last executing test programs:

10.332715739s ago: executing program 1 (id=102):
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', 0x0, 0x0, 0x2125099, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5411, 0x0)
r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x21002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

10.26229932s ago: executing program 1 (id=103):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399})
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
close(r1)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19)
preadv2(r4, &(0x7f0000002dc0)=[{&(0x7f00000029c0)=""/90, 0x5a}, {&(0x7f0000002a40)=""/61, 0x3d}, {&(0x7f0000002a80)=""/191, 0xbf}, {&(0x7f0000002b40)=""/6, 0x6}, {&(0x7f0000002b80)=""/52, 0x34}, {&(0x7f0000002bc0)=""/205, 0xcd}, {&(0x7f0000002cc0)=""/222, 0xde}], 0x7, 0x3, 0x42, 0x11)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r6=>r5}, './file2\x00'})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002980)={&(0x7f0000000280), 0xc, &(0x7f0000002940)={&(0x7f0000002e40)={0xb4, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8d04}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x24000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x8a32, 0x40, 0x1, 0x5e}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79e8, 0x8000, 0x3, 0x308, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7b5, 0x80000, 0x0, 0x142, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ad2, 0x8, 0x3, 0x189, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3de6, 0x80, 0x2, 0x26f, 0x0, r0}, <r7=>0xffffffffffffffff}], 0x4, &(0x7f00000016c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x75}, 0x0, 0x0, '\x00', {0x0, 0x92d, 0x0, &(0x7f00000006c0)=@buf_4k="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"}}, &(0x7f0000001740))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000002900)={0x2230, 0x0, &(0x7f0000002880)=[{&(0x7f0000001780)=""/232, 0xe8}, {&(0x7f0000001880)=""/4096, 0x1000}], &(0x7f00000028c0)=[0x7, 0x7ff, 0x2, 0xea17, 0x3, 0x25a, 0x8], 0x2}, 0x20)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9.703159799s ago: executing program 1 (id=108):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[], 0x10)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x18a)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
r4 = dup3(r2, r3, 0x80000)
ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180))
recvmsg$unix(r4, &(0x7f0000000500)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/82, 0x52}, {&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000000480)=""/24, 0x18}], 0x4}, 0x2000) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) (async, rerun: 64)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (rerun: 64)

8.783193458s ago: executing program 1 (id=110):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
unshare(0x26020480) (async)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async)
umount2(&(0x7f0000000180)='./file0/../file0\x00', 0xa) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12002, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x93)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x4, 0xb000, 0x2000, &(0x7f00002ff000/0x2000)=nil}) (async)
chmod(&(0x7f00000001c0)='./file0\x00', 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0)

8.68444887s ago: executing program 1 (id=111):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x90)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0x6c, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x15, 0xe, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0xb, '\x00', 0x5}, {0xf, 0xee, 0xa, '\x00', 0xd}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x5, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0x3}, {0x7, 0x1, 0x6}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}})

8.599779525s ago: executing program 1 (id=114):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/63, 0x3f)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20044041)

8.585224726s ago: executing program 32 (id=114):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/63, 0x3f)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20044041)

2.637069507s ago: executing program 4 (id=169):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x122)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='\"lgo=\"', 0x6)
getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000540)='./file0/../file0\x00')

2.632614045s ago: executing program 0 (id=170):
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) (async)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
close(r0)
ppoll(&(0x7f0000000040)=[{r0, 0x2030}, {r0, 0x8200}, {r0, 0x85}, {r0, 0x208}, {r0, 0x20}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x5]}, 0x8) (async)
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000100)={0x2, 0x2, 0xd, 0x4800, 0xf, 0x6}) (async)
r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r2=>0x0}) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0xfff9, 0x1, 0xa, 0x1}, {0xfffc, 0x7f, 0x9, 0x5}, {0x8, 0x1, 0xeb, 0xab}, {0x3, 0x2, 0x3, 0x3b}, {0x9, 0xc, 0x7, 0xaec2}, {0xa903, 0xe, 0x15, 0x1ff}, {0x9, 0x4, 0xaf, 0x18}, {0x7, 0x81, 0x81, 0x3}, {0x9, 0x6, 0xa8, 0xac0e}]}, 0x10) (async)
ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000c00)=0x8) (async)
recvfrom(r1, &(0x7f0000000c40)=""/253, 0xfd, 0x0, 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) (async)
mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r3, 0x0) (async)
r4 = fcntl$dupfd(r0, 0x406, r0)
r5 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000e00)=""/4096)
ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000001e00)) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e80), 0x20400, 0x0)
ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000001ec0))
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x54, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)
process_mrelease(r3, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000002080)=0xa06, 0x4) (async)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000020c0)=[r8, r3, r0, r8, r4], 0x5)
setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000002100)=0x7, 0x4) (async)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r1, 0xa6347000)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000002140))

2.62990426s ago: executing program 4 (id=171):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128)
ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x3e3c, &(0x7f0000000140)={0x0, 0xdaf9, 0x20000, 0x2, 0x200200bd, 0x0, r0})
sendto(r1, &(0x7f0000000000)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0)
io_setup(0x1000, &(0x7f0000001d00)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x1ec, 0x40000, 0x3, 0x820000c3}, &(0x7f0000000580)=<r6=>0x0, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000f40)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAKE={0x34, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}})
io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000380)={0x80000000, 0x2, @qam={0x8000, 0x15, 0x11}})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9a8}]}, {0x4}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
getsockopt(r4, 0x1, 0x3, 0x0, &(0x7f0000000640))
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000680))
r11 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0xfa, 0x10, 0xfff00002}, {0x16, 0x0, 0xfd}]}, 0x10)
sendto$inet6(r11, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x800, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"})
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff00000000"}]}, 0x60}}, 0x0)
io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x88, r0, &(0x7f00000001c0)='3', 0x1, 0xb}])

2.552764357s ago: executing program 0 (id=172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0xd12, 0x7, 0x7fff, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r3=>0x0, 0x80, 0x20, 0x3, 0x10001, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @empty, {[@generic={0x83, 0x4, "4797"}]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/route/flush\x00', 0x1, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000001640)={&(0x7f0000000640)=[0xfffffffc, 0x3, 0x8, 0x970, 0xfffffffe, 0x6, 0x7, 0x1a68, 0x3, 0x7, 0x8, 0x9, 0x4, 0x6, 0xa, 0x5a44, 0x51, 0x8, 0x3, 0x9, 0x0, 0xe4f, 0x6, 0xfffffff9, 0x52, 0x800000, 0x0, 0xa2c, 0x40000000, 0xc946, 0x4000000, 0xecd3, 0x8f, 0xdd, 0x2263, 0x1, 0x5, 0x4, 0x0, 0x2, 0x9, 0x5, 0x5, 0x5, 0x6, 0x9, 0x1, 0x0, 0x8, 0x8, 0x9, 0x6, 0x3, 0xffffffc0, 0x4ec2, 0x3, 0x7fffffff, 0x101, 0x9, 0xe75, 0x6, 0x8, 0x4, 0x6, 0x9, 0x2, 0x9, 0x9, 0xffffffff, 0x10001, 0x2, 0x4, 0x7, 0x6, 0x5, 0xffff, 0x32, 0x7, 0x7, 0xc, 0x7fffffff, 0x5, 0x6, 0x5, 0x8c1bab02, 0x2, 0x8001, 0x565a, 0x2, 0xffffffff, 0x6, 0xee1a, 0x345d, 0xfffffffa, 0xbb, 0x9, 0x0, 0x4, 0x0, 0x564, 0x1, 0xe546, 0x2, 0x2, 0x1, 0x2, 0x200, 0x5, 0xb7, 0x40, 0x9, 0x8001, 0x8, 0x1, 0x7, 0xffc0, 0xd, 0x7, 0x8, 0x9, 0x401, 0x9, 0x2, 0xf37f, 0x401, 0x8, 0x6, 0x3, 0x2, 0x9, 0x5, 0x4, 0x8, 0x6, 0x55595a0c, 0xd49, 0x5, 0x10001, 0x2, 0xc35, 0xb1, 0x200, 0x7, 0xd509, 0xde, 0x5, 0x6, 0x7f, 0x3, 0x1, 0xffffffff, 0x7, 0x4, 0x8d4, 0x6, 0xfff, 0x0, 0x0, 0x52, 0x3, 0xffffffff, 0x9, 0x10, 0x1, 0x7fff, 0x2, 0x0, 0x6, 0x40, 0x5, 0xffffb752, 0xb, 0x80000001, 0x6, 0x200, 0xe, 0x530, 0x8, 0x30294ced, 0x10, 0x4, 0x26, 0x1, 0x9, 0x7, 0xb, 0x0, 0x1000, 0x5, 0x5, 0x2, 0x4, 0x6, 0x0, 0x9, 0x1800000, 0x4, 0x6, 0x5, 0xffffffe1, 0x53, 0xe, 0x1, 0x3, 0x5, 0x2, 0x7f, 0x4, 0x1, 0xe3c, 0x3, 0xfffffff3, 0x3, 0x5, 0x445b0000, 0x6, 0x7, 0x5, 0x80000000, 0x4, 0x4d978b33, 0x5ba9, 0x366e, 0x7, 0x7, 0x6, 0x2, 0x2, 0x7f, 0x8000, 0x45c, 0x3, 0x7fff, 0x100, 0x40, 0x9, 0xfffffff8, 0x1, 0x3, 0x1, 0xfffffffa, 0x1ff, 0x3, 0x7, 0x1, 0x9, 0x4, 0x100, 0x6, 0x7, 0x0, 0x4, 0x6, 0x5, 0x8, 0xb, 0x3, 0x80000000, 0x1b3, 0x7, 0x8, 0x60, 0x8, 0xaca, 0xded, 0x2, 0xffffffff, 0x5, 0xe17, 0x10, 0x8, 0xad, 0xe1, 0x6, 0xf, 0xb5ff, 0x4, 0xc59c, 0x2860, 0x200, 0x2, 0x9, 0x6, 0xfffffff8, 0x200, 0x8, 0x1, 0x2, 0x8000, 0x7fffffff, 0x0, 0x0, 0x6, 0xfffffff7, 0xbc, 0x1, 0xab, 0x2, 0x9, 0x4, 0x9, 0x200, 0x20000000, 0x2, 0x1, 0x0, 0xfffffffc, 0x2, 0x7, 0x2, 0x2, 0xe5c, 0x8, 0x8, 0x6, 0x3, 0x7, 0x400, 0x7, 0xfc, 0x7, 0x6, 0x6, 0xffffffff, 0xec0c, 0x7, 0x7, 0x7, 0x0, 0x0, 0x3, 0x3e4, 0x4f9, 0x5, 0x9, 0xe, 0x4, 0x0, 0xfffffce8, 0x2, 0x7f, 0x8e7, 0xc0000000, 0x3, 0x3, 0x4, 0x4694, 0xfffffff8, 0xfffffffb, 0x8, 0x5fd, 0x9, 0xd, 0x3, 0x2, 0x4, 0x6, 0x55d2, 0x469, 0x1000, 0x4, 0x8, 0xf2b2, 0x6, 0x6, 0x3, 0x0, 0x5, 0xfffffffb, 0x9, 0x2, 0x8, 0x3, 0x1, 0xff, 0x9, 0x7, 0x400, 0x3, 0x6, 0x10001, 0x8, 0x9, 0x81, 0xa02b, 0x9, 0x8, 0x1, 0xc, 0x5, 0x200, 0x4, 0x5, 0x5, 0x7, 0xe, 0x8001, 0x5, 0x6, 0x7, 0x6, 0x6, 0x3, 0x40000000, 0x4, 0x6, 0xc, 0x5f2f, 0x8, 0x0, 0x80, 0x1, 0x10, 0x3, 0x1e, 0x200, 0x10, 0x5, 0x5, 0x0, 0x3, 0xf, 0x2, 0x3, 0x0, 0x8, 0x4, 0x7ff, 0x8, 0x1, 0xffffffff, 0x5, 0xb, 0x4394, 0x7, 0x8, 0xfff, 0x2, 0x5, 0x7, 0x2, 0x653, 0x7, 0x465, 0x9, 0x8, 0x17, 0x7ff, 0x7, 0x4, 0x0, 0x1, 0x794, 0x7, 0x1, 0x9cb7, 0xffffffff, 0x0, 0xe87, 0x7, 0xd, 0xca5b, 0x0, 0x0, 0x9, 0x3, 0x7, 0x2, 0xa3ab, 0x2, 0xa, 0x4, 0x8, 0x8, 0x3, 0x1, 0x2, 0x0, 0x4, 0x88e8, 0x400, 0xa10, 0x7, 0x7, 0x621c, 0x0, 0x7, 0x101, 0x2, 0x80000000, 0x6dc9, 0x8, 0x6aa, 0x101, 0x10001, 0x0, 0x1, 0x0, 0xff, 0x8000, 0x0, 0xc7f, 0x7, 0x800000, 0x7, 0xffffffff, 0x0, 0x25c0, 0x2, 0x2, 0x6, 0x8, 0x2, 0xb067, 0x3, 0x7, 0x200, 0xfffffffd, 0x7ff, 0x7, 0x435b80, 0x10001, 0xffffffff, 0x80, 0x0, 0xa, 0x931, 0x9, 0x4, 0x4, 0x40, 0x8, 0x1, 0x3, 0x1, 0xe4a, 0x7, 0x9, 0x5, 0x8, 0x5, 0x7, 0x8000, 0x6, 0x4, 0x6, 0x7, 0xe, 0x3, 0x9, 0x7, 0x9078, 0x80000001, 0x0, 0x1, 0x6, 0x4, 0x4566546a, 0xcca, 0x9, 0x2, 0x4, 0xcd1f618, 0x80000000, 0x7, 0x6a8, 0x9, 0x10, 0x5, 0x80000000, 0xc, 0x80000001, 0x80000001, 0x4, 0x10, 0x400, 0x3, 0x7, 0x10, 0x3, 0x9, 0x3, 0x10000, 0xd, 0x8, 0x66, 0x8, 0x5, 0x4, 0x0, 0x3, 0x8bab, 0x40, 0xffffffff, 0x7, 0xf1, 0x6, 0x200, 0x0, 0x9, 0xd, 0x4, 0x5, 0xe409, 0x8, 0x7, 0x200, 0x9, 0x7, 0x4, 0x56, 0xca, 0x3, 0x2, 0x400, 0x51bf, 0x8001, 0x6, 0x6, 0x2, 0x4, 0x8, 0x5, 0xc457, 0xe, 0xfffffeff, 0x5, 0x6, 0x1, 0x1, 0xe8e, 0x1, 0x2, 0x1000, 0xfffffff7, 0x3, 0x8, 0xd, 0x0, 0x9, 0x2, 0x8, 0x1, 0x80000001, 0x6, 0x7070fcef, 0xe, 0x1, 0x101, 0x1, 0x1, 0xa2, 0x5, 0xf, 0x0, 0x101, 0xffff0000, 0x0, 0x5, 0x1, 0x0, 0x0, 0xb, 0xed6, 0xa, 0xa, 0x4, 0x2, 0x55, 0x0, 0x6, 0x10, 0x1, 0x10d, 0x7fff, 0x8fe, 0x3, 0x3, 0x8, 0x1, 0x800, 0x6, 0xffffff7d, 0x3, 0x1, 0x7, 0x0, 0x100, 0x7fff, 0x8, 0x8, 0x1, 0x6, 0x2, 0x9, 0x2, 0x8, 0x8b, 0x80, 0x1, 0x21616c41, 0x7, 0x1, 0x5, 0x28000000, 0x1, 0x7ff, 0x800, 0x3, 0xd, 0x6, 0x1000, 0x4, 0x1, 0x6, 0xffffffd1, 0x8, 0x2, 0x83, 0x1, 0x5, 0x10, 0x77, 0x7fffffff, 0x7, 0x4, 0x0, 0x313, 0x0, 0x3, 0xfffffffc, 0xffff, 0x5c72, 0xfffffffb, 0x101, 0x8, 0x2, 0x1, 0x2, 0x4, 0x6, 0x80000000, 0x64c, 0x5, 0x4, 0x6, 0x9, 0xc0, 0x0, 0x1, 0x6e, 0x4, 0x5, 0x7, 0x0, 0x7, 0x4, 0xe, 0x0, 0x3, 0xffffffff, 0x58c37f63, 0x7, 0xff, 0x7fffffff, 0x8, 0x1, 0x4, 0x9, 0x5f4a, 0xfffffffd, 0x3, 0x0, 0x1, 0x3, 0x0, 0x1000, 0x8, 0x400, 0x6e5, 0x8, 0x7ff, 0x8e, 0x9, 0x7, 0x1, 0x2, 0x8001, 0xf, 0x4, 0x80000000, 0xffff0001, 0xab, 0x2, 0x6, 0xfe00000, 0x3, 0x7, 0x81, 0x7, 0xd751, 0x4, 0x6, 0x0, 0x100, 0xffffffff, 0x2, 0xfffffffd, 0x9, 0x3, 0x2, 0xfffffffe, 0xfffffff8, 0x5, 0x7, 0x8, 0xcd, 0x401, 0x2, 0xd, 0x0, 0x3, 0x200, 0x557d4f8, 0x3ff, 0x8, 0x2, 0xb, 0x5, 0x9, 0x5, 0x1d, 0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1ff, 0x5, 0x1, 0x0, 0x9, 0xfffffffa, 0x0, 0x81, 0x5, 0x4, 0x1, 0x9, 0x6, 0x6, 0x80, 0xca1a, 0xfffffc01, 0x3, 0x0, 0xffffffff, 0x4, 0x1, 0x0, 0x7, 0xf, 0x7, 0xb, 0x4, 0x4, 0xce2, 0x35f, 0x40, 0x0, 0xffffffff, 0x8, 0x5, 0xffff0001, 0x3, 0x1, 0xa39, 0x1, 0xffff401a, 0x3c, 0x3, 0xa, 0x8, 0xad0, 0x40, 0x482b750e, 0x7fff8000, 0xe3d, 0x8, 0x6, 0x1, 0x80000000, 0x5, 0xff, 0x7f, 0x2, 0xb69, 0x101, 0x8d86, 0x3, 0x3, 0x0, 0x4, 0x0, 0x4, 0xfffffffe, 0x1ff, 0x7e, 0x2, 0x0, 0x81, 0x8, 0x9, 0x9, 0x8, 0x5a, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x6d, 0x400, 0x8000, 0x283, 0x401, 0x1ff, 0x8, 0xffffffff, 0xc, 0x7, 0x0, 0x9, 0x401, 0x9, 0x401, 0x2, 0x6, 0x3, 0xb, 0x2, 0x4, 0x1, 0x4, 0xffffff81, 0x7, 0x0, 0x6fc, 0xfffffffd, 0x9, 0x0, 0x1, 0x1, 0x10001, 0x8be, 0x8, 0x8001, 0x81, 0xfffffff7, 0x5, 0x9, 0x1, 0xfffffffd, 0xc, 0x5, 0x786, 0x3ff, 0x2, 0x10, 0x9, 0x3, 0xfffffffa, 0x5, 0x1, 0x10, 0xf86, 0x4, 0x7, 0x5f8db7d6, 0x0, 0xa, 0x3, 0x3, 0x7ff, 0x1, 0xfffffe01, 0xffff, 0xaeb, 0x9, 0x5, 0x200, 0x401, 0x6, 0x4, 0x10000, 0x6, 0x4, 0x2, 0x7, 0x800, 0x81, 0x0, 0x7, 0x75d6, 0x7, 0x0, 0x9, 0x800, 0x8, 0x2, 0x6e, 0x3, 0x800, 0xf, 0x4, 0x7f, 0xffff, 0x6, 0x400, 0x2, 0xfffff751, 0x4, 0x8], 0x3, 0x400, 0x7f})
write(r4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000b7000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708f00000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018420000feffffff000000000000000018610000050000000000000009000000181100004eb25dacd23743e30c1c0cbd748999174ed02b59ec4b0b1194f8fd4bc42ebe6c87be7bda47bf795ff5522842124bbf3de154ebc26af823eab2da1c2b13eb206035514fe30ab14742fbcb3952655078805985b5d0a446791d85a77078069e4c8d3893d66f7039c87b210d2159cf403438c0988b82796455c821", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$TCFLSH(r5, 0x800455ca, 0x1)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd)
setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000440)={@local, @private=0xa010100, 0x0, "c07754d9d67d79d36d110531a16c28e45f8ace539cb4cc9be005794e8cc56835", 0x2, 0x2, 0x8, 0x80000000}, 0x3c)

2.454250784s ago: executing program 4 (id=173):
r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_open_dev$vcsu(&(0x7f0000000b80), 0x4, 0x400000) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
read(r3, &(0x7f0000000040)=""/148, 0xffffff96) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r2)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x40}}, 0x0)
r5 = socket(0x11, 0x2, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'})
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000c00)={0x1, 0xffffffffffffffff, 'id1\x00'}) (async)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x80000001)
writev(r7, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000009287000000000000000062569c920700000000000000fe03faf72b6848a506000000f194de68ccb6ab8ae0ab6dbd34f33a276da44e76d03c08dee8b540495d4596d415a71883c7a9ae6c390e4361df1a3aa78b6dbfea02b32565e2b196e3b0408b01ae9abd93acfb499a2364ff0d4e3e28edc2ecdf5c14d13cd42e1cf7c30735ba39c6fc85253ab282791bd24c720ea075efcacc6e669aab0000000042b931f9a04e394a32c769ecdb32a5c20b58d9229f6010ff30070c2b000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r10, 0x0, 0xdb, 0xdf, &(0x7f00000006c0)="6dc0562822b8a378317569e3bd874fb7a0290e6aeea96a9e66d92bb95339d0de56588bef4bff77443503c1af1635c2b89e8332161907925149238a663e705ae47ff86bf7595cb1c7f0bb8d9c5e1bbea706ded039e9428f038c37c5b0dbc7cb1280c0c6d708d6c4cc7056a07a64f4f50894c019848ca92f809f2ef8d46abd6722b981158f6adb6ff32a94330f10c192d3bbedc528896a44d6246345c9d9110c205c8d65cb5fb5db0cce9613e56eb96777d43b385f3a16d51418d420b6e0c89022dbbb6cf686c93d060e1412a51e2e05c7afb32771593855d628bfd7", &(0x7f00000007c0)=""/223, 0x7, 0x0, 0x6e, 0x66, &(0x7f00000008c0)="92914ff6edb23d9ebff1df0cef87babb69e8ccd81fa54de0c77fcef9b01cfb488299ed72137d5bba4aa363525fec316090dc93c413dadf5e49f28e2ff38caecccc77f8eef3f2c08bf89bdeae9cba1bd969226d309c632da47c9f52b45454e83a53350575f4f6847d5c8435efb651", &(0x7f0000000940)="170b3118f74149cd5cb0d2ecfd1f0b2c41c7fbe024004fb357eb52fef563bacfef59bc3947d547f3c70d2b530fd1c7b66ac3c94f7012c46f4da0ffc41c74860e3a97c564716bedd363dd874f4f34d4f5d458bbc585ad867db67846f3fc36e871bedf342538f6", 0x6, 0x0, 0x1}, 0x50) (rerun: 64)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x8, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}})
r11 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r11, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xdcb, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r11, 0x80184132, &(0x7f0000000080)) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
keyctl$instantiate(0xc, r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x31, 0xfffffffffffffffc) (async, rerun: 64)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (rerun: 64)

1.561242402s ago: executing program 4 (id=179):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x20004000)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1004000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x7, 0x0, 0xd04, 0xfffffffffffffffc, 0x1, 0x100000, {0x0, 0xa, 0xfffffffffffffffd, 0x3, 0x4, 0x6, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0x9c}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
keyctl$link(0x8, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x10000, &(0x7f00000004c0)={'trans=virtio,', {[{@version_9p2000}, {@cache_mmap}, {@privport}, {@cache_none}, {@posixacl}, {@cachetag={'cachetag', 0x3d, '('}}, {@version_L}, {@cachetag={'cachetag', 0x3d, '-'}}, {@noextend}, {@version_u}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, 'geneve0\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'&(:'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'keyring\x00'}}, {@euid_lt={'euid<', r5}}, {@euid_lt={'euid<', r7}}]}})
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xb, 0x0, 0x0, @generic=0x3})
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="bc0000001000010428bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="08000000000101008c00128009000100766c616e000000007c0002800600010002000000700003800c00010000010000030000000c00010001000000020000000c000100a7000000080000000c00010001000000f4ffffff0c00010001000000050000000c0001000500000080f400000c00010005000000060000000c00010000000000040000000c0001005d000000b589000008000500", @ANYRES32=r9], 0xbc}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

1.553391706s ago: executing program 4 (id=180):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000040)=0x8})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl(r8, 0x400caed0, &(0x7f0000000080))
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r1, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback}}}}}}, 0x6e)
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r9, r0, &(0x7f00000000c0)=0x58, 0x5)

1.144175756s ago: executing program 2 (id=184):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x5)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x10000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

1.084226972s ago: executing program 2 (id=185):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
close(0xffffffffffffffff)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, &(0x7f0000000280)=r2}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x2}, 0x3a)
syz_emit_ethernet(0x3a, 0x0, 0x0)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000080))

1.080192343s ago: executing program 2 (id=186):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

1.000720943s ago: executing program 2 (id=188):
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) (async, rerun: 32)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (rerun: 32)
syz_emit_ethernet(0xeb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x1, 0x3, [0x481, 0x5ba, 0x290, 0xe82]}) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x2)
pread64(r1, &(0x7f0000001480)=""/4137, 0x1029, 0x8000)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000580)) (async, rerun: 32)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) (rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt/events/cdns3/cdns3_ep0_queue/format\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f00000001c0)=""/86, 0x56}], 0x4, 0x5, 0xe25) (async, rerun: 64)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64)
r5 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5, 0x1})
syz_usb_connect(0x3, 0xb3, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xe1, 0x9d, 0x26, 0x20, 0x93c, 0x601, 0xbe79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x1, 0x4d, 0x8, 0x30, 0x8, "", [{{0x9, 0x4, 0x5c, 0x80, 0x3, 0xad, 0xb2, 0xa8, 0xde, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "fe655b0de66c"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x1, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x8, 0xc}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0xff, 0x9, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x3, 0x7, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x7, 0x9, 0x5}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x1f, 0x18, 0xa8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}, @generic={0x29, 0x23, "119ca64b0f81f5e17635a55a428bbadf1392c186ac2d948df128cbde10f9b894d2a1e0202eff1e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x5, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x2}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x2, 0x7f, 0x5, 0x20, 0x81}, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "9170db4ffb5ca5e0dc25929f340e3c40"}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x437}}]}) (async)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r5, 0x1})
ioctl$EVIOCGSND(r0, 0x8040451a, 0xffffffffffffffff)

544.145675ms ago: executing program 4 (id=190):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc)
syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) (async)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async)
syz_usb_control_io$uac2(r0, 0x0, 0x0) (async)
syz_usb_disconnect(r1) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
write$char_usb(r4, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8)

474.513168ms ago: executing program 2 (id=191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x2000})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)

384.323151ms ago: executing program 2 (id=193):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.stat\x00', 0x26e1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="3b000000010006", 0x7)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={<r3=>r0, &(0x7f0000000240)='&]\x00', 0x86002, &(0x7f0000000280)={@_ha_fsid={[0x9, 0x7]}, {0xc, 0xc, 0x6, 0xf232}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)})
write$binfmt_misc(r3, &(0x7f0000000480)="c046eccf4601a5ec36bf4ebd4f254403c3a8754cefeb97b49c39e0a3c4b4293adb926b423b9bd9b0822bb69f5dd012592489b5eb42f00405efe49e3f5ff0c63bc231f8f909d05531ad69247769de815b7a1a904f36acaaa531e8e44bffa69f0363d102fbcdec6819db7f7e8c526e777e2a0cacd6fb0a2c688ade1d0718b85c1abcadc0dd522bfaaef233cd6aa65d4f41157f2a8ae7e352a62f0b3f678bfef9825801d8545b29d6cf7ff701b3eb7d6c5ecc4c7114c3ab545f2e6d7c5485a5d73f", 0xc0)
gettimeofday(&(0x7f0000000000), &(0x7f0000000080))
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68c})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
close(0x3)
close(0x3)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r6=>r4, {r2}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000feffffff1600000000002dc40000950000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94)
setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000000c0)="a85d31f981700000000000000000000000000000ed8d2b816a4ea946ef0476797a70a14dffc34ed49f4409931a2edeb75e6565d4e451dd9795c26c75de76e61e465bdaff6ee960b4e6b571dbe27e96b501fea1f5b739f4d85d3868d6dbeb91a43b5373316b36df370ecdfe574e91806f660219faec1936b10a8674db8e0359", 0x7f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8)
close(0x3)

380.817064ms ago: executing program 0 (id=194):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x1e8, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x10, 0x0, 0x1, 0x4, 0x2, 0x4, 0x58ba, 0xffff, 0x6f, 0x0, 0x7, 0x1, 0x5, 0x2, 0x6b, 0x8], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff, 0xff, 0xffffff00], [0x42710ab262b9efc4, 0xff, 0xff, 0xff], 'vcan0\x00', 'pim6reg1\x00', {}, {}, 0x2b, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3898, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltclass={0x2c, 0x29, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0x8}, {0xfff2, 0xfffe}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2800}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000006c0)={0x2, {{0x2, 0x4e21, @multicast1}}}, 0x90)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x8000, 0xc3, 0x621}})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6})
r8 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(r8, &(0x7f0000000100)='zstd', 0x4)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x37}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x75}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x401}]}, 0x34}}, 0x841)
r10 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff)
bind$unix(r8, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
keyctl$chown(0x4, r10, 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0)
madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15)

323.611471ms ago: executing program 0 (id=195):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x120000, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYBLOB="9814249c0c35ef17421dd6e60ecd7da29472091434005c2d1d08d4abd3dc990c0abab7f433f52515b17c033c4fcbf8a0a85c89a87fe05f4cad99eb5bfbc622cb674d24c97cbaa67f57777e5151056144edeb00c531cd1fe762270089fcdb4b7e2e93c7ab7b38090c6be6aeb494797cce12ef95eefd89e967182185e917f60819fa22e46db46fcd203607f4b84d534c9c25e0fbbf9ba6073c5bdb1b2d3b57a4feb6918b344cca8b0e", @ANYRES32=r0], 0x34}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000100)={0xdddd0000, 0x71f000, 0x8})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)
mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x4, &(0x7f0000000500)='ecryptfs_sig=syznek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f0000002880)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x40000009, 0x5)

322.697949ms ago: executing program 3 (id=197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/207, 0xcf)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x1, 0x2, 0x4}}, 0x14)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x31c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb56}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x932b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}]}, 0x31c}}, 0x2000000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000640), r4, r5}}, 0x18)
syz_open_dev$video(&(0x7f0000000780), 0x10000, 0x80201)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000000940)=""/220)
mount(&(0x7f0000000a40)=@rnullb, &(0x7f0000000a80)='./file0\x00', 0xfffffffffffffffc, 0x1880000, &(0x7f0000000ac0)='syz0\x00')
r8 = getpgid(0xffffffffffffffff)
r9 = syz_open_procfs(r8, &(0x7f0000000b00)='net/packet\x00')
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000b40)={0x8, 0x30323953, 0x5, 0x9, 0x1, @stepwise={{0xf, 0x8001}, {0x10000, 0x3}, {0x9a1, 0x3}}})
sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4040080)
ioctl$OCFS2_IOC_UNRESVSP64(r7, 0x4030582b, &(0x7f0000000c80)={0x1, 0x0, 0x5, 0xfff, 0x5, 0x1})
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000006)
ioctl$BINDER_SET_MAX_THREADS(r9, 0x40046205, &(0x7f0000000cc0)=0x6)
sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e00)={'pim6reg\x00', <r10=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x80000000}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e80)={'syztnl1\x00', <r11=>r10, 0x8000, 0x20, 0xfffffffd, 0x8, {{0x11, 0x4, 0x1, 0x12, 0x44, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0xb, 0x6f, [@loopback, @broadcast]}, @generic={0x89, 0xc, "26a7ea16f617d24a5b6a"}, @lsrr={0x83, 0x17, 0x55, [@local, @broadcast, @private=0xa010101, @private=0xa010102, @empty]}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={r7, r11, 0x25, 0x16, @void}, 0x10)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x64}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44004)

264.217068ms ago: executing program 3 (id=198):
r0 = socket$inet6(0xa, 0x2, 0x4a39b029)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c6314, 0xfffffffc}], 0x0, 0x0, 0x0})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

263.7544ms ago: executing program 3 (id=199):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000600}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltaction={0x60, 0x31, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff518}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x4, 0x2}})
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[], 0x3fb)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f00000002c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
fcntl$dupfd(r2, 0x406, r4)
close(0x3)
inotify_init1(0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009506000000000000"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000080)={0x2, "fe9dbfa8d6493ee02eeb4c2696f22d88cad3e670d26f4ddf3d9de4df724a1b744062b1634aafb5da15a80fc3a2b4917c868bf9a7d46a01388fcb0892251f2652"})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xa8, 0x30, 0xffff, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x1300}, [{0x94, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0xd12, 0x7, 0x7fff, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xa, 0x8, 0x8, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa8}}, 0x4000000)

171.195381ms ago: executing program 0 (id=200):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19})
sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea2, 0x0, @remote, 0x3}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7)
ioctl$UI_DEV_CREATE(r0, 0x5501)

170.066057ms ago: executing program 3 (id=201):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x218440, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000200))
r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
fcntl$getflags(r1, 0xb)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xec, 0x2, &(0x7f00000002c0)="ab4c2a62412510342415abba98154624fde4e6d53bfa78c53e38353442e550a69bf33c148edf5d0f3807e2d1b097517403d758e768c4aecb6271dc4d23b40b628a17bf85d4b6d32a5c740a491f38e0f627d5b578c93d458758a914b8ab555ef0661f30193f10a6c8a9a49797202a92fe498a60baa0d6beec83d2512eeb7bdb47fe5fe8bb0dd70d82efa8f83ae4d5bc92c6701a8a34ff48f7492dc900e209bbe3681d23dcbe4646cd04a46a7843a7888c15e827efa9bb7f13b666810d3c47fd3b6cca636f8a2491dbb2695beaedf15e848c2440894d8895cfee4aa50eecb3a875eb5bd79a0770f0d512f1ce97", &(0x7f0000000400)=""/2, 0x2, 0x0, 0xec, 0x20, &(0x7f0000000440)="727ba355ddc354de10faf34d35adff73af32b5a510ad8a36841643e6020013402f8c08db485bcaab16525ee370ec2c53aba31b11123caa97e124bb89796c57f3d16f9d9fc4a3d91593bb3f8dcfc4e554289c32f5525e6cf6c8fdfe1d80799644a54639fd4aff76b3d3c12c7885bce6eb2590312327a6b458f5bc3bea590d07f88ad96b3acb7647ea1abb77f45cc159ccff099fe0cc125988b18c0f527d5d8086d640a49043fe0967212c9d6857d90c5d85c3e61a505844143b244637fb37d00eb646bc7e6a9974a07ec6f869a19cbed9b632a01d5380fa709d69aca4ac80cb2fc05003c2de855626b1f91454", &(0x7f0000000540)="ba9a58809998714521d6c776db8d7b35a2bfe59176dc9ba170e32f3065bb3111", 0x1, 0x0, 0xb}, 0x50)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x7, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52, 0x0, 0xfffffffc, 0x5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000004000000f8ffffffb702000008000000b7030000652b0000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$rfkill(r5, &(0x7f0000000240)={0x8, 0x8, 0x0, 0x1, 0x1}, 0x8)
getdents64(r5, 0x0, 0x22)

3.77621ms ago: executing program 3 (id=202):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce0001"], 0x114}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0xfff5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.221038ms ago: executing program 0 (id=203):
r0 = epoll_create1(0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200142, 0x0)
read$nci(r3, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=<r4=>0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0xe)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74bb300000001800dda825bd70000000000002141400000200050000000006001500040000000c101680060006000040"], 0x30}}, 0x40000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x2000001b})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
socket$kcm(0x29, 0x5, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0)

0s ago: executing program 3 (id=204):
personality(0x400000)
personality(0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
personality(0x400000) (async)
personality(0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)

0s ago: executing program 0 (id=205):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r0, 0xa, 0x11)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async)
sendmsg$NL80211_CMD_SET_REG(r2, 0x0, 0x54)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400, 0x0) (async, rerun: 64)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 64)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r3, 0x0)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0)
fcntl$setlease(r0, 0x400, 0x0) (async)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

[   28.962111][   T43] audit: type=1400 audit(1791060853.313:115): avc:  denied  { siginh } for  pid=5637 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   30.437592][   T43] audit: type=1400 audit(1791060854.793:116): avc:  denied  { write } for  pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   30.488401][   T43] audit: type=1400 audit(1791060854.843:117): avc:  denied  { write } for  pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   30.588415][   T43] audit: type=1400 audit(1791060854.943:118): avc:  denied  { write } for  pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   30.630767][   T43] audit: type=1400 audit(1791060854.983:119): avc:  denied  { write } for  pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:23996' (ED25519) to the list of known hosts.
[   30.838373][   T43] audit: type=1400 audit(1791060855.193:120): avc:  denied  { name_bind } for  pid=5656 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   30.864538][   T43] audit: type=1400 audit(1791060855.213:121): avc:  denied  { execute } for  pid=5657 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   30.864805][   T43] audit: type=1400 audit(1791060855.213:122): avc:  denied  { execute_no_trans } for  pid=5657 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   31.278746][   T43] audit: type=1400 audit(1791060855.633:123): avc:  denied  { write } for  pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   31.315691][   T43] audit: type=1400 audit(1791060855.663:124): avc:  denied  { write } for  pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   31.523768][   T43] audit: type=1400 audit(1791060855.873:125): avc:  denied  { write } for  pid=5664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.102672][ T5657] cgroup: Unknown subsys name 'net'
[   33.228755][ T5657] cgroup: Unknown subsys name 'cpuset'
[   33.230912][ T5657] cgroup: Unknown subsys name 'rlimit'
[   33.402441][ T5717] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   34.097673][ T5657] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.763521][   T43] kauditd_printk_skb: 32 callbacks suppressed
[   37.763540][   T43] audit: type=1400 audit(1791060862.113:158): avc:  denied  { execmem } for  pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.945167][   T43] audit: type=1400 audit(1791060862.293:159): avc:  denied  { create } for  pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.945218][   T43] audit: type=1400 audit(1791060862.293:160): avc:  denied  { read write } for  pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.945639][   T43] audit: type=1400 audit(1791060862.293:161): avc:  denied  { open } for  pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.955490][   T43] audit: type=1400 audit(1791060862.303:162): avc:  denied  { ioctl } for  pid=5730 comm="syz-executor" path="socket:[6647]" dev="sockfs" ino=6647 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.967680][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.970671][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.972208][ T5733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.973962][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.974795][ T5733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.975027][ T5733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.975692][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.976826][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.977430][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.977800][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.978502][ T5733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.979101][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.979500][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.979949][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.983089][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.986164][   T43] audit: type=1400 audit(1791060862.333:163): avc:  denied  { read } for  pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.986503][   T43] audit: type=1400 audit(1791060862.343:164): avc:  denied  { open } for  pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.987445][   T43] audit: type=1400 audit(1791060862.343:165): avc:  denied  { mounton } for  pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   37.990914][   T43] audit: type=1400 audit(1791060862.343:166): avc:  denied  { module_request } for  pid=5730 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   37.999556][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   38.001046][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   38.001837][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   38.002719][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   38.003052][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   38.027401][   T43] audit: type=1400 audit(1791060862.383:167): avc:  denied  { sys_module } for  pid=5729 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   38.543229][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.543827][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.543898][ T5741] bridge_slave_0: entered allmulticast mode
[   38.544662][ T5741] bridge_slave_0: entered promiscuous mode
[   38.573203][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.573286][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.573354][ T5741] bridge_slave_1: entered allmulticast mode
[   38.574185][ T5741] bridge_slave_1: entered promiscuous mode
[   38.637617][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.653113][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.653158][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.653212][ T5730] bridge_slave_0: entered allmulticast mode
[   38.653954][ T5730] bridge_slave_0: entered promiscuous mode
[   38.657392][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.662427][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.662499][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.662588][ T5729] bridge_slave_0: entered allmulticast mode
[   38.663774][ T5729] bridge_slave_0: entered promiscuous mode
[   38.666589][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.666640][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.666703][ T5730] bridge_slave_1: entered allmulticast mode
[   38.667471][ T5730] bridge_slave_1: entered promiscuous mode
[   38.696923][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.696969][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.697027][ T5729] bridge_slave_1: entered allmulticast mode
[   38.697777][ T5729] bridge_slave_1: entered promiscuous mode
[   38.712555][ T5741] team0: Port device team_slave_0 added
[   38.739315][ T5741] team0: Port device team_slave_1 added
[   38.740559][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.741733][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.742843][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.742947][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.743010][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.743163][ T5731] bridge_slave_0: entered allmulticast mode
[   38.743959][ T5731] bridge_slave_0: entered promiscuous mode
[   38.759433][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.765386][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.765430][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.765487][ T5731] bridge_slave_1: entered allmulticast mode
[   38.766423][ T5731] bridge_slave_1: entered promiscuous mode
[   38.802195][ T5730] team0: Port device team_slave_0 added
[   38.804865][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.805282][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.805289][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.805303][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.806463][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.806471][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.806484][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.808177][ T5729] team0: Port device team_slave_0 added
[   38.809167][ T5730] team0: Port device team_slave_1 added
[   38.810638][ T5729] team0: Port device team_slave_1 added
[   38.811730][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.849212][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.849223][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.849236][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.851284][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.851295][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.851308][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.858992][ T5731] team0: Port device team_slave_0 added
[   38.859391][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.859400][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.859412][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.860826][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.860835][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.860848][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.872106][ T5731] team0: Port device team_slave_1 added
[   38.897661][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.897672][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.897711][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.898763][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.898771][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.898788][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.913571][ T5741] hsr_slave_0: entered promiscuous mode
[   38.914098][ T5741] hsr_slave_1: entered promiscuous mode
[   38.935426][ T5730] hsr_slave_0: entered promiscuous mode
[   38.935862][ T5730] hsr_slave_1: entered promiscuous mode
[   38.936228][ T5730] debugfs: 'hsr0' already exists in 'hsr'
[   38.936288][ T5730] Cannot create hsr debugfs directory
[   38.952675][ T5729] hsr_slave_0: entered promiscuous mode
[   38.953123][ T5729] hsr_slave_1: entered promiscuous mode
[   38.953550][ T5729] debugfs: 'hsr0' already exists in 'hsr'
[   38.953568][ T5729] Cannot create hsr debugfs directory
[   38.989627][ T5731] hsr_slave_0: entered promiscuous mode
[   38.990076][ T5731] hsr_slave_1: entered promiscuous mode
[   38.990396][ T5731] debugfs: 'hsr0' already exists in 'hsr'
[   38.990408][ T5731] Cannot create hsr debugfs directory
[   39.228695][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.234321][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.236053][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.245170][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.245926][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.249993][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.255870][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.259708][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.289771][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.294148][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.299141][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.305655][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.310368][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.310455][ T5741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.310815][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.310875][ T5741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.312713][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.314560][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.314999][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.322144][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.376711][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.376758][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.376906][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.376982][ T5730] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.379893][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.381936][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.382404][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.385272][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.408939][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.411656][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.412102][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.415630][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.419326][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.419873][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.420719][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.421528][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.462086][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.484684][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.487151][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.487534][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.490196][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.493109][ T5741] 8021q: adding VLAN 0 to HW filter on device team0
[   39.498024][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.501536][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.506241][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.506315][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.510625][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.512971][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.522045][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.522122][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.566668][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.599155][ T5730] 8021q: adding VLAN 0 to HW filter on device team0
[   39.605925][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.606314][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.613521][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.624840][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.624885][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.628263][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[   39.631307][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.631360][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.640048][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.646575][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.646624][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.669701][ T5731] 8021q: adding VLAN 0 to HW filter on device team0
[   39.689088][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.689136][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.697382][ T5729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   39.697395][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.699485][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.699529][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.918724][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.931506][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.966719][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.984948][ T5741] veth0_vlan: entered promiscuous mode
[   39.996712][ T5729] veth0_vlan: entered promiscuous mode
[   40.002518][ T5741] veth1_vlan: entered promiscuous mode
[   40.009381][ T5729] veth1_vlan: entered promiscuous mode
[   40.012094][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.033186][ T5730] veth0_vlan: entered promiscuous mode
[   40.046923][ T5090] Bluetooth: hci3: command tx timeout
[   40.046931][ T5742] Bluetooth: hci1: command tx timeout
[   40.050331][ T5741] veth0_macvtap: entered promiscuous mode
[   40.052552][ T5730] veth1_vlan: entered promiscuous mode
[   40.058122][ T5742] Bluetooth: hci0: command tx timeout
[   40.058329][ T5742] Bluetooth: hci2: command tx timeout
[   40.062138][ T5729] veth0_macvtap: entered promiscuous mode
[   40.068536][ T5741] veth1_macvtap: entered promiscuous mode
[   40.070819][ T5729] veth1_macvtap: entered promiscuous mode
[   40.080454][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.088187][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.105851][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.109842][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.114112][ T5731] veth0_vlan: entered promiscuous mode
[   40.132104][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.132384][ T5731] veth1_vlan: entered promiscuous mode
[   40.135063][ T5730] veth0_macvtap: entered promiscuous mode
[   40.150382][ T5730] veth1_macvtap: entered promiscuous mode
[   40.185743][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.213879][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.216556][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.216682][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.216752][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.216818][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.216880][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.216942][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.217196][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.217891][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.217901][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.229208][ T5731] veth0_macvtap: entered promiscuous mode
[   40.260985][ T5731] veth1_macvtap: entered promiscuous mode
[   40.270773][  T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.270787][  T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.272988][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.272998][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.300283][  T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.300299][  T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.322273][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.330611][  T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.330624][  T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.331410][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.359710][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.365067][  T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.365080][  T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.436953][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.436970][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.472140][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.472162][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.486572][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486775][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486798][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486814][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486831][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486848][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486865][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.486882][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.509931][ T5880] bridge0: entered promiscuous mode
[   40.509962][ T5880] bridge0: entered allmulticast mode
[   40.564428][ T5891] sg_write: data in/out 17235997/217 bytes for SCSI command 0x0-- guessing data in;
[   40.564428][ T5891]    program syz.3.6 not setting count and/or reply_len properly
[   40.598397][ T5900] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[   40.601211][ T5897] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   40.612504][ T5900] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET)
[   40.613727][ T5900] syzkaller1: entered promiscuous mode
[   40.613739][ T5900] syzkaller1: entered allmulticast mode
[   40.751120][ T5910] random: crng reseeded on system resumption
[   40.755057][ T5910] Restarting kernel threads ...
[   40.755351][ T5910] Done restarting kernel threads.
[   40.765084][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   40.767291][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   40.773083][ T5806] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   40.779552][ T5916] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   40.793831][ T5918] Zero length message leads to an empty skb
[   40.929740][ T5806] usb 7-1: New USB device found, idVendor=19d2, idProduct=0108, bcdDevice=17.56
[   40.932226][ T5806] usb 7-1: config index 0 descriptor too short (asked for 9, got 0)
[   40.932260][ T5806] usb 7-1: can't read configurations, error -22
[   41.056090][ T5806] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   41.084797][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'.
[   41.090659][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'.
[   41.107237][ T5958] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1
[   41.107253][ T5958] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted
[   41.181986][ T5960] =======================================================
[   41.181986][ T5960] WARNING: The mand mount option has been deprecated and
[   41.181986][ T5960]          and is ignored by this kernel. Remove the mand
[   41.181986][ T5960]          option from the mount to silence this warning.
[   41.181986][ T5960] =======================================================
[   41.184257][ T5961] overlay: Bad value for 'uuid'
[   41.184471][ T5960] overlay: Bad value for 'uuid'
[   41.208144][ T5806] usb 7-1: New USB device found, idVendor=19d2, idProduct=0108, bcdDevice=17.56
[   41.209357][ T5806] usb 7-1: config index 0 descriptor too short (asked for 9, got 0)
[   41.209378][ T5806] usb 7-1: can't read configurations, error -22
[   41.209656][ T5806] usb usb7-port1: attempt power cycle
[   41.426124][ T5881] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   41.546190][ T5806] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   41.566847][ T5881] usb 6-1: device descriptor read/64, error -71
[   41.570861][ T5806] usb 7-1: New USB device found, idVendor=19d2, idProduct=0108, bcdDevice=17.56
[   41.572311][ T5806] usb 7-1: config index 0 descriptor too short (asked for 9, got 0)
[   41.572339][ T5806] usb 7-1: can't read configurations, error -22
[   41.696199][ T5806] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   41.718490][ T5806] usb 7-1: New USB device found, idVendor=19d2, idProduct=0108, bcdDevice=17.56
[   41.719623][ T5806] usb 7-1: config index 0 descriptor too short (asked for 9, got 0)
[   41.719640][ T5806] usb 7-1: can't read configurations, error -22
[   41.719843][ T5806] usb usb7-port1: unable to enumerate USB device
[   41.828778][ T5968] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   41.831444][ T5968] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   41.831639][ T5967] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   41.831653][ T5967] overlayfs: failed to set xattr on upper
[   41.831657][ T5967] overlayfs: ...falling back to redirect_dir=nofollow.
[   41.831661][ T5967] overlayfs: ...falling back to index=off.
[   41.831664][ T5967] overlayfs: ...falling back to uuid=null.
[   41.836609][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   41.894337][ T5972] tmpfs: Unknown parameter 'usrquota�bloCk_�'
[   41.900669][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[   41.919428][ T5972] netlink: 'syz.3.23': attribute type 2 has an invalid length.
[   41.919443][ T5972] netlink: 151 bytes leftover after parsing attributes in process `syz.3.23'.
[   41.976311][ T5881] usb 6-1: device descriptor read/64, error -71
[   42.051701][ T5981] jffs2: notice: (5981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   42.087090][ T5881] usb usb6-port1: attempt power cycle
[   42.126200][ T5090] Bluetooth: hci1: command tx timeout
[   42.136123][ T5090] Bluetooth: hci2: command tx timeout
[   42.136143][ T5090] Bluetooth: hci0: command tx timeout
[   42.136155][ T5090] Bluetooth: hci3: command tx timeout
[   42.436154][ T5881] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   42.466079][   T30] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   42.466602][ T5881] usb 6-1: device descriptor read/8, error -71
[   42.637099][   T30] usb 5-1: not running at top speed; connect to a high speed hub
[   42.637118][   T30] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   42.637858][   T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   42.637873][   T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   42.639349][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.639361][   T30] usb 5-1: Product: syz
[   42.639368][   T30] usb 5-1: Manufacturer: syz
[   42.639375][   T30] usb 5-1: SerialNumber: syz
[   42.648208][   T30] oti6858 5-1:1.0: oti6858 converter detected
[   42.652709][   T30] usb 5-1: oti6858 converter now attached to ttyUSB0
[   42.716071][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   42.736609][ T5881] usb 6-1: device descriptor read/8, error -71
[   42.856666][ T5881] usb usb6-port1: unable to enumerate USB device
[   42.944084][   T43] kauditd_printk_skb: 119 callbacks suppressed
[   42.944098][   T43] audit: type=1400 audit(1791060867.293:287): avc:  denied  { bind } for  pid=5989 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.944319][   T43] audit: type=1400 audit(1791060867.293:288): avc:  denied  { write } for  pid=5989 comm="syz.3.28" path="socket:[10076]" dev="sockfs" ino=10076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.944374][ T5990] Bluetooth: MGMT ver 1.23
[   42.948182][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'.
[   42.953059][ T5991] ovs-dp0: entered promiscuous mode
[   42.954099][ T5990] ovs-dp0: left promiscuous mode
[   43.024678][   T43] audit: type=1400 audit(1791060867.373:289): avc:  denied  { ioctl } for  pid=5994 comm="syz.3.29" path="mnt:[4026533772]" dev="nsfs" ino=4026533772 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   43.038725][ T5995] ref_ctr increment failed for inode: 0x4f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888026c79880
[   43.039855][   T43] audit: type=1400 audit(1791060867.393:290): avc:  denied  { map } for  pid=5994 comm="syz.3.29" path="/dev/comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.039956][   T43] audit: type=1400 audit(1791060867.393:291): avc:  denied  { execute } for  pid=5994 comm="syz.3.29" path="/dev/comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.078047][   T43] audit: type=1400 audit(1791060867.433:292): avc:  denied  { unmount } for  pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   43.303157][ T5999] bridge_slave_0: left allmulticast mode
[   43.303176][ T5999] bridge_slave_0: left promiscuous mode
[   43.303276][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.313690][ T5999] bridge_slave_1: left allmulticast mode
[   43.313706][ T5999] bridge_slave_1: left promiscuous mode
[   43.313823][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.324377][ T5999] bond0: (slave bond_slave_0): Releasing backup interface
[   43.329895][ T5999] bond0: (slave bond_slave_1): Releasing backup interface
[   43.340089][ T5999] team0: Port device team_slave_0 removed
[   43.343482][ T5999] team0: Port device team_slave_1 removed
[   43.344344][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.344360][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.345770][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.345790][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.348763][ T5999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   43.357644][   T43] audit: type=1400 audit(1791060867.713:293): avc:  denied  { shutdown } for  pid=5996 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.358839][   T43] audit: type=1400 audit(1791060867.713:294): avc:  denied  { connect } for  pid=5996 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.360726][   T43] audit: type=1400 audit(1791060867.713:295): avc:  denied  { name_connect } for  pid=5996 comm="syz.3.30" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   43.364190][   T43] audit: type=1400 audit(1791060867.713:296): avc:  denied  { setopt } for  pid=5996 comm="syz.3.30" lport=48456 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.644142][ T6017] tun0: tun_chr_ioctl cmd 1074025675
[   43.644163][ T6017] tun0: persist enabled
[   43.644362][ T6017] tun0: tun_chr_ioctl cmd 1074025675
[   43.644375][ T6017] tun0: persist disabled
[   43.806797][ T6019] bridge0: port 3(syz_tun) entered blocking state
[   43.806953][ T6019] bridge0: port 3(syz_tun) entered disabled state
[   43.807147][ T6019] syz_tun: entered allmulticast mode
[   43.808691][ T6019] syz_tun: entered promiscuous mode
[   43.809070][ T6019] bridge0: port 3(syz_tun) entered blocking state
[   43.809427][ T6019] bridge0: port 3(syz_tun) entered forwarding state
[   43.811689][ T6019] netlink: 'syz.2.33': attribute type 9 has an invalid length.
[   44.214676][ T6034] binder: Bad value for 'max'
[   44.216358][ T5742] Bluetooth: hci3: command tx timeout
[   44.216386][ T5742] Bluetooth: hci0: command tx timeout
[   44.216405][ T5742] Bluetooth: hci2: command tx timeout
[   44.216424][ T5742] Bluetooth: hci1: command tx timeout
[   44.246128][ T6036] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure
[   44.247406][ T6036] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   44.247419][ T6036] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[   44.247465][ T6036] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[   44.552246][ T6048] rnbd_client L127: Can't parse path hp:127.0.0.1\ߐ?:�b�Ez���[�������۵��>,: -22
[   44.630505][ T6052] Bluetooth: hci0: load_irks: too big irk_count value 38657
[   44.956707][ T6059] IPVS: set_ctl: invalid protocol: 41 172.20.20.20:20002
[   45.035919][ T5881] usb 5-1: USB disconnect, device number 2
[   45.054441][ T5881] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   45.057165][ T5881] oti6858 5-1:1.0: device disconnected
[   45.070005][ T6064] mmap: syz.3.47 (6064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   45.089319][ T6063] NILFS (nullb0): couldn't find nilfs on the device
[   45.095853][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.107074][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.117144][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.122695][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.128382][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.136486][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.141585][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.151879][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.153625][ T6066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.48'.
[   45.156959][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.164358][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.172541][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.179233][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.182882][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.188325][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.194945][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.206138][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.214465][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.229014][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.241150][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.249038][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.256253][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.259566][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.263123][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.275119][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.282786][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.286325][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.289669][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.293229][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.299823][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.303819][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.307744][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.311293][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.314580][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.318409][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.322960][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.327484][ T6077] Bluetooth: MGMT ver 1.23
[   45.327935][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.334325][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.341878][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.348374][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.351662][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.354403][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.358421][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.361605][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.364894][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.368806][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.371933][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.375031][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.380975][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.381941][ T6079] /dev/sg0: Can't lookup blockdev
[   45.384285][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.387761][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.391012][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.395231][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.399549][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.402730][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.405781][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.412906][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.416162][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.424410][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.430345][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.433081][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.436965][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.439743][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.443129][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.443803][ T6075] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

`�ݗ��b����"^���6C�2W
[   45.443803][ T6075] ���7
[   45.446578][ T6061] NILFS (sr0): couldn't find nilfs on the device
[   45.706102][   T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   45.712856][ T6092] 9pnet_fd: Insufficient options for proto=fd
[   45.713038][ T6093] 9pnet_fd: Insufficient options for proto=fd
[   45.801854][ T6100] x_tables: duplicate underflow at hook 3
[   45.803972][ T6100] ip_tables: iptables: counters copy to user failed while replacing table
[   45.805382][ T6100] x_tables: duplicate underflow at hook 3
[   45.806860][ T6100] ip_tables: iptables: counters copy to user failed while replacing table
[   45.837981][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'.
[   45.851254][ T6106] lo: entered allmulticast mode
[   45.852315][ T6106] bond0: entered allmulticast mode
[   45.852540][ T6106] dummy0: entered allmulticast mode
[   45.852735][ T6106] eql: entered allmulticast mode
[   45.852848][ T6106] ifb0: entered allmulticast mode
[   45.852974][ T6106] ifb1: entered allmulticast mode
[   45.855496][ T6106] e1000 0000:00:06.0 eth0: entered allmulticast mode
[   45.864010][ T6106] e1000e 0000:00:02.0 eth1: entered allmulticast mode
[   45.866105][   T30] usb 7-1: Using ep0 maxpacket: 8
[   45.866666][   T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   45.867172][ T6106] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[   45.867430][ T6106] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[   45.867804][ T6106] hwsim0: entered allmulticast mode
[   45.867837][   T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   45.867873][   T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   45.867892][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   45.867903][ T6106] ieee802154 phy0 wpan0: entered allmulticast mode
[   45.867910][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   45.867928][   T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   45.867958][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.868035][ T6106] ieee802154 phy1 wpan1: entered allmulticast mode
[   45.868155][ T6106] teql0: entered allmulticast mode
[   45.868284][ T6106] tunl0: entered allmulticast mode
[   45.868375][ T6106] gre0: entered allmulticast mode
[   45.868445][ T6106] gretap0: entered allmulticast mode
[   45.868506][ T6106] erspan0: entered allmulticast mode
[   45.868572][ T6106] ip_vti0: entered allmulticast mode
[   45.868661][ T6106] ip6_vti0: entered allmulticast mode
[   45.868730][ T6106] sit0: entered allmulticast mode
[   45.868790][ T6106] ip6tnl0: entered allmulticast mode
[   45.868887][ T6106] ip6gre0: entered allmulticast mode
[   45.868957][ T6106] lapb0: entered allmulticast mode
[   45.869067][ T6106] lapb1: entered allmulticast mode
[   45.869145][ T6106] lapb2: entered allmulticast mode
[   45.869217][ T6106] lapb3: entered allmulticast mode
[   45.869320][ T6106] lapb4: entered allmulticast mode
[   45.869433][ T6106] lapb5: entered allmulticast mode
[   45.869546][ T6106] lapb6: entered allmulticast mode
[   45.869798][ T6106] lowpan0: entered allmulticast mode
[   45.870193][ T6106] lapb7: entered allmulticast mode
[   45.902529][ T6108] netlink: 'syz.1.62': attribute type 2 has an invalid length.
[   45.925641][ T6108] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   45.928146][ T6108] bond1: (slave lo): Enslaving as an active interface with an up link
[   45.935878][ T6108] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   46.018794][ T5875] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0002/input/input5
[   46.049752][ T5875] hid-generic 0005:0576:0306.0002: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[   46.064745][ T5731] svc: failed to register nfsdv3 RPC service (errno 111).
[   46.065405][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111).
[   46.065414][ T5731] failed to unregister udp with rpcbind
[   46.065611][ T5731] svc: failed to register nfsdv3 RPC service (errno 97).
[   46.065619][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97).
[   46.065625][ T5731] failed to unregister udp with rpcbind
[   46.078017][   T30] usb 7-1: usb_control_msg returned -32
[   46.078040][   T30] usbtmc 7-1:16.0: can't read capabilities
[   46.097300][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'.
[   46.099737][ T6125] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[   46.104228][ T6125] syz_tun: entered promiscuous mode
[   46.115358][ T6125] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   46.120579][ T6135] netlink: 'syz.1.65': attribute type 12 has an invalid length.
[   46.266094][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   46.288533][ T5090] Bluetooth: hci1: command tx timeout
[   46.288557][ T5090] Bluetooth: hci2: command tx timeout
[   46.321518][ T6162] syz_tun: entered allmulticast mode
[   46.325210][ T6161] syz_tun: left allmulticast mode
[   46.349293][ T6164] Bluetooth: hci0: too big key_count value 38657
[   46.354814][ T6167] Bluetooth: hci0: too big key_count value 38657
[   46.426070][ T5881] usb 5-1: Using ep0 maxpacket: 8
[   46.426538][ T5881] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[   46.426996][ T5881] usb 5-1: config 0 has no interfaces?
[   46.432735][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.432753][ T5881] usb 5-1: Product: syz
[   46.432760][ T5881] usb 5-1: Manufacturer: syz
[   46.432768][ T5881] usb 5-1: SerialNumber: syz
[   46.440517][ T5881] usb 5-1: config 0 descriptor??
[   46.647805][ T6115] gadgetfs: bound to dummy_udc driver
[   46.662559][ T2363] usb 5-1: USB disconnect, device number 3
[   46.886414][ T6174] block device autoloading is deprecated and will be removed.
[   46.912560][ T6179] nvme_fabrics: unknown parameter or missing value 'overlay' in ctrl creation request
[   47.081423][ T6194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.75'.
[   47.081988][ T6191] binder: 6190:6191 ioctl c020f509 2000000003c0 returned -22
[   47.120534][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   47.345706][ T6217] kvm [6216]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   47.346866][ T6217] kvm [6216]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   47.376295][ T5875] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   47.540405][ T5875] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   47.541462][ T5875] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1024
[   47.541493][ T5875] usb 8-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   47.541514][ T5875] usb 8-1: config 1 interface 0 has no altsetting 0
[   47.542598][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   47.542611][ T5875] usb 8-1: SerialNumber: syz
[   47.552480][ T6200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   47.664323][ T6236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40808 sclass=netlink_route_socket pid=6236 comm=syz.1.88
[   47.756409][ T6200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   47.827832][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'.
[   47.905062][ T6250] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[   47.905089][ T6250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   47.945806][ T6258] loop6: detected capacity change from 0 to 7
[   47.952991][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.953389][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.953693][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.953758][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.954831][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.954869][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.955030][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.955120][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.955334][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.955382][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.955528][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.955605][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.955728][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.955804][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.955849][ T6258] ldm_validate_partition_table(): Disk read failed.
[   47.955938][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.956047][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.956791][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.956824][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.957254][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   47.957287][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   47.957891][ T6258] Dev loop6: unable to read RDB block 0
[   47.958691][ T6258]  loop6: unable to read partition table
[   47.958779][ T6258] loop6: partition table beyond EOD, truncated
[   47.958805][ T6258] loop_reread_partitions: partition scan of loop6 (���������-ý?���	���%��`��{������5FLQk݊A�) failed (rc=-5)
[   47.963349][ T6258] ldm_validate_partition_table(): Disk read failed.
[   47.963882][ T6258] Dev loop6: unable to read RDB block 0
[   47.964422][ T6258]  loop6: unable to read partition table
[   47.964588][ T6258] loop6: partition table beyond EOD, truncated
[   47.991839][ T5875] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[   48.002719][   T43] kauditd_printk_skb: 169 callbacks suppressed
[   48.002732][   T43] audit: type=1400 audit(1791060872.353:466): avc:  denied  { bind } for  pid=6261 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.003112][   T43] audit: type=1400 audit(1791060872.353:467): avc:  denied  { setopt } for  pid=6261 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.006940][   T43] audit: type=1400 audit(1791060872.363:468): avc:  denied  { read } for  pid=6261 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.007112][   T43] audit: type=1400 audit(1791060872.363:469): avc:  denied  { execmem } for  pid=6261 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   48.007841][   T43] audit: type=1400 audit(1791060872.363:470): avc:  denied  { mmap_zero } for  pid=6261 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   48.009020][   T43] audit: type=1400 audit(1791060872.363:471): avc:  denied  { write } for  pid=6261 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   48.030500][   T43] audit: type=1400 audit(1791060872.383:472): avc:  denied  { read } for  pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   48.037785][   T43] audit: type=1400 audit(1791060872.393:473): avc:  denied  { search } for  pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.037885][   T43] audit: type=1400 audit(1791060872.393:474): avc:  denied  { search } for  pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.037964][   T43] audit: type=1400 audit(1791060872.393:475): avc:  denied  { search } for  pid=5445 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.290104][ T5875] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   48.385648][   T10] usb 8-1: USB disconnect, device number 2
[   48.387913][   T10] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[   48.429785][ T2363] usb 7-1: USB disconnect, device number 6
[   48.458587][ T5875] usb 5-1: Using ep0 maxpacket: 8
[   48.459361][ T5875] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   48.460235][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   48.460258][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.461604][ T5875] usb 5-1: config 0 descriptor??
[   48.489131][ T6281] netlink: 224 bytes leftover after parsing attributes in process `syz.2.96'.
[   48.614429][ T6289] loop9: detected capacity change from 0 to 16384
[   48.668741][ T5875] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   48.679795][ T6289] loop9: detected capacity change from 16384 to 16383
[   48.838016][ T6309] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   48.878393][   T30] usb 5-1: USB disconnect, device number 4
[   49.004982][ T6324] [U] 
[   49.061057][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061267][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061337][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061408][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061476][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061544][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061613][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061682][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061750][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.061822][ T6327] xt_TCPMSS: Only works on TCP SYN packets
[   49.084731][   T38] IPVS: starting estimator thread 0...
[   49.176132][ T6333] IPVS: using max 42 ests per chain, 100800 per kthread
[   49.231018][   T65] block nbd0: Receive control failed (result -32)
[   49.232763][ T6334] block nbd0: Receive control failed (result -32)
[   49.289825][ T6339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.106'.
[   49.343617][ T6340] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   49.483982][ T6344] syzkaller0: entered promiscuous mode
[   49.484007][ T6344] syzkaller0: entered allmulticast mode
[   49.582255][ T6347] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.582601][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.663555][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.732096][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.795373][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.859619][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.916651][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   49.964709][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.006965][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.068816][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.134314][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.187160][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.271451][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.330268][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.377175][ T6348] ref_ctr increment failed for inode: 0xc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c0cd5c0
[   50.425244][ T6348] uprobe: syz.1.108:6348 failed to unregister, leaking uprobe
[   50.591577][ T5731] bond0: (slave syz_tun): Releasing backup interface
[   50.605632][ T6371] netlink: 60 bytes leftover after parsing attributes in process `syz.2.113'.
[   50.636478][ T5780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.672022][ T5780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.770483][ T5780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.778584][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   50.779495][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   50.779967][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   50.780587][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   50.781025][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   50.845265][ T6392] netlink: 80 bytes leftover after parsing attributes in process `syz.3.119'.
[   50.848318][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'.
[   50.871807][ T5780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.029513][ T5780] bridge_slave_1: left allmulticast mode
[   51.029535][ T5780] bridge_slave_1: left promiscuous mode
[   51.030035][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.032760][ T5780] bridge_slave_0: left allmulticast mode
[   51.032772][ T5780] bridge_slave_0: left promiscuous mode
[   51.032857][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.107358][ T1040] hid (null): report_id 0 is invalid
[   51.107425][ T1040] hid (null): report_id 0 is invalid
[   51.107437][ T1040] hid (null): global environment stack underflow
[   51.107443][ T1040] hid (null): unknown global tag 0xd
[   51.107465][ T1040] hid (null): invalid report_size 46081
[   51.111892][ T1040] hid-generic 0005:FFFFF801:0330.0003: report_id 0 is invalid
[   51.111905][ T1040] hid-generic 0005:FFFFF801:0330.0003: item 0 0 1 8 parsing failed
[   51.112172][ T1040] hid-generic 0005:FFFFF801:0330.0003: probe with driver hid-generic failed with error -22
[   51.117002][ T5875] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   51.152134][ T5780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.153965][ T5780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.154851][ T5780] bond0 (unregistering): Released all slaves
[   51.164754][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'.
[   51.174088][ T6404] erspan1: entered promiscuous mode
[   51.268450][ T5875] usb 8-1: device descriptor read/64, error -71
[   51.389451][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.389542][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.389600][ T6386] bridge_slave_0: entered allmulticast mode
[   51.390419][ T6386] bridge_slave_0: entered promiscuous mode
[   51.403504][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2
[   51.404917][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.405026][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.405130][ T6386] bridge_slave_1: entered allmulticast mode
[   51.406718][ T6386] bridge_slave_1: entered promiscuous mode
[   51.422700][ T6427] syz_tun: entered allmulticast mode
[   51.452663][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.456651][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.470943][ T6386] team0: Port device team_slave_0 added
[   51.484146][ T6386] team0: Port device team_slave_1 added
[   51.506219][ T5875] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   51.515264][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.515275][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.515288][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.532499][ T5780] hsr_slave_0: left promiscuous mode
[   51.532906][ T5780] hsr_slave_1: left promiscuous mode
[   51.533501][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.533521][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.533974][ T5780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.533984][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.544899][ T5780] veth1_macvtap: left promiscuous mode
[   51.544932][ T5780] veth0_macvtap: left promiscuous mode
[   51.544981][ T5780] veth1_vlan: left promiscuous mode
[   51.545056][ T5780] veth0_vlan: left promiscuous mode
[   51.636148][ T5875] usb 8-1: device descriptor read/64, error -71
[   51.678712][ T5780] team0 (unregistering): Port device team_slave_1 removed
[   51.685436][ T5780] team0 (unregistering): Port device team_slave_0 removed
[   51.746660][ T5875] usb usb8-port1: attempt power cycle
[   51.767940][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.767955][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.767976][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.775815][ T6426] syz_tun: left allmulticast mode
[   51.822038][ T6386] hsr_slave_0: entered promiscuous mode
[   51.822551][ T6386] hsr_slave_1: entered promiscuous mode
[   51.822836][ T6386] debugfs: 'hsr0' already exists in 'hsr'
[   51.822847][ T6386] Cannot create hsr debugfs directory
[   51.940952][ T6386] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   51.944134][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   51.944757][ T6386] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   51.950837][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   51.951281][ T6386] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   51.954539][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   51.955067][ T6386] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   51.959997][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   51.965937][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3
[   52.008280][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.018404][ T6386] 8021q: adding VLAN 0 to HW filter on device team0
[   52.021292][  T221] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.021338][  T221] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.026140][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.026184][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.056081][ T5633] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   52.106135][ T5875] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   52.112990][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4
[   52.130716][ T5875] usb 8-1: device descriptor read/8, error -71
[   52.227154][ T5633] usb 5-1: not running at top speed; connect to a high speed hub
[   52.227175][ T5633] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   52.228354][ T5633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   52.228371][ T5633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   52.229881][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.229893][ T5633] usb 5-1: Product: syz
[   52.229902][ T5633] usb 5-1: Manufacturer: syz
[   52.229910][ T5633] usb 5-1: SerialNumber: syz
[   52.235045][ T5633] oti6858 5-1:1.0: oti6858 converter detected
[   52.242442][ T5633] usb 5-1: oti6858 converter now attached to ttyUSB0
[   52.244177][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.281313][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5
[   52.366517][ T5875] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   52.369018][ T6386] veth0_vlan: entered promiscuous mode
[   52.374835][ T6386] veth1_vlan: entered promiscuous mode
[   52.389976][ T6386] veth0_macvtap: entered promiscuous mode
[   52.392079][ T6386] veth1_macvtap: entered promiscuous mode
[   52.398968][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.399338][ T5875] usb 8-1: device descriptor read/8, error -71
[   52.402124][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.454906][  T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.454928][  T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.477444][  T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.477467][  T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.486211][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.486250][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.486281][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.486310][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.506516][ T5875] usb usb8-port1: unable to enumerate USB device
[   52.566447][ T6430] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90
[   52.572983][   T42] usb 5-1: USB disconnect, device number 5
[   52.581685][   T42] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   52.582323][   T42] oti6858 5-1:1.0: device disconnected
[   52.846138][ T5090] Bluetooth: hci2: command tx timeout
[   53.089277][   T43] kauditd_printk_skb: 113 callbacks suppressed
[   53.089293][   T43] audit: type=1400 audit(1791060877.443:589): avc:  denied  { unmount } for  pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   53.370420][   T43] audit: type=1400 audit(1791060877.723:590): avc:  denied  { unmount } for  pid=6386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   53.406221][ T2363] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   53.445362][   T43] audit: type=1400 audit(1791060877.793:591): avc:  denied  { write } for  pid=6487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.497880][ T6486] netlink: 'syz.4.127': attribute type 32 has an invalid length.
[   53.497896][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'.
[   53.499143][   T43] audit: type=1400 audit(1791060877.853:592): avc:  denied  { write } for  pid=6490 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.508719][ T6486] bond1: Setting coupled_control to off (0)
[   53.556214][ T2363] usb 5-1: Using ep0 maxpacket: 8
[   53.556686][ T2363] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   53.557505][ T2363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.557518][ T2363] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   53.557539][ T2363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   53.557555][ T2363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   53.557575][ T2363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.563019][ T2363] hub 5-1:1.0: bad descriptor, ignoring hub
[   53.563034][ T2363] hub 5-1:1.0: probe with driver hub failed with error -5
[   53.563303][ T2363] cdc_wdm 5-1:1.0: skipping garbage
[   53.563312][ T2363] cdc_wdm 5-1:1.0: skipping garbage
[   53.565811][ T2363] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   53.565822][ T2363] cdc_wdm 5-1:1.0: Unknown control protocol
[   53.616355][ T6496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   53.740698][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'.
[   53.763358][   T43] audit: type=1400 audit(1791060878.113:593): avc:  denied  { read write } for  pid=6482 comm="syz.0.126" name="cdc-wdm0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   53.763992][   T43] audit: type=1400 audit(1791060878.113:594): avc:  denied  { open } for  pid=6482 comm="syz.0.126" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   53.806696][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'.
[   53.808481][   T43] audit: type=1400 audit(1791060878.163:595): avc:  denied  { create } for  pid=6505 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   53.808704][   T43] audit: type=1400 audit(1791060878.163:596): avc:  denied  { bind } for  pid=6505 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   53.809454][   T43] audit: type=1400 audit(1791060878.163:597): avc:  denied  { setopt } for  pid=6505 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   53.809930][   T43] audit: type=1400 audit(1791060878.163:598): avc:  denied  { accept } for  pid=6505 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   53.975492][ T6519] tmpfs: Bad value for 'mpol'
[   54.058369][ T6528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   54.058388][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   54.060238][ T6528] vhci_hcd vhci_hcd.0: Device attached
[   54.139107][ T6541] ip_tables: iptables: counters copy to user failed while replacing table
[   54.140201][ T6541] ip_tables: iptables: counters copy to user failed while replacing table
[   54.173522][ T2363] usb 5-1: USB disconnect, device number 6
[   54.174041][ T6483] cdc_wdm 5-1:1.0: Error autopm - -16
[   54.181609][ T6541] veth1_macvtap: left promiscuous mode
[   54.181626][ T6541] macsec0: entered promiscuous mode
[   54.181634][ T6541] macsec0: entered allmulticast mode
[   54.189188][ T6541] veth1_macvtap: entered promiscuous mode
[   54.189201][ T6541] veth1_macvtap: entered allmulticast mode
[   54.189379][ T6541] macsec0: left promiscuous mode
[   54.189477][ T6541] macsec0: left allmulticast mode
[   54.189484][ T6541] veth1_macvtap: left allmulticast mode
[   54.256770][ T6544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   54.306259][ T2363] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[   54.326268][   T25] usb 42-1: SetAddress Request (2) to port 0
[   54.326308][   T25] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[   54.358122][ T6556] netlink: 'syz.4.144': attribute type 1 has an invalid length.
[   54.358155][ T6556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   54.358169][ T6556] IPv6: NLM_F_CREATE should be set when creating new route
[   54.358202][ T6556] IPv6: NLM_F_CREATE should be set when creating new route
[   54.393928][ T6558] x_tables: duplicate underflow at hook 2
[   54.456955][ T2363] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   54.458456][ T2363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.458474][ T2363] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   54.458498][ T2363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[   54.458521][ T2363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.477814][ T6484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   54.479514][ T2363] hub 5-1:1.0: bad descriptor, ignoring hub
[   54.479531][ T2363] hub 5-1:1.0: probe with driver hub failed with error -5
[   54.479788][ T2363] cdc_wdm 5-1:1.0: skipping garbage
[   54.479795][ T2363] cdc_wdm 5-1:1.0: skipping garbage
[   54.485168][ T2363] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   54.485181][ T2363] cdc_wdm 5-1:1.0: Unknown control protocol
[   54.615298][ T6567] kvm: Disabled LAPIC found during irq injection
[   54.615309][ T6567] kvm: apic: phys broadcast and lowest prio
[   54.740414][ T6535] vhci_hcd: connection reset by peer
[   54.743711][   T13] vhci_hcd vhci_hcd.2: stop threads
[   54.743966][   T13] vhci_hcd vhci_hcd.2: release socket
[   54.744485][   T13] vhci_hcd vhci_hcd.2: disconnect device
[   54.796455][ T5806] usb 5-1: USB disconnect, device number 7
[   55.279148][ T6572] input: syz0 as /devices/virtual/input/input6
[   55.364156][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   55.409504][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   55.450796][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   55.453202][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   55.487767][ T6595] jffs2: notice: (6595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   55.554224][ T6599] binder: 6589:6599 ioctl 4018620d 0 returned -22
[   55.671635][ T6595] program syz.2.151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.749498][ T6616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6616 comm=syz.2.160
[   56.563846][ T6728] netlink: 'syz.2.166': attribute type 1 has an invalid length.
[   56.563863][ T6728] netlink: 'syz.2.166': attribute type 2 has an invalid length.
[   56.697951][ T5090] Bluetooth: hci2: command tx timeout
[   56.699568][ T6745] netlink: 'syz.0.172': attribute type 4 has an invalid length.
[   56.840506][ T6755] netlink: 80 bytes leftover after parsing attributes in process `syz.2.174'.
[   57.061331][ T6768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.176'.
[   57.061478][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   57.710071][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'.
[   57.949347][ T6784] tmpfs: Bad value for 'grpquota_block_hardlimit'
[   58.111555][   T43] kauditd_printk_skb: 61 callbacks suppressed
[   58.111567][   T43] audit: type=1400 audit(1791060882.463:660): avc:  denied  { write } for  pid=6791 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   58.241846][ T6805] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   58.249996][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.189'.
[   58.252900][   T43] audit: type=1400 audit(1791060882.603:661): avc:  denied  { read } for  pid=6808 comm="syz.3.189" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   58.253172][   T43] audit: type=1400 audit(1791060882.603:662): avc:  denied  { open } for  pid=6808 comm="syz.3.189" path="/35/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   58.255256][   T43] audit: type=1400 audit(1791060882.603:663): avc:  denied  { read } for  pid=6808 comm="syz.3.189" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   58.255471][   T43] audit: type=1400 audit(1791060882.603:664): avc:  denied  { open } for  pid=6808 comm="syz.3.189" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   58.591505][ T6782] syz.4.180 (6782): drop_caches: 1
[   58.766263][ T5742] Bluetooth: hci4: command 0x1003 tx timeout
[   58.767551][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   58.776166][ T5090] Bluetooth: hci2: command tx timeout
[   58.826695][   T43] audit: type=1400 audit(1791060883.183:665): avc:  denied  { accept } for  pid=6816 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   58.885150][ T6824] ip6t_hbh: Not strict - not implemented
[   58.930242][   T43] audit: type=1400 audit(1791060883.283:666): avc:  denied  { setopt } for  pid=6820 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   58.966333][   T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   58.984375][ T6827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6827 comm=syz.0.195
[   58.985624][ T6827] Could not find key with description: [syznek_sig=syz]
[   58.985633][ T6827] process_request_key_err: No key
[   58.985637][ T6827] Could not find valid key in user session keyring for sig specified in mount option: [syznek_sig=syz]
[   58.985643][ T6827] One or more global auth toks could not properly register; rc = [-2]
[   58.985660][ T6827] Error validating options; rc = [-2]
[   58.993696][   T43] audit: type=1400 audit(2000000000.049:667): avc:  denied  { set_context_mgr } for  pid=6832 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   58.994674][ T6833] binder: 6832:6833 ioctl c0306201 2000000001c0 returned -22
[   58.995489][   T43] audit: type=1400 audit(2000000000.049:668): avc:  denied  { create } for  pid=6832 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   59.002905][   T43] audit: type=1400 audit(2000000000.059:669): avc:  denied  { sys_admin } for  pid=6832 comm="syz.3.198" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   59.010748][ T6833] capability: warning: `syz.3.198' uses 32-bit capabilities (legacy support in use)
[   59.090911][ T6838] FAULT_INJECTION: forcing a failure.
[   59.090911][ T6838] name fail_futex, interval 1, probability 0, space 0, times 1
[   59.090945][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT(full) 
[   59.090968][ T6838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.090980][ T6838] Call Trace:
[   59.090987][ T6838]  <TASK>
[   59.090994][ T6838]  dump_stack_lvl+0x100/0x190
[   59.091047][ T6838]  should_fail_ex.cold+0x5/0xa
[   59.091074][ T6838]  get_futex_key+0x1d0/0x14f0
[   59.091104][ T6838]  ? __pfx_get_futex_key+0x10/0x10
[   59.091133][ T6838]  ? wakeup_preempt_fair+0x5c3/0xdc0
[   59.091184][ T6838]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[   59.091216][ T6838]  futex_wait_setup+0x91/0x540
[   59.091243][ T6838]  __futex_wait+0x19f/0x300
[   59.091265][ T6838]  ? __pfx___futex_wait+0x10/0x10
[   59.091283][ T6838]  ? __pfx_try_to_wake_up+0x10/0x10
[   59.091303][ T6838]  ? futex_hash+0x311/0x400
[   59.091329][ T6838]  ? __pfx_futex_wake_mark+0x10/0x10
[   59.091351][ T6838]  ? find_held_lock+0x2b/0x80
[   59.091376][ T6838]  ? futex_wake+0x4ea/0x5e0
[   59.091400][ T6838]  futex_wait+0xe6/0x370
[   59.091420][ T6838]  ? __pfx_futex_wait+0x10/0x10
[   59.091444][ T6838]  ? putname+0xb1/0x110
[   59.091475][ T6838]  ? kmem_cache_free+0x127/0x6c0
[   59.091501][ T6838]  do_futex+0x265/0x440
[   59.091528][ T6838]  ? __pfx_do_futex+0x10/0x10
[   59.091550][ T6838]  ? __pfx_do_sys_openat2+0x10/0x10
[   59.091579][ T6838]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   59.091609][ T6838]  __x64_sys_futex+0x34f/0x4d0
[   59.091638][ T6838]  ? __x64_sys_openat+0x12d/0x210
[   59.091667][ T6838]  ? __pfx___x64_sys_futex+0x10/0x10
[   59.091705][ T6838]  do_syscall_64+0x123/0x790
[   59.091725][ T6838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.091744][ T6838] RIP: 0033:0x7faf2ed9e159
[   59.091760][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.091777][ T6838] RSP: 002b:00007faf2fc800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   59.091797][ T6838] RAX: ffffffffffffffda RBX: 00007faf2f025fa8 RCX: 00007faf2ed9e159
[   59.091810][ T6838] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf2f025fa8
[   59.091822][ T6838] RBP: 00007faf2f025fa0 R08: 0000000000000000 R09: 0000000000000000
[   59.091835][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.091846][ T6838] R13: 00007faf2f026038 R14: 00007ffda5453830 R15: 00007ffda5453918
[   59.091879][ T6838]  </TASK>
[   59.093053][ T6838] xt_hashlimit: size too large, truncated to 1048576
[   59.126037][   T42] usb 9-1: Using ep0 maxpacket: 16
[   59.128043][   T42] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[   59.129023][   T42] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   59.129047][   T42] usb 9-1: config 0 interface 0 has no altsetting 0
[   59.130839][   T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.130857][   T42] usb 9-1: Product: syz
[   59.130867][   T42] usb 9-1: Manufacturer: syz
[   59.130878][   T42] usb 9-1: SerialNumber: syz
[   59.133069][   T42] usb 9-1: config 0 descriptor??
[   59.158586][ T6843] input: syz1 as /devices/virtual/input/input7
[   59.271577][ T6848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.202'.
[   59.273956][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'.
[   59.273974][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'.
[   59.274119][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'.
[   59.274128][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'.
[   59.348808][    C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71)
[   59.358912][   T42] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input8
[   59.359147][ T6859] 
[   59.361268][   T42] imon:send_packet: packet tx failed (-71)
[   59.368046][ T6859] ======================================================
[   59.370919][ T6859] WARNING: possible circular locking dependency detected
[   59.373633][ T6859] syzkaller #0 Not tainted
[   59.375618][ T6859] ------------------------------------------------------
[   59.376057][   T42] imon 9-1:0.0: panel buttons/knobs setup failed
[   59.380960][ T6859] syz.0.205/6859 is trying to acquire lock:
[   59.383285][ T6859] ffff888054c3c0b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110
[   59.387107][ T6859] 
[   59.387107][ T6859] but task is already holding lock:
[   59.390365][ T6859] ffffffff90f83da0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0
[   59.394018][ T6859] 
[   59.394018][ T6859] which lock already depends on the new lock.
[   59.394018][ T6859] 
[   59.398074][ T6859] 
[   59.398074][ T6859] the existing dependency chain (in reverse order) is:
[   59.401582][ T6859] 
[   59.401582][ T6859] -> #2 (rfcomm_mutex){+.+.}-{4:4}:
[   59.404563][ T6859]        lock_acquire+0x1d1/0x380
[   59.406086][   T25] usb 42-1: device descriptor read/8, error -110
[   59.408483][ T6859]        __mutex_lock+0x1a4/0x1bd0
[   59.410181][ T6859]        rfcomm_security_cfm+0x3f/0x4b0
[   59.411954][ T6859]        hci_encrypt_cfm+0x18e/0x740
[   59.413640][ T6859]        hci_encrypt_change_evt+0x92c/0xfb0
[   59.415537][ T6859]        hci_event_packet+0x8e9/0xcd0
[   59.416100][   T42] rc_core: IR keymap rc-imon-pad not found
[   59.416110][   T42] Registered IR keymap rc-empty
[   59.416139][   T42] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[   59.416147][   T42] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   59.418457][   T42] imon:send_packet: packet tx failed (-71)
[   59.428485][ T6859]        hci_rx_work+0x451/0xfc0
[   59.430063][ T6859]        process_one_work+0xac7/0x1b10
[   59.431789][ T6859]        worker_thread+0x5ef/0xe50
[   59.433358][ T6859]        kthread+0x373/0x450
[   59.434856][ T6859]        ret_from_fork+0x730/0xd60
[   59.436068][   T42] imon 9-1:0.0: remote input dev register failed
[   59.436111][   T42] imon 9-1:0.0: imon_init_intf0: rc device setup failed
[   59.440728][ T6859]        ret_from_fork_asm+0x1a/0x30
[   59.442439][ T6859] 
[   59.442439][ T6859] -> #1 (hci_cb_list_lock){+.+.}-{4:4}:
[   59.444890][ T6859]        lock_acquire+0x1d1/0x380
[   59.446509][ T6859]        __mutex_lock+0x1a4/0x1bd0
[   59.448141][ T6859]        hci_remote_features_evt+0x485/0x9b0
[   59.450208][ T6859]        hci_event_packet+0x8e9/0xcd0
[   59.451981][ T6859]        hci_rx_work+0x451/0xfc0
[   59.453678][ T6859]        process_one_work+0xac7/0x1b10
[   59.455457][ T6859]        worker_thread+0x5ef/0xe50
[   59.457113][ T6859]        kthread+0x373/0x450
[   59.458633][ T6859]        ret_from_fork+0x730/0xd60
[   59.460334][ T6859]        ret_from_fork_asm+0x1a/0x30
[   59.462038][ T6859] 
[   59.462038][ T6859] -> #0 (&hdev->lock){+.+.}-{4:4}:
[   59.464385][ T6859]        check_prev_add+0xeb/0xe60
[   59.466028][ T6859]        __lock_acquire+0x1528/0x1f40
[   59.467736][ T6859]        lock_acquire+0x1d1/0x380
[   59.469359][ T6859]        __mutex_lock+0x1a4/0x1bd0
[   59.471003][ T6859]        l2cap_chan_connect+0xac/0x2110
[   59.472707][ T6859]        l2cap_sock_connect+0x37a/0x770
[   59.474375][ T6859]        kernel_connect+0x107/0x160
[   59.475939][ T6859]        rfcomm_dlc_open+0x838/0xac0
[   59.477545][ T6859]        rfcomm_sock_connect+0x42c/0x690
[   59.479957][ T6859]        __sys_connect_file+0x146/0x1a0
[   59.481609][ T6859]        __sys_connect+0x141/0x170
[   59.483136][ T6859]        __x64_sys_connect+0x72/0xb0
[   59.484744][ T6859]        do_syscall_64+0x123/0x790
[   59.486349][ T6859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.488343][ T6859] 
[   59.488343][ T6859] other info that might help us debug this:
[   59.488343][ T6859] 
[   59.491364][ T6859] Chain exists of:
[   59.491364][ T6859]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[   59.491364][ T6859] 
[   59.495206][ T6859]  Possible unsafe locking scenario:
[   59.495206][ T6859] 
[   59.497540][ T6859]        CPU0                    CPU1
[   59.499315][ T6859]        ----                    ----
[   59.501019][ T6859]   lock(rfcomm_mutex);
[   59.502381][ T6859]                                lock(hci_cb_list_lock);
[   59.504596][ T6859]                                lock(rfcomm_mutex);
[   59.506707][ T6859]   lock(&hdev->lock);
[   59.508043][ T6859] 
[   59.508043][ T6859]  *** DEADLOCK ***
[   59.508043][ T6859] 
[   59.510629][ T6859] locks held by syz.0.205/6859: 1, last CPU#3:
[   59.512602][ T6859]  #0: ffffffff90f83da0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0
[   59.515604][ T6859] 
[   59.515604][ T6859] stack backtrace:
[   59.517512][ T6859] CPU: 3 UID: 0 PID: 6859 Comm: syz.0.205 Not tainted syzkaller #0 PREEMPT(full) 
[   59.520437][ T6859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.523612][ T6859] Call Trace:
[   59.524697][ T6859]  <TASK>
[   59.525663][ T6859]  dump_stack_lvl+0x100/0x190
[   59.527420][ T6859]  print_circular_bug.cold+0x178/0x1be
[   59.529194][ T6859]  check_noncircular+0x146/0x160
[   59.530793][ T6859]  check_prev_add+0xeb/0xe60
[   59.532297][ T6859]  __lock_acquire+0x1528/0x1f40
[   59.533895][ T6859]  lock_acquire+0x1d1/0x380
[   59.535367][ T6859]  ? l2cap_chan_connect+0xac/0x2110
[   59.537036][ T6859]  ? __pfx___might_resched+0x10/0x10
[   59.538746][ T6859]  __mutex_lock+0x1a4/0x1bd0
[   59.540256][ T6859]  ? l2cap_chan_connect+0xac/0x2110
[   59.541927][ T6859]  ? l2cap_chan_connect+0xac/0x2110
[   59.543680][ T6859]  ? hci_get_route+0x368/0x520
[   59.545604][ T6859]  ? hci_get_route+0x368/0x520
[   59.547320][ T6859]  ? __pfx___mutex_lock+0x10/0x10
[   59.548938][ T6859]  ? _raw_read_unlock+0x28/0x50
[   59.550551][ T6859]  ? hci_get_route+0x368/0x520
[   59.552468][ T6859]  ? __pfx_hci_get_route+0x10/0x10
[   59.554131][ T6859]  ? reacquire_held_locks+0xdd/0x1f0
[   59.555836][ T6859]  ? release_sock+0x21/0x280
[   59.557341][ T6859]  ? l2cap_chan_connect+0xac/0x2110
[   59.559085][ T6859]  l2cap_chan_connect+0xac/0x2110
[   59.560712][ T6859]  ? __local_bh_enable_ip+0xa5/0x120
[   59.562425][ T6859]  l2cap_sock_connect+0x37a/0x770
[   59.564044][ T6859]  ? __pfx_l2cap_sock_connect+0x10/0x10
[   59.565833][ T6859]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   59.567705][ T6859]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   59.569598][ T6859]  kernel_connect+0x107/0x160
[   59.571132][ T6859]  ? __pfx_kernel_connect+0x10/0x10
[   59.572842][ T6859]  ? timer_init_key+0x150/0x310
[   59.574485][ T6859]  rfcomm_dlc_open+0x838/0xac0
[   59.576020][ T6859]  ? __pfx_rfcomm_dlc_open+0x10/0x10
[   59.577738][ T6859]  ? rfcomm_sock_connect+0x3e8/0x690
[   59.579561][ T6859]  ? find_held_lock+0x2b/0x80
[   59.581111][ T6859]  ? rfcomm_sock_connect+0x3e8/0x690
[   59.582819][ T6859]  ? __local_bh_enable_ip+0xa5/0x120
[   59.584422][ T6859]  rfcomm_sock_connect+0x42c/0x690
[   59.585981][ T6859]  __sys_connect_file+0x146/0x1a0
[   59.587522][ T6859]  __sys_connect+0x141/0x170
[   59.588919][ T6859]  ? __pfx___sys_connect+0x10/0x10
[   59.590526][ T6859]  __x64_sys_connect+0x72/0xb0
[   59.592033][ T6859]  ? lockdep_hardirqs_on+0x7d/0x110
[   59.593716][ T6859]  do_syscall_64+0x123/0x790
[   59.595206][ T6859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.597074][ T6859] RIP: 0033:0x7faf2ed9e159
[   59.598530][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.604641][ T6859] RSP: 002b:00007faf2fc5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   59.607263][ T6859] RAX: ffffffffffffffda RBX: 00007faf2f026090 RCX: 00007faf2ed9e159
[   59.609802][ T6859] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000008
[   59.612340][ T6859] RBP: 00007faf2ee3506b R08: 0000000000000000 R09: 0000000000000000
[   59.614869][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.617388][ T6859] R13: 00007faf2f026128 R14: 00007faf2f026090 R15: 00007ffda5453918
[   59.619935][ T6859]  </TASK>
[   59.630185][   T42] imon 9-1:0.0: unable to initialize intf0, err 0
[   59.630197][   T42] imon:imon_probe: failed to initialize context!
[   59.630203][   T42] imon 9-1:0.0: unable to register, err -19
[   59.632840][   T42] usb 9-1: USB disconnect, device number 2
[   59.826298][   T25] usb usb42-port1: attempt power cycle
[   59.926050][   T42] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[   60.076995][   T42] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[   60.077778][   T42] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   60.077794][   T42] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[   60.077806][   T42] usb 9-1: config 0 interface 0 has no altsetting 0
[   60.079386][   T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.079403][   T42] usb 9-1: Product: syz
[   60.079413][   T42] usb 9-1: Manufacturer: syz
[   60.079423][   T42] usb 9-1: SerialNumber: syz
[   60.080931][   T42] usb 9-1: config 0 descriptor??
[   60.081465][ T6812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   60.286182][ T5090] Bluetooth: hci3: command 0x0406 tx timeout
[   60.287051][    C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71)
[   60.288410][   T42] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input10
[   60.346129][   T42] rc_core: IR keymap rc-imon-pad not found
[   60.346142][   T42] Registered IR keymap rc-empty
[   60.346200][   T42] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[   60.346209][   T42] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   60.387485][   T25] usb usb42-port1: unable to enumerate USB device
[   60.506781][   T42] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0
[   60.507292][   T42] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input11
[   60.508843][   T42] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:3> initialized
[   60.693103][ T6866] imon:send_packet: packet tx failed (-71)
[   60.693143][   T25] usb 9-1: USB disconnect, device number 3
[   60.706073][ T6866] imon:lcd_write: send packet failed!
[   63.120127][   T43] kauditd_printk_skb: 11 callbacks suppressed
[   63.120142][   T43] audit: type=1400 audit(2000000004.179:681): avc:  denied  { write } for  pid=6876 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.362611][   T43] audit: type=1400 audit(2000000005.419:682): avc:  denied  { write } for  pid=6879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.402769][   T43] audit: type=1400 audit(2000000005.459:683): avc:  denied  { write } for  pid=6882 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.006002][   T43] audit: type=1400 audit(2000000006.059:684): avc:  denied  { write } for  pid=6885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.045666][   T43] audit: type=1400 audit(2000000006.099:685): avc:  denied  { write } for  pid=6888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1