last executing test programs:

5.198705307s ago: executing program 1 (id=109):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf942, <r1=>r0, 0x80000})
setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000095)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f80)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe050}, 0x20000000)
sendmsg$kcm(r1, &(0x7f0000002480)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000002400)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="ba92addf77c2b165b88f682338b2c1f02b9430437466533c633c8b054276f2b4f7578b4812708099b1f8e332b15ca547bdadb9073b7af881ad888b6e6a07a5d9967e298e1181f2a18182e7bfc5f7235d7cd946527c79e32b2e6caee4f56bef2ed12a950ca770c2437cc92792064cbfa5e8ddaf25abe991a57d51b4c0291225f704a985ee", 0x84}, {&(0x7f0000002180)="bcbd608936eac9b4e944e3eff810b09c3d356ac86c2d4091bbd5b5df728867f277336a1456c41f6c87277fdeb677406999f83c7a1a9b8da5ff9afee266f55c6eb838e0e7240f2487cd13cc9bd4c9b3288d6cc6c43ce7089b901158c2df9f84439b656c28796b41a4c4fe966e8d4b22921eae51fe10fcd042fdbb0158807d8d1de5677ed903568acfac3252f03570b1462c283a9fb305f470931007", 0x9b}, {&(0x7f0000002240)="2f2f3f11a30fc47ded30813272045573965ff33226ab0069f53c8d7cbed2f6beecff1202843b7c637d779fd6fe88b5b9fb1b68c8d558bffe349db8a65add015790002f86702ed9017970a564dc25578f0625aec4a337e102db7622184d6103e638758dd584feffef2e9202502762ec4a3e146bd0b66995df96955f8a6735c4cc0d4e6b5102c469c49988b13ab69d6f825a294e649822b201e8477e9a0dc9ebdbd49cc2d557e9418ded191597a1e7f48ce297ddfaa0bf9cdff45ab96c5829b384a2ee9960bcbbe162d29b47ecc1b880b7e606d1f02fbc29c7b07090219a76fa9e85e63fab", 0xe4}, {&(0x7f0000002340)="eda9cff1e07d821180f28de68d62ff30b1f48055a94332d70aa8849420cbc4c353a994ef69909f2102e42fb04eccac36f3f153bd1d8e335fb7eb3c99da9ed092aacfd087f58cf22cf4e0b596cdc9b8e497b802313184dd00776b61d3f831f99072c024c94dd69e5268abcc636b11767150f42d68fdef2537c7109fd7a6a7d6e93ea7", 0x82}], 0x5}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000600)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)

5.19848069s ago: executing program 1 (id=110):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000dc0)="cb000000150081054e81f7820244b904021f08010a000000040000a118000200ac479fefecbfdc7c43af73eba443fe141414ffff0d1208000f010081040188001603000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fdae408f456211bef32d400000000cb090000001fb791643a5ecb001b146218a09345d600000000d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x20000014)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0xfffffffc, 0x4}, 0x10)
write(r1, &(0x7f0000000140)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)

5.11978737s ago: executing program 1 (id=111):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x10ed22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1ffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000004000000ff03000001000000", @ANYRES32, @ANYBLOB="c843a46d00000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"5fbcdbfb555ab7b6da2c492fe4db90aeaf8e5347c79716e75fe060d73e9de531ef8085f88b3a09f05bf084c593b4dab8756600000000077eebf9940a0b60f02d333a2c2aa407522edaabb8cfccecb9d7e0cfd915c17f32bc1ac7e430af977b671ede8605c7c72a5d1397639fd21bf848190fbdbfaeb7e166205def53caa18404ba077c2b5713acbc3d125aea78dfd962dd250511376c3a3b5732114cc92d27be04c7c146cedcc9081a8435f9c67a0c5174df503a84dc11d1d98a2473fbd39de5d9c56ffa28098914b4d47ea99e8134deb75f944afd0df95136c08e057e4d839936c0755318e58ae63dd46f7009df574d263f87508d7e496efb29de0496d4018e8d6c6f7d016752a1d10bb1df8b406bb488dbb43ffd11eb1eb9b36d57cee3b9e4e2e72e97a8059bb8e8120bf04b1d0b929692cc3e5508293bb205beba29259f18213a602dde8a8a19dd2a16b26476ca4f24e86b84ee76d86aacc862c59e154e6bec6ec6e86eb3d9dd50c4ecf6de82c2419674da3b885ac6abaea4765d256727d8560fb55d0bee0c11b1e8a05d4b932254673e8f67abfca2f184a23839164b15e021bff742605fbeb628ab93803e90954074762487b0afc90eec0e31e75dda865693dd655a190f16dbdf7ce7693d27aaf31758d97e25ab40fc44dbc911639d99b592dd0c660b820a46b8374f7e8030031c39768fb9361164f5dad133cf0d5d66c617d3d62b1f0b80e9f88ffc872df05fb5822601dfe4b39179ace0a4f6808b39bad72a80a9a9bd579d0f9a104191ef6e708083218053d3daf8211dff0a87568b7c734ab79b26cf2a65d66b00f2c2f0d3ffd5fc35b58795406446275afb8df4247add7730331b045d384b0c9fa06284463eec7167512277a435ced48980aab83b37a85b7a33ce8fd8b2a543af82bd15955b12833a59645e1de6bd6ab86c4a046a0323415351e6ddb9bcb869d2e7d092b234bfa8c5be098abcd24d8b4a659b36d8af4f3136d23f9115ea6bdc62fb89e2de415e0f08bd6ec5cc53ee3a666049168a88191c6911ea5fe7972f5627923e8b5b9e7c5323da43d48b25caee3016f88c8178fb8ab1149547e33d7fff442fa3ab42408c87cdfe35a82034bd77399a0861ce16141670ffecde05c7393ae522430425707a4c7d988f34a494727e0b1920e93c95af07d3affe9d41bb82d59ff2149705bb782c9d85e53320268fb57096c6c47e616c457a371dda361170f706e53bf9a9ac5692b72d44072217ecb8646e841b6929251a080f56be308c47dac5d59db54bd1ca7499cf3bf7cb8bb763fed9a75d2eb69573b118e3ee78fb11d41c1ce314538fec8fc542c7bf4865841a2e71fc1efd9fa385903372e3670d96398128e75d786f242a6dbf2c053dc48ee2398763b1ba3550136c14ac7ad77d3c8e97b2f36b6af200"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.348381051s ago: executing program 1 (id=119):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611040000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x3000000000000500}])
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000000c0)=""/16, 0xa000, 0x1800, 0x3, 0x5}, 0x20)

4.189806797s ago: executing program 1 (id=120):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) (async)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) (async)
connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='wg0\x00') (async)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async)
sendmmsg(r3, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)="00264ad3bb1f1fb177230524f7084b5ed2bab131db643728c9406df2e678342700c4567177d5aa837c29544e52e32ae6e734b87d6e1ea427ec8da9dc868da96c1e7c81556a323fe40f4811d7e658fb5ba66ab45072c346dc6f2004bdb4164c2841ceef537e060bc729cecf2e0b83ad3af18689bc497b21510e77831aa6322e2ab61ff05d2290509857fb5d6a357523d3a6896ec9af0c8fef56c7efcea6cc7787f4afb3084b3c470a19067b357e60017a093ad68dff60649a95b61f637359635e542d37", 0xc3}, {&(0x7f00000002c0)="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", 0x4de}], 0x2}}], 0x1, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40844)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4)
syz_emit_ethernet(0x23, &(0x7f0000000840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@generic={0x0, "974319ce12d5c7c85c8bd30d514824dd67"}}}, &(0x7f0000000200)={0x0, 0x2, [0x105, 0x360, 0x3bf, 0x1b6]})
r4 = io_uring_setup(0x1873, &(0x7f0000000100)={0x0, 0x4dc0, 0x9c080, 0x1, 0x1b1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d, 0x800}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000800)) (async)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)

4.189336482s ago: executing program 1 (id=121):
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x8, 0x6, 0x7, 0x38, @remote, @remote, 0x8, 0x7, 0x0, 0x15f}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
r3 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010003000000fff003040040000102030109022400f901072005098095c4b412e4080d090501020004022e08090582021000d67f092f128596d295e3d93e1f6055716a4d93972fd39496124717836a0ecb2c12b662fab9cbebc5c30dd52ac416642f0f7f78f9a864372884b32d4b7c4ec55cb0dcb527c4d7fe93eb79299fa3a09681df204c3152b21d598452e9edfc8b4414d80300"/160], &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xe, 0x5, 0x0, 0x20}, 0x2d, &(0x7f0000000840)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc5, 0x3, 0x8a, 0x401}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x7, 0x9, 0x2000, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8de0f3c3457925f, 0x0, 0x0, 0x9, 0xb}]}})
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd000128000400"], 0xfdef)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x1241, &(0x7f0000001000)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "59e3b5", 0x120b, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0xe0, 0x2, 0x4, 0x1, 0x3, 0x28, 0x9c0, [@dev={0xfe, 0x80, '\x00', 0x15}]}, @routing={0x1d, 0x4, 0x0, 0x1, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x17}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x0, 0x0, 0x7, [@mcast1, @private1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @dstopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @hopopts={0x88, 0x5, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7e, 0x5, [0x8, 0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc}]}, @dstopts={0x8, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x95}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x7ff}]}, @hopopts={0x2f, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x4, [0x3ff]}}, @hao={0xc9, 0x10, @private1}, @enc_lim, @pad1, @jumbo={0xc2, 0x4, 0x7}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x27, 0x2, 0x3, 0x2, [{0x3, 0x14, "564711a8414aed979032af9adcd58e200a21139d8fd6ad64b4566ecac7cc4b2fe390c2b2960418bd4089d8792124a68fcc875c39f9e6e1dfc636d3e001bd11b7f7b371a991647371c0624d38c272fe9527db78b1c5a7a82d79120da86d11467a39fbf4025c7c20ea3121bf6e3ef18365e0370b8c5bebf02e8e4de9b648e65d953209e463ecbe451f0aa0cafbeaeeaeea7681be11a9f2f939470e2832959c80"}, {0x22, 0x200, "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"}]}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x5c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
syz_usb_control_io$printer(r3, &(0x7f0000000500)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="00045700000057103c39e112250657ec63f654b8861e44b4be81489ce2a35077bf0c92028de45fe6e3ab99f9c78c2ef80600000000000000b29518c14327c564af630e43ec286be6d07ef9e105901be29ff00799aa74a10ced49d77bb0"], &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000740)={0x34, &(0x7f0000000540)={0x20, 0x11, 0xb1, "4b5bb8e28b0cebb957498733afe3f078562a411a4394e9f1a23fe1b33ab5910af9cce41a5138ef5136058efbdf4e1df9a1dd69147dafde427dca79d68317c543064cd32252ec6f68a6f3296653c67f68daeb7ff48372b274bc7d778b9d2c1893c0bdebfb5d52563dd28f2d7a15ad54f8eeca94f5ee693cc2e6813611f5124bd8bca310392c5e0497c24fe09057e853883fb76e2f2a4c087ea6944ed25281bc8841f7fb6ad20d4bc66515169b7309b01e61"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0xf, {0xd, "098e5eb3f4cb1319409a185de6"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x1}})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x18}, 0x1, 0x5502000000000000}, 0x4000)
write$vhost_msg_v2(r11, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48)
getpid()

2.268179625s ago: executing program 0 (id=136):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c00028006001200", @ANYBLOB="0400140008001d00027f"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.209280589s ago: executing program 0 (id=138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xd, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0)

2.128890935s ago: executing program 0 (id=139):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x7, 0xb9fe, 0x9, "ffff5300"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r1 = syz_open_pts(r0, 0x101000)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x17)

1.799815806s ago: executing program 3 (id=147):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007', @ANYBLOB="1800000004000000020000000000000001"], 0x50)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x800, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1.74024002s ago: executing program 3 (id=149):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.097614008s ago: executing program 0 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn'])
ustat(0x801, &(0x7f0000000300))
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d19"], 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r1, 0x100000000)
mount(0x0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x302c2c, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt/@cell/foo@sys\x00', 0x1, 0x80)

1.097315761s ago: executing program 2 (id=159):
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8032, 0xffffffffffffffff, 0x28f41000)
userfaultfd(0x801) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0, 0x3c}, 0x28)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$CDROMSEEK(r2, 0x5316, &(0x7f00000001c0)={0xb4, 0x6, 0x81, 0x4, 0x6, 0x2})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0), 0x2000000}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0), 0x2000000}, 0x20)

979.149706ms ago: executing program 0 (id=160):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000140)={0x400, 0x1, &(0x7f00000000c0)=[r8], 0x0, 0x0, 0x0})
sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8120, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

806.282162ms ago: executing program 2 (id=161):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

801.428612ms ago: executing program 2 (id=162):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x7ffff, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff)
sendfile(r1, r1, 0x0, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r4)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x20000000) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, r2, 0x200, 0x70bd2b, 0x0, {0x35}}, 0x14}}, 0x0)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x200013, 0x0)

749.878047ms ago: executing program 0 (id=163):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={<r3=>0x0, @in6={{0xa, 0x4e24, 0xf4, @rand_addr=' \x01\x00', 0xd}}}, &(0x7f0000000200)=0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0xbc06, 0x73663dea}, 0xc)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x8a, 0x0, 0x40000001, 0x6}, 0x28)
r6 = socket$kcm(0x11, 0x2, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x10, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pidfd_getfd(0xffffffffffffffff, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x400300, 0x10)

698.584374ms ago: executing program 2 (id=164):
r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r1, r2, 0x68, 0xfdfffffe)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x44ca, 0x400, 0x2, 0x104, 0x0, r0}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88a0, 0x8, 0x3, 0x1e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca74, 0x10000, 0x0, 0x3e4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71b1, 0x20000, 0x3, 0x206, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x33de, 0x4000, 0x3, 0x30c, 0x0, r0}}], 0x4, &(0x7f0000001980)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x80}, 0x0, 0x0, '\x00', {0x4, 0x5df, 0x0, &(0x7f0000000980)=@buf_512="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"}}, &(0x7f0000001a00))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x800001, 0x15}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r15 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r15)
r16 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r16, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0xffff9335})
wait4(r15, 0x0, 0x40000000, 0x0)

519.513354ms ago: executing program 3 (id=165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0)

449.953124ms ago: executing program 2 (id=166):
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x8}, 0x20) (async)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x2, 0x3}, 0x20) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3)

449.821909ms ago: executing program 2 (id=167):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x7, 0xb9fe, 0x9, "ffff5300"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r1 = syz_open_pts(r0, 0x101000)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x17)

358.599675ms ago: executing program 3 (id=168):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000002bc0)=0x4, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
poll(&(0x7f0000001280)=[{r2, 0x8100}], 0x1, 0x4d8b7b7e)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "b90316a140a9f4f2"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0)
prctl$PR_SET_THP_DISABLE(0x41, 0x3)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r6, 0x4b65, 0x7)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

129.309943ms ago: executing program 3 (id=169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x3, 0x8000000, 0x1000, &(0x7f0000fa2000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
recvmsg(r6, 0x0, 0x3f01)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0xc0, 0x2)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0)
write(r8, &(0x7f00000001c0)='k', 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @mcast2, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0)

0s ago: executing program 3 (id=170):
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0)
writev(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1', 0x1)

kernel console output (not intermixed with test programs):

[   38.042429][   T42] audit: type=1400 audit(1787908618.675:114): avc:  denied  { rlimitinh } for  pid=5628 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.051141][   T42] audit: type=1400 audit(1787908618.675:115): avc:  denied  { siginh } for  pid=5628 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.596995][   T42] audit: type=1400 audit(1787908619.245:116): avc:  denied  { write } for  pid=5633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   38.645552][   T42] audit: type=1400 audit(1787908619.295:117): avc:  denied  { write } for  pid=5636 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.208258][   T42] audit: type=1400 audit(1787908619.855:118): avc:  denied  { write } for  pid=5639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.258623][   T42] audit: type=1400 audit(1787908619.905:119): avc:  denied  { write } for  pid=5642 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.349415][   T42] audit: type=1400 audit(1787908620.005:120): avc:  denied  { write } for  pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.404054][   T42] audit: type=1400 audit(1787908620.055:121): avc:  denied  { write } for  pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.487264][   T42] audit: type=1400 audit(1787908620.135:122): avc:  denied  { write } for  pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.535906][   T42] audit: type=1400 audit(1787908620.185:123): avc:  denied  { write } for  pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:8230' (ED25519) to the list of known hosts.
[   39.756443][   T42] audit: type=1400 audit(1787908620.405:124): avc:  denied  { name_bind } for  pid=5659 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   39.792851][   T42] audit: type=1400 audit(1787908620.445:125): avc:  denied  { execute } for  pid=5660 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   42.163157][ T5660] cgroup: Unknown subsys name 'net'
[   42.323188][ T5660] cgroup: Unknown subsys name 'cpuset'
[   42.328742][ T5660] cgroup: Unknown subsys name 'rlimit'
[   42.586354][ T5710] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   43.267387][ T5660] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.384613][   T42] kauditd_printk_skb: 30 callbacks suppressed
[   46.384625][   T42] audit: type=1400 audit(1787908627.035:156): avc:  denied  { execmem } for  pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   46.595891][   T42] audit: type=1400 audit(1787908627.245:157): avc:  denied  { create } for  pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.609331][   T42] audit: type=1400 audit(1787908627.245:158): avc:  denied  { create } for  pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.615642][   T42] audit: type=1400 audit(1787908627.245:159): avc:  denied  { create } for  pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.622191][   T42] audit: type=1400 audit(1787908627.245:160): avc:  denied  { read write } for  pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.630710][   T42] audit: type=1400 audit(1787908627.245:161): avc:  denied  { read write } for  pid=5721 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.638353][   T42] audit: type=1400 audit(1787908627.245:162): avc:  denied  { open } for  pid=5721 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.640532][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.646103][   T42] audit: type=1400 audit(1787908627.245:163): avc:  denied  { open } for  pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.650144][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.651901][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.652356][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   46.653256][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   46.653494][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.654394][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   46.654773][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   46.657154][   T42] audit: type=1400 audit(1787908627.255:164): avc:  denied  { ioctl } for  pid=5723 comm="syz-executor" path="socket:[7423]" dev="sockfs" ino=7423 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.657180][   T42] audit: type=1400 audit(1787908627.255:165): avc:  denied  { ioctl } for  pid=5721 comm="syz-executor" path="socket:[2739]" dev="sockfs" ino=2739 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.657875][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.662599][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.664081][ T5732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.664865][ T5732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.665926][ T5732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.666341][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.666715][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.667026][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.669592][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.672109][ T5732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.676258][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.731445][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.372688][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.376195][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.378924][ T5723] bridge_slave_0: entered allmulticast mode
[   47.382919][ T5723] bridge_slave_0: entered promiscuous mode
[   47.387269][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.389473][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.391739][ T5729] bridge_slave_0: entered allmulticast mode
[   47.395193][ T5729] bridge_slave_0: entered promiscuous mode
[   47.407693][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.410706][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.413732][ T5722] bridge_slave_0: entered allmulticast mode
[   47.417203][ T5722] bridge_slave_0: entered promiscuous mode
[   47.426728][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.429535][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.431955][ T5723] bridge_slave_1: entered allmulticast mode
[   47.434736][ T5723] bridge_slave_1: entered promiscuous mode
[   47.444587][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.447258][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.450671][ T5729] bridge_slave_1: entered allmulticast mode
[   47.453345][ T5729] bridge_slave_1: entered promiscuous mode
[   47.462459][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.465150][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.467623][ T5722] bridge_slave_1: entered allmulticast mode
[   47.470475][ T5722] bridge_slave_1: entered promiscuous mode
[   47.514177][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.518546][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.523056][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.528087][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.531342][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.533770][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.536192][ T5721] bridge_slave_0: entered allmulticast mode
[   47.538918][ T5721] bridge_slave_0: entered promiscuous mode
[   47.543193][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.548056][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.558245][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.560771][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.563050][ T5721] bridge_slave_1: entered allmulticast mode
[   47.565753][ T5721] bridge_slave_1: entered promiscuous mode
[   47.606663][ T5729] team0: Port device team_slave_0 added
[   47.610412][ T5722] team0: Port device team_slave_0 added
[   47.620589][ T5723] team0: Port device team_slave_0 added
[   47.625296][ T5729] team0: Port device team_slave_1 added
[   47.628397][ T5722] team0: Port device team_slave_1 added
[   47.637561][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.641831][ T5723] team0: Port device team_slave_1 added
[   47.664073][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.685142][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.687362][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.695847][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.701145][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.703862][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.712850][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.722749][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.725588][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.736549][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.741841][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.744127][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.752949][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.762233][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.764601][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.772956][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.778257][ T5721] team0: Port device team_slave_0 added
[   47.780512][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.782637][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.790505][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.804352][ T5721] team0: Port device team_slave_1 added
[   47.842021][ T5723] hsr_slave_0: entered promiscuous mode
[   47.845098][ T5723] hsr_slave_1: entered promiscuous mode
[   47.848362][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.851092][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.861956][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.884988][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.887821][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.898907][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.912646][ T5729] hsr_slave_0: entered promiscuous mode
[   47.916236][ T5729] hsr_slave_1: entered promiscuous mode
[   47.919558][ T5729] debugfs: 'hsr0' already exists in 'hsr'
[   47.922042][ T5729] Cannot create hsr debugfs directory
[   47.934542][ T5722] hsr_slave_0: entered promiscuous mode
[   47.936906][ T5722] hsr_slave_1: entered promiscuous mode
[   47.939443][ T5722] debugfs: 'hsr0' already exists in 'hsr'
[   47.941288][ T5722] Cannot create hsr debugfs directory
[   48.025624][ T5721] hsr_slave_0: entered promiscuous mode
[   48.028196][ T5721] hsr_slave_1: entered promiscuous mode
[   48.031171][ T5721] debugfs: 'hsr0' already exists in 'hsr'
[   48.033475][ T5721] Cannot create hsr debugfs directory
[   48.272453][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.286571][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.291584][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.295964][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.298874][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.304623][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.308098][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.313390][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.363894][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.370280][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.372922][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.377236][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.380883][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.386221][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.388754][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.393271][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.465013][ T5722] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.472878][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.482689][ T5722] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.487214][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.500757][ T5722] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.504695][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.507343][ T5722] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.512561][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.527312][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.553880][ T5721] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.560832][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.564870][ T5721] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.570458][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.579977][ T5721] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.584037][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.587192][ T5721] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.592131][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.606128][ T5723] 8021q: adding VLAN 0 to HW filter on device team0
[   48.620422][  T228] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.623155][  T228] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.637912][  T228] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.641035][  T228] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.647968][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.690915][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[   48.706526][  T228] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.709727][  T228] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.723270][  T228] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.725672][  T228] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.730558][ T5733] Bluetooth: hci1: command tx timeout
[   48.730611][   T65] Bluetooth: hci3: command tx timeout
[   48.739255][   T65] Bluetooth: hci2: command tx timeout
[   48.780950][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.810018][   T65] Bluetooth: hci0: command tx timeout
[   48.822002][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.832934][ T5722] 8021q: adding VLAN 0 to HW filter on device team0
[   48.843030][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.846120][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.866753][  T228] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.869697][  T228] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.874727][ T5721] 8021q: adding VLAN 0 to HW filter on device team0
[   48.885358][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.888114][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.906790][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.908984][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.035941][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.068062][ T5723] veth0_vlan: entered promiscuous mode
[   49.076275][ T5723] veth1_vlan: entered promiscuous mode
[   49.105906][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.121726][ T5723] veth0_macvtap: entered promiscuous mode
[   49.126977][ T5723] veth1_macvtap: entered promiscuous mode
[   49.142630][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.157964][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.177211][ T5729] veth0_vlan: entered promiscuous mode
[   49.195646][ T5729] veth1_vlan: entered promiscuous mode
[   49.219544][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.224939][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.244496][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.258277][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.258661][ T5729] veth0_macvtap: entered promiscuous mode
[   49.272553][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.272571][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.282323][ T5729] veth1_macvtap: entered promiscuous mode
[   49.327219][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.329253][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.329984][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.346993][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.381200][ T5723] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.402719][ T5721] veth0_vlan: entered promiscuous mode
[   49.409335][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.415082][ T5722] veth0_vlan: entered promiscuous mode
[   49.446683][ T5722] veth1_vlan: entered promiscuous mode
[   49.454378][ T5721] veth1_vlan: entered promiscuous mode
[   49.468362][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.472145][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.478127][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.510629][ T5721] veth0_macvtap: entered promiscuous mode
[   49.517836][ T5722] veth0_macvtap: entered promiscuous mode
[   49.518586][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.522173][ T5721] veth1_macvtap: entered promiscuous mode
[   49.523095][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.533867][ T5722] veth1_macvtap: entered promiscuous mode
[   49.544442][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.558800][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.564852][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.567632][ T5873] syzkaller0: entered promiscuous mode
[   49.570597][ T5873] syzkaller0: entered allmulticast mode
[   49.636306][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.692507][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.738152][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.740061][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.741097][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.756473][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.761478][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.770238][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.787819][ T5881] random: crng reseeded on system resumption
[   49.793841][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.796361][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.807359][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.811264][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.820047][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.824767][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.828493][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.833976][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.836578][ T5881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   49.837558][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.845230][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.846751][ T5881] rnbd_client L202: map_device: Unknown parameter or missing value 'à'
[   49.861663][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.864350][ T5883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   49.869223][ T5884] rnbd_client L202: map_device: Unknown parameter or missing value 'à'
[   49.870475][ T5886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   49.873533][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.899144][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.919210][ T5815] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   50.093834][ T5815] usb 6-1: unable to get BOS descriptor or descriptor too short
[   50.098592][ T5815] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   50.109563][ T5815] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   50.118451][ T5815] usb 6-1: string descriptor 0 read error: -22
[   50.121348][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.179323][   T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   50.187282][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586a0000: rx timeout, send abort
[   50.336537][   T34] usb 8-1: unable to get BOS descriptor or descriptor too short
[   50.340059][   T34] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   50.344841][   T34] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   50.352350][   T34] usb 8-1: string descriptor 0 read error: -22
[   50.355186][   T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.399193][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   50.550645][ T5816] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   50.555554][ T5816] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[   50.558654][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   50.564984][ T5816] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   50.568198][ T5816] usb 5-1: Manufacturer: syz
[   50.573487][ T5816] usb 5-1: config 0 descriptor??
[   50.580810][ T5816] igorplugusb 5-1:0.0: incorrect number of endpoints
[   50.687552][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586a3c00: rx timeout, send abort
[   50.692417][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586a0000: abort rx timeout. Force session deactivation
[   50.697819][ T5893] FAULT_INJECTION: forcing a failure.
[   50.697819][ T5893] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   50.702528][ T5893] CPU: 1 UID: 0 PID: 5893 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   50.702543][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   50.702551][ T5893] Call Trace:
[   50.702556][ T5893]  <TASK>
[   50.702561][ T5893]  dump_stack_lvl+0x100/0x190
[   50.702580][ T5893]  should_fail_ex.cold+0x5/0xa
[   50.702594][ T5893]  _copy_to_user+0x32/0xd0
[   50.702613][ T5893]  simple_read_from_buffer+0xcb/0x170
[   50.702630][ T5893]  proc_fail_nth_read+0x1af/0x230
[   50.702646][ T5893]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   50.702663][ T5893]  ? rw_verify_area+0xce/0x6d0
[   50.702675][ T5893]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   50.702691][ T5893]  vfs_read+0x1e4/0xb40
[   50.702705][ T5893]  ? __pfx_vfs_read+0x10/0x10
[   50.702717][ T5893]  ? find_held_lock+0x2b/0x80
[   50.702730][ T5893]  ? __fget_files+0x215/0x3d0
[   50.702749][ T5893]  ? __fget_files+0x21f/0x3d0
[   50.702768][ T5893]  ksys_read+0x12a/0x250
[   50.702781][ T5893]  ? __pfx_ksys_read+0x10/0x10
[   50.702797][ T5893]  do_syscall_64+0x123/0x790
[   50.702811][ T5893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.702822][ T5893] RIP: 0033:0x7fc87315e98e
[   50.702832][ T5893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   50.702842][ T5893] RSP: 002b:00007fc87407efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   50.702852][ T5893] RAX: ffffffffffffffda RBX: 00007fc87407f6c0 RCX: 00007fc87315e98e
[   50.702859][ T5893] RDX: 000000000000000f RSI: 00007fc87407f0a0 RDI: 0000000000000004
[   50.702865][ T5893] RBP: 00007fc87407f090 R08: 0000000000000000 R09: 0000000000000000
[   50.702871][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.702877][ T5893] R13: 00007fc873426038 R14: 00007fc873425fa0 R15: 00007ffdba762348
[   50.702890][ T5893]  </TASK>
[   50.784873][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.790328][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.800440][ T5829] usb 5-1: USB disconnect, device number 2
[   50.809728][   T65] Bluetooth: hci1: command tx timeout
[   50.820349][   T65] Bluetooth: hci2: command tx timeout
[   50.820794][ T5733] Bluetooth: hci3: command tx timeout
[   50.889611][ T5733] Bluetooth: hci0: command tx timeout
[   51.167980][ T5815] usb 6-1: USB disconnect, device number 2
[   51.190489][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880586a3c00: abort rx timeout. Force session deactivation
[   51.269648][   T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   51.324018][ T1482] usb 8-1: USB disconnect, device number 2
[   51.416654][   T42] kauditd_printk_skb: 67 callbacks suppressed
[   51.416670][   T42] audit: type=1400 audit(1787908632.065:233): avc:  denied  { create } for  pid=5919 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   51.419923][   T41] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[   51.433569][   T41] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   51.437270][   T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   51.439619][   T42] audit: type=1400 audit(1787908632.085:234): avc:  denied  { ioctl } for  pid=5919 comm="syz.0.16" path="socket:[11426]" dev="sockfs" ino=11426 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   51.444553][   T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.453487][   T41] usb 7-1: Product: syz
[   51.454921][   T41] usb 7-1: Manufacturer: syz
[   51.456440][   T41] usb 7-1: SerialNumber: syz
[   51.461896][   T42] audit: type=1400 audit(1787908632.115:235): avc:  denied  { append } for  pid=5919 comm="syz.0.16" name="v4l-subdev6" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   51.461985][   T41] symbolserial 7-1:1.0: symbol converter detected
[   51.469111][   T42] audit: type=1400 audit(1787908632.115:236): avc:  denied  { setopt } for  pid=5919 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.469136][   T42] audit: type=1400 audit(1787908632.115:237): avc:  denied  { read } for  pid=5919 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.488402][   T41] usb 7-1: symbol converter now attached to ttyUSB0
[   51.507703][ T5923] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET)
[   51.534144][ T5923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   51.596881][   T42] audit: type=1400 audit(1787908632.245:238): avc:  denied  { create } for  pid=5925 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   51.603327][   T42] audit: type=1400 audit(1787908632.255:239): avc:  denied  { bind } for  pid=5925 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   51.610087][   T42] audit: type=1400 audit(1787908632.255:240): avc:  denied  { create } for  pid=5925 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   51.611935][ T5926] netlink: 'syz.1.18': attribute type 2 has an invalid length.
[   51.616492][   T42] audit: type=1400 audit(1787908632.255:241): avc:  denied  { write } for  pid=5925 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   51.624186][ T5926] ./cgroup: Can't lookup blockdev
[   51.626257][   T42] audit: type=1400 audit(1787908632.255:242): avc:  denied  { watch watch_reads } for  pid=5925 comm="syz.1.18" path="/2" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   51.664779][ T5829] usb 7-1: USB disconnect, device number 2
[   51.678683][ T5829] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[   51.682482][ T5829] symbolserial 7-1:1.0: device disconnected
[   51.842357][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'.
[   51.848381][ T5943] netlink: 112 bytes leftover after parsing attributes in process `syz.1.22'.
[   51.890453][ T5945] syzkaller0: entered promiscuous mode
[   51.892475][ T5945] syzkaller0: entered allmulticast mode
[   51.896256][ T5947] nfs4: Unknown parameter 'a192.168.100.100'
[   51.969458][ T5816] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   51.998598][ T5951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5951 comm=syz.1.25
[   52.024201][ T5951] syzkaller0: entered promiscuous mode
[   52.026497][ T5951] syzkaller0: entered allmulticast mode
[   52.100328][ T5816] usb 5-1: device descriptor read/64, error -71
[   52.340522][ T5816] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   52.470857][ T5816] usb 5-1: device descriptor read/64, error -71
[   52.572183][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30'.
[   52.579414][ T5816] usb usb5-port1: attempt power cycle
[   52.892353][ T5733] Bluetooth: hci3: command tx timeout
[   52.899216][ T5733] Bluetooth: hci1: command tx timeout
[   52.901012][ T5733] Bluetooth: hci2: command tx timeout
[   52.919549][ T5816] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   52.953639][ T5816] usb 5-1: device descriptor read/8, error -71
[   52.969135][ T5733] Bluetooth: hci0: command tx timeout
[   53.189347][ T5816] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   53.210930][ T5816] usb 5-1: device descriptor read/8, error -71
[   53.320799][ T5816] usb usb5-port1: unable to enumerate USB device
[   53.459279][ T5815] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   53.469261][ T1347] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   53.509159][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   53.611202][ T5815] usb 7-1: unable to get BOS descriptor or descriptor too short
[   53.613694][ T5815] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   53.617386][ T5815] usb 7-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   53.624668][ T5815] usb 7-1: string descriptor 0 read error: -22
[   53.627110][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.639226][ T1347] usb 6-1: Using ep0 maxpacket: 8
[   53.642528][ T1347] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice= 0.00
[   53.645885][ T1347] usb 6-1: no configurations
[   53.647184][ T1347] usb 6-1: can't read configurations, error -22
[   53.660094][    T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   53.666909][    T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[   53.670511][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.676119][    T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   53.679780][    T9] usb 8-1: Manufacturer: syz
[   53.684106][    T9] usb 8-1: config 0 descriptor??
[   53.729212][    T9] rc_core: IR keymap rc-hauppauge not found
[   53.731017][    T9] Registered IR keymap rc-empty
[   53.733818][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[   53.738096][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input5
[   53.791464][ T1347] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   53.896698][    T9] usb 8-1: USB disconnect, device number 3
[   53.949275][ T1347] usb 6-1: Using ep0 maxpacket: 8
[   53.951545][ T1347] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice= 0.00
[   53.954471][ T1347] usb 6-1: no configurations
[   53.955989][ T1347] usb 6-1: can't read configurations, error -22
[   53.961313][ T1347] usb usb6-port1: attempt power cycle
[   54.309349][ T1347] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   54.331147][ T1347] usb 6-1: Using ep0 maxpacket: 8
[   54.333566][ T1347] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice= 0.00
[   54.336541][ T1347] usb 6-1: no configurations
[   54.338006][ T1347] usb 6-1: can't read configurations, error -22
[   54.479402][ T1347] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   54.499724][ T1347] usb 6-1: Using ep0 maxpacket: 8
[   54.502205][ T1347] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice= 0.00
[   54.505482][ T1347] usb 6-1: no configurations
[   54.507002][ T1347] usb 6-1: can't read configurations, error -22
[   54.509384][ T1347] usb usb6-port1: unable to enumerate USB device
[   54.669300][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   54.819168][    T9] usb 8-1: Using ep0 maxpacket: 8
[   54.821784][    T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   54.827761][    T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   54.833378][    T9] usb 8-1: config 0 has no interface number 0
[   54.836011][    T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   54.841615][    T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   54.845357][    T9] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   54.850065][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.854521][    T9] usb 8-1: config 0 descriptor??
[   54.858787][    T9] ldusb 8-1:0.55: Interrupt in endpoint not found
[   54.874817][ T5992] syzkaller0: entered promiscuous mode
[   54.876679][ T5992] syzkaller0: entered allmulticast mode
[   54.969581][   T65] Bluetooth: hci1: command tx timeout
[   54.969688][ T5084] Bluetooth: hci3: command tx timeout
[   54.971392][ T5733] Bluetooth: hci2: command tx timeout
[   55.050867][ T5733] Bluetooth: hci0: command tx timeout
[   55.060483][ T1482] usb 8-1: USB disconnect, device number 4
[   55.171301][ T6005] Zero length message leads to an empty skb
[   55.635878][ T6013] syzkaller0: entered promiscuous mode
[   55.638131][ T6013] syzkaller0: entered allmulticast mode
[   55.875852][ T6015] XFS (nbd3): SB validate failed with error -5.
[   55.955652][ T6025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   55.957804][ T6025] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   55.961822][ T6025] vhci_hcd vhci_hcd.0: Device attached
[   55.972130][ T6027] vhci_hcd: connection closed
[   55.974125][ T5801] vhci_hcd vhci_hcd.0: stop threads
[   55.978289][ T5801] vhci_hcd vhci_hcd.0: release socket
[   55.980309][ T5801] vhci_hcd vhci_hcd.0: disconnect device
[   55.994745][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.077058][ T6036] syzkaller0: entered promiscuous mode
[   56.078843][ T6036] syzkaller0: entered allmulticast mode
[   56.085424][ T6036] FAULT_INJECTION: forcing a failure.
[   56.085424][ T6036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.089706][ T6036] CPU: 3 UID: 0 PID: 6036 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT(full) 
[   56.089734][ T6036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.089745][ T6036] Call Trace:
[   56.089790][ T6036]  <TASK>
[   56.089803][ T6036]  dump_stack_lvl+0x100/0x190
[   56.089833][ T6036]  should_fail_ex.cold+0x5/0xa
[   56.089858][ T6036]  _copy_from_iter+0x1f4/0x1690
[   56.089880][ T6036]  ? __pfx__copy_from_iter+0x10/0x10
[   56.089897][ T6036]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   56.089927][ T6036]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[   56.089955][ T6036]  skb_copy_datagram_from_iter+0x11f/0x720
[   56.089985][ T6036]  packet_sendmsg+0x2257/0x4f00
[   56.090022][ T6036]  ? sock_has_perm+0x25a/0x2f0
[   56.090047][ T6036]  ? __pfx_sock_has_perm+0x10/0x10
[   56.090075][ T6036]  ? __pfx_packet_sendmsg+0x10/0x10
[   56.090100][ T6036]  ? __might_fault+0xc5/0x140
[   56.090126][ T6036]  ? selinux_socket_sendmsg+0x198/0x2f0
[   56.090154][ T6036]  __sys_sendto+0x48b/0x4e0
[   56.090178][ T6036]  ? __pfx_packet_sendmsg+0x10/0x10
[   56.090205][ T6036]  ? __pfx___sys_sendto+0x10/0x10
[   56.090237][ T6036]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   56.090268][ T6036]  ? ksys_write+0x1ac/0x250
[   56.090290][ T6036]  ? __pfx_ksys_write+0x10/0x10
[   56.090315][ T6036]  __x64_sys_sendto+0xe0/0x1c0
[   56.090340][ T6036]  ? do_syscall_64+0xae/0x790
[   56.090358][ T6036]  ? lockdep_hardirqs_on+0x7d/0x110
[   56.090375][ T6036]  do_syscall_64+0x123/0x790
[   56.090396][ T6036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.090414][ T6036] RIP: 0033:0x7faedc39e159
[   56.090430][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.090445][ T6036] RSP: 002b:00007faedd222028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   56.090461][ T6036] RAX: ffffffffffffffda RBX: 00007faedc625fa0 RCX: 00007faedc39e159
[   56.090471][ T6036] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006
[   56.090481][ T6036] RBP: 00007faedd222090 R08: 00002000000001c0 R09: 0000000000000014
[   56.090498][ T6036] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[   56.090508][ T6036] R13: 00007faedc626038 R14: 00007faedc625fa0 R15: 00007ffc15cce828
[   56.090532][ T6036]  </TASK>
[   56.270947][ T6038] syzkaller0: entered promiscuous mode
[   56.273006][ T6038] syzkaller0: entered allmulticast mode
[   56.314750][ T6038] kvm: user requested TSC rate below hardware speed
[   56.436080][   T42] kauditd_printk_skb: 108 callbacks suppressed
[   56.436139][   T42] audit: type=1400 audit(1787908637.085:351): avc:  denied  { unmount } for  pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   56.448840][   T42] audit: type=1400 audit(1787908637.095:352): avc:  denied  { unmount } for  pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   56.465993][   T42] audit: type=1400 audit(1787908637.115:353): avc:  denied  { create } for  pid=6045 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.474966][   T42] audit: type=1400 audit(1787908637.115:354): avc:  denied  { write } for  pid=6045 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.483981][   T42] audit: type=1400 audit(1787908637.115:355): avc:  denied  { nlmsg_write } for  pid=6045 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.495039][   T42] audit: type=1400 audit(1787908637.125:356): avc:  denied  { ioctl } for  pid=6045 comm="syz.3.48" path="socket:[10748]" dev="sockfs" ino=10748 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.504116][   T42] audit: type=1400 audit(1787908637.135:357): avc:  denied  { unmount } for  pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   56.599927][   T42] audit: type=1400 audit(1787908637.255:358): avc:  denied  { ioctl } for  pid=6052 comm="syz.3.50" path="socket:[10885]" dev="sockfs" ino=10885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.652827][   T42] audit: type=1400 audit(1787908637.305:359): avc:  denied  { bind } for  pid=6052 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.682598][   T42] audit: type=1400 audit(1787908637.335:360): avc:  denied  { append } for  pid=6049 comm="syz.0.49" name="trace_pipe" dev="tracefs" ino=6267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   57.344881][ T6063] syzkaller0: entered promiscuous mode
[   57.346870][ T6063] syzkaller0: entered allmulticast mode
[   58.439688][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'.
[   58.584288][ T6108] syzkaller0: entered promiscuous mode
[   58.586233][ T6108] syzkaller0: entered allmulticast mode
[   58.609109][ T6104] SELinux: ebitmap: empty map
[   58.611630][ T6104] SELinux: failed to load policy
[   59.029971][ T6112] netlink: 140 bytes leftover after parsing attributes in process `syz.3.62'.
[   59.036091][ T6112] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.62'.
[   59.040979][    C2] Unknown status report in ack skb
[   59.449543][   T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   59.540492][ T5977] usb 7-1: 1:1: usb_set_interface failed (-110)
[   59.547898][ T5816] usb 7-1: USB disconnect, device number 3
[   59.588840][ T6136] syzkaller0: entered promiscuous mode
[   59.590690][ T6136] syzkaller0: entered allmulticast mode
[   59.599893][   T29] usb 5-1: Using ep0 maxpacket: 8
[   59.602233][   T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   59.607673][   T29] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[   59.612587][   T29] usb 5-1: config 0 has no interface number 0
[   59.615741][   T29] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   59.619493][   T29] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   59.623354][   T29] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   59.627711][   T29] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   59.632370][   T29] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   59.636688][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.643563][   T29] usb 5-1: config 0 descriptor??
[   59.677868][   T29] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   59.763181][ T6140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[   59.821294][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'.
[   59.850501][ T6122] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90
[   59.857367][   T29] usb 5-1: USB disconnect, device number 7
[   59.866411][   T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[   60.340114][ T5084] Bluetooth: hci3: command 0x0406 tx timeout
[   60.401637][ T6156] syzkaller0: entered promiscuous mode
[   60.403342][ T6156] syzkaller0: entered allmulticast mode
[   60.476661][ T6153] SELinux:  policydb version 0 does not match my version range 15-35
[   60.479907][ T6153] SELinux: failed to load policy
[   60.590672][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'.
[   60.617576][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620818][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620856][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620873][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620891][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620909][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620927][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.620946][   T29] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0
[   60.634426][   T29] hid-generic 0000:0000:0001.0002: hidraw1: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[   60.695275][ T6173] netlink: 80 bytes leftover after parsing attributes in process `syz.0.78'.
[   60.765707][ T6178] netlink: 348 bytes leftover after parsing attributes in process `syz.3.83'.
[   60.939248][  T848] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   60.969001][ T6185] syzkaller0: entered promiscuous mode
[   60.974310][ T6185] syzkaller0: entered allmulticast mode
[   61.039199][   T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   61.069258][  T848] usb 5-1: device descriptor read/64, error -71
[   61.117362][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   61.125640][ T6189] capability: warning: `syz.2.88' uses deprecated v2 capabilities in a way that may be insecure
[   61.189478][   T29] usb 8-1: Using ep0 maxpacket: 8
[   61.192558][   T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   61.196636][   T29] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   61.199847][   T29] usb 8-1: config 0 has no interface number 0
[   61.201968][   T29] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   61.205359][   T29] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   61.209745][   T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   61.214233][   T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   61.217683][   T29] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   61.221920][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.230122][   T29] usb 8-1: config 0 descriptor??
[   61.234738][   T29] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   61.319405][  T848] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   61.386410][    C3] vcan0: j1939_tp_rxtimer: 0xffff88801d6cec00: rx timeout, send abort
[   61.436320][ T6181] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90
[   61.440183][   T29] usb 8-1: USB disconnect, device number 5
[   61.448990][   T29] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   61.459534][  T848] usb 5-1: device descriptor read/64, error -71
[   61.570035][  T848] usb usb5-port1: attempt power cycle
[   61.890217][    C3] vcan0: j1939_tp_rxtimer: 0xffff88801d6cec00: abort rx timeout. Force session deactivation
[   61.908906][   T42] kauditd_printk_skb: 42 callbacks suppressed
[   61.908924][   T42] audit: type=1400 audit(1787908642.555:403): avc:  denied  { read write } for  pid=5721 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.909262][  T848] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   61.912051][   T42] audit: type=1400 audit(1787908642.555:404): avc:  denied  { open } for  pid=5721 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.928911][ T6191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   61.933378][   T42] audit: type=1400 audit(1787908642.565:405): avc:  denied  { ioctl } for  pid=5721 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.942849][ T6191] netlink: 'syz.2.89': attribute type 4 has an invalid length.
[   61.948935][  T848] usb 5-1: device descriptor read/8, error -71
[   61.960463][   T42] audit: type=1400 audit(1787908642.615:406): avc:  denied  { mounton } for  pid=6190 comm="syz.2.89" path="/19/dev" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   61.982327][   T42] audit: type=1400 audit(1787908642.635:407): avc:  denied  { read write } for  pid=6192 comm="syz.3.90" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   61.989841][   T42] audit: type=1400 audit(1787908642.635:408): avc:  denied  { open } for  pid=6192 comm="syz.3.90" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   61.997833][   T42] audit: type=1400 audit(1787908642.645:409): avc:  denied  { ioctl } for  pid=6192 comm="syz.3.90" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   62.006296][   T42] audit: type=1400 audit(1787908642.645:410): avc:  denied  { set_context_mgr } for  pid=6192 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   62.012497][   T42] audit: type=1400 audit(1787908642.645:411): avc:  denied  { map } for  pid=6192 comm="syz.3.90" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   62.020119][   T42] audit: type=1400 audit(1787908642.645:412): avc:  denied  { call } for  pid=6192 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   62.035974][ T6198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6198 comm=syz.2.92
[   62.087862][ T6201] program syz.2.94 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.096684][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'.
[   62.203161][  T848] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   62.219863][  T848] usb 5-1: device descriptor read/8, error -71
[   62.234736][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'.
[   62.238592][ T6210] openvswitch: netlink: Actions may not be safe on all matching packets
[   62.329709][  T848] usb usb5-port1: unable to enumerate USB device
[   62.479234][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   62.499240][ T5815] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   62.629905][    T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   62.634334][    T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[   62.637276][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.641595][    T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   62.644505][    T9] usb 7-1: Manufacturer: syz
[   62.649165][    T9] usb 7-1: config 0 descriptor??
[   62.659530][ T5815] usb 8-1: Using ep0 maxpacket: 32
[   62.662554][ T5815] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   62.667296][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   62.672481][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   62.676902][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   62.680698][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   62.685332][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   62.691530][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.694636][ T5815] usb 8-1: Product: syz
[   62.696310][ T5815] usb 8-1: Manufacturer: syz
[   62.698397][ T5815] usb 8-1: SerialNumber: syz
[   62.699390][    T9] rc_core: IR keymap rc-hauppauge not found
[   62.702977][ T5815] usb 8-1: config 0 descriptor??
[   62.705068][    T9] Registered IR keymap rc-empty
[   62.710435][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[   62.715457][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input6
[   62.856248][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.861772][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.867254][  T848] usb 7-1: USB disconnect, device number 4
[   62.911688][ T6224] warning: `syz.1.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.918339][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.922399][ T5815] input input7: Device does not respond to id packet M
[   62.926376][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.933648][ T5815] input input7: Device does not respond to id packet P
[   62.936530][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.938782][ T5815] input input7: Device does not respond to id packet B
[   62.944706][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.946949][ T5815] input input7: Device does not respond to id packet N
[   62.950206][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.952965][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.955701][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.958189][ T5815] iforce 8-1:0.0: usb_submit_urb failed: -71
[   62.967894][ T5815] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7
[   62.992209][ T6234] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   62.995141][ T5815] usb 8-1: USB disconnect, device number 6
[   63.113630][ T6238] ieee802154 phy0 wpan0: encryption failed: -22
[   63.338777][ T6244] syzkaller0: entered promiscuous mode
[   63.341761][ T6244] syzkaller0: entered allmulticast mode
[   63.543975][ T6251] netlink: 'syz.1.110': attribute type 2 has an invalid length.
[   63.547148][ T6251] netlink: 151 bytes leftover after parsing attributes in process `syz.1.110'.
[   63.706325][ T6254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[   63.717112][ T6256] netlink: 140 bytes leftover after parsing attributes in process `syz.0.112'.
[   63.722260][ T6256] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.112'.
[   63.726818][    C0] Unknown status report in ack skb
[   64.116165][ T6278] syzkaller0: entered promiscuous mode
[   64.118225][ T6278] syzkaller0: entered allmulticast mode
[   64.125625][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'.
[   64.128541][ T6277] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   64.154369][ T6277] Cannot find set identified by id 0 to match
[   64.821477][   T56] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   64.824855][ T6300] netlink: 140 bytes leftover after parsing attributes in process `syz.3.122'.
[   64.829893][ T6300] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.122'.
[   64.833211][    C2] Unknown status report in ack skb
[   64.981534][   T56] usb 6-1: unable to get BOS descriptor or descriptor too short
[   64.984042][   T56] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   64.987725][   T56] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   64.995896][   T56] usb 6-1: string descriptor 0 read error: -22
[   64.998153][   T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.156313][ T6310] syzkaller0: entered promiscuous mode
[   65.158092][ T6310] syzkaller0: entered allmulticast mode
[   65.242072][ T6314] process 'syz.3.126' launched './file0' with NULL argv: empty string added
[   65.445423][ T6316] netlink: 140 bytes leftover after parsing attributes in process `syz.0.128'.
[   65.609301][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   65.760645][    T9] usb 8-1: Using ep0 maxpacket: 8
[   65.766167][    T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   65.777191][    T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   65.780025][    T9] usb 8-1: config 0 has no interface number 0
[   65.782006][    T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   65.785539][    T9] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   65.789950][    T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   65.793687][    T9] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   65.798443][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.803107][    T9] usb 8-1: config 0 descriptor??
[   65.815898][    T9] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   66.026639][  T848] usb 8-1: USB disconnect, device number 7
[   66.032431][  T848] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   66.237203][ T6316] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.128'.
[   66.276238][ T6329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.131'.
[   66.411573][ T6337] gretap1: entered promiscuous mode
[   66.438480][ T6339] netlink: 140 bytes leftover after parsing attributes in process `syz.0.136'.
[   66.443721][    C2] Unknown status report in ack skb
[   66.457803][ T6341] syzkaller0: entered promiscuous mode
[   66.460464][ T6341] syzkaller0: entered allmulticast mode
[   66.594861][ T6345] syzkaller0: entered promiscuous mode
[   66.597015][ T6345] syzkaller0: entered allmulticast mode
[   66.929884][   T42] kauditd_printk_skb: 56 callbacks suppressed
[   66.929895][   T42] audit: type=1400 audit(1787908647.585:469): avc:  denied  { map_read map_write } for  pid=6367 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   67.100089][ T6376] syzkaller0: entered promiscuous mode
[   67.101993][ T6376] syzkaller0: entered allmulticast mode
[   67.229200][ T2324] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   67.271724][   T42] audit: type=1400 audit(1787908647.925:470): avc:  denied  { create } for  pid=6377 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.280738][   T42] audit: type=1400 audit(1787908647.925:471): avc:  denied  { write } for  pid=6377 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.292686][   T42] audit: type=1400 audit(1787908647.925:472): avc:  denied  { nlmsg_write } for  pid=6377 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.399088][ T2324] usb 8-1: Using ep0 maxpacket: 8
[   67.401773][ T2324] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   67.406850][ T2324] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   67.409756][ T2324] usb 8-1: config 0 has no interface number 0
[   67.411917][ T2324] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   67.415608][ T2324] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   67.419742][ T2324] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   67.424045][ T2324] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   67.429148][ T2324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.436895][ T2324] usb 8-1: config 0 descriptor??
[   67.447457][ T2324] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   67.469888][   T42] audit: type=1400 audit(1787908648.125:473): avc:  denied  { search } for  pid=5436 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.478684][   T42] audit: type=1400 audit(1787908648.125:474): avc:  denied  { search } for  pid=5436 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.497153][   T42] audit: type=1400 audit(1787908648.125:475): avc:  denied  { search } for  pid=5436 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.520793][ T6386] MINIX-fs: unable to read superblock
[   67.574638][   T42] audit: type=1400 audit(1787908648.225:476): avc:  denied  { read } for  pid=6391 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.586630][   T42] audit: type=1400 audit(1787908648.225:477): avc:  denied  { read open } for  pid=6391 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.601372][   T42] audit: type=1400 audit(1787908648.225:478): avc:  denied  { getattr } for  pid=6391 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.611887][ T6393] bridge_slave_1: Device is already in use.
[   67.643568][    T9] usb 8-1: USB disconnect, device number 8
[   67.652580][    T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   67.672733][ T5733] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28
[   67.751266][ T6403] syzkaller0: entered promiscuous mode
[   67.753773][ T6403] syzkaller0: entered allmulticast mode
[   67.909430][    C0] Unknown status report in ack skb
[   67.944318][ T6409] sock: sock_timestamping_bind_phc: sock not bind to device
[   67.963573][ T6410] affs: No valid root block on device sr0
[   68.003079][ T6414] binder: 6413:6414 ioctl 4018620d 0 returned -22
[   68.009636][ T6414] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   68.023179][ T6414] bond1: entered promiscuous mode
[   68.026732][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.056349][ T6414] veth3: entered allmulticast mode
[   68.062559][ T6414] bond1: (slave veth3): making interface the new active one
[   68.065797][ T6414] veth3: entered promiscuous mode
[   68.069537][ T6414] bond1: (slave veth3): Enslaving as an active interface with an up link
[   68.084844][ T6414] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   68.089822][ T6414] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   68.145182][ T6417] program syz.2.164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.189353][ T5816] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   68.339168][ T5816] usb 5-1: Using ep0 maxpacket: 32
[   68.342861][ T5816] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   68.352751][ T5816] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   68.358657][ T5816] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   68.362801][ T5816] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   68.366977][ T5816] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   68.378798][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.382278][ T5816] usb 5-1: Product: syz
[   68.384281][ T5816] usb 5-1: Manufacturer: syz
[   68.386550][ T5816] usb 5-1: SerialNumber: syz
[   68.398438][    C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[   68.408543][ T5816] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input8
[   68.609715][ T5816] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   68.615737][ T5816]  (id 0x00)
[   68.659196][ T5816] rc_core: IR keymap rc-imon-pad not found
[   68.661468][ T5816] Registered IR keymap rc-empty
[   68.663313][ T5816] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   68.666943][ T5816] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   68.746152][ T6435] Console: switching to colour dummy device 80x25
[   68.824510][ T5816] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0
[   68.831336][ T5816] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input9
[   68.840968][ T5816] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:12> initialized
[   68.900048][ T6435] =============================================================================
[   68.901822][ T6435] 
[   68.901831][ T6435] ======================================================
[   68.901837][ T6435] WARNING: possible circular locking dependency detected
[   68.901845][ T6435] syzkaller #0 Not tainted
[   68.901854][ T6435] ------------------------------------------------------
[   68.901860][ T6435] syz.3.170/6435 is trying to acquire lock:
[   68.901871][ T6435] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[   68.901937][ T6435] 
[   68.901937][ T6435] but task is already holding lock:
[   68.901943][ T6435] ffff888022a84618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330
[   68.901999][ T6435] 
[   68.901999][ T6435] which lock already depends on the new lock.
[   68.901999][ T6435] 
[   68.902005][ T6435] 
[   68.902005][ T6435] the existing dependency chain (in reverse order) is:
[   68.902011][ T6435] 
[   68.902011][ T6435] -> #3 (&n->list_lock){-.-.}-{3:3}:
[   68.902037][ T6435]        lock_acquire+0x1b9/0x370
[   68.902064][ T6435]        _raw_spin_lock_irqsave+0x3a/0x60
[   68.902098][ T6435]        __refill_objects_node+0x120/0xaa0
[   68.902121][ T6435]        refill_objects+0x58/0x410
[   68.902152][ T6435]        __pcs_replace_empty_main+0x372/0x680
[   68.902175][ T6435]        __kmalloc_noprof+0x66b/0x820
[   68.902200][ T6435]        tty_buffer_alloc+0x29f/0x320
[   68.902229][ T6435]        __tty_buffer_request_room+0x129/0x2c0
[   68.902259][ T6435]        __tty_insert_flip_string_flags+0xdb/0x3f0
[   68.902289][ T6435]        tty_insert_flip_string_and_push_buffer+0x9c/0x230
[   68.902320][ T6435]        pty_write+0xd2/0x100
[   68.902341][ T6435]        n_tty_write+0xa9e/0x1160
[   68.902361][ T6435]        file_tty_write.isra.0+0x4d2/0x890
[   68.902378][ T6435]        vfs_write+0x6af/0x1050
[   68.902400][ T6435]        ksys_write+0x12a/0x250
[   68.902420][ T6435]        do_syscall_64+0x123/0x790
[   68.902438][ T6435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.902456][ T6435] 
[   68.902456][ T6435] -> #2 (&port->lock#2){-.-.}-{3:3}:
[   68.902485][ T6435]        lock_acquire+0x1b9/0x370
[   68.902512][ T6435]        _raw_spin_lock_irq_disable+0x5e/0x90
[   68.902540][ T6435]        tty_port_tty_get+0x1f/0xf0
[   68.902558][ T6435]        tty_port_default_wakeup+0x15/0x60
[   68.902577][ T6435]        serial8250_tx_chars+0x68f/0x860
[   68.902595][ T6435]        __start_tx+0x3e4/0x490
[   68.902611][ T6435]        serial8250_start_tx+0x368/0x540
[   68.902629][ T6435]        __uart_start+0x295/0x510
[   68.902651][ T6435]        uart_write+0x211/0xb20
[   68.902668][ T6435]        n_tty_write+0x431/0x1160
[   68.902688][ T6435]        file_tty_write.isra.0+0x4d2/0x890
[   68.902705][ T6435]        redirected_tty_write+0xd4/0x120
[   68.902721][ T6435]        vfs_write+0x6af/0x1050
[   68.902741][ T6435]        ksys_write+0x12a/0x250
[   68.902762][ T6435]        do_syscall_64+0x123/0x790
[   68.902783][ T6435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.902805][ T6435] 
[   68.902805][ T6435] -> #1 (&port_lock_key){-.-.}-{3:3}:
[   68.902833][ T6435]        lock_acquire+0x1b9/0x370
[   68.902863][ T6435]        _raw_spin_lock_irqsave+0x3a/0x60
[   68.902895][ T6435]        serial8250_console_write+0x177/0x1a50
[   68.902920][ T6435]        console_flush_one_record+0x78e/0xf10
[   68.902945][ T6435]        console_unlock+0x103/0x260
[   68.902967][ T6435]        vprintk_emit+0x407/0x6b0
[   68.902990][ T6435]        _printk+0xcf/0x110
[   68.903010][ T6435]        register_console.cold+0xc0/0x248
[   68.903032][ T6435]        univ8250_console_init+0x6f/0x80
[   68.903053][ T6435]        console_init+0x3d5/0x5b0
[   68.903081][ T6435]        start_kernel+0x314/0x490
[   68.903104][ T6435]        x86_64_start_reservations+0x24/0x30
[   68.903131][ T6435]        x86_64_start_kernel+0x12b/0x130
[   68.903166][ T6435]        common_startup_64+0x13e/0x158
[   68.903191][ T6435] 
[   68.903191][ T6435] -> #0 (console_owner){-.-.}-{0:0}:
[   68.903220][ T6435]        check_prev_add+0xeb/0xe60
[   68.903251][ T6435]        __lock_acquire+0x1492/0x1ec0
[   68.903282][ T6435]        lock_acquire+0x1b9/0x370
[   68.903311][ T6435]        console_lock_spinning_enable+0x72/0x80
[   68.903333][ T6435]        console_flush_one_record+0x737/0xf10
[   68.903357][ T6435]        console_unlock+0x103/0x260
[   68.903377][ T6435]        vprintk_emit+0x407/0x6b0
[   68.903439][ T6435]        _printk+0xcf/0x110
[   68.903461][ T6435]        __slab_bug+0x4f/0xb0
[   68.903483][ T6435]        slab_bug+0x5d/0x80
[   68.903504][ T6435]        __kmem_cache_shutdown.cold+0x39/0x177
[   68.903534][ T6435]        kmem_cache_destroy+0x73/0x190
[   68.903558][ T6435]        virtio_gpu_free_vbufs+0x38/0x80
[   68.903588][ T6435]        virtio_gpu_release+0x5c/0x1c0
[   68.903608][ T6435]        drm_dev_put.part.0+0xbd/0x140
[   68.903626][ T6435]        drm_dev_put+0x1f/0x30
[   68.903646][ T6435]        virtio_dev_remove+0xb8/0x170
[   68.903665][ T6435]        device_remove+0xcb/0x180
[   68.903685][ T6435]        device_release_driver_internal+0x44e/0x620
[   68.903710][ T6435]        bus_remove_device+0x2bc/0x560
[   68.903743][ T6435]        device_del+0x376/0x9b0
[   68.903762][ T6435]        device_unregister+0x1d/0xe0
[   68.903781][ T6435]        unregister_virtio_device+0x39/0x60
[   68.903801][ T6435]        virtio_pci_remove+0x7c/0x110
[   68.903829][ T6435]        pci_device_remove+0xb2/0x1d0
[   68.903859][ T6435]        device_remove+0xcb/0x180
[   68.903877][ T6435]        device_release_driver_internal+0x44e/0x620
[   68.903902][ T6435]        pci_stop_bus_device+0x120/0x160
[   68.903933][ T6435]        pci_stop_and_remove_bus_device+0x58/0xa0
[   68.903967][ T6435]        pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   68.904002][ T6435]        remove_store+0x123/0x140
[   68.904021][ T6435]        dev_attr_store+0x58/0x80
[   68.904044][ T6435]        sysfs_kf_write+0xf2/0x150
[   68.904074][ T6435]        kernfs_fop_write_iter+0x3e0/0x5f0
[   68.904102][ T6435]        vfs_write+0x6af/0x1050
[   68.904129][ T6435]        ksys_write+0x12a/0x250
[   68.904163][ T6435]        do_syscall_64+0x123/0x790
[   68.904187][ T6435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.904210][ T6435] 
[   68.904210][ T6435] other info that might help us debug this:
[   68.904210][ T6435] 
[   68.904218][ T6435] Chain exists of:
[   68.904218][ T6435]   console_owner --> &port->lock#2 --> &n->list_lock
[   68.904218][ T6435] 
[   68.904258][ T6435]  Possible unsafe locking scenario:
[   68.904258][ T6435] 
[   68.904265][ T6435]        CPU0                    CPU1
[   68.904271][ T6435]        ----                    ----
[   68.904277][ T6435]   lock(&n->list_lock);
[   68.904291][ T6435]                                lock(&port->lock#2);
[   68.904311][ T6435]                                lock(&n->list_lock);
[   68.904325][ T6435]   lock(console_owner);
[   68.904337][ T6435] 
[   68.904337][ T6435]  *** DEADLOCK ***
[   68.904337][ T6435] 
[   68.904342][ T6435] locks held by syz.3.170/6435: 11, last CPU#2:
[   68.904357][ T6435]  #0: ffff8880139ed270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[   68.904401][ T6435]  #1: ffff88803648e460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[   68.904456][ T6435]  #2: ffff88804bc7bc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[   68.904508][ T6435]  #3: ffffffff8fa7d5e0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20
[   68.904573][ T6435]  #4: ffff8880236d61f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[   68.904624][ T6435]  #5: ffff8880268c41b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[   68.904758][ T6435]  #6: ffffffff8ec7a830 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190
[   68.904855][ T6435]  #7: ffffffff8ef940c0 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190
[   68.904913][ T6435]  #8: ffff888022a84618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330
[   68.904983][ T6435]  #9: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[   68.905028][ T6435]  #10: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10
[   68.905080][ T6435] 
[   68.905080][ T6435] stack backtrace:
[   68.905092][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) 
[   68.905114][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.905128][ T6435] Call Trace:
[   68.905135][ T6435]  <TASK>
[   68.905143][ T6435]  dump_stack_lvl+0x100/0x190
[   68.905173][ T6435]  print_circular_bug.cold+0x178/0x1be
[   68.905207][ T6435]  check_noncircular+0x146/0x160
[   68.905240][ T6435]  check_prev_add+0xeb/0xe60
[   68.905269][ T6435]  ? printk_get_next_message+0x30a/0x6c0
[   68.905294][ T6435]  __lock_acquire+0x1492/0x1ec0
[   68.905330][ T6435]  lock_acquire+0x1b9/0x370
[   68.905359][ T6435]  ? console_lock_spinning_enable+0x61/0x80
[   68.905385][ T6435]  ? console_lock_spinning_enable+0x4a/0x80
[   68.905410][ T6435]  console_lock_spinning_enable+0x72/0x80
[   68.905432][ T6435]  ? console_lock_spinning_enable+0x61/0x80
[   68.905454][ T6435]  console_flush_one_record+0x737/0xf10
[   68.905481][ T6435]  ? __pfx_console_flush_one_record+0x10/0x10
[   68.905509][ T6435]  ? is_printk_cpu_sync_owner+0x32/0x40
[   68.905538][ T6435]  console_unlock+0x103/0x260
[   68.905560][ T6435]  ? __pfx_console_unlock+0x10/0x10
[   68.905584][ T6435]  ? do_raw_spin_unlock+0x145/0x1e0
[   68.905607][ T6435]  ? _printk+0xcf/0x110
[   68.905628][ T6435]  vprintk_emit+0x407/0x6b0
[   68.905651][ T6435]  ? __pfx_vprintk_emit+0x10/0x10
[   68.905677][ T6435]  _printk+0xcf/0x110
[   68.905696][ T6435]  ? __pfx__printk+0x10/0x10
[   68.905724][ T6435]  ? do_raw_spin_lock+0x128/0x260
[   68.905748][ T6435]  __slab_bug+0x4f/0xb0
[   68.905771][ T6435]  slab_bug+0x5d/0x80
[   68.905801][ T6435]  __kmem_cache_shutdown.cold+0x39/0x177
[   68.905836][ T6435]  kmem_cache_destroy+0x73/0x190
[   68.905864][ T6435]  virtio_gpu_free_vbufs+0x38/0x80
[   68.905894][ T6435]  ? __pfx_virtio_gpu_release+0x10/0x10
[   68.905916][ T6435]  virtio_gpu_release+0x5c/0x1c0
[   68.905947][ T6435]  ? __pfx_virtio_gpu_release+0x10/0x10
[   68.905972][ T6435]  drm_dev_put.part.0+0xbd/0x140
[   68.905995][ T6435]  drm_dev_put+0x1f/0x30
[   68.906016][ T6435]  virtio_dev_remove+0xb8/0x170
[   68.906037][ T6435]  ? __pfx_virtio_dev_remove+0x10/0x10
[   68.906058][ T6435]  device_remove+0xcb/0x180
[   68.906077][ T6435]  device_release_driver_internal+0x44e/0x620
[   68.906102][ T6435]  bus_remove_device+0x2bc/0x560
[   68.906135][ T6435]  ? __pfx_bus_remove_device+0x10/0x10
[   68.906166][ T6435]  ? __pfx_device_remove_attrs+0x10/0x10
[   68.906201][ T6435]  device_del+0x376/0x9b0
[   68.906221][ T6435]  ? __pfx_device_del+0x10/0x10
[   68.906242][ T6435]  ? __pfx___might_resched+0x10/0x10
[   68.906271][ T6435]  ? __pfx_pci_device_is_present+0x10/0x10
[   68.906298][ T6435]  device_unregister+0x1d/0xe0
[   68.906317][ T6435]  unregister_virtio_device+0x39/0x60
[   68.906338][ T6435]  virtio_pci_remove+0x7c/0x110
[   68.906369][ T6435]  pci_device_remove+0xb2/0x1d0
[   68.906397][ T6435]  ? __pfx_pci_device_remove+0x10/0x10
[   68.906425][ T6435]  device_remove+0xcb/0x180
[   68.906444][ T6435]  device_release_driver_internal+0x44e/0x620
[   68.906471][ T6435]  pci_stop_bus_device+0x120/0x160
[   68.906506][ T6435]  pci_stop_and_remove_bus_device+0x58/0xa0
[   68.906539][ T6435]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   68.906574][ T6435]  remove_store+0x123/0x140
[   68.906596][ T6435]  ? __pfx_remove_store+0x10/0x10
[   68.906617][ T6435]  ? find_held_lock+0x2b/0x80
[   68.906641][ T6435]  ? sysfs_file_kobj+0xe4/0x290
[   68.906671][ T6435]  ? sysfs_file_kobj+0xe4/0x290
[   68.906701][ T6435]  ? __pfx_remove_store+0x10/0x10
[   68.906721][ T6435]  dev_attr_store+0x58/0x80
[   68.906743][ T6435]  ? __pfx_dev_attr_store+0x10/0x10
[   68.906764][ T6435]  sysfs_kf_write+0xf2/0x150
[   68.906790][ T6435]  kernfs_fop_write_iter+0x3e0/0x5f0
[   68.906818][ T6435]  ? __pfx_sysfs_kf_write+0x10/0x10
[   68.906848][ T6435]  vfs_write+0x6af/0x1050
[   68.906870][ T6435]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   68.906895][ T6435]  ? __pfx_vfs_write+0x10/0x10
[   68.906921][ T6435]  ? find_held_lock+0x2b/0x80
[   68.906948][ T6435]  ksys_write+0x12a/0x250
[   68.906971][ T6435]  ? __pfx_ksys_write+0x10/0x10
[   68.906996][ T6435]  do_syscall_64+0x123/0x790
[   68.907017][ T6435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.907035][ T6435] RIP: 0033:0x7faedc39e159
[   68.907050][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.907067][ T6435] RSP: 002b:00007faedd222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   68.907084][ T6435] RAX: ffffffffffffffda RBX: 00007faedc625fa0 RCX: 00007faedc39e159
[   68.907096][ T6435] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[   68.907106][ T6435] RBP: 00007faedc435024 R08: 0000000000000000 R09: 0000000000000000
[   68.907117][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.907128][ T6435] R13: 00007faedc626038 R14: 00007faedc625fa0 R15: 00007ffc15cce828
[   68.907145][ T6435]  </TASK>
[   69.323776][ T6435] BUG virtio-gpu-vbufs (Not tainted): Objects remaining on __kmem_cache_shutdown()
[   69.326846][ T6435] -----------------------------------------------------------------------------
[   69.326846][ T6435] 
[   69.330278][ T6435] Object 0xffff88803dbaa000 @offset=0
[   69.332066][ T6435] Object 0xffff88803dbaa118 @offset=280
[   69.333868][ T6435] Slab 0xffffea0000f6ea80 objects=29 used=2 fp=0xffff88803dbaa230 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[   69.338998][ T6435] ------------[ cut here ]------------
[   69.340878][ T6435] 1
[   69.340884][ T6435] WARNING: mm/slub.c:1245 at __slab_err+0x15/0x20, CPU#2: syz.3.170/6435
[   69.344383][ T6435] Modules linked in:
[   69.345613][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.3.170 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[   69.349086][ T6435] Tainted: [B]=BAD_PAGE
[   69.350540][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.353664][ T6435] RIP: 0010:__slab_err+0x15/0x20
[   69.355261][ T6435] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
[   69.361392][ T6435] RSP: 0018:ffffc9000621f740 EFLAGS: 00010046
[   69.363519][ T6435] RAX: 0000000000080000 RBX: ffffc9000621f790 RCX: ffffc90006d23000
[   69.366582][ T6435] RDX: 0000000000080000 RSI: ffffffff81c769bd RDI: ffff888025b22580
[   69.369387][ T6435] RBP: ffff888022a84618 R08: 0000000000000007 R09: 0000000000000000
[   69.372029][ T6435] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0
[   69.374526][ T6435] R13: ffff88803dbabfb8 R14: ffff888022a84600 R15: ffffea0000f6ea80
[   69.377098][ T6435] FS:  00007faedd2226c0(0000) GS:ffff8880d5da2000(0000) knlGS:0000000000000000
[   69.379934][ T6435] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.382133][ T6435] CR2: 0000200000000380 CR3: 000000005b6ab000 CR4: 0000000000352ef0
[   69.384646][ T6435] Call Trace:
[   69.385784][ T6435]  <TASK>
[   69.386908][ T6435]  __kmem_cache_shutdown.cold+0x16e/0x177
[   69.388814][ T6435]  kmem_cache_destroy+0x73/0x190
[   69.390545][ T6435]  virtio_gpu_free_vbufs+0x38/0x80
[   69.392493][ T6435]  ? __pfx_virtio_gpu_release+0x10/0x10
[   69.394477][ T6435]  virtio_gpu_release+0x5c/0x1c0
[   69.396173][ T6435]  ? __pfx_virtio_gpu_release+0x10/0x10
[   69.398108][ T6435]  drm_dev_put.part.0+0xbd/0x140
[   69.399660][ T6435]  drm_dev_put+0x1f/0x30
[   69.401019][ T6435]  virtio_dev_remove+0xb8/0x170
[   69.402649][ T6435]  ? __pfx_virtio_dev_remove+0x10/0x10
[   69.404427][ T6435]  device_remove+0xcb/0x180
[   69.405975][ T6435]  device_release_driver_internal+0x44e/0x620
[   69.408042][ T6435]  bus_remove_device+0x2bc/0x560
[   69.409690][ T6435]  ? __pfx_bus_remove_device+0x10/0x10
[   69.411669][ T6435]  ? __pfx_device_remove_attrs+0x10/0x10
[   69.413620][ T6435]  device_del+0x376/0x9b0
[   69.415111][ T6435]  ? __pfx_device_del+0x10/0x10
[   69.416644][ T6435]  ? __pfx___might_resched+0x10/0x10
[   69.418320][ T6435]  ? __pfx_pci_device_is_present+0x10/0x10
[   69.420147][ T6435]  device_unregister+0x1d/0xe0
[   69.421625][ T6435]  unregister_virtio_device+0x39/0x60
[   69.423300][ T6435]  virtio_pci_remove+0x7c/0x110
[   69.424829][ T6435]  pci_device_remove+0xb2/0x1d0
[   69.426337][ T6435]  ? __pfx_pci_device_remove+0x10/0x10
[   69.428042][ T6435]  device_remove+0xcb/0x180
[   69.429435][ T6435]  device_release_driver_internal+0x44e/0x620
[   69.431333][ T6435]  pci_stop_bus_device+0x120/0x160
[   69.432948][ T6435]  pci_stop_and_remove_bus_device+0x58/0xa0
[   69.434766][ T6435]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   69.436913][ T6435]  remove_store+0x123/0x140
[   69.438492][ T6435]  ? __pfx_remove_store+0x10/0x10
[   69.440209][ T6435]  ? find_held_lock+0x2b/0x80
[   69.441705][ T6435]  ? sysfs_file_kobj+0xe4/0x290
[   69.443225][ T6435]  ? sysfs_file_kobj+0xe4/0x290
[   69.444756][ T6435]  ? __pfx_remove_store+0x10/0x10
[   69.446387][ T6435]  dev_attr_store+0x58/0x80
[   69.447854][ T6435]  ? __pfx_dev_attr_store+0x10/0x10
[   69.449458][ T6435]  sysfs_kf_write+0xf2/0x150
[   69.450871][ T6435]  kernfs_fop_write_iter+0x3e0/0x5f0
[   69.452573][ T6435]  ? __pfx_sysfs_kf_write+0x10/0x10
[   69.454250][ T6435]  vfs_write+0x6af/0x1050
[   69.455677][ T6435]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   69.457538][ T6435]  ? __pfx_vfs_write+0x10/0x10
[   69.459027][ T6435]  ? find_held_lock+0x2b/0x80
[   69.460858][ T6435]  ksys_write+0x12a/0x250
[   69.462254][ T6435]  ? __pfx_ksys_write+0x10/0x10
[   69.463824][ T6435]  do_syscall_64+0x123/0x790
[   69.465302][ T6435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.467248][ T6435] RIP: 0033:0x7faedc39e159
[   69.468678][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.474661][ T6435] RSP: 002b:00007faedd222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   69.477366][ T6435] RAX: ffffffffffffffda RBX: 00007faedc625fa0 RCX: 00007faedc39e159
[   69.479764][ T6435] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[   69.482248][ T6435] RBP: 00007faedc435024 R08: 0000000000000000 R09: 0000000000000000
[   69.484896][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.487472][ T6435] R13: 00007faedc626038 R14: 00007faedc625fa0 R15: 00007ffc15cce828
[   69.490011][ T6435]  </TASK>
[   69.491127][ T6435] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   69.494419][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.3.170 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[   69.497977][ T6435] Tainted: [B]=BAD_PAGE
[   69.499242][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.502621][ T6435] Call Trace:
[   69.503814][ T6435]  <TASK>
[   69.504819][ T6435]  dump_stack_lvl+0x100/0x190
[   69.506253][ T6435]  vpanic+0x553/0x970
[   69.507478][ T6435]  ? __pfx_vpanic+0x10/0x10
[   69.508875][ T6435]  ? lock_release+0x24d/0x310
[   69.510489][ T6435]  panic+0xd1/0xe0
[   69.511803][ T6435]  ? __pfx_panic+0x10/0x10
[   69.513384][ T6435]  check_panic_on_warn.cold+0x19/0x34
[   69.515174][ T6435]  ? __slab_err+0x15/0x20
[   69.516540][ T6435]  __warn.cold+0x191/0x318
[   69.517939][ T6435]  __report_bug+0x30f/0x440
[   69.519369][ T6435]  ? __slab_err+0x15/0x20
[   69.520766][ T6435]  ? __pfx___report_bug+0x10/0x10
[   69.522393][ T6435]  ? irq_work_queue+0xd1/0x100
[   69.523922][ T6435]  ? __wake_up_klogd+0xe5/0x140
[   69.525372][ T6435]  ? vprintk_emit+0x1c9/0x6b0
[   69.527018][ T6435]  ? __pfx_vprintk_emit+0x10/0x10
[   69.528690][ T6435]  ? __pfx_vprintk_emit+0x10/0x10
[   69.530365][ T6435]  ? __slab_err+0x15/0x20
[   69.531775][ T6435]  report_bug+0xb3/0x220
[   69.533185][ T6435]  ? __slab_err+0x15/0x20
[   69.534839][ T6435]  handle_bug+0x16a/0x2a0
[   69.536200][ T6435]  exc_invalid_op+0x17/0x50
[   69.537617][ T6435]  asm_exc_invalid_op+0x1a/0x20
[   69.539148][ T6435] RIP: 0010:__slab_err+0x15/0x20
[   69.540729][ T6435] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
[   69.547028][ T6435] RSP: 0018:ffffc9000621f740 EFLAGS: 00010046
[   69.548956][ T6435] RAX: 0000000000080000 RBX: ffffc9000621f790 RCX: ffffc90006d23000
[   69.551490][ T6435] RDX: 0000000000080000 RSI: ffffffff81c769bd RDI: ffff888025b22580
[   69.554152][ T6435] RBP: ffff888022a84618 R08: 0000000000000007 R09: 0000000000000000
[   69.556967][ T6435] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0
[   69.559420][ T6435] R13: ffff88803dbabfb8 R14: ffff888022a84600 R15: ffffea0000f6ea80
[   69.561895][ T6435]  ? add_taint+0x6d/0xb0
[   69.563346][ T6435]  __kmem_cache_shutdown.cold+0x16e/0x177
[   69.565418][ T6435]  kmem_cache_destroy+0x73/0x190
[   69.567100][ T6435]  virtio_gpu_free_vbufs+0x38/0x80
[   69.568717][ T6435]  ? __pfx_virtio_gpu_release+0x10/0x10
[   69.570695][ T6435]  virtio_gpu_release+0x5c/0x1c0
[   69.572471][ T6435]  ? __pfx_virtio_gpu_release+0x10/0x10
[   69.574628][ T6435]  drm_dev_put.part.0+0xbd/0x140
[   69.576582][ T6435]  drm_dev_put+0x1f/0x30
[   69.578236][ T6435]  virtio_dev_remove+0xb8/0x170
[   69.580139][ T6435]  ? __pfx_virtio_dev_remove+0x10/0x10
[   69.582282][ T6435]  device_remove+0xcb/0x180
[   69.584011][ T6435]  device_release_driver_internal+0x44e/0x620
[   69.586067][ T6435]  bus_remove_device+0x2bc/0x560
[   69.587742][ T6435]  ? __pfx_bus_remove_device+0x10/0x10
[   69.589500][ T6435]  ? __pfx_device_remove_attrs+0x10/0x10
[   69.591504][ T6435]  device_del+0x376/0x9b0
[   69.592887][ T6435]  ? __pfx_device_del+0x10/0x10
[   69.594490][ T6435]  ? __pfx___might_resched+0x10/0x10
[   69.596910][ T6435]  ? __pfx_pci_device_is_present+0x10/0x10
[   69.599190][ T6435]  device_unregister+0x1d/0xe0
[   69.600964][ T6435]  unregister_virtio_device+0x39/0x60
[   69.602753][ T6435]  virtio_pci_remove+0x7c/0x110
[   69.604550][ T6435]  pci_device_remove+0xb2/0x1d0
[   69.606732][ T6435]  ? __pfx_pci_device_remove+0x10/0x10
[   69.608943][ T6435]  device_remove+0xcb/0x180
[   69.610768][ T6435]  device_release_driver_internal+0x44e/0x620
[   69.613240][ T6435]  pci_stop_bus_device+0x120/0x160
[   69.615281][ T6435]  pci_stop_and_remove_bus_device+0x58/0xa0
[   69.617635][ T6435]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   69.620488][ T6435]  remove_store+0x123/0x140
[   69.622467][ T6435]  ? __pfx_remove_store+0x10/0x10
[   69.624583][ T6435]  ? find_held_lock+0x2b/0x80
[   69.626559][ T6435]  ? sysfs_file_kobj+0xe4/0x290
[   69.628487][ T6435]  ? sysfs_file_kobj+0xe4/0x290
[   69.630595][ T6435]  ? __pfx_remove_store+0x10/0x10
[   69.632593][ T6435]  dev_attr_store+0x58/0x80
[   69.634378][ T6435]  ? __pfx_dev_attr_store+0x10/0x10
[   69.636439][ T6435]  sysfs_kf_write+0xf2/0x150
[   69.638264][ T6435]  kernfs_fop_write_iter+0x3e0/0x5f0
[   69.640465][ T6435]  ? __pfx_sysfs_kf_write+0x10/0x10
[   69.642504][ T6435]  vfs_write+0x6af/0x1050
[   69.644460][ T6435]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   69.646686][ T6435]  ? __pfx_vfs_write+0x10/0x10
[   69.648606][ T6435]  ? find_held_lock+0x2b/0x80
[   69.650577][ T6435]  ksys_write+0x12a/0x250
[   69.652517][ T6435]  ? __pfx_ksys_write+0x10/0x10
[   69.654561][ T6435]  do_syscall_64+0x123/0x790
[   69.656596][ T6435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.659088][ T6435] RIP: 0033:0x7faedc39e159
[   69.660563][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.667303][ T6435] RSP: 002b:00007faedd222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   69.670074][ T6435] RAX: ffffffffffffffda RBX: 00007faedc625fa0 RCX: 00007faedc39e159
[   69.672549][ T6435] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[   69.675146][ T6435] RBP: 00007faedc435024 R08: 0000000000000000 R09: 0000000000000000
[   69.677867][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.680405][ T6435] R13: 00007faedc626038 R14: 00007faedc625fa0 R15: 00007ffc15cce828
[   69.683420][ T6435]  </TASK>
[   69.685398][ T6435] Kernel Offset: disabled
[   69.686850][ T6435] Rebooting in 86400 seconds..