6006]  simple_read_from_buffer+0xcb/0x170
[   42.965197][ T6006]  proc_fail_nth_read+0x1af/0x230
[   42.965212][ T6006]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   42.965233][ T6006]  ? rw_verify_area+0xce/0x6d0
[   42.965250][ T6006]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   42.965263][ T6006]  vfs_read+0x1e4/0xb40
[   42.965274][ T6006]  ? lock_acquire+0x1d1/0x380
[   42.965286][ T6006]  ? __fget_files+0x34/0x3d0
[   42.965299][ T6006]  ? __pfx_vfs_read+0x10/0x10
[   42.965309][ T6006]  ? find_held_lock+0x2b/0x80
[   42.965325][ T6006]  ? __fget_files+0x215/0x3d0
[   42.965341][ T6006]  ? __fget_files+0x21f/0x3d0
[   42.965358][ T6006]  ksys_read+0x12a/0x250
[   42.965369][ T6006]  ? __pfx_ksys_read+0x10/0x10
[   42.965383][ T6006]  do_syscall_64+0x123/0x790
[   42.965408][ T6006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.965424][ T6006] RIP: 0033:0x7f8b7075e98e
[   42.965439][ T6006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   42.965453][ T6006] RSP: 002b:00007f8b715eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   42.965469][ T6006] RAX: ffffffffffffffda RBX: 00007f8b715eb6c0 RCX: 00007f8b7075e98e
[   42.965482][ T6006] RDX: 000000000000000f RSI: 00007f8b715eb0a0 RDI: 0000000000000004
[   42.965493][ T6006] RBP: 00007f8b715eb090 R08: 0000000000000000 R09: 0000000000000000
[   42.965503][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   42.965512][ T6006] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   42.965531][ T6006]  </TASK>
[   42.980656][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'.
[   42.980671][ T6004] netlink: 'syz.0.49': attribute type 3 has an invalid length.
[   42.980680][ T6004] netlink: 'syz.0.49': attribute type 2 has an invalid length.
[   42.980685][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'.
[   43.040555][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'.
[   43.109496][   T43] kauditd_printk_skb: 142 callbacks suppressed
[   43.109515][   T43] audit: type=1400 audit(1790144702.176:313): avc:  denied  { bind } for  pid=6012 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   43.110002][   T43] audit: type=1400 audit(1790144702.176:314): avc:  denied  { read write } for  pid=6012 comm="syz.2.53" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   43.110307][   T43] audit: type=1400 audit(1790144702.176:315): avc:  denied  { open } for  pid=6012 comm="syz.2.53" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   43.111514][   T43] audit: type=1400 audit(1790144702.176:316): avc:  denied  { ioctl } for  pid=6012 comm="syz.2.53" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   43.117237][   T43] audit: type=1400 audit(1790144702.186:317): avc:  denied  { create } for  pid=6012 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   43.117558][   T43] audit: type=1400 audit(1790144702.186:318): avc:  denied  { read } for  pid=6012 comm="syz.2.53" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   43.117971][   T43] audit: type=1400 audit(1790144702.186:319): avc:  denied  { open } for  pid=6012 comm="syz.2.53" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   43.118357][   T43] audit: type=1400 audit(1790144702.186:320): avc:  denied  { ioctl } for  pid=6012 comm="syz.2.53" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   43.121411][   T43] audit: type=1400 audit(1790144702.186:321): avc:  denied  { ioctl } for  pid=6014 comm="syz.1.54" path="/dev/video7" dev="devtmpfs" ino=971 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   43.133228][   T43] audit: type=1400 audit(1790144702.196:322): avc:  denied  { write } for  pid=6012 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   43.138114][ T6013] lo speed is unknown, defaulting to 1000
[   43.138167][ T6013] lo speed is unknown, defaulting to 1000
[   43.140279][ T6013] lo speed is unknown, defaulting to 1000
[   43.141466][ T6013] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   43.141494][ T6013] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   43.141527][ T6013] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   43.143917][ T6013] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   43.151169][ T6013] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   43.193114][ T6013] lo speed is unknown, defaulting to 1000
[   43.198985][ T6013] lo speed is unknown, defaulting to 1000
[   43.201686][ T6013] lo speed is unknown, defaulting to 1000
[   43.203067][ T6013] lo speed is unknown, defaulting to 1000
[   43.245496][ T6027] FAULT_INJECTION: forcing a failure.
[   43.245496][ T6027] name failslab, interval 1, probability 0, space 0, times 0
[   43.245526][ T6027] CPU: 3 UID: 0 PID: 6027 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(full) 
[   43.245546][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   43.245558][ T6027] Call Trace:
[   43.245564][ T6027]  <TASK>
[   43.245572][ T6027]  dump_stack_lvl+0x100/0x190
[   43.245605][ T6027]  should_fail_ex.cold+0x5/0xa
[   43.245639][ T6027]  should_failslab+0xc2/0x120
[   43.245665][ T6027]  __kmalloc_noprof+0xfc/0x840
[   43.245685][ T6027]  ? rcu_is_watching+0x13/0xc0
[   43.245710][ T6027]  ? tomoyo_realpath_from_path+0xb6/0x690
[   43.245741][ T6027]  tomoyo_realpath_from_path+0xb6/0x690
[   43.245772][ T6027]  tomoyo_path_number_perm+0x23c/0x580
[   43.245792][ T6027]  ? tomoyo_path_number_perm+0x22e/0x580
[   43.245812][ T6027]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   43.245841][ T6027]  ? __lock_acquire+0x5c0/0x1f40
[   43.245874][ T6027]  ? __fget_files+0x34/0x3d0
[   43.245898][ T6027]  ? find_held_lock+0x2b/0x80
[   43.245924][ T6027]  ? hook_file_ioctl_common+0x140/0x440
[   43.245956][ T6027]  ? __fget_files+0x21f/0x3d0
[   43.245983][ T6027]  security_file_ioctl+0xd3/0x230
[   43.246006][ T6027]  __x64_sys_ioctl+0xb7/0x210
[   43.246027][ T6027]  do_syscall_64+0x123/0x790
[   43.246057][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.246076][ T6027] RIP: 0033:0x7f8b7079e159
[   43.246092][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.246108][ T6027] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.246128][ T6027] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   43.246139][ T6027] RDX: 0000200000000080 RSI: 00000000c0405665 RDI: 0000000000000003
[   43.246151][ T6027] RBP: 00007f8b715eb090 R08: 0000000000000000 R09: 0000000000000000
[   43.246161][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.246172][ T6027] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   43.246197][ T6027]  </TASK>
[   43.246680][ T6027] ERROR: Out of memory at tomoyo_realpath_from_path.
[   43.307971][ T6032] afs: Unknown parameter 'dyn£'
[   43.372010][ T6038] FAULT_INJECTION: forcing a failure.
[   43.372010][ T6038] name failslab, interval 1, probability 0, space 0, times 0
[   43.372037][ T6038] CPU: 2 UID: 0 PID: 6038 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT(full) 
[   43.372055][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   43.372064][ T6038] Call Trace:
[   43.372070][ T6038]  <TASK>
[   43.372077][ T6038]  dump_stack_lvl+0x100/0x190
[   43.372125][ T6038]  should_fail_ex.cold+0x5/0xa
[   43.372148][ T6038]  should_failslab+0xc2/0x120
[   43.372169][ T6038]  kmem_cache_alloc_noprof+0x92/0x6a0
[   43.372189][ T6038]  ? skb_clone+0x190/0x400
[   43.372213][ T6038]  skb_clone+0x190/0x400
[   43.372234][ T6038]  netlink_deliver_tap+0xaed/0xcc0
[   43.372258][ T6038]  netlink_unicast+0x6a5/0x850
[   43.372281][ T6038]  ? __pfx_netlink_unicast+0x10/0x10
[   43.372306][ T6038]  netlink_ack+0x655/0xb80
[   43.372331][ T6038]  netlink_rcv_skb+0x333/0x420
[   43.372349][ T6038]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   43.372372][ T6038]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   43.372407][ T6038]  xfrm_netlink_rcv+0x71/0x90
[   43.372427][ T6038]  netlink_unicast+0x585/0x850
[   43.372449][ T6038]  ? __pfx_netlink_unicast+0x10/0x10
[   43.372474][ T6038]  netlink_sendmsg+0x8b0/0xda0
[   43.372496][ T6038]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.372517][ T6038]  ? selinux_socket_sendmsg+0x198/0x2f0
[   43.372540][ T6038]  ____sys_sendmsg+0xa4d/0xbe0
[   43.372563][ T6038]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.372602][ T6038]  ? __pfx_____sys_sendmsg+0x10/0x10
[   43.372631][ T6038]  ? lock_acquire+0x1d1/0x380
[   43.372649][ T6038]  ? get_pid_task+0x2a/0x250
[   43.372673][ T6038]  ___sys_sendmsg+0x190/0x1e0
[   43.372691][ T6038]  ? __pfx____sys_sendmsg+0x10/0x10
[   43.372707][ T6038]  ? get_pid_task+0x106/0x250
[   43.372743][ T6038]  ? find_held_lock+0x2b/0x80
[   43.372781][ T6038]  __sys_sendmsg+0x160/0x210
[   43.372803][ T6038]  ? __pfx___sys_sendmsg+0x10/0x10
[   43.372835][ T6038]  do_syscall_64+0x123/0x790
[   43.372862][ T6038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.372879][ T6038] RIP: 0033:0x7f8b7079e159
[   43.372893][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.372907][ T6038] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.372924][ T6038] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   43.372935][ T6038] RDX: 0000000000040010 RSI: 0000200000000580 RDI: 0000000000000006
[   43.372944][ T6038] RBP: 00007f8b715eb090 R08: 0000000000000000 R09: 0000000000000000
[   43.372954][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   43.372963][ T6038] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   43.372986][ T6038]  </TASK>
[   43.592337][ T6053] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET)
[   43.604570][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[   43.702794][ T6062] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800
[   43.707094][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'.
[   43.731177][ T6065] netlink: 'syz.3.71': attribute type 10 has an invalid length.
[   43.731750][ T6065] veth0_vlan: entered allmulticast mode
[   43.734441][ T5737] Bluetooth: hci0: command tx timeout
[   43.736376][ T6065] team0: Device veth0_vlan failed to register rx_handler
[   43.811577][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   43.964326][ T5837] usb 6-1: Using ep0 maxpacket: 32
[   43.965902][ T5837] usb 6-1: unable to get BOS descriptor or descriptor too short
[   43.965925][ T5837] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[   43.971818][ T5837] usb 6-1: string descriptor 0 read error: -22
[   43.971872][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.976340][ T6004] comedi comedi1: reset error (fatal)
[   43.982204][ T5837] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[   43.982223][ T5837] dw2102: su3000_power_ctrl: 1, initialized 0
[   43.984567][ T5837] dvb-usb: bulk message failed: -22 (2/0)
[   43.987402][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   43.989878][ T5837] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[   43.989902][ T5837] usb 6-1: media controller created
[   43.990075][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[   43.990082][ T5837] dw2102: i2c transfer failed.
[   43.990095][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[   43.990101][ T5837] dw2102: i2c transfer failed.
[   43.990107][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[   43.990113][ T5837] dw2102: i2c transfer failed.
[   43.990118][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[   43.990124][ T5837] dw2102: i2c transfer failed.
[   43.990129][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[   43.990135][ T5837] dw2102: i2c transfer failed.
[   43.990140][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[   43.990146][ T5837] dw2102: i2c transfer failed.
[   43.990150][ T5837] dvb-usb: MAC address: 02:02:02:02:02:02
[   44.010128][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   44.033604][ T5837] dvb-usb: bulk message failed: -22 (3/0)
[   44.033616][ T5837] dw2102: command 0x0e transfer failed.
[   44.033620][ T5837] dvb-usb: bulk message failed: -22 (3/0)
[   44.033626][ T5837] dw2102: command 0x0e transfer failed.
[   44.166154][ T6085] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   44.169936][ T6087] netlink: 'syz.3.81': attribute type 21 has an invalid length.
[   44.169956][ T6087] netlink: 128 bytes leftover after parsing attributes in process `syz.3.81'.
[   44.170036][ T6087] netlink: 'syz.3.81': attribute type 4 has an invalid length.
[   44.170048][ T6087] netlink: 3 bytes leftover after parsing attributes in process `syz.3.81'.
[   44.179263][ T6087] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   44.183436][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.183626][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.186516][ T6088] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   44.264441][   T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   44.335115][ T5837] dvb-usb: bulk message failed: -22 (3/0)
[   44.335131][ T5837] dw2102: command 0x0e transfer failed.
[   44.335136][ T5837] dvb-usb: bulk message failed: -22 (3/0)
[   44.335142][ T5837] dw2102: command 0x0e transfer failed.
[   44.335170][ T5837] dvb-usb: bulk message failed: -22 (1/0)
[   44.335178][ T5837] dw2102: command 0x51 transfer failed.
[   44.337755][ T6051] dw2102: i2c wr: len=66 is too big!
[   44.337755][ T6051] 
[   44.355706][ T5837] DVB: Unable to find symbol ds3000_attach()
[   44.355716][ T5837] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[   44.404505][ T5837] rc_core: IR keymap rc-su3000 not found
[   44.404521][ T5837] Registered IR keymap rc-empty
[   44.408942][ T5837] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0
[   44.412326][ T5837] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5
[   44.430510][   T42] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   44.434661][   T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   44.434685][   T42] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   44.434718][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.438211][ T5837] dvb-usb: schedule remote query interval to 150 msecs.
[   44.438229][ T5837] dw2102: su3000_power_ctrl: 0, initialized 1
[   44.438240][ T5837] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[   44.440867][ T5837] usb 6-1: USB disconnect, device number 2
[   44.462922][   T42] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[   44.468723][   T42] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[   44.533940][ T5837] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[   44.535889][ T5088] Bluetooth: hci1: command tx timeout
[   44.535916][ T5088] Bluetooth: hci3: command tx timeout
[   44.536004][ T5737] Bluetooth: hci2: command tx timeout
[   44.548433][ T6105] Cannot find add_set index 0 as target
[   45.273737][ T6160] trusted_key: encrypted_key: insufficient parameters specified
[   45.437276][ T6180] fuse: Bad value for 'fd'
[   45.658938][ T6192] FAULT_INJECTION: forcing a failure.
[   45.658938][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.658966][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) 
[   45.658986][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.658996][ T6192] Call Trace:
[   45.659002][ T6192]  <TASK>
[   45.659009][ T6192]  dump_stack_lvl+0x100/0x190
[   45.659037][ T6192]  should_fail_ex.cold+0x5/0xa
[   45.659062][ T6192]  _copy_from_user+0x2e/0xd0
[   45.659082][ T6192]  __sys_bpf+0x2f5/0x4a30
[   45.659106][ T6192]  ? __pfx___sys_bpf+0x10/0x10
[   45.659121][ T6192]  ? find_held_lock+0x2b/0x80
[   45.659143][ T6192]  ? futex_wake+0x4ea/0x5e0
[   45.659175][ T6192]  ? rcu_read_lock_any_held+0x6a/0x90
[   45.659199][ T6192]  ? find_held_lock+0x2b/0x80
[   45.659221][ T6192]  ? ksys_write+0x190/0x250
[   45.659238][ T6192]  ? ksys_write+0x190/0x250
[   45.659294][ T6192]  ? __x64_sys_futex+0x34f/0x4d0
[   45.659320][ T6192]  ? __x64_sys_futex+0x358/0x4d0
[   45.659347][ T6192]  ? xfd_validate_state+0x129/0x190
[   45.659369][ T6192]  ? __x64_sys_bpf+0xce/0x140
[   45.659386][ T6192]  __x64_sys_bpf+0xce/0x140
[   45.659404][ T6192]  ? do_syscall_64+0xae/0x790
[   45.659429][ T6192]  do_syscall_64+0x123/0x790
[   45.659457][ T6192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.659475][ T6192] RIP: 0033:0x7f8b7079e159
[   45.659489][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.659523][ T6192] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   45.659542][ T6192] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   45.659554][ T6192] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000
[   45.659565][ T6192] RBP: 00007f8b7083506b R08: 0000000000000000 R09: 0000000000000000
[   45.659576][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.659586][ T6192] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   45.659621][ T6192]  </TASK>
[   45.678043][ T6196] FAULT_INJECTION: forcing a failure.
[   45.678043][ T6196] name failslab, interval 1, probability 0, space 0, times 0
[   45.678073][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) 
[   45.678094][ T6196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.678105][ T6196] Call Trace:
[   45.678111][ T6196]  <TASK>
[   45.678118][ T6196]  dump_stack_lvl+0x100/0x190
[   45.678153][ T6196]  should_fail_ex.cold+0x5/0xa
[   45.678183][ T6196]  should_failslab+0xc2/0x120
[   45.678209][ T6196]  kmem_cache_alloc_noprof+0x92/0x6a0
[   45.678230][ T6196]  ? mempool_init_node+0x2f7/0x6f0
[   45.678250][ T6196]  ? __pfx_mempool_alloc_slab+0x10/0x10
[   45.678280][ T6196]  mempool_init_node+0x2f7/0x6f0
[   45.678332][ T6196]  ? __pfx_mempool_free_slab+0x10/0x10
[   45.678364][ T6196]  mempool_create_node_noprof+0xe9/0x1b0
[   45.678384][ T6196]  ? __pfx_mempool_alloc_slab+0x10/0x10
[   45.678415][ T6196]  ceph_osdc_init+0x48b/0xa00
[   45.678444][ T6196]  ceph_create_client+0x281/0x370
[   45.678468][ T6196]  ceph_get_tree+0x1a4/0x1fd0
[   45.678496][ T6196]  ? bpf_lsm_capable+0x9/0x10
[   45.678522][ T6196]  ? security_capable+0x80/0x260
[   45.678555][ T6196]  vfs_get_tree+0x92/0x320
[   45.678585][ T6196]  vfs_cmd_create+0xd7/0x2a0
[   45.678606][ T6196]  __do_sys_fsconfig+0x55a/0xcb0
[   45.678627][ T6196]  ? __pfx___do_sys_fsconfig+0x10/0x10
[   45.678659][ T6196]  do_syscall_64+0x123/0x790
[   45.678690][ T6196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.678709][ T6196] RIP: 0033:0x7f725ed9e159
[   45.678726][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.678743][ T6196] RSP: 002b:00007f725fc1a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   45.678761][ T6196] RAX: ffffffffffffffda RBX: 00007f725f025fa0 RCX: 00007f725ed9e159
[   45.678774][ T6196] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[   45.678784][ T6196] RBP: 00007f725ee3506b R08: 0000000000000000 R09: 0000000000000000
[   45.678795][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.678806][ T6196] R13: 00007f725f026038 R14: 00007f725f025fa0 R15: 00007ffcfe1a0498
[   45.678830][ T6196]  </TASK>
[   45.814895][ T5737] Bluetooth: hci0: command tx timeout
[   45.910992][ T6200] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   45.945691][ T6202] FAULT_INJECTION: forcing a failure.
[   45.945691][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.945719][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.1.124 Not tainted syzkaller #0 PREEMPT(full) 
[   45.945739][ T6202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.945749][ T6202] Call Trace:
[   45.945755][ T6202]  <TASK>
[   45.945762][ T6202]  dump_stack_lvl+0x100/0x190
[   45.945793][ T6202]  should_fail_ex.cold+0x5/0xa
[   45.945818][ T6202]  _copy_to_user+0x32/0xd0
[   45.945840][ T6202]  simple_read_from_buffer+0xcb/0x170
[   45.945865][ T6202]  proc_fail_nth_read+0x1af/0x230
[   45.945888][ T6202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   45.945911][ T6202]  ? rw_verify_area+0xce/0x6d0
[   45.945938][ T6202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   45.945959][ T6202]  vfs_read+0x1e4/0xb40
[   45.945976][ T6202]  ? lock_acquire+0x1d1/0x380
[   45.945995][ T6202]  ? __fget_files+0x34/0x3d0
[   45.946015][ T6202]  ? __pfx_vfs_read+0x10/0x10
[   45.946029][ T6202]  ? find_held_lock+0x2b/0x80
[   45.946053][ T6202]  ? __fget_files+0x215/0x3d0
[   45.946078][ T6202]  ? __fget_files+0x21f/0x3d0
[   45.946106][ T6202]  ksys_read+0x12a/0x250
[   45.946123][ T6202]  ? __pfx_ksys_read+0x10/0x10
[   45.946138][ T6202]  ? v4l2_ioctl+0x1c5/0x250
[   45.946175][ T6202]  do_syscall_64+0x123/0x790
[   45.946203][ T6202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.946221][ T6202] RIP: 0033:0x7f8b7075e98e
[   45.946235][ T6202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   45.946251][ T6202] RSP: 002b:00007f8b715eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.946270][ T6202] RAX: ffffffffffffffda RBX: 00007f8b715eb6c0 RCX: 00007f8b7075e98e
[   45.946281][ T6202] RDX: 000000000000000f RSI: 00007f8b715eb0a0 RDI: 0000000000000004
[   45.946291][ T6202] RBP: 00007f8b715eb090 R08: 0000000000000000 R09: 0000000000000000
[   45.946301][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.946311][ T6202] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   45.946334][ T6202]  </TASK>
[   46.615032][   T65] Bluetooth: hci3: command tx timeout
[   46.615053][   T65] Bluetooth: hci1: command tx timeout
[   46.615080][ T5737] Bluetooth: hci2: command tx timeout
[   46.991204][ T1041] usb 7-1: USB disconnect, device number 2
[   47.011247][ T1041] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   47.013776][ T1041] spcp8x5 7-1:1.0: device disconnected
[   47.029616][ T6223] __nla_validate_parse: 2 callbacks suppressed
[   47.029628][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'.
[   47.029637][ T6223] nbd: illegal input index 201326592
[   47.395378][ T1041] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   47.554469][ T1041] usb 7-1: Using ep0 maxpacket: 8
[   47.555533][ T1041] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   47.556305][ T1041] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   47.556321][ T1041] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   47.556332][ T1041] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   47.556343][ T1041] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   47.556362][ T1041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.761975][ T1041] usb 7-1: GET_CAPABILITIES returned 0
[   47.761999][ T1041] usbtmc 7-1:16.0: can't read capabilities
[   47.769709][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   47.852870][ T6254] validate_nla: 2 callbacks suppressed
[   47.852882][ T6254] netlink: 'syz.1.141': attribute type 15 has an invalid length.
[   47.916781][ T5819] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[   47.917702][ T5819] usb 5-1: Dual-Role OTG device on HNP port
[   47.917929][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.923226][ T5819] gspca_main: spca501-2.14.0 probing 0000:0000
[   47.924520][ T5819] gspca_spca501: reg write: error -32
[   47.924528][ T5819] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   47.924560][ T5819] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[   47.970778][ T6226] =======================================================
[   47.970778][ T6226] WARNING: The mand mount option has been deprecated and
[   47.970778][ T6226]          and is ignored by this kernel. Remove the mand
[   47.970778][ T6226]          option from the mount to silence this warning.
[   47.970778][ T6226] =======================================================
[   47.972697][ T6226] overlayfs: workdir and upperdir must reside under the same mount
[   48.009270][ T5819] usb 7-1: USB disconnect, device number 3
[   48.121715][   T43] kauditd_printk_skb: 792 callbacks suppressed
[   48.121732][   T43] audit: type=1400 audit(1790144707.186:1113): avc:  denied  { mount } for  pid=6263 comm="syz.3.144" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   48.122277][   T43] audit: type=1400 audit(1790144707.186:1114): avc:  denied  { read write } for  pid=6263 comm="syz.3.144" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   48.122532][   T43] audit: type=1400 audit(1790144707.186:1115): avc:  denied  { open } for  pid=6263 comm="syz.3.144" path="/44/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   48.124216][   T43] audit: type=1400 audit(1790144707.186:1116): avc:  denied  { mac_admin } for  pid=6263 comm="syz.3.144" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   48.126108][ T6264] syzkaller0: entered promiscuous mode
[   48.126119][ T6264] syzkaller0: entered allmulticast mode
[   48.130359][ T6264] tipc: Started in network mode
[   48.130379][ T6264] tipc: Node identity fe1c5d7f254d, cluster identity 4711
[   48.130424][ T6265] SELinux:  Context system_u:object_r:audisp_remote_exec_t:s0 is not valid (left unmapped).
[   48.131689][   T43] audit: type=1400 audit(1790144707.196:1117): avc:  denied  { relabelto } for  pid=6263 comm="syz.3.144" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0"
[   48.131715][ T6264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.132235][   T43] audit: type=1400 audit(1790144707.196:1118): avc:  denied  { associate } for  pid=6263 comm="syz.3.144" name="/" dev="devtmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_remote_exec_t:s0"
[   48.132966][   T43] audit: type=1400 audit(1790144707.196:1119): avc:  denied  { ioctl } for  pid=6263 comm="syz.3.144" path="/44/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   48.135778][ T6262] tipc: Resetting bearer <eth:syzkaller0>
[   48.160832][ T6262] tipc: Disabling bearer <eth:syzkaller0>
[   48.187321][   T43] audit: type=1400 audit(1790144707.256:1120): avc:  denied  { watch watch_reads } for  pid=6263 comm="syz.3.144" path="/newroot/44" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   48.188648][ T6267] device-mapper: table: 248:0: zero-length target
[   48.188659][ T6267] device-mapper: ioctl: error adding target to table
[   48.276166][   T43] audit: type=1400 audit(1790144707.346:1121): avc:  denied  { unmount } for  pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   48.305229][ T6271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6271 comm=syz.3.147
[   48.306039][   T43] audit: type=1400 audit(1790144707.376:1122): avc:  denied  { prog_load } for  pid=6270 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   48.377404][ T6279] FAULT_INJECTION: forcing a failure.
[   48.377404][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.377422][ T6279] CPU: 3 UID: 0 PID: 6279 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) 
[   48.377434][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.377440][ T6279] Call Trace:
[   48.377449][ T6279]  <TASK>
[   48.377453][ T6279]  dump_stack_lvl+0x100/0x190
[   48.377479][ T6279]  should_fail_ex.cold+0x5/0xa
[   48.377495][ T6279]  _copy_from_user+0x2e/0xd0
[   48.377524][ T6279]  copy_mount_options+0x76/0x190
[   48.377538][ T6279]  __x64_sys_mount+0x1ab/0x310
[   48.377555][ T6279]  ? __pfx___x64_sys_mount+0x10/0x10
[   48.377576][ T6279]  do_syscall_64+0x123/0x790
[   48.377598][ T6279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.377609][ T6279] RIP: 0033:0x7f8b7079e159
[   48.377618][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.377628][ T6279] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   48.377642][ T6279] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   48.377649][ T6279] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000
[   48.377655][ T6279] RBP: 00007f8b715eb090 R08: 0000200000000040 R09: 0000000000000000
[   48.377663][ T6279] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[   48.377669][ T6279] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   48.377683][ T6279]  </TASK>
[   48.379413][ T6279] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   48.379422][ T6279] overlayfs: missing 'lowerdir'
[   48.655664][ T6286] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks
[   48.655679][ T6286] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   48.713764][ T6290] overlayfs: failed to resolve '/ÄA~[¿‹�þçUóh�l7u•–tï;¤C¼(Vc!aÁã9Æb�5øÉ@h
õˈß9¯5Èa': -2
[   48.804382][ T5778] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.804408][ T5778] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.804425][ T5778] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.804441][ T5778] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.820256][ T6296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   48.823426][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.160'.
[   48.823550][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.160'.
[   49.014719][ T6311] lo speed is unknown, defaulting to 1000
[   49.085542][ T6318] binder: 6317:6318 ioctl c0306201 0 returned -14
[   49.200888][ T6324] CUSE: info not properly terminated
[   49.234393][ T5837] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   49.394940][ T5837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   49.396545][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.396569][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.396604][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   49.396663][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.402296][ T5837] usb 6-1: config 0 descriptor??
[   49.519768][ T6352] Bluetooth: MGMT ver 1.23
[   49.560436][ T6357] net_ratelimit: 3260 callbacks suppressed
[   49.560449][ T6357] netlink: Invalid conntrack helper
[   49.560460][ T6357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.865782][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865821][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865840][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865858][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865878][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865898][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865918][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865937][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865955][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.865974][ T5837] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   49.878005][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   49.922869][ T5837] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   49.928687][ T6362] tmpfs: Bad value for 'mpol'
[   50.212608][ T6316] lo speed is unknown, defaulting to 1000
[   50.278409][ T6377] netlink: 68 bytes leftover after parsing attributes in process `syz.0.184'.
[   50.296586][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.296811][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.465812][ T6388] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   50.542913][ T6392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   50.542931][ T6392] IPv6: NLM_F_CREATE should be set when creating new route
[   50.542942][ T6392] IPv6: NLM_F_CREATE should be set when creating new route
[   50.883816][ T6400] netlink: 52 bytes leftover after parsing attributes in process `syz.3.192'.
[   50.895862][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.896495][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.944143][ T6404] ip_tables: iptables: counters copy to user failed while replacing table
[   50.947110][ T6404] syzkaller0: entered promiscuous mode
[   50.947128][ T6404] syzkaller0: entered allmulticast mode
[   51.017281][ T6410] xt_MASQUERADE: bad MAP_IPS.
[   51.170403][ T6431] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   51.188340][ T6432] capability: warning: `syz.0.201' uses 32-bit capabilities (legacy support in use)
[   51.294557][ T5820] usb 6-1: reset high-speed USB device number 3 using dummy_hcd
[   51.364434][ T5837] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   51.377467][ T6446] IPVS: rr: TCP [fe80::aa]:80 - no destination available
[   51.377538][   T68] IPVS: starting estimator thread 0...
[   51.429024][ T6450] jffs2: notice: (6450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   51.472469][ T6453] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   51.474456][ T6448] IPVS: using max 44 ests per chain, 105600 per kthread
[   51.504819][ T5837] usb 8-1: device descriptor read/64, error -71
[   51.570070][ T6461] xt_l2tp: unknown flags: 16
[   51.570986][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   51.571053][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   51.754821][ T5837] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   51.880357][ T6476] FAULT_INJECTION: forcing a failure.
[   51.880357][ T6476] name failslab, interval 1, probability 0, space 0, times 0
[   51.880385][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.0.217 Not tainted syzkaller #0 PREEMPT(full) 
[   51.880399][ T6476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   51.880408][ T6476] Call Trace:
[   51.880414][ T6476]  <TASK>
[   51.880420][ T6476]  dump_stack_lvl+0x100/0x190
[   51.880463][ T6476]  should_fail_ex.cold+0x5/0xa
[   51.880482][ T6476]  should_failslab+0xc2/0x120
[   51.880512][ T6476]  __kmalloc_noprof+0xfc/0x840
[   51.880530][ T6476]  ? __vb2_queue_alloc+0x23e/0x1160
[   51.880557][ T6476]  __vb2_queue_alloc+0x23e/0x1160
[   51.880572][ T6476]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   51.880609][ T6476]  ? vb2_core_allocated_buffers_storage+0xc4/0x220
[   51.880635][ T6476]  vb2_core_reqbufs+0x899/0xf30
[   51.880678][ T6476]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[   51.880704][ T6476]  ? __vb2_init_fileio+0x18f/0x1000
[   51.880726][ T6476]  __vb2_init_fileio+0x32d/0x1000
[   51.880740][ T6476]  ? __lock_acquire+0x5c0/0x1f40
[   51.880765][ T6476]  __vb2_perform_fileio+0x9ba/0x1380
[   51.880786][ T6476]  ? lock_acquire+0x1d1/0x380
[   51.880806][ T6476]  ? __pfx___vb2_perform_fileio+0x10/0x10
[   51.880827][ T6476]  vb2_fop_write+0x1f8/0x550
[   51.880849][ T6476]  v4l2_write+0x229/0x2c0
[   51.880876][ T6476]  vfs_write+0x2aa/0x1050
[   51.880894][ T6476]  ? __pfx_v4l2_write+0x10/0x10
[   51.880914][ T6476]  ? lock_acquire+0x1d1/0x380
[   51.880930][ T6476]  ? __fget_files+0x34/0x3d0
[   51.880951][ T6476]  ? __pfx_vfs_write+0x10/0x10
[   51.880966][ T6476]  ? find_held_lock+0x2b/0x80
[   51.880986][ T6476]  ? __fget_files+0x215/0x3d0
[   51.881003][ T6476]  ? __fget_files+0x215/0x3d0
[   51.881027][ T6476]  ? __fget_files+0x21f/0x3d0
[   51.881055][ T6476]  ksys_write+0x12a/0x250
[   51.881069][ T6476]  ? __pfx_ksys_write+0x10/0x10
[   51.881090][ T6476]  do_syscall_64+0x123/0x790
[   51.881116][ T6476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.881133][ T6476] RIP: 0033:0x7f725ed9e159
[   51.881147][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.881158][ T6476] RSP: 002b:00007f725fc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   51.881173][ T6476] RAX: ffffffffffffffda RBX: 00007f725f025fa0 RCX: 00007f725ed9e159
[   51.881184][ T6476] RDX: 00000000fffffd9d RSI: 0000200000000100 RDI: 0000000000000004
[   51.881194][ T6476] RBP: 00007f725fc1a090 R08: 0000000000000000 R09: 0000000000000000
[   51.881204][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.881213][ T6476] R13: 00007f725f026038 R14: 00007f725f025fa0 R15: 00007ffcfe1a0498
[   51.881236][ T6476]  </TASK>
[   51.884399][ T5837] usb 8-1: device descriptor read/64, error -71
[   51.981538][ T6474] kvm: MONITOR instruction emulated as NOP!
[   51.994576][ T5837] usb usb8-port1: attempt power cycle
[   52.032663][ T6484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.084133][    T9] usb 6-1: USB disconnect, device number 3
[   52.334370][ T5837] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   52.355759][ T5837] usb 8-1: device descriptor read/8, error -71
[   52.356866][ T6499] evm: overlay not supported
[   52.358904][ T6499] device-mapper: table: 248:0: cache: Insufficient args (-EINVAL)
[   52.358920][ T6499] device-mapper: ioctl: error adding target to table
[   52.419649][ T6505] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   52.509280][ T6508] fuse: root generation should be zero
[   52.509791][ T6509] tmpfs: Unknown parameter 'uQrquota_inode_hardlimit'
[   52.594328][ T5837] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   52.615529][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   52.618745][ T5837] usb 8-1: device descriptor read/8, error -71
[   52.719787][ T6518] cgroup: Unknown subsys name 'subj_type'
[   52.727834][ T5837] usb usb8-port1: unable to enumerate USB device
[   52.836606][ T6522] FAULT_INJECTION: forcing a failure.
[   52.836606][ T6522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.836630][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.0.234 Not tainted syzkaller #0 PREEMPT(full) 
[   52.836651][ T6522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.836661][ T6522] Call Trace:
[   52.836667][ T6522]  <TASK>
[   52.836675][ T6522]  dump_stack_lvl+0x100/0x190
[   52.836706][ T6522]  should_fail_ex.cold+0x5/0xa
[   52.836730][ T6522]  _copy_from_user+0x2e/0xd0
[   52.836748][ T6522]  copy_msghdr_from_user+0x9f/0x4c0
[   52.836769][ T6522]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   52.836790][ T6522]  ? lock_acquire+0x1d1/0x380
[   52.836804][ T6522]  ? get_pid_task+0x2a/0x250
[   52.836828][ T6522]  ___sys_sendmsg+0x106/0x1e0
[   52.836848][ T6522]  ? __pfx____sys_sendmsg+0x10/0x10
[   52.836866][ T6522]  ? get_pid_task+0x106/0x250
[   52.836895][ T6522]  ? find_held_lock+0x2b/0x80
[   52.836931][ T6522]  __sys_sendmsg+0x160/0x210
[   52.836954][ T6522]  ? __pfx___sys_sendmsg+0x10/0x10
[   52.836990][ T6522]  do_syscall_64+0x123/0x790
[   52.837021][ T6522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.837039][ T6522] RIP: 0033:0x7f725ed9e159
[   52.837055][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.837076][ T6522] RSP: 002b:00007f725fc1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.837095][ T6522] RAX: ffffffffffffffda RBX: 00007f725f025fa0 RCX: 00007f725ed9e159
[   52.837107][ T6522] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004
[   52.837117][ T6522] RBP: 00007f725fc1a090 R08: 0000000000000000 R09: 0000000000000000
[   52.837125][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.837134][ T6522] R13: 00007f725f026038 R14: 00007f725f025fa0 R15: 00007ffcfe1a0498
[   52.837159][ T6522]  </TASK>
[   53.281328][   T43] kauditd_printk_skb: 286 callbacks suppressed
[   53.281341][   T43] audit: type=1400 audit(1790144712.346:1409): avc:  denied  { mount } for  pid=6530 comm="syz.2.238" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   53.282247][   T43] audit: type=1400 audit(1790144712.346:1410): avc:  denied  { mounton } for  pid=6530 comm="syz.2.238" path="/40/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0"
[   53.286388][   T43] audit: type=1400 audit(1790144712.356:1411): avc:  denied  { mmap_zero } for  pid=6530 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   53.302589][   T43] audit: type=1400 audit(1790144712.366:1412): avc:  denied  { unmount } for  pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   53.329982][   T43] audit: type=1400 audit(1790144712.396:1413): avc:  denied  { create } for  pid=6532 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.330295][   T43] audit: type=1400 audit(1790144712.396:1414): avc:  denied  { getopt } for  pid=6532 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.330415][ T6533] sctp: [Deprecated]: syz.2.239 (pid 6533) Use of int in maxseg socket option.
[   53.330415][ T6533] Use struct sctp_assoc_value instead
[   53.331566][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'.
[   53.381634][   T43] audit: type=1400 audit(1790144712.446:1415): avc:  denied  { create } for  pid=6537 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   53.382528][   T43] audit: type=1400 audit(1790144712.446:1416): avc:  denied  { setopt } for  pid=6537 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   53.455613][   T43] audit: type=1400 audit(1790144712.526:1417): avc:  denied  { create } for  pid=6541 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   53.583766][   T43] audit: type=1400 audit(1790144712.646:1418): avc:  denied  { prog_load } for  pid=6541 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   53.977044][ T6560] SELinux:  Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped).
[   54.031146][ T6564] netlink: 'syz.2.248': attribute type 32 has an invalid length.
[   54.058670][ T6554] process 'syz.1.245' launched '/dev/fd/4' with NULL argv: empty string added
[   54.160673][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'.
[   54.193698][ T6572] overlay: Unknown parameter 'index"on'
[   54.199408][ T6572] overlayfs: upper fs does not support file handles, falling back to index=off.
[   54.199416][ T6572] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   54.402321][ T6583] device-mapper: table: 248:0: : unknown target type
[   54.402334][ T6583] device-mapper: ioctl: error adding target to table
[   54.472679][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'.
[   54.502667][ T6595] ieee802154 phy0 wpan0: encryption failed: -22
[   54.521300][ T6597] comedi comedi1: 8255: I/O base address not correctly aligned
[   54.629583][ T6600] xt_l2tp: missing protocol rule (udp|l2tpip)
[   54.956213][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[   55.001312][ T6619] netlink: 52 bytes leftover after parsing attributes in process `syz.1.268'.
[   55.323493][ T6633] fuse: Bad value for 'group_id'
[   55.323545][ T6633] fuse: Bad value for 'group_id'
[   55.491491][ T6635] binder: 6634:6635 unknown command 805306368
[   55.491511][ T6635] binder: 6634:6635 ioctl c0306201 200000000380 returned -22
[   55.528102][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'.
[   55.574065][ T6640] netlink: 'syz.2.276': attribute type 1 has an invalid length.
[   55.601279][ T6640] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.626570][ T6640] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[   55.727023][ T6654] FAULT_INJECTION: forcing a failure.
[   55.727023][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.727042][ T6654] CPU: 2 UID: 0 PID: 6654 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) 
[   55.727054][ T6654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   55.727060][ T6654] Call Trace:
[   55.727064][ T6654]  <TASK>
[   55.727068][ T6654]  dump_stack_lvl+0x100/0x190
[   55.727088][ T6654]  should_fail_ex.cold+0x5/0xa
[   55.727104][ T6654]  _copy_from_user+0x2e/0xd0
[   55.727116][ T6654]  binder_ioctl+0x4cb/0x74a0
[   55.727135][ T6654]  ? tomoyo_path_number_perm+0x188/0x580
[   55.727150][ T6654]  ? __pfx_binder_ioctl+0x10/0x10
[   55.727165][ T6654]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   55.727179][ T6654]  ? do_vfs_ioctl+0x226/0x13e0
[   55.727191][ T6654]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   55.727201][ T6654]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   55.727216][ T6654]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   55.727238][ T6654]  ? __fget_files+0x34/0x3d0
[   55.727257][ T6654]  ? selinux_file_ioctl+0x13b/0x290
[   55.727269][ T6654]  ? selinux_file_ioctl+0xb6/0x290
[   55.727282][ T6654]  ? __pfx_binder_ioctl+0x10/0x10
[   55.727297][ T6654]  __x64_sys_ioctl+0x18e/0x210
[   55.727309][ T6654]  do_syscall_64+0x123/0x790
[   55.727327][ T6654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.727338][ T6654] RIP: 0033:0x7f8b7079e159
[   55.727347][ T6654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.727357][ T6654] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   55.727368][ T6654] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   55.727374][ T6654] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003
[   55.727381][ T6654] RBP: 00007f8b715eb090 R08: 0000000000000000 R09: 0000000000000000
[   55.727387][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.727393][ T6654] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   55.727406][ T6654]  </TASK>
[   55.727411][ T6654] binder: 6653:6654 ioctl c0306201 200000000380 returned -14
[   55.764669][ T6658] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   55.813507][ T5103] hid_parser_main: 5 callbacks suppressed
[   55.813520][ T5103] hid-generic 0005:0C45:0A0E.0003: unknown main item tag 0x0
[   55.824983][ T5103] hid-generic 0005:0C45:0A0E.0003: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   55.929095][ T5737] Bluetooth: to_multiplier 0 < 10
[   56.330774][ T6708] syzkaller0: entered promiscuous mode
[   56.330788][ T6708] syzkaller0: entered allmulticast mode
[   56.334498][ T6708] 0: reclassify loop, rule prio 0, protocol 800
[   56.420549][ T6711] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   56.420563][ T6711] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   56.421952][ T6711] overlayfs: conflicting lowerdir path
[   56.558337][ T6718] FAULT_INJECTION: forcing a failure.
[   56.558337][ T6718] name failslab, interval 1, probability 0, space 0, times 0
[   56.558358][ T6718] CPU: 2 UID: 0 PID: 6718 Comm: syz.2.304 Not tainted syzkaller #0 PREEMPT(full) 
[   56.558370][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.558377][ T6718] Call Trace:
[   56.558381][ T6718]  <TASK>
[   56.558385][ T6718]  dump_stack_lvl+0x100/0x190
[   56.558406][ T6718]  should_fail_ex.cold+0x5/0xa
[   56.558423][ T6718]  should_failslab+0xc2/0x120
[   56.558439][ T6718]  kmem_cache_alloc_noprof+0x92/0x6a0
[   56.558453][ T6718]  ? anon_vma_clone+0x2b3/0xca0
[   56.558470][ T6718]  anon_vma_clone+0x2b3/0xca0
[   56.558505][ T6718]  __split_vma+0x750/0x1de0
[   56.558528][ T6718]  ? __pfx___split_vma+0x10/0x10
[   56.558548][ T6718]  ? do_raw_spin_lock+0x128/0x260
[   56.558568][ T6718]  vma_modify+0x137b/0x29b0
[   56.558590][ T6718]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[   56.558609][ T6718]  ? __pfx_vma_modify+0x10/0x10
[   56.558628][ T6718]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[   56.558647][ T6718]  vma_modify_flags+0x2c3/0x460
[   56.558665][ T6718]  ? __pfx_vma_modify_flags+0x10/0x10
[   56.558693][ T6718]  mlock_fixup+0x4a8/0xc60
[   56.558712][ T6718]  ? __pfx_mlock_fixup+0x10/0x10
[   56.558735][ T6718]  apply_vma_lock_flags+0x390/0x500
[   56.558754][ T6718]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[   56.558775][ T6718]  ? futex_wait+0x11e/0x370
[   56.558787][ T6718]  ? down_write_killable+0x152/0x240
[   56.558800][ T6718]  ? percpu_counter_add_batch+0xb9/0x230
[   56.558816][ T6718]  do_mlock+0x261/0x800
[   56.558833][ T6718]  ? do_futex+0x190/0x440
[   56.558849][ T6718]  ? __pfx_do_mlock+0x10/0x10
[   56.558865][ T6718]  ? __pfx_do_futex+0x10/0x10
[   56.558881][ T6718]  ? fd_install+0x223/0x580
[   56.558898][ T6718]  ? __x64_sys_futex+0x34f/0x4d0
[   56.558912][ T6718]  ? __x64_sys_futex+0x358/0x4d0
[   56.558929][ T6718]  __x64_sys_mlock+0xce/0x120
[   56.558940][ T6718]  ? __pfx___x64_sys_mlock+0x10/0x10
[   56.558955][ T6718]  do_syscall_64+0x123/0x790
[   56.558973][ T6718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.558984][ T6718] RIP: 0033:0x7f804619e159
[   56.558994][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.559004][ T6718] RSP: 002b:00007f8047042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   56.559015][ T6718] RAX: ffffffffffffffda RBX: 00007f8046426090 RCX: 00007f804619e159
[   56.559022][ T6718] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007fe000
[   56.559028][ T6718] RBP: 00007f804623506b R08: 0000000000000000 R09: 0000000000000000
[   56.559035][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.559041][ T6718] R13: 00007f8046426128 R14: 00007f8046426090 R15: 00007ffe031523d8
[   56.559054][ T6718]  </TASK>
[   56.706457][ T6726] syzkaller1: entered promiscuous mode
[   56.706472][ T6726] syzkaller1: entered allmulticast mode
[   56.923006][ T6715] syz.2.304 (6715): drop_caches: 2
[   56.970293][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.310'.
[   57.228237][ T6747] program syz.3.317 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   57.313930][ T6750] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801
[   57.601605][ T6762] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   58.155993][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.213864][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.289700][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.295956][   T43] kauditd_printk_skb: 333 callbacks suppressed
[   58.295969][   T43] audit: type=1400 audit(1790144717.366:1752): avc:  denied  { create } for  pid=6766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.295991][   T43] audit: type=1400 audit(1790144717.366:1753): avc:  denied  { read write } for  pid=6766 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   58.296086][   T43] audit: type=1400 audit(1790144717.366:1754): avc:  denied  { open } for  pid=6766 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   58.297808][   T43] audit: type=1400 audit(1790144717.366:1755): avc:  denied  { ioctl } for  pid=6766 comm="syz-executor" path="socket:[14290]" dev="sockfs" ino=14290 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.301682][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.304330][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.304821][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.305654][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.306212][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.308974][   T43] audit: type=1400 audit(1790144717.376:1756): avc:  denied  { mounton } for  pid=6766 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   58.340761][   T43] audit: type=1400 audit(1790144717.406:1757): avc:  denied  { sys_module } for  pid=6766 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   58.377845][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.492193][   T43] audit: type=1400 audit(1790144717.556:1758): avc:  denied  { read } for  pid=5442 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   58.529463][   T12] bridge_slave_1: left allmulticast mode
[   58.529493][   T12] bridge_slave_1: left promiscuous mode
[   58.530466][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.532892][   T12] bridge_slave_0: left allmulticast mode
[   58.532905][   T12] bridge_slave_0: left promiscuous mode
[   58.533036][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.643231][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.649824][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.651096][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   58.651936][   T12] bond0 (unregistering): Released all slaves
[   58.663819][ T6766] lo speed is unknown, defaulting to 1000
[   58.696007][   T43] audit: type=1400 audit(1790144717.766:1759): avc:  denied  { search } for  pid=5442 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.696056][   T43] audit: type=1400 audit(1790144717.766:1760): avc:  denied  { search } for  pid=5442 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.696124][   T43] audit: type=1400 audit(1790144717.766:1761): avc:  denied  { search } for  pid=5442 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.869177][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.869249][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.869327][ T6766] bridge_slave_0: entered allmulticast mode
[   58.870103][ T6766] bridge_slave_0: entered promiscuous mode
[   58.874774][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.874815][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.874872][ T6766] bridge_slave_1: entered allmulticast mode
[   58.875595][ T6766] bridge_slave_1: entered promiscuous mode
[   58.891376][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.892895][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.903958][ T6766] team0: Port device team_slave_0 added
[   58.905453][ T6766] team0: Port device team_slave_1 added
[   58.926536][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.926582][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.926596][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.931167][   T12] hsr_slave_0: left promiscuous mode
[   58.931692][   T12] hsr_slave_1: left promiscuous mode
[   58.932248][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.932265][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.933630][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.933640][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.948180][   T12] veth1_macvtap: left promiscuous mode
[   58.948217][   T12] veth0_macvtap: left promiscuous mode
[   58.948267][   T12] veth1_vlan: left promiscuous mode
[   59.100441][   T12] team0 (unregistering): Port device team_slave_1 removed
[   59.106920][   T12] team0 (unregistering): Port device team_slave_0 removed
[   59.159135][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.159146][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.159160][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.196991][ T6766] hsr_slave_0: entered promiscuous mode
[   59.197411][ T6766] hsr_slave_1: entered promiscuous mode
[   59.197702][ T6766] debugfs: 'hsr0' already exists in 'hsr'
[   59.197713][ T6766] Cannot create hsr debugfs directory
[   60.374468][ T5737] Bluetooth: hci3: command tx timeout
[   60.524514][ T6754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.528999][ T6766] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   60.542608][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   60.543191][ T6766] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   60.557596][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   60.558167][ T6766] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   60.563568][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   60.565845][ T6766] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   60.590082][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   60.662797][ T6801] netlink: Conntrack attr has 12 unknown bytes
[   60.662815][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.663760][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.699146][ T6766] 8021q: adding VLAN 0 to HW filter on device team0
[   60.709276][  T450] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.709321][  T450] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.722547][  T108] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.722631][  T108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.758915][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   60.814815][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2
[   60.913208][ T6833] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   60.992263][ T6829] lo speed is unknown, defaulting to 1000
[   61.028718][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3
[   61.058844][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.218525][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7187 sclass=netlink_route_socket pid=6875 comm=syz.0.341
[   61.238032][ T6876] ip_tables: iptables: counters copy to user failed while replacing table
[   61.275602][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4
[   61.290802][ T6766] veth0_vlan: entered promiscuous mode
[   61.299156][ T6766] veth1_vlan: entered promiscuous mode
[   61.303089][ T6880] MTD: Couldn't look up './dev': -15
[   61.318017][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'.
[   61.354506][ T6766] veth0_macvtap: entered promiscuous mode
[   61.358348][ T6766] veth1_macvtap: entered promiscuous mode
[   61.383655][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.398979][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.475618][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.492800][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.492818][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.494615][ T6890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.494813][ T6890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.508506][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5
[   61.513848][  T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.513860][  T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.535441][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.597457][ T6915] netlink: 168 bytes leftover after parsing attributes in process `syz.4.348'.
[   61.732669][ T6923] netlink: 168 bytes leftover after parsing attributes in process `syz.2.351'.
[   61.744049][ T6918] qnx4: no qnx4 filesystem (no root dir).
[   61.882934][ T6929] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   61.883599][ T6929] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   62.044924][ T6937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.356'.
[   62.094136][ T6941] netlink: 168 bytes leftover after parsing attributes in process `syz.2.358'.
[   62.110040][ T6943] FAULT_INJECTION: forcing a failure.
[   62.110040][ T6943] name fail_futex, interval 1, probability 0, space 0, times 1
[   62.110061][ T6943] CPU: 3 UID: 0 PID: 6943 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) 
[   62.110073][ T6943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.110080][ T6943] Call Trace:
[   62.110084][ T6943]  <TASK>
[   62.110088][ T6943]  dump_stack_lvl+0x100/0x190
[   62.110133][ T6943]  should_fail_ex.cold+0x5/0xa
[   62.110149][ T6943]  get_futex_key+0x1d0/0x14f0
[   62.110165][ T6943]  ? __pfx_get_futex_key+0x10/0x10
[   62.110179][ T6943]  ? find_held_lock+0x2b/0x80
[   62.110195][ T6943]  ? futex_wake+0x4ea/0x5e0
[   62.110208][ T6943]  futex_wake+0xf4/0x5e0
[   62.110217][ T6943]  ? futex_wait+0x11e/0x370
[   62.110229][ T6943]  ? __pfx_futex_wake+0x10/0x10
[   62.110250][ T6943]  do_futex+0x2b2/0x440
[   62.110265][ T6943]  ? __pfx_do_futex+0x10/0x10
[   62.110279][ T6943]  ? __seccomp_filter+0x896/0x1130
[   62.110295][ T6943]  ? blkcg_maybe_throttle_current+0x5e7/0xeb0
[   62.110328][ T6943]  __x64_sys_futex+0x34f/0x4d0
[   62.110347][ T6943]  ? __pfx___x64_sys_futex+0x10/0x10
[   62.110367][ T6943]  do_syscall_64+0x123/0x790
[   62.110390][ T6943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.110402][ T6943] RIP: 0033:0x7f8b7079e159
[   62.110411][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.110422][ T6943] RSP: 002b:00007f8b715eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   62.110433][ T6943] RAX: ffffffffffffffda RBX: 00007f8b70a25fa8 RCX: 00007f8b7079e159
[   62.110441][ T6943] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b70a25fac
[   62.110449][ T6943] RBP: 00007f8b70a25fa0 R08: 0000000000000001 R09: 0000000000000000
[   62.110456][ T6943] R10: 0000200000001400 R11: 0000000000000246 R12: 0000000000000000
[   62.110463][ T6943] R13: 00007f8b70a26038 R14: 00007fff41d3c620 R15: 00007fff41d3c708
[   62.110477][ T6943]  </TASK>
[   62.285283][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.380506][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.407377][ T6961] netlink: 'syz.2.366': attribute type 1 has an invalid length.
[   62.419205][ T6961] 8021q: adding VLAN 0 to HW filter on device bond3
[   62.433095][ T6961] bond2: (slave syz_tun): Removing an active aggregator
[   62.433144][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.436175][ T6961] bond2: (slave syz_tun): Releasing backup interface
[   62.437490][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.439267][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.440965][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.441381][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.444981][ T6961] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[   62.454548][ T5737] Bluetooth: hci3: command tx timeout
[   62.487517][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.504101][ T6969] fuse: fd is not a fuse device
[   62.513175][ T6969] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   62.576160][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.701949][ T6994] FAULT_INJECTION: forcing a failure.
[   62.701949][ T6994] name failslab, interval 1, probability 0, space 0, times 0
[   62.701969][ T6994] CPU: 3 UID: 0 PID: 6994 Comm: syz.4.377 Not tainted syzkaller #0 PREEMPT(full) 
[   62.701982][ T6994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.701988][ T6994] Call Trace:
[   62.701992][ T6994]  <TASK>
[   62.701997][ T6994]  dump_stack_lvl+0x100/0x190
[   62.702029][ T6994]  should_fail_ex.cold+0x5/0xa
[   62.702047][ T6994]  should_failslab+0xc2/0x120
[   62.702064][ T6994]  __kmalloc_cache_noprof+0x91/0x6d0
[   62.702081][ T6994]  ? p9_client_create+0xaf/0xd40
[   62.702096][ T6994]  p9_client_create+0xaf/0xd40
[   62.702109][ T6994]  ? __pfx_p9_client_create+0x10/0x10
[   62.702125][ T6994]  ? lockdep_init_map_type+0x5c/0x250
[   62.702138][ T6994]  ? __raw_spin_lock_init+0x3a/0x110
[   62.702154][ T6994]  v9fs_session_init+0x3c/0xdd0
[   62.702172][ T6994]  ? v9fs_get_tree+0x9c/0xb50
[   62.702184][ T6994]  v9fs_get_tree+0xb8/0xb50
[   62.702193][ T6994]  ? rcu_is_watching+0x13/0xc0
[   62.702208][ T6994]  ? __pfx_v9fs_get_tree+0x10/0x10
[   62.702219][ T6994]  ? bpf_lsm_capable+0x9/0x10
[   62.702235][ T6994]  ? security_capable+0x80/0x260
[   62.702253][ T6994]  vfs_get_tree+0x92/0x320
[   62.702270][ T6994]  path_mount+0x7d0/0x24c0
[   62.702289][ T6994]  ? __pfx_path_mount+0x10/0x10
[   62.702304][ T6994]  ? lockdep_hardirqs_on+0x7d/0x110
[   62.702323][ T6994]  ? putname+0xb1/0x110
[   62.702336][ T6994]  ? kmem_cache_free+0x127/0x6c0
[   62.702357][ T6994]  ? __x64_sys_mount+0x293/0x310
[   62.702373][ T6994]  __x64_sys_mount+0x293/0x310
[   62.702389][ T6994]  ? __pfx___x64_sys_mount+0x10/0x10
[   62.702410][ T6994]  do_syscall_64+0x123/0x790
[   62.702427][ T6994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.702439][ T6994] RIP: 0033:0x7f925219e159
[   62.702448][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.702458][ T6994] RSP: 002b:00007f9253054028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   62.702469][ T6994] RAX: ffffffffffffffda RBX: 00007f9252425fa0 RCX: 00007f925219e159
[   62.702476][ T6994] RDX: 0000200000002500 RSI: 00002000000024c0 RDI: 0000200000002480
[   62.702483][ T6994] RBP: 00007f925223506b R08: 0000200000002540 R09: 0000000000000000
[   62.702489][ T6994] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000
[   62.702496][ T6994] R13: 00007f9252426038 R14: 00007f9252425fa0 R15: 00007ffc6ab25d28
[   62.702510][ T6994]  </TASK>
[   62.784201][ T7001] device-mapper: table: 248:1: mirror: Too few mirror arguments (-EINVAL)
[   62.784215][ T7001] device-mapper: ioctl: error adding target to table
[   62.800533][ T6963] lo speed is unknown, defaulting to 1000
[   62.827620][   T12] bridge_slave_1: left allmulticast mode
[   62.827636][   T12] bridge_slave_1: left promiscuous mode
[   62.827741][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.832165][   T12] bridge_slave_0: left allmulticast mode
[   62.832180][   T12] bridge_slave_0: left promiscuous mode
[   62.832270][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.962535][ T7023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.020412][ T7027] libceph: resolve '0' (ret=-3): failed
[   63.029177][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.032708][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.039421][   T12] bond0 (unregistering): Released all slaves
[   63.042733][ T7031] ip_tables: iptables: counters copy to user failed while replacing table
[   63.077200][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6
[   63.092808][ T7032] device-mapper: table: 248:1: ý
: unknown target type
[   63.092821][ T7032] device-mapper: ioctl: error adding target to table
[   63.131477][   T12] tipc: Left network mode
[   63.173055][ T7031] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   63.173072][ T7031] overlayfs: overlapping lowerdir path
[   63.247657][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   63.247671][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[   63.247684][ T7043] netlink: 'syz.2.390': attribute type 7 has an invalid length.
[   63.275479][ T7043] : renamed from macvtap0 (while UP)
[   63.328539][   T43] kauditd_printk_skb: 398 callbacks suppressed
[   63.328552][   T43] audit: type=1400 audit(1790144722.396:2160): avc:  denied  { read write } for  pid=7053 comm="syz.2.393" name="video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   63.328577][   T43] audit: type=1400 audit(1790144722.396:2161): avc:  denied  { open } for  pid=7053 comm="syz.2.393" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   63.330519][   T43] audit: type=1400 audit(1790144722.396:2162): avc:  denied  { allowed } for  pid=7053 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   63.332056][   T43] audit: type=1400 audit(1790144722.396:2163): avc:  denied  { sqpoll } for  pid=7053 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   63.336956][   T43] audit: type=1400 audit(1790144722.406:2164): avc:  denied  { module_request } for  pid=6963 comm="syz-executor" kmod="rtnl-link-caif" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   63.343514][   T43] audit: type=1400 audit(1790144722.406:2165): avc:  denied  { mounton } for  pid=7053 comm="syz.2.393" path="/92/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   63.363790][   T43] audit: type=1400 audit(1790144722.426:2166): avc:  denied  { setopt } for  pid=7049 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.374415][   T43] audit: type=1400 audit(1790144722.436:2167): avc:  denied  { write } for  pid=7049 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   63.378701][   T43] audit: type=1400 audit(1790144722.446:2168): avc:  denied  { ioctl } for  pid=7049 comm="syz.1.392" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.379622][   T43] audit: type=1400 audit(1790144722.446:2169): avc:  denied  { unlink } for  pid=7053 comm="syz.2.393" name="#16" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   63.460874][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7
[   63.470824][ T7064] FAULT_INJECTION: forcing a failure.
[   63.470824][ T7064] name failslab, interval 1, probability 0, space 0, times 0
[   63.470844][ T7064] CPU: 3 UID: 0 PID: 7064 Comm: syz.2.395 Not tainted syzkaller #0 PREEMPT(full) 
[   63.470869][ T7064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.470876][ T7064] Call Trace:
[   63.470880][ T7064]  <TASK>
[   63.470885][ T7064]  dump_stack_lvl+0x100/0x190
[   63.470905][ T7064]  should_fail_ex.cold+0x5/0xa
[   63.470921][ T7064]  should_failslab+0xc2/0x120
[   63.470935][ T7064]  kmem_cache_alloc_noprof+0x92/0x6a0
[   63.470948][ T7064]  ? ptlock_alloc+0x1f/0x70
[   63.470966][ T7064]  ptlock_alloc+0x1f/0x70
[   63.470982][ T7064]  pte_alloc_one+0x82/0x3d0
[   63.470998][ T7064]  __pte_alloc+0x6d/0x380
[   63.471011][ T7064]  ? __pfx___pte_alloc+0x10/0x10
[   63.471025][ T7064]  ? _raw_spin_unlock+0x28/0x50
[   63.471040][ T7064]  ? __pmd_alloc+0x3fb/0x950
[   63.471055][ T7064]  copy_page_range+0x3b36/0x57c0
[   63.471086][ T7064]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   63.471100][ T7064]  ? __pfx_copy_page_range+0x10/0x10
[   63.471115][ T7064]  ? mas_wr_store_entry+0xa4/0x1d50
[   63.471132][ T7064]  ? mas_store+0x745/0xe20
[   63.471149][ T7064]  ? __pfx___vma_start_write+0x10/0x10
[   63.471168][ T7064]  dup_mmap+0x1230/0x2370
[   63.471190][ T7064]  ? __pfx_dup_mmap+0x10/0x10
[   63.471205][ T7064]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   63.471221][ T7064]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   63.471238][ T7064]  ? __lock_acquire+0x5c0/0x1f40
[   63.471256][ T7064]  ? lock_acquire+0x1d1/0x380
[   63.471267][ T7064]  ? copy_process+0x4806/0x8370
[   63.471285][ T7064]  copy_process+0x4811/0x8370
[   63.471306][ T7064]  ? __pfx_copy_process+0x10/0x10
[   63.471318][ T7064]  ? futex_wake+0x4ea/0x5e0
[   63.471334][ T7064]  kernel_clone+0x176/0x9d0
[   63.471347][ T7064]  ? __pfx_kernel_clone+0x10/0x10
[   63.471362][ T7064]  ? ksys_write+0x190/0x250
[   63.471378][ T7064]  __do_sys_clone+0xd9/0x120
[   63.471390][ T7064]  ? __pfx___do_sys_clone+0x10/0x10
[   63.471402][ T7064]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   63.471432][ T7064]  do_syscall_64+0x123/0x790
[   63.471449][ T7064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.471461][ T7064] RIP: 0033:0x7f804619e159
[   63.471471][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.471481][ T7064] RSP: 002b:00007f8047062fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   63.471493][ T7064] RAX: ffffffffffffffda RBX: 00007f8046425fa0 RCX: 00007f804619e159
[   63.471500][ T7064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000
[   63.471506][ T7064] RBP: 00007f804623506b R08: 0000000000000000 R09: 0000000000000000
[   63.471513][ T7064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   63.471519][ T7064] R13: 00007f8046426038 R14: 00007f8046425fa0 R15: 00007ffe031523d8
[   63.471540][ T7064]  </TASK>
[   63.593650][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.594060][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.594181][ T6963] bridge_slave_0: entered allmulticast mode
[   63.597543][ T7071] fsa4480 0-0042: error -ENODEV: FSA4480 not found
[   63.599094][ T7071] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42
[   63.602813][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'.
[   63.602826][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'.
[   63.606660][ T6963] bridge_slave_0: entered promiscuous mode
[   63.631608][   T12] hsr_slave_0: left promiscuous mode
[   63.632479][   T12] hsr_slave_1: left promiscuous mode
[   63.632857][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.632868][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.633740][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.633750][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.639146][   T12] veth1_macvtap: left promiscuous mode
[   63.639171][   T12] veth0_macvtap: left promiscuous mode
[   63.639265][   T12] veth1_vlan: left promiscuous mode
[   63.639300][   T12] veth0_vlan: left promiscuous mode
[   63.659239][ T7077] fsa4480 1-0042: error -ENODEV: FSA4480 not found
[   63.659604][ T7077] i2c i2c-1: new_device: Instantiated device fsa4480 at 0x42
[   63.809247][   T12] team0 (unregistering): Port device team_slave_1 removed
[   63.823650][   T12] team0 (unregistering): Port device team_slave_0 removed
[   63.883668][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.883714][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.883775][ T6963] bridge_slave_1: entered allmulticast mode
[   63.888917][ T6963] bridge_slave_1: entered promiscuous mode
[   63.936428][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.937957][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.952488][ T6963] team0: Port device team_slave_0 added
[   63.953756][ T6963] team0: Port device team_slave_1 added
[   63.971490][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.971506][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.971528][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.985897][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.985908][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.985921][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.095511][ T6963] hsr_slave_0: entered promiscuous mode
[   64.096187][ T6963] hsr_slave_1: entered promiscuous mode
[   64.096694][ T6963] debugfs: 'hsr0' already exists in 'hsr'
[   64.096707][ T6963] Cannot create hsr debugfs directory
[   64.209955][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8
[   64.280696][   T12] IPVS: stop unused estimator thread 0...
[   64.288708][ T7112] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd b704, magic b7 != 6b]
[   64.347655][ T6963] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   64.350102][ T6963] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.350635][ T6963] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   64.352401][ T6963] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.352845][ T6963] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   64.355860][ T6963] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.356252][ T6963] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   64.361927][ T6963] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.452244][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.483407][ T6963] 8021q: adding VLAN 0 to HW filter on device team0
[   64.491671][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.491718][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.504529][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.504574][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.531436][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9
[   64.546353][ T5088] Bluetooth: hci3: command tx timeout
[   64.561845][ T7140] FAULT_INJECTION: forcing a failure.
[   64.561845][ T7140] name failslab, interval 1, probability 0, space 0, times 0
[   64.561877][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(full) 
[   64.561898][ T7140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   64.561908][ T7140] Call Trace:
[   64.561916][ T7140]  <TASK>
[   64.561924][ T7140]  dump_stack_lvl+0x100/0x190
[   64.561956][ T7140]  should_fail_ex.cold+0x5/0xa
[   64.561983][ T7140]  should_failslab+0xc2/0x120
[   64.562008][ T7140]  kmem_cache_alloc_noprof+0x92/0x6a0
[   64.562031][ T7140]  ? do_getname+0x35/0x390
[   64.562058][ T7140]  do_getname+0x35/0x390
[   64.562075][ T7140]  do_sys_openat2+0xc7/0x1e0
[   64.562091][ T7140]  ? __pfx_do_sys_openat2+0x10/0x10
[   64.562106][ T7140]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   64.562143][ T7140]  __x64_sys_openat+0x12d/0x210
[   64.562161][ T7140]  ? __pfx___x64_sys_openat+0x10/0x10
[   64.562176][ T7140]  ? ksys_write+0x1ac/0x250
[   64.562193][ T7140]  do_syscall_64+0x123/0x790
[   64.562210][ T7140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.562222][ T7140] RIP: 0033:0x7f8b7079e159
[   64.562233][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.562243][ T7140] RSP: 002b:00007f8b715eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   64.562254][ T7140] RAX: ffffffffffffffda RBX: 00007f8b70a25fa0 RCX: 00007f8b7079e159
[   64.562261][ T7140] RDX: 000000000000275a RSI: 0000200000002180 RDI: ffffffffffffff9c
[   64.562267][ T7140] RBP: 00007f8b7083506b R08: 0000000000000000 R09: 0000000000000000
[   64.562274][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.562280][ T7140] R13: 00007f8b70a26038 R14: 00007f8b70a25fa0 R15: 00007fff41d3c708
[   64.562294][ T7140]  </TASK>
[   64.807634][ T7159] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3758096388.4294967295.16383), cmd(9)
[   64.833832][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.069370][ T6963] veth0_vlan: entered promiscuous mode
[   65.082095][ T6963] veth1_vlan: entered promiscuous mode
[   65.103951][ T6963] veth0_macvtap: entered promiscuous mode
[   65.107486][ T6963] veth1_macvtap: entered promiscuous mode
[   65.121163][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.127903][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.166553][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.179065][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.179314][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.179825][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.227639][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.227654][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.275691][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.275704][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.517353][ T7193] FAULT_INJECTION: forcing a failure.
[   65.517353][ T7193] name failslab, interval 1, probability 0, space 0, times 0
[   65.517374][ T7193] CPU: 2 UID: 0 PID: 7193 Comm: syz.2.423 Not tainted syzkaller #0 PREEMPT(full) 
[   65.517386][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.517393][ T7193] Call Trace:
[   65.517397][ T7193]  <TASK>
[   65.517421][ T7193]  dump_stack_lvl+0x100/0x190
[   65.517453][ T7193]  should_fail_ex.cold+0x5/0xa
[   65.517469][ T7193]  ? __pfx_devpts_fill_super+0x10/0x10
[   65.517486][ T7193]  should_failslab+0xc2/0x120
[   65.517501][ T7193]  ? __pfx_devpts_fill_super+0x10/0x10
[   65.517514][ T7193]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   65.517527][ T7193]  ? alloc_inode+0x183/0x250
[   65.517540][ T7193]  ? __pfx_devpts_fill_super+0x10/0x10
[   65.517553][ T7193]  alloc_inode+0x183/0x250
[   65.517564][ T7193]  new_inode+0x22/0x1c0
[   65.517573][ T7193]  ? rcu_is_watching+0x13/0xc0
[   65.517590][ T7193]  ? __pfx_devpts_fill_super+0x10/0x10
[   65.517603][ T7193]  devpts_fill_super+0x197/0x610
[   65.517618][ T7193]  ? __pfx_devpts_fill_super+0x10/0x10
[   65.517631][ T7193]  get_tree_nodev+0xdd/0x190
[   65.517649][ T7193]  vfs_get_tree+0x92/0x320
[   65.517666][ T7193]  path_mount+0x7d0/0x24c0
[   65.517684][ T7193]  ? __pfx_path_mount+0x10/0x10
[   65.517700][ T7193]  ? lockdep_hardirqs_on+0x7d/0x110
[   65.517722][ T7193]  ? putname+0xb1/0x110
[   65.517736][ T7193]  ? kmem_cache_free+0x127/0x6c0
[   65.517757][ T7193]  ? __x64_sys_mount+0x293/0x310
[   65.517774][ T7193]  __x64_sys_mount+0x293/0x310
[   65.517791][ T7193]  ? __pfx___x64_sys_mount+0x10/0x10
[   65.517812][ T7193]  do_syscall_64+0x123/0x790
[   65.517830][ T7193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.517842][ T7193] RIP: 0033:0x7f804619e159
[   65.517851][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.517862][ T7193] RSP: 002b:00007f8047063028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   65.517873][ T7193] RAX: ffffffffffffffda RBX: 00007f8046425fa0 RCX: 00007f804619e159
[   65.517880][ T7193] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000
[   65.517886][ T7193] RBP: 00007f804623506b R08: 0000000000000000 R09: 0000000000000000
[   65.517893][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.517900][ T7193] R13: 00007f8046426038 R14: 00007f8046425fa0 R15: 00007ffe031523d8
[   65.517921][ T7193]  </TASK>
[   65.666367][ T7212] x_tables: duplicate underflow at hook 2
[   65.674210][ T7215] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[   65.822283][ T5728] bond3: (slave syz_tun): Removing an active aggregator
[   65.822573][ T5728] bond3: (slave syz_tun): Releasing backup interface
[   65.833730][ T7225] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   65.862754][ T7230] ip6t_rt: unknown flags D
[   65.872506][ T7230] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001
[   65.873578][ T7225] 9pnet_virtio: no channels available for device syz
[   65.873764][ T7230] ip6t_rt: unknown flags D
[   65.881576][ T7230] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001
[   65.978901][ T5778] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.142663][ T5778] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.174494][ T5820] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   66.194363][   T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   66.236238][ T5778] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.264427][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.266660][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.268324][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.269735][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.270406][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.316346][ T5778] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.324582][ T5820] usb 10-1: Using ep0 maxpacket: 8
[   66.326617][ T5820] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   66.327559][ T5820] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[   66.327596][ T5820] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   66.327616][ T5820] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   66.327636][ T5820] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   66.327656][ T5820] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   66.327688][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.344895][   T25] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[   66.346055][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.346078][   T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   66.346113][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.378150][   T25] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[   66.538882][ T5820] usb 10-1: GET_CAPABILITIES returned 0
[   66.538920][ T5820] usbtmc 10-1:16.0: can't read capabilities
[   66.596253][ T5778] bridge_slave_1: left allmulticast mode
[   66.596271][ T5778] bridge_slave_1: left promiscuous mode
[   66.596377][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.599623][ T5778] bridge_slave_0: left allmulticast mode
[   66.599638][ T5778] bridge_slave_0: left promiscuous mode
[   66.599798][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.608502][ T5778] batman_adv: batadv0: Interface deactivated: gretap1
[   66.624670][ T5737] Bluetooth: hci3: command tx timeout
[   66.637166][   T42] usb 6-1: USB disconnect, device number 4
[   66.638928][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7273 comm=syz.4.444
[   66.638992][ T7273] __nla_validate_parse: 15 callbacks suppressed
[   66.639000][ T7273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.444'.
[   66.643828][   T42] idmouse 6-1:1.0: disconnected
[   66.741886][ T5778] batman_adv: batadv0: Removing interface: gretap1
[   66.746330][ T5489] usb 10-1: USB disconnect, device number 2
[   66.798361][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.836722][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.885428][ T5778] bond0 (unregistering): Released all slaves
[   66.888177][ T5778] bond1 (unregistering): Released all slaves
[   66.893547][ T5778] bond2 (unregistering): Released all slaves
[   66.898774][ T5778] bond3 (unregistering): Released all slaves
[   66.903535][ T5778] bond4 (unregistering): Released all slaves
[   66.909489][ T7253] lo speed is unknown, defaulting to 1000
[   67.198394][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10
[   67.244416][ T7298] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   67.244445][ T7298] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[   67.280165][ T7302] netlink: 'syz.4.452': attribute type 10 has an invalid length.
[   67.280283][ T7301] netlink: 'syz.4.452': attribute type 10 has an invalid length.
[   67.282439][ T7303] ipt_rpfilter: unknown options
[   67.341764][ T7301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.342677][ T7301] team0: Port device netdevsim1 added
[   67.344177][ T7307] erspan0: entered promiscuous mode
[   67.344190][ T7307] erspan0: entered allmulticast mode
[   67.412393][ T7317] netlink: 'syz.4.455': attribute type 10 has an invalid length.
[   67.432920][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.433989][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.434039][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.465763][ T7317] macvlan1: entered promiscuous mode
[   67.465778][ T7317] macvlan1: entered allmulticast mode
[   67.470708][ T7317] veth1_vlan: entered allmulticast mode
[   67.476031][ T7317] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[   67.522501][ T7319] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   67.522940][ T7319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7319 comm=syz.1.456
[   67.523417][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.523482][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.523543][ T7253] bridge_slave_0: entered allmulticast mode
[   67.527855][ T7253] bridge_slave_0: entered promiscuous mode
[   67.537423][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.537555][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.537653][ T7253] bridge_slave_1: entered allmulticast mode
[   67.538638][ T7253] bridge_slave_1: entered promiscuous mode
[   67.554020][ T5778] hsr_slave_0: left promiscuous mode
[   67.557767][ T5778] hsr_slave_1: left promiscuous mode
[   67.558294][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.558306][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.560372][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.560382][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.571461][ T5778] veth1_macvtap: left promiscuous mode
[   67.571484][ T5778] veth0_macvtap: left promiscuous mode
[   67.572008][ T5778] veth1_vlan: left promiscuous mode
[   67.572045][ T5778] veth0_vlan: left promiscuous mode
[   67.688365][ T5778] team0 (unregistering): Port device team_slave_1 removed
[   67.694013][ T5778] team0 (unregistering): Port device team_slave_0 removed
[   67.769066][  T450] smbdirect: ib_dev[syz0] removed
[   67.769455][   T50] infiniband syz0: ib_query_port failed (-19)
[   67.787643][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11
[   67.792676][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.795007][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.814406][ T7253] team0: Port device team_slave_0 added
[   67.816797][ T7253] team0: Port device team_slave_1 added
[   67.839600][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.839623][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.839644][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.841079][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.841093][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.841115][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.875500][ T7253] hsr_slave_0: entered promiscuous mode
[   67.876369][ T7253] hsr_slave_1: entered promiscuous mode
[   67.876895][ T7253] debugfs: 'hsr0' already exists in 'hsr'
[   67.876913][ T7253] Cannot create hsr debugfs directory
[   67.983924][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12
[   68.048132][ T7253] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   68.050217][ T7253] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.050617][ T7253] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   68.056661][ T7253] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.057666][ T7253] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   68.060237][ T7253] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.060619][ T7253] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   68.069171][ T7253] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.113587][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.123310][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[   68.126348][  T450] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.126420][  T450] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.130076][  T450] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.130153][  T450] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.150356][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13
[   68.288193][ T7370] openvswitch: netlink: IP tunnel dst address not specified
[   68.288715][ T7370] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   68.294846][ T5737] Bluetooth: hci2: command tx timeout
[   68.339645][   T43] kauditd_printk_skb: 433 callbacks suppressed
[   68.339658][   T43] audit: type=1400 audit(1790144727.406:2603): avc:  denied  { prog_load } for  pid=7373 comm="syz.5.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.341242][   T43] audit: type=1400 audit(1790144727.406:2604): avc:  denied  { bpf } for  pid=7373 comm="syz.5.462" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   68.341267][   T43] audit: type=1400 audit(1790144727.406:2605): avc:  denied  { perfmon } for  pid=7373 comm="syz.5.462" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   68.344997][   T43] audit: type=1400 audit(1790144727.416:2606): avc:  denied  { setopt } for  pid=7373 comm="syz.5.462" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   68.345502][   T43] audit: type=1400 audit(1790144727.416:2607): avc:  denied  { connect } for  pid=7373 comm="syz.5.462" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   68.346108][   T43] audit: type=1400 audit(1790144727.416:2608): avc:  denied  { write } for  pid=7373 comm="syz.5.462" path="socket:[20176]" dev="sockfs" ino=20176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   68.399563][   T43] audit: type=1400 audit(1790144727.466:2609): avc:  denied  { create } for  pid=7377 comm="syz.5.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   68.433056][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.438813][   T43] audit: type=1400 audit(1790144727.506:2610): avc:  denied  { read } for  pid=7381 comm="syz.4.464" name="video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   68.441424][   T43] audit: type=1400 audit(1790144727.506:2611): avc:  denied  { open } for  pid=7381 comm="syz.4.464" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   68.441491][   T43] audit: type=1400 audit(1790144727.506:2612): avc:  denied  { ioctl } for  pid=7381 comm="syz.4.464" path="/dev/video3" dev="devtmpfs" ino=956 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   68.598193][ T7253] veth0_vlan: entered promiscuous mode
[   68.606482][ T7253] veth1_vlan: entered promiscuous mode
[   68.631163][ T7253] veth0_macvtap: entered promiscuous mode
[   68.636259][ T7253] veth1_macvtap: entered promiscuous mode
[   68.648902][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.661497][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.668646][ T5778] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.735772][ T7406] tipc: Started in network mode
[   68.735791][ T7406] tipc: Node identity ac1414aa, cluster identity 4711
[   68.738208][ T7406] tipc: New replicast peer: 172.20.20.187
[   68.740770][ T7406] tipc: Enabled bearer <udp:syz0>, priority 10
[   68.745887][ T6890] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.746132][ T6890] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.746320][ T6890] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.780224][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.780239][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.826433][  T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.826453][  T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.933190][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.933275][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.938654][ T1677] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   68.940618][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.942017][ T7413] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   68.942051][ T7413] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   68.942147][ T7413] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   68.956942][ T7413] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   68.982295][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.985814][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.990415][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.994943][ T7413] wlan0 speed is unknown, defaulting to 1000
[   68.995927][ T7413] wlan0 speed is unknown, defaulting to 1000
[   69.105430][ T1677] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   69.106308][ T1677] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[   69.106326][ T1677] usb 6-1: config 0 has no interface number 0
[   69.106344][ T1677] usb 6-1: config 0 interface 50 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   69.106357][ T1677] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   69.106371][ T1677] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   69.107961][ T1677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.107996][ T1677] usb 6-1: Product: syz
[   69.108005][ T1677] usb 6-1: Manufacturer: syz
[   69.108013][ T1677] usb 6-1: SerialNumber: syz
[   69.112529][ T1677] usb 6-1: config 0 descriptor??
[   69.114120][ T7403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   69.125863][ T1677] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[   69.357861][   T62] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1
[   69.379710][ T7403] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[   69.380835][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'.
[   69.381820][ T1677] usb 6-1: USB disconnect, device number 5
[   69.383652][ T1677] yurex 6-1:0.50: USB YUREX #0 now disconnected
[   69.401142][ T7432] fido_id[7432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   69.615005][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'.
[   69.804566][ T7444] wlan0 speed is unknown, defaulting to 1000
[   69.861830][   T50] tipc: Node number set to 2886997162
[   69.929458][ T7456] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.483'.
[   69.982622][ T7464] netlink: Conntrack attr has 12 unknown bytes
[   69.982639][ T7464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.002793][ T5737] Bluetooth: Unknown LE signaling command 0x08
[   70.002811][ T5737] Bluetooth: Wrong link type (-22)
[   70.133050][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'.
[   70.140426][ T7477] vlan2: entered allmulticast mode
[   70.140439][ T7477] bond0: entered allmulticast mode
[   70.140447][ T7477] bond_slave_0: entered allmulticast mode
[   70.140456][ T7477] bond_slave_1: entered allmulticast mode
[   70.180717][ T7178] bridge0: entered promiscuous mode
[   70.216403][ T7485] FAULT_INJECTION: forcing a failure.
[   70.216403][ T7485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.216423][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.4.488 Not tainted syzkaller #0 PREEMPT(full) 
[   70.216436][ T7485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.216442][ T7485] Call Trace:
[   70.216446][ T7485]  <TASK>
[   70.216450][ T7485]  dump_stack_lvl+0x100/0x190
[   70.216470][ T7485]  should_fail_ex.cold+0x5/0xa
[   70.216486][ T7485]  _copy_from_iter+0x1f4/0x1690
[   70.216509][ T7485]  ? __asan_memset+0x23/0x50
[   70.216520][ T7485]  ? __pfx__copy_from_iter+0x10/0x10
[   70.216532][ T7485]  ? __pfx___alloc_skb+0x10/0x10
[   70.216552][ T7485]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[   70.216566][ T7485]  ? sock_has_perm+0x25a/0x2f0
[   70.216576][ T7485]  ? __pfx_sock_has_perm+0x10/0x10
[   70.216589][ T7485]  netlink_sendmsg+0x808/0xda0
[   70.216605][ T7485]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.216619][ T7485]  ? selinux_socket_sendmsg+0x198/0x2f0
[   70.216633][ T7485]  ____sys_sendmsg+0xa4d/0xbe0
[   70.216649][ T7485]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.216663][ T7485]  ? __pfx_____sys_sendmsg+0x10/0x10
[   70.216684][ T7485]  ? lock_acquire+0x1d1/0x380
[   70.216711][ T7485]  ? get_pid_task+0x2a/0x250
[   70.216728][ T7485]  ___sys_sendmsg+0x190/0x1e0
[   70.216740][ T7485]  ? __pfx____sys_sendmsg+0x10/0x10
[   70.216751][ T7485]  ? get_pid_task+0x106/0x250
[   70.216771][ T7485]  ? find_held_lock+0x2b/0x80
[   70.216795][ T7485]  __sys_sendmsg+0x160/0x210
[   70.216814][ T7485]  ? __pfx___sys_sendmsg+0x10/0x10
[   70.216835][ T7485]  do_syscall_64+0x123/0x790
[   70.216854][ T7485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.216865][ T7485] RIP: 0033:0x7f925219e159
[   70.216874][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.216885][ T7485] RSP: 002b:00007f9253054028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   70.216896][ T7485] RAX: ffffffffffffffda RBX: 00007f9252425fa0 RCX: 00007f925219e159
[   70.216903][ T7485] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[   70.216910][ T7485] RBP: 00007f9253054090 R08: 0000000000000000 R09: 0000000000000000
[   70.216916][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.216922][ T7485] R13: 00007f9252426038 R14: 00007f9252425fa0 R15: 00007ffc6ab25d28
[   70.216936][ T7485]  </TASK>
[   70.384677][ T5737] Bluetooth: hci2: command tx timeout
[   70.587357][ T7511] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   70.587383][ T7511] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[   70.596860][ T7514] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.492'.
[   70.719183][ T7526] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   70.827843][ T7530] netlink: 'syz.4.496': attribute type 10 has an invalid length.
[   70.832123][ T7530] team0: Port device netdevsim1 removed
[   70.833699][ T7530] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.833992][ T7536] netlink: 68 bytes leftover after parsing attributes in process `syz.5.497'.
[   70.840941][ T7530] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[   70.841589][ T7530] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   70.879531][ T7538] ip_tables: iptables: counters copy to user failed while replacing table
[   70.997010][ T7544] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.501'.
[   71.098911][ T7549] pim6reg9: entered allmulticast mode
[   71.103801][ T7549] ------------[ cut here ]------------
[   71.103814][ T7549] 1
[   71.103819][ T7549] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2137/0x3300, CPU#0: syz.5.503/7549
[   71.103939][ T7551] FAT-fs (mtdblock0): bogus logical sector size 65535
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   71.103953][ T7551] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[   71.120472][ T7549] Modules linked in:
[   71.122012][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.5.503 Not tainted syzkaller #0 PREEMPT(full) 
[   71.125445][ T7549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.129069][ T7549] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300
[   71.131362][ T7549] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d 65 a5 bb 0e 00 0f 85 9d e2 ff ff c6 05 58 a5 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7
[   71.137591][ T7549] RSP: 0018:ffffc90006237728 EFLAGS: 00010246
[   71.139438][ T7549] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   71.141884][ T7549] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0
[   71.144586][ T7549] RBP: 0000000000000015 R08: 0000000000000000 R09: 0000000000000009
[   71.147018][ T7549] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
[   71.149627][ T7549] R13: 1ffff92000c46f41 R14: 0000000000000000 R15: 1ffff92000c46eff
[   71.151984][ T7549] FS:  00007f071b4486c0(0000) GS:ffff8880d5b53000(0000) knlGS:0000000000000000
[   71.154808][ T7549] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.156885][ T7549] CR2: 00007f071a587780 CR3: 0000000065caa000 CR4: 0000000000352ef0
[   71.159280][ T7549] Call Trace:
[   71.160395][ T7549]  <TASK>
[   71.161308][ T7549]  ? lock_acquire+0x1d1/0x380
[   71.162846][ T7549]  ? is_bpf_text_address+0x25/0x1a0
[   71.164478][ T7549]  ? find_held_lock+0x2b/0x80
[   71.165937][ T7549]  ? is_bpf_text_address+0x8a/0x1a0
[   71.167553][ T7549]  ? is_bpf_text_address+0x8a/0x1a0
[   71.169124][ T7549]  ? bpf_ksym_find+0x128/0x1c0
[   71.170596][ T7549]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   71.172470][ T7549]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   71.176610][ T7549]  ? kernel_text_address+0x8d/0x100
[   71.178733][ T7549]  ? unwind_get_return_address+0x59/0xa0
[   71.181200][ T7549]  ? arch_stack_walk+0xa6/0xf0
[   71.183142][ T7549]  ? tomoyo_path_number_perm+0x46d/0x580
[   71.184650][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[   71.184698][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[   71.191809][ T7549]  ? stack_depot_save_flags+0x27/0x9f0
[   71.194001][ T7549]  ? __lock_acquire+0x5c0/0x1f40
[   71.196076][ T7549]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   71.198468][ T7549]  ? policy_nodemask+0xed/0x4f0
[   71.200436][ T7549]  alloc_pages_mpol+0x201/0x550
[   71.202434][ T7549]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   71.203375][   T30] cfg80211: failed to load regulatory.db
[   71.206942][ T7549]  ? avc_has_extended_perms+0x201/0x1080
[   71.209208][ T7549]  ? find_held_lock+0x2b/0x80
[   71.211145][ T7549]  ___kmalloc_large_node+0xe8/0x130
[   71.213299][ T7549]  __kmalloc_large_node_noprof+0x1c/0x70
[   71.215818][ T7549]  __kmalloc_noprof+0x5a8/0x840
[   71.217678][ T7549]  ? __lock_acquire+0x5c0/0x1f40
[   71.219402][ T7549]  ? drm_syncobj_array_find+0x34/0x3a0
[   71.221612][ T7549]  drm_syncobj_array_find+0x34/0x3a0
[   71.223733][ T7549]  drm_syncobj_reset_ioctl+0x20b/0x370
[   71.226026][ T7549]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.228474][ T7549]  ? drm_dev_exit+0x41/0x60
[   71.230366][ T7549]  ? drm_dev_exit+0x41/0x60
[   71.232231][ T7549]  drm_ioctl_kernel+0x1f3/0x3e0
[   71.234207][ T7549]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.236747][ T7549]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[   71.238929][ T7549]  drm_ioctl+0x5e6/0xc60
[   71.240663][ T7549]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.242724][ T7549]  ? __pfx_drm_ioctl+0x10/0x10
[   71.244441][ T7549]  ? __fget_files+0x34/0x3d0
[   71.246338][ T7549]  ? selinux_file_ioctl+0x13b/0x290
[   71.248296][ T7549]  ? selinux_file_ioctl+0xb6/0x290
[   71.249893][ T7549]  ? __pfx_drm_ioctl+0x10/0x10
[   71.251725][ T7549]  __x64_sys_ioctl+0x18e/0x210
[   71.253674][ T7549]  do_syscall_64+0x123/0x790
[   71.255330][ T7549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.257321][ T7549] RIP: 0033:0x7f071a59e159
[   71.259114][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.266069][ T7549] RSP: 002b:00007f071b448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.269137][ T7549] RAX: ffffffffffffffda RBX: 00007f071a825fa0 RCX: 00007f071a59e159
[   71.271946][ T7549] RDX: 0000200000000080 RSI: 00000000c01064c4 RDI: 0000000000000005
[   71.275094][ T7549] RBP: 00007f071a63506b R08: 0000000000000000 R09: 0000000000000000
[   71.277686][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.280848][ T7549] R13: 00007f071a826038 R14: 00007f071a825fa0 R15: 00007ffcb0c1ad68
[   71.283470][ T7549]  </TASK>
[   71.284972][ T7549] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   71.287756][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.5.503 Not tainted syzkaller #0 PREEMPT(full) 
[   71.290679][ T7549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.294388][ T7549] Call Trace:
[   71.295398][ T7549]  <TASK>
[   71.296290][ T7549]  dump_stack_lvl+0x100/0x190
[   71.298174][ T7549]  vpanic+0x553/0x970
[   71.299805][ T7549]  ? __pfx_vpanic+0x10/0x10
[   71.301371][ T7549]  panic+0xd1/0xe0
[   71.302488][ T7549]  ? __pfx_panic+0x10/0x10
[   71.304210][ T7549]  check_panic_on_warn.cold+0x19/0x34
[   71.306341][ T7549]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   71.308182][ T7549]  __warn.cold+0x191/0x318
[   71.309807][ T7549]  __report_bug+0x30f/0x440
[   71.311636][ T7549]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   71.313636][ T7549]  ? __pfx___report_bug+0x10/0x10
[   71.315285][ T7549]  ? __lock_acquire+0x5c0/0x1f40
[   71.317279][ T7549]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   71.319398][ T7549]  report_bug+0xb3/0x220
[   71.320692][ T7549]  ? __alloc_frozen_pages_noprof+0x2137/0x3300
[   71.323020][ T7549]  handle_bug+0x16a/0x2a0
[   71.324722][ T7549]  exc_invalid_op+0x17/0x50
[   71.326089][ T7549]  asm_exc_invalid_op+0x1a/0x20
[   71.327746][ T7549] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300
[   71.330390][ T7549] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d 65 a5 bb 0e 00 0f 85 9d e2 ff ff c6 05 58 a5 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7
[   71.337214][ T7549] RSP: 0018:ffffc90006237728 EFLAGS: 00010246
[   71.339199][ T7549] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   71.342086][ T7549] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0
[   71.345188][ T7549] RBP: 0000000000000015 R08: 0000000000000000 R09: 0000000000000009
[   71.347923][ T7549] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0
[   71.350284][ T7549] R13: 1ffff92000c46f41 R14: 0000000000000000 R15: 1ffff92000c46eff
[   71.352659][ T7549]  ? lock_acquire+0x1d1/0x380
[   71.354113][ T7549]  ? is_bpf_text_address+0x25/0x1a0
[   71.355720][ T7549]  ? find_held_lock+0x2b/0x80
[   71.357155][ T7549]  ? is_bpf_text_address+0x8a/0x1a0
[   71.358749][ T7549]  ? is_bpf_text_address+0x8a/0x1a0
[   71.360372][ T7549]  ? bpf_ksym_find+0x128/0x1c0
[   71.361866][ T7549]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   71.363744][ T7549]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   71.365686][ T7549]  ? kernel_text_address+0x8d/0x100
[   71.367305][ T7549]  ? unwind_get_return_address+0x59/0xa0
[   71.369056][ T7549]  ? arch_stack_walk+0xa6/0xf0
[   71.370546][ T7549]  ? tomoyo_path_number_perm+0x46d/0x580
[   71.372261][ T7549]  ? stack_depot_save_flags+0x27/0x9f0
[   71.373942][ T7549]  ? __lock_acquire+0x5c0/0x1f40
[   71.375489][ T7549]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   71.377313][ T7549]  ? policy_nodemask+0xed/0x4f0
[   71.378810][ T7549]  alloc_pages_mpol+0x201/0x550
[   71.380311][ T7549]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   71.381928][ T7549]  ? avc_has_extended_perms+0x201/0x1080
[   71.383619][ T7549]  ? find_held_lock+0x2b/0x80
[   71.385073][ T7549]  ___kmalloc_large_node+0xe8/0x130
[   71.386659][ T7549]  __kmalloc_large_node_noprof+0x1c/0x70
[   71.388358][ T7549]  __kmalloc_noprof+0x5a8/0x840
[   71.389834][ T7549]  ? __lock_acquire+0x5c0/0x1f40
[   71.391328][ T7549]  ? drm_syncobj_array_find+0x34/0x3a0
[   71.392982][ T7549]  drm_syncobj_array_find+0x34/0x3a0
[   71.394565][ T7549]  drm_syncobj_reset_ioctl+0x20b/0x370
[   71.396224][ T7549]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.398045][ T7549]  ? drm_dev_exit+0x41/0x60
[   71.399456][ T7549]  ? drm_dev_exit+0x41/0x60
[   71.400883][ T7549]  drm_ioctl_kernel+0x1f3/0x3e0
[   71.402341][ T7549]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.404127][ T7549]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[   71.405762][ T7549]  drm_ioctl+0x5e6/0xc60
[   71.407060][ T7549]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.408884][ T7549]  ? __pfx_drm_ioctl+0x10/0x10
[   71.410309][ T7549]  ? __fget_files+0x34/0x3d0
[   71.411707][ T7549]  ? selinux_file_ioctl+0x13b/0x290
[   71.413242][ T7549]  ? selinux_file_ioctl+0xb6/0x290
[   71.414771][ T7549]  ? __pfx_drm_ioctl+0x10/0x10
[   71.416244][ T7549]  __x64_sys_ioctl+0x18e/0x210
[   71.417708][ T7549]  do_syscall_64+0x123/0x790
[   71.419096][ T7549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.420873][ T7549] RIP: 0033:0x7f071a59e159
[   71.422218][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.427994][ T7549] RSP: 002b:00007f071b448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.430524][ T7549] RAX: ffffffffffffffda RBX: 00007f071a825fa0 RCX: 00007f071a59e159
[   71.432942][ T7549] RDX: 0000200000000080 RSI: 00000000c01064c4 RDI: 0000000000000005
[   71.435356][ T7549] RBP: 00007f071a63506b R08: 0000000000000000 R09: 0000000000000000
[   71.437710][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.440027][ T7549] R13: 00007f071a826038 R14: 00007f071a825fa0 R15: 00007ffcb0c1ad68
[   71.442356][ T7549]  </TASK>
[   71.443906][ T7549] Kernel Offset: disabled
[   71.445202][ T7549] Rebooting in 86400 seconds..