last executing test programs:

2.030464068s ago: executing program 3 (id=615):
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x800041, &(0x7f00000001c0)='discard')
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x54)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4)

1.924548932s ago: executing program 3 (id=617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400f000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

1.864152609s ago: executing program 3 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x82)
fchdir(r2)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0x9, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, [0xffffff00, 0xffffff00, 0xff, 0xffffff00], [0xffffffff, 0xff0000ff, 0xff000000], 'ip6gretap0\x00', 'gre0\x00', {0xff}, {0xff}, 0x73, 0x9, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x7, 0xdfa9, 0x4, 'snmp\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x33, 0x5, 0x1, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x2}, {0x0, 0x1, 0x5}, {0x0, 0x5, 0x4}, 0x6, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
r3 = creat(0x0, 0x27)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x4)
syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x0, &(0x7f0000000180), &(0x7f0000000b00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x9, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4], 0x0, 0x10, 0x40}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r7, &(0x7f00000000c0), 0x0}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}]}}}]}, 0x4c}}, 0x12)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x8000})

1.804619789s ago: executing program 3 (id=621):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}]}, &(0x7f0000000400)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x1ff, 0x0, 0x10, 0xcf09, 0x96}, &(0x7f00000001c0)=0x9c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c)
r2 = socket(0x15, 0x5, 0x0)
fcntl$addseals(r0, 0x409, 0x7)
connect$unix(r2, &(0x7f0000000080)=@abs={0xa}, 0x6e)
getpeername$packet(r2, 0x0, &(0x7f00000004c0))
r3 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x40800)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000100)={0x3, 0x0, [0xaf5, 0xffffffff, 0x7, 0x4, 0x400, 0x9, 0x8, 0x553]})
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000000)={0x0, 0x1, [0xfffffff8, 0x6, 0x8000, 0x5, 0xb, 0xd, 0x2, 0x2]})

1.291580881s ago: executing program 0 (id=630):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x840c0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4)
syz_open_dev$dri(&(0x7f0000000180), 0xcaf9, 0x60000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001a12c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000080)=0x1)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
shutdown(r6, 0x1)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x0)
bind$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @private=0xa010102, 0x3}, 0x10)
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000480)={0x15})
mount(0x0, 0x0, 0x0, 0x0, 0x0)

1.278222858s ago: executing program 0 (id=631):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000))
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0xffe, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f0000000040)}, 0x6})

1.21335846s ago: executing program 0 (id=633):
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000400")

1.093751036s ago: executing program 0 (id=635):
syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x3}, "fe04b0"}}, 0x6)
syz_open_dev$swradio(&(0x7f0000000680), 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}})
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0xc, @empty, @empty, 0x1, 0x20, 0x400002, 0x2}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={<r3=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001400)={r3, 0xc3e})
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000040)={0xa20000, 0x2, 0x205, 0xffffffffffffffff, 0x0, 0x0})

943.809044ms ago: executing program 3 (id=639):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000400)={0x200, 0x200, 0x20})
r1 = socket$inet(0x2, 0x1, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="bfa200000000000007020000c0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r1, 0x5)
setsockopt$inet_buf(r1, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000180)=':\x00'/18, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0])
r2 = accept$inet(r1, 0x0, 0x0)
read(r2, &(0x7f0000000100), 0x4)
read(r2, &(0x7f0000000304), 0x4)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x8, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340)="105b1105a17c130b9d49727ae52ef9d4523e60556a11b240ed86b420820e873ebe6da2e541f3527f30556092ba05b72c6a9e772b859b652f03728950407e9bf9f01d8179039987d4268ebbddb1dc1cd42f9d95b6adc626347d96c96e79b74aa627f83afbf1d6c2535135c719d1e869e748b3e8c2548976251c419394736a17fee4b7eb9c125be09955c2cb26c8cd61bde3d4010062266d3feb5c8aee4b13431e1170520cfa2830fa5ce385", 0x107)

604.306463ms ago: executing program 2 (id=651):
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)

554.487622ms ago: executing program 2 (id=654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xfff5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

554.029668ms ago: executing program 0 (id=655):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004808}, 0x9804)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
userfaultfd(0x801)
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000300)=ANY=[], 0x0)
syz_io_uring_setup(0x867, &(0x7f00000005c0)={0x0, 0x9164, 0x10, 0x2, 0x358}, 0x0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000240), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x5c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x11, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x934, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b7, 0x1000, 0x2, 0x158}, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x68, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x700, 0x378efed3, 0xfffff001, {{0x12, 0x4, 0x1, 0x22, 0x48, 0x65, 0x0, 0xb, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x2c, 0x3e, 0x3, 0x2, [{@loopback, 0x4}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010101, 0x4}, {@empty, 0x5}]}]}}}}})

553.913667ms ago: executing program 2 (id=656):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0x1d]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)

553.625945ms ago: executing program 1 (id=657):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x2, 0x8})
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140)=0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000180)=0x1, 0x4)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x7925, 0x8e}, 0x100, './file0\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000300)={<r2=>0x0, <r3=>0xffffffffffffffff, 0x80000}, &(0x7f0000000340)=0xc)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000380)=0x8, 0x4)
sendto$inet6(r3, &(0x7f00000003c0)="d46e4e06a5b24395003bad0c2792e095e1a9a60d7adf26639521292a1cb43faec02e442cbbe9771e838d8b00125d2005f415ef271f", 0x35, 0x800, &(0x7f0000000400)={0xa, 0x4e23, 0x5, @mcast2, 0xffff8001}, 0x1c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000440)=0x1000, 0x4)
lseek(r1, 0x9, 0x2)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x2000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000004c0)=0x531d, 0x4)
ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000000500))
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, &(0x7f0000000540))
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000005c0)={'/dev/syzrnull', 0x0}, 0x115000, 0x0)
ioctl$BLKRASET(r7, 0x1262, &(0x7f0000000600)=0x3)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x30)
getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r5, 0x84, 0x7d, &(0x7f00000006c0)={<r8=>r2, 0x8}, &(0x7f0000000700)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000740)={r8, 0x5}, &(0x7f0000000780)=0x8)
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', <r10=>0x0, 0x4, 0xdc, 0x2d, 0x1, 0x8c, @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x96994d21eaa455f, 0x700, 0x1f, 0x4}})
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000880)={0xffffffffffffffff, 0x8, 0xc3, 0x0, @vifc_lcl_ifindex=r10, @remote}, 0x10)
getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000008c0), &(0x7f0000000900)=0x10)
ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000940)={0xffffffba, "12074d4eb651985c69d8a0f6704f6fb53106acd392ed608e5fbed8c375d76809", 0x1})
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa8, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8a, 0xa8, @random="3a26e4ddfab107febc644a2c225c8fa02771218687278eca478977fbabccd77c204601c8139ae71019f7dce7b44e9f47d213a2e3bb9b81eac76f44fa361ad423fc1f4b6dfbab431071ab8b764a6f894d1b59a1a5dce651646c16f66742e5360ff6cdae2b5ba80be5ec25e45325da1c720b8dfe374a6d48b386f0610a2eb93e5a6858169ede1a"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14004040}, 0x1)

494.374336ms ago: executing program 2 (id=658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0)
ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r0, 0xc0107521, &(0x7f0000001600)={0x4, 0x1b7, 0x8, &(0x7f0000000600)=@buf_max_buf="8667096bafedf2a1847734bbcbf7fdbb4004b942177250051a6ae7a6ea2f98d3df4fc6528aae69da4795a10a48b3a1bcb86be824abb07a6a807356eb7d6ce0256204fa115899b80698cd06607e424ef40410c7b49b3f9a677c0a03cdee5c841854ce872eaa12edde9d97281b4a8a936d6597d69641e57c2dfb804652bd884960850d9e375e0ad048dd3bbd9591505c94f900f18a1397e0b9b28681b4fb08c6a58a298b5abf8efdd814955b3cbb80f1430076d3f96db3391c83ac1a48466455e677030ac42687b63084794c376696a4ce257d31ad2e69d552206f06719a3bb8a7259c2c325c9671f203de40ef9c524800ae5a0fa52c9ecdf12c9602a406b4e7e6d2a1e8f5ce7a02d059fbd34d63e6d82b45ec81090f0b904c9de6f4f0952229884cff2b9291dccfcf223d80cdeaa7c50ea09b96a2e6c1fc106c4b5a73378a9ab5036ea46048c28b0e65cc4675d5d68d02b5013d6901524544e2c7c324c6eb623195863e52b42fad245ad639041ca509645d11570eea893a8735f263b4e3922cbaaf81afa6e5c3db6f6d02ab5c2369c32b4a1fe6188b042b5ade29a2c93491f313d8e7878466fd0735b1b4e5008bd4ec6ff0fb2d26be52d9428740d619f838f62217762ca3b6f91ae24e756d1f98bf9eca81b4ad48ee3a85e7a881e553a804e47460aa257aaf2ff2c99f7d7dc1a2ab6e0b97c001d73ce434a5883dfccc26f23c973692a825e6185b554ad212259677c057125f1206c86d60acf54e78518a59105b2c4eb5308af5d28f0d59557c97c002596548704e08d325cbf21435eff872388c2cda6a640f923441a0f204e6569051736676ee7ba3fa1bc2bde369aa08cea9146abe6ced57f4f4cabc17838f1cc4a7a3364fc855c40534c78e417d2434b478e8b32363e1bd5363811dd6fcab67854ee42697a65a57602d5ce3c3ee28c8038f262f45303fb1430bc427e489210b8386f7249f9b22c300648440b482d45d0fec413e7829d839ab3076d9b05b20a48ca65bbaed0d6d883226166295c72ba8e22024d820ec0b53be826322651677a40599dd75523438128fe9a550203278ca6950f935221bc16539bd483be37ab84c17353c0e0a8c16d91f34de01641a598aeb5e375b1d23388e7f9de5254186dfe72e2835d85dfce3996047f2fe13cbefb84f6827f6927bcce479c528a93304d1424172e7e73c809702dc8461d7a3960a9a3d7624144f6cbcf6a6cb74be9030cd90e1f9ef00ebc87cf8e74091b1b00718b1464cf3a361e1593294d456050f0f67ccf9c3188349c649a3b964d0cd774a3435023b5253cbf8ef1de36e93282a38c3ff560644276cae3291f787ed8beb09500d6eb41c7e63f24f517125bf5a7ab89e796674495295861361733265683c643fb2d04655dd6994f33163a294180ef1eb946c0d6a44bf3877107f18608cc52f4b09971971c5fdd69b3619c59a593521bd4cb6d841f46249d9133e7b448911fd72f1433a4db33aad420ff30183546f84b21829b6e0ec08651173146646670b952fe4cca389e0fed8ab138b2ae7707bd46d9a265affe8f869b7b1181f4e65a6ff2ac47ed8a97a906166af5d32ce33eac82d825a948884275634295653c0c336e1ba26a13c253eb61c5271ca774deb062d9fd9b39fb23c13afea2d575fc76b3aff08d90586eff3eeadd5dcd8fa04c2d15ea0c58775a1c941469bea38a52b7692d44191a86a70039459062785c244040f7a2514b412ea6b46b9b6558639b401d89fec52f24e276cb5774367c5f4503c65e7ccc401b56ced84c4eb535fbf86570637baef24923caf75feeaba1b43404516e63ace908f3e1161209a9b9b9d064edb0a7ecd39f716b91d3b828444b454f5e432a1ff979ff53ac0a83674360964191c9a2d95384d8e00d814b9d0f57788ab7e8239357daa19dc1437ea3bfc307a07a2f49ed7eb1f902104b9cff16e615a31df5e4c42fabbe6b406a63b86e43c34334e435318e092efa6a860e4b4c73c78024a16c9e94fd614833a99b5b3b9bd7560b7f6e5ee41db9644b7df9463f27f09fa6f0c41494ced6d2c7486b0b26039d2a859dcf9dd3bab89f035fd3c42b5ad64bca65f64228a986b5ccb1052ee671773f40c272c6b61a7b54b4da0eb4a29dd3ec4103f6ce6150bd27132fe1afdcc95c1c8869a1dceff540837e573e1cec1f2e8b090ca3611f568baa95ea890e24209cf2c4f67f3a983ac0da103b1720cc15af881077984e4418249ac40319cf5b7aa1d905a24e57145ed7d5fcfb3d99a16ca22730b072f9aa2a2924e38502538e856044ddbca8cd14eef6f16b3af6d0401968ab0285f4154af2d13f26addcd0d6cb3ea6c2f524f907d476e206248b52e886890a4b7015b7ccec07ef80bb9d3f81a0da384987afa958dd8b6135be5ad41dea02df13525910b4941c48fad6f90ac8340e5b0fa9ad0c021f667fd8edb350ee42e6dbc70865e5472c430b1466a27939575719b9e6186055eafd621781e821d65b5037a22ab01e00b13e4c8fb37cd43aaf14879c31919726d05fec11f08daf2f8d1589326265fa443a11d4a7e815d1974ed687b85d25bde7c656b4e0364cf16a4870edea7747ca7bb6e18545aba06f845755cd021f4cc763369efff23839962ea07e6837826e9e726b2db0123bb0639599d2229aac6f6532ddf52074c230b407b299b1a3416981c608c00d0364d4b08a208e565bba72d7a4cc6e6312ded6211c2c1a8cf9ed151e73072822fc998bdeb38ed81ad3ee59694ca5dc1560cc48ac86fa3b92106d2af783fa6b4cb4a4621a97258a8d0e5d3fc7d2ad963c8487c60ff0edd72c50f47dccb7c08aa6ea3c962194a1961bbffc49e3fe6626ad8112b1eefcf0d78bbb1674ad5dc733310bb2ed13bdbdb16ba71079a43bba2579ba88f9bc0c3b4ecb8860563655fda327347cfba3b2cca79b16f1f039b50cd925247bbc312c7d8aa0fdbe9f5e577e7c2365f5652362d187c1a06d3e0de4f70ba66f446052fd584396c108ddbe28105da22fe3d8165f8acd06c1e95f4e83b2feac175048ac82b424db3f3e0d7ecbce788b0afdd054d4a4a55eb8227bf1cc96e2e0481a85a0c639a89eddf3f8c6efc96722663cae219bbe05202f3834397d4add151e2a233d3b65a608db56e7f38375cabf9a631fc721f73f195eb93a3fd67afbc677bb74a2240fc09d1302728acaa3ecccda6168accb2f949a2175fd85a12ea290cb759f7ea81dbbd19bc5b406d00645a7592e42338fd72911035abfdd7ae93878ef66870afdc09cc4bdf0213e4848031050a393c1e00a865e65257c6855bc7d8c04e7cdd9f6a9987ea37ce73755f807ed9bc6f4e59883873487061ef53954d093b54e173b8ec31939ec607b3ecf23438b59dc289af211efefd86290048e880c6f92ad9307937503ff6937e39388a58796842d21efeb694bdd2854ebf535227368b157ef3aad55828fd5ffecf7a8ae2c288bf87a09f82bf6babe1abb6bfd7ec9596aafc2dcd21a164ca28dc6a6a4aafaff50de8dc8c70d8830b53acc2ad188964f81db272789bbb8e25ab84af038a687ff2b5c7c0ec2a2562c4785da17572906ffabb08274d8d5ac8e873694608cc9419f2a574452fd80388fbfe52f00acac1bb663a1cad93dcb79498e2e5233c7d635fd1d41712e20885d9b21fdc803ebde7497a816a384afb736e742e2f22428d06367b89b09628b8cb5487aed60e5ad8c9599004da5f1d6700f425afbb37ccc7c85dc56a261d4f9302eb04a6604a6f8e4acfe14438824c640dd78403e98e5f221af30dc9e5145c44b001af1696198a061cabc12306e4e5d760a498bc7a34363b145e95e268b521c251722ed040dc1feb4548b7cec4b77624bc2c7b39bd8d38c4b20e93d42b622579f10e825f1dc5a699347124f997b108cfbe8b77ec2a987e94a03a14d522ffbcc2f1a6104c6aa07972b86d019a0fd32486b412410405cb9e0be5b7d2c59d22e32de05cbc6bb6001bb69ee6fc95d847fb8a39903e6a7e8b286776bb6298378ecc06cd4c7f2b86e28beb39cada891e3a52df125609d947882a7d8ab5ef900c37ea43451585d30689342db613edd5819b180475e511e3ef430fbf323feb7527135c90f81129d0ac93e55f4f57532ddad6fa585f4ecb07ba45cff0c04fda1a815782f5c9f32adbc96eea27fada428aa7847ef6cc9b397e8a0c780b85f56831725f6c1e4ba815faacceca834550b3775620a15255ef3936842cce5324fae5795874d89423b9b2a4390575b88bac396d05a59976b8e8a101995650ff139db4f71896679d8c9110c6ab7eeaa6cb2c4f93c9cdd515ebee060f1ce42b5b34412c893baf56e4f260f4ecbac4a38aa17c61cff26b448592aa8599d6214acb6594f4e57165b8d30e44e3ea2c2ba4b2cb6ed9140aaf2a8795f2f704db8a6df36b2c80a14a0b657841d6cf667abcfbbbec8470f8b859c5450c2d88ef1a0f56c947a9b8611ab0741c8d71e464d3f90ed07a987a0722bbf0132491f40ef4e91048be202b6b40bcdf7f31116da787f802b6393ad14552cb53f6633d2259fd0bfbf15d7663f321d03c4a4a534a0f8ce4e4416415f9439090c66d127058d031799693e10abada95a5b4a43d5a959a81f4bb1923053f1efba4d8e56ba7bc9c3399288fac99751e8161ea4a7768ff381a245c6caad4c1badbfe6ec741254e8afae2baff04610eb748ea8f26881abf46ec3cd070a3eb0ff140b2d412106d99b17af289559935508d3118e436941409a35f7cba7f3c8a8d8b967934775e85300e82aac044ecdf44fb14c7721c2ea63f61a554fc26606cc790756e921a8b82dad43219c8e172bf4a0e1b9c86a5a2c8993ff035c5f5af433e91a9153badaccbdb62f0fc60848cdd30b196efc1bd5fa4bd7af180d54a1399a94aa6929cf1d63bebb52fb1758d6c29cadd7d3c0f980be91129e33238b2044a4be48f3ad4b22f5b3739529ba317804f8a2157ed21bf7e3c41056417d8e5ea353794b08ffd13f209614fdf50e47b68fe1fc0757e9aa2d99583860a1ec02369ef241da3ff57b6e6b0e68945922fe1621306331a481cb970571ffa59c566ff4fb8d864d8ea3ce515c1504373bb8ff46b886567651946f7cbc312d2b7efab1501d2a25532cb8e9d1e3516a3f9af7cce1cf081a522fe16c1086f4bdc8d6d518b713c720dc8e9dc5d0b34b55c46d0af31678df6033fcb52847a7f6f9599d5a3695dd48e3d795f21194f27626f603b002b89a329aff662e84af190b5088e94ae2cf365f23b61c17757b056a899045f734177943bf4550b0addc8a5a165722b6d6212dd22833642821cc694d92b383afb7f5bbcac66950356612314c00b33616c1eb0fa57addc47004551724b36ef7560970516a17751900f2e255fb0e848e2071eb63943718cc874fedffcef8191060f1e99cde245ede04aa20a30c0726e2ad494f75c5696c3e1b52f2ac8285173ef58480909926d0a8c8f7a3fab5bd1382fd4b3f9aaa7600c3effb29e885f456cdf7f57ae77f123b71d1506051e6e30c7551c27a3ddab5da490c558e756fa46bf476c56ec80f4bbf858106477ca7aa2981641521c777e36b514dd63f21331e987222b3c9eae61c0555d95b52d59cac1ec1bba3db6172fbf292bd947cf229f38b34fd99b0b38610602d3dda5fdf0b84eed0085d4ae3f24b162e7259560a37ad47e3a0cdf225ceb3d1fbde824e55fd4c961fe30aac39a4e557bd1b0032cff77b00793e5f8fbe0aced9d9e0560ea0fec3db6c4c07331af61470aed81e56a1114e09abe6f74478017c1ae9c6180e8f125d3b3cab81369e5"})
write(r0, &(0x7f00000005c0)='0', 0x1)

493.943512ms ago: executing program 2 (id=659):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x80, 0x20}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251e, 0x5, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}}, 0x844)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x6, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0xffffffd3, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x8, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0x9fc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x6, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1fe)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300})
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='7', 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r8 = dup(r7)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r8, r8}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203)

434.627908ms ago: executing program 2 (id=660):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="2c000000180001002bbd7000fddbdf2502108004fc02ff030000000008000700ac1414aa2e5c16a300114100"], 0x2c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000600)=""/247)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"})
r1 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000100e83ac55324dcd8bcb9ecf3e2a4b6f6c7d935", 0x28, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000200000000080000e4ffffffffffc2529bb61612fe174777aa5a04201f72d307000000100490a48be6940b318aa62c147238e5a8434a8ee09f674db09252b820ad6656b562a691a8c4158ec222bc8b488a8151cb10e1ff8e243dc043f536153a"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r1}, &(0x7f00000000c0)=""/76, 0x4c, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04060329c8"], 0x6)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='.dead\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r1})
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x54d4, &(0x7f0000000040)={0x0, 0x7b4e, 0x20, 0xc, 0x302})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(r9, &(0x7f0000000240)=[{&(0x7f0000000200)='0', 0x1}], 0x1, 0x0, 0x3)
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80800)
write$P9_RLERRORu(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00000007010001b9a4bdd7e51cf0002d09000000d4974bc1f42f3cacd4e69d40a18427633fcab98fe4263fca66b5bdd10cdb5366468cc35a45b093f394fd64af168c759e2db5bf96ce99ae71735b783a8dd3a2ce8b1d5736b48a7f38c32e922fca9441ba82cf917ed71c6949e29a9eaf7677a326f6a34476222bbf05c78fac50bc5a23574a143d7fac76938c44d89e39efd1d3ac94577f584be0e7704b102bad"], 0xe)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

434.322715ms ago: executing program 1 (id=661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x3f}, 0x0)

274.093165ms ago: executing program 1 (id=662):
syz_emit_ethernet(0x15c, &(0x7f00000007c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x4b, 0x4, 0x2, 0x3c, 0x14e, 0x65, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, {[@rr={0x7, 0x13, 0x30, [@multicast1, @broadcast, @remote, @multicast2]}, @cipso={0x86, 0x50, 0x0, [{0x7, 0x8, "a36afe6503c4"}, {0x7, 0x7, "b5d30159d8"}, {0x1, 0xd, "6639da4496b5a744b11845"}, {0x0, 0xd, "1d643045a44db0800340c2"}, {0x0, 0xd, "0460f3d10358ca9be24eed"}, {0x0, 0x4, "d61a"}, {0x2, 0x10, "e4dca206b1bd64fc50866b3436ad"}]}, @timestamp_prespec={0x44, 0x34, 0x5c, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8b}, {@multicast1, 0x80000000}, {@rand_addr=0x64010101, 0x9}, {@remote, 0x9}, {@remote, 0xacf9}, {@loopback, 0xffffffff}]}, @rr={0x7, 0x1b, 0xb7, [@broadcast, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @broadcast]}, @generic={0x86, 0x8, "f5000a6f1883"}, @cipso={0x86, 0x20, 0x3, [{0x7, 0xb, "2addfa7023408dec3a"}, {0x7, 0xf, "0dd1116b7931fe447361dcaae1"}]}, @timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0x5, [{@empty, 0x8}, {@empty, 0x7c566602}]}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x0, [{@broadcast, 0x9}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010101, 0x7fffffff}]}, @ssrr={0x89, 0x7, 0x15, [@multicast1]}, @generic={0x40, 0x7, "f73bc45ef7"}]}}, @payload_direct={{{{0x22, 0x0, 0x0, 0x1, 0x1, 0x8, 0x1, 0x2, 0xffff, 0x0, 0x1, 0x6, 0x0, 0x3, 0x1, 0x1, 0x1, 0x4e20, 0x4e22}, 0x4, 0x3}}, [0x0, 0x0]}}}}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x800, 0x1, 0x100028c})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1008000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x3, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x10000, r3})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000})
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0x9}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x4890)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f0000000780))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)}], 0x1}, 0x4011)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x3, @mcast1, 0xf2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x800c854}, 0x881)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, 0x0)
dup(r9)

194.226222ms ago: executing program 1 (id=663):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0xfffffff4, 0x0)

193.705205ms ago: executing program 1 (id=664):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, <r3=>0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, <r5=>0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname$packet(r7, 0x0, &(0x7f0000000040))
ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r6})
ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r5})
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28})
ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000400)={0x8, r3})
ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r2})
close(r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x7}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)

134.404956ms ago: executing program 1 (id=665):
socket$tipc(0x1e, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40a, 0x6, 0x20000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d5, 0x20000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffff90210000, 0x0, 0xfffc, 0x5, 0x7, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0x8}}, {0x0, 0x6}}}, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x118410, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
fcntl$getown(r6, 0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x31, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r5}, @generic={0x3, 0x9, 0x6, 0xd7, 0x80000000}, @ldst={0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x4, 0x0, 0x8, 0x1, 0x1, 0xfffffffffffffff0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x25, &(0x7f00000008c0)=""/37, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x6, 0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[r5, r5, r5, r5, r5, r1], &(0x7f0000000b40)=[{0x0, 0x3, 0xa, 0x1}, {0x5, 0x1, 0x7, 0xb}, {0x0, 0x5, 0x6, 0x2}, {0x5, 0x2, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x6}, {0x1, 0x1, 0x4, 0x4}], 0x10, 0x3a}, 0x94)
sendmsg$nl_route_sched(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0)
stat(0x0, 0x0)
getgid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, 0x0, 0x942, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r9, 0x80015b12, 0x0)

74.290954ms ago: executing program 3 (id=666):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='acpi_pm', 0x7)
write(r2, &(0x7f00000001c0)='j', 0x1)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='ms_mode\x00', &(0x7f0000000180)='legacy\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000000000a, 0x2)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={<r5=>r4, &(0x7f00000001c0)='127.0.0.1:6789:/\x00', 0x101000, &(0x7f0000000200)={@_ha_fsid, {0x9ac3, 0x8001, 0x6, 0x2}}, 0x15f7, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x6})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
fallocate(r6, 0x0, 0x0, 0x101)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r6, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000400)=@multiplanar_mmap={0x8001, 0x3, 0x4, 0x4000, 0x907, {}, {0x3, 0x2, 0x2, 0x8, 0xd, 0xe9, "83ffb1e5"}, 0x5, 0x1, {&(0x7f0000000380)=[{0x54000000, 0x4, {0x7}, 0x8}, {0x0, 0x2, {0x6}, 0x1ff}]}, 0x80000001, 0x0, r6})
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x3, 0x0, 0x7}, 0x2, 0x4018, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x9}}, 0xe02d, 0x0, 0x8}})
syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0)

0s ago: executing program 0 (id=667):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="c00000002a0007012abd7000fcdbdf2502"], 0xc0}, 0x1, 0x0, 0x0, 0x8}, 0x2000c004)
socketpair(0x1d, 0xa, 0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES8=r5, @ANYRES64, @ANYRES8=r1], 0x24}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x0, 0xd, 0x0, "a4fe3abab4ffc9d63ee3ff1349e10d26a10c17585438adf1d9243dfca143b600b4659aa87bc07de7b831b7f66af6b90fbffe356a0e24788589a8a4fd9ca5067122072b350610abf1e15709b85ac150dc"}, 0xd8)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000010)
gettimeofday(&(0x7f0000000000), &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="c00000002a0007012abd7000fcdbdf2502"], 0xc0}, 0x1, 0x0, 0x0, 0x8}, 0x2000c004) (async)
socketpair(0x1d, 0xa, 0x3, &(0x7f0000000040)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES8=r5, @ANYRES64, @ANYRES8=r1], 0x24}}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x0, 0xd, 0x0, "a4fe3abab4ffc9d63ee3ff1349e10d26a10c17585438adf1d9243dfca143b600b4659aa87bc07de7b831b7f66af6b90fbffe356a0e24788589a8a4fd9ca5067122072b350610abf1e15709b85ac150dc"}, 0xd8) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) (async)
gettimeofday(&(0x7f0000000000), &(0x7f0000000080)) (async)

0s ago: executing program 0 (id=668):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2043)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0xfc, 0x0, 0x0, 0x0, "3bad90732d8c59f7"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0))
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1000}, 0x8)
shutdown(r3, 0x1)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000002c0)={0x9, 0x0, 0x1, 0x1000, 0x8001, 0xa07b, "e1700df9f199241d378ff069ecc06322", 0xf0, 0xc, 0x9, 0x2, 0x0, 0x9, 0x8})

kernel console output (not intermixed with test programs):

  do_syscall_64+0x123/0x790
[   45.015048][ T6089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.015067][ T6089] RIP: 0033:0x7fcec859e199
[   45.015082][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.015099][ T6089] RSP: 002b:00007fcec9503028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   45.015118][ T6089] RAX: ffffffffffffffda RBX: 00007fcec8825fa0 RCX: 00007fcec859e199
[   45.015130][ T6089] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240
[   45.015140][ T6089] RBP: 00007fcec9503090 R08: 0000000000000000 R09: 0000000000000000
[   45.015151][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.015161][ T6089] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   45.015186][ T6089]  </TASK>
[   45.120307][ T6095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65147 sclass=netlink_route_socket pid=6095 comm=syz.1.79
[   45.176877][   T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   45.193169][ T6099] tmpfs: Too few inodes for current use
[   45.229255][ T6101] usbcore.quirks: string doesn't fit in 127 chars.
[   45.232427][ T6109] program syz.1.81 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   45.232504][ T6109] ata1.00: invalid command format 4
[   45.306806][ T5842] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   45.328218][   T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   45.329560][   T25] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   45.329593][   T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   45.329614][   T25] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.329644][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.338643][   T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   45.339254][   T25] usb 8-1: invalid MIDI out EP 0
[   45.409327][   T25] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22
[   45.446755][ T5842] usb 5-1: device descriptor read/64, error -71
[   45.594155][ T6118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44406 sclass=netlink_route_socket pid=6118 comm=syz.3.70
[   45.686790][ T5842] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   45.826715][ T5842] usb 5-1: device descriptor read/64, error -71
[   45.927347][ T5842] usb usb5-port1: attempt power cycle
[   45.949865][ T6120] FAULT_INJECTION: forcing a failure.
[   45.949865][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.949884][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT(full) 
[   45.949896][ T6120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.949902][ T6120] Call Trace:
[   45.949906][ T6120]  <TASK>
[   45.949911][ T6120]  dump_stack_lvl+0x100/0x190
[   45.949941][ T6120]  should_fail_ex.cold+0x5/0xa
[   45.949957][ T6120]  _copy_from_user+0x2e/0xd0
[   45.949971][ T6120]  copy_msghdr_from_user+0x9f/0x4c0
[   45.949985][ T6120]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   45.950001][ T6120]  ? lock_acquire+0x1d1/0x380
[   45.950013][ T6120]  ? get_pid_task+0x2a/0x250
[   45.950029][ T6120]  ___sys_sendmsg+0x106/0x1e0
[   45.950042][ T6120]  ? __pfx____sys_sendmsg+0x10/0x10
[   45.950055][ T6120]  ? get_pid_task+0x106/0x250
[   45.950074][ T6120]  ? find_held_lock+0x2b/0x80
[   45.950098][ T6120]  __sys_sendmsg+0x160/0x210
[   45.950114][ T6120]  ? __pfx___sys_sendmsg+0x10/0x10
[   45.950136][ T6120]  do_syscall_64+0x123/0x790
[   45.950150][ T6120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.950162][ T6120] RIP: 0033:0x7fd123d9e199
[   45.950171][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.950182][ T6120] RSP: 002b:00007fd124b8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   45.950193][ T6120] RAX: ffffffffffffffda RBX: 00007fd124025fa0 RCX: 00007fd123d9e199
[   45.950199][ T6120] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   45.950206][ T6120] RBP: 00007fd124b8b090 R08: 0000000000000000 R09: 0000000000000000
[   45.950212][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.950218][ T6120] R13: 00007fd124026038 R14: 00007fd124025fa0 R15: 00007fff61395ce8
[   45.950232][ T6120]  </TASK>
[   46.020346][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   46.277779][ T5842] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   46.307369][ T5842] usb 5-1: device descriptor read/8, error -71
[   46.370168][ T6134] jffs2: notice: (6134) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   46.556928][ T5842] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   46.577162][ T5842] usb 5-1: device descriptor read/8, error -71
[   46.661846][ T6148] FAULT_INJECTION: forcing a failure.
[   46.661846][ T6148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.661866][ T6148] CPU: 3 UID: 0 PID: 6148 Comm: syz.2.97 Not tainted syzkaller #0 PREEMPT(full) 
[   46.661878][ T6148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   46.661885][ T6148] Call Trace:
[   46.661889][ T6148]  <TASK>
[   46.661893][ T6148]  dump_stack_lvl+0x100/0x190
[   46.661912][ T6148]  should_fail_ex.cold+0x5/0xa
[   46.661928][ T6148]  _copy_to_user+0x32/0xd0
[   46.661944][ T6148]  simple_read_from_buffer+0xcb/0x170
[   46.661960][ T6148]  proc_fail_nth_read+0x1af/0x230
[   46.661977][ T6148]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   46.661992][ T6148]  ? rw_verify_area+0xce/0x6d0
[   46.662010][ T6148]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   46.662024][ T6148]  vfs_read+0x1e4/0xb40
[   46.662037][ T6148]  ? lock_acquire+0x1d1/0x380
[   46.662049][ T6148]  ? __fget_files+0x34/0x3d0
[   46.662064][ T6148]  ? __pfx_vfs_read+0x10/0x10
[   46.662075][ T6148]  ? find_held_lock+0x2b/0x80
[   46.662091][ T6148]  ? __fget_files+0x215/0x3d0
[   46.662108][ T6148]  ? __fget_files+0x21f/0x3d0
[   46.662126][ T6148]  ksys_read+0x12a/0x250
[   46.662139][ T6148]  ? __pfx_ksys_read+0x10/0x10
[   46.662155][ T6148]  do_syscall_64+0x123/0x790
[   46.662168][ T6148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.662180][ T6148] RIP: 0033:0x7fd123d5e9ce
[   46.662189][ T6148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   46.662199][ T6148] RSP: 002b:00007fd124b8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   46.662210][ T6148] RAX: ffffffffffffffda RBX: 00007fd124b8b6c0 RCX: 00007fd123d5e9ce
[   46.662217][ T6148] RDX: 000000000000000f RSI: 00007fd124b8b0a0 RDI: 0000000000000004
[   46.662223][ T6148] RBP: 00007fd124b8b090 R08: 0000000000000000 R09: 0000000000000000
[   46.662229][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.662235][ T6148] R13: 00007fd124026038 R14: 00007fd124025fa0 R15: 00007fff61395ce8
[   46.662249][ T6148]  </TASK>
[   46.664349][ T5732] Bluetooth: hci3: connection err: -111
[   46.664463][ T5732] Bluetooth: hci3: connection err: -111
[   46.664527][ T5732] Bluetooth: hci3: connection err: -111
[   46.664584][ T5732] Bluetooth: hci3: connection err: -111
[   46.664639][ T5732] Bluetooth: hci3: connection err: -111
[   46.664694][ T5732] Bluetooth: hci3: connection err: -111
[   46.664750][ T5732] Bluetooth: hci3: connection err: -111
[   46.664805][ T5732] Bluetooth: hci3: connection err: -111
[   46.664860][ T5732] Bluetooth: hci3: connection err: -111
[   46.664915][ T5732] Bluetooth: hci3: connection err: -111
[   46.664970][ T5732] Bluetooth: hci3: connection err: -111
[   46.665029][ T5732] Bluetooth: hci3: connection err: -111
[   46.665089][ T5732] Bluetooth: hci3: connection err: -111
[   46.665147][ T5732] Bluetooth: hci3: connection err: -111
[   46.665202][ T5732] Bluetooth: hci3: connection err: -111
[   46.665256][ T5732] Bluetooth: hci3: connection err: -111
[   46.665310][ T5732] Bluetooth: hci3: connection err: -111
[   46.665365][ T5732] Bluetooth: hci3: connection err: -111
[   46.665419][ T5732] Bluetooth: hci3: connection err: -111
[   46.665473][ T5732] Bluetooth: hci3: connection err: -111
[   46.665527][ T5732] Bluetooth: hci3: connection err: -111
[   46.665582][ T5732] Bluetooth: hci3: connection err: -111
[   46.665640][ T5732] Bluetooth: hci3: connection err: -111
[   46.665696][ T5732] Bluetooth: hci3: connection err: -111
[   46.665750][ T5732] Bluetooth: hci3: connection err: -111
[   46.665804][ T5732] Bluetooth: hci3: connection err: -111
[   46.665861][ T5732] Bluetooth: hci3: connection err: -111
[   46.665915][ T5732] Bluetooth: hci3: connection err: -111
[   46.665969][ T5732] Bluetooth: hci3: connection err: -111
[   46.666032][ T5732] Bluetooth: hci3: connection err: -111
[   46.666087][ T5732] Bluetooth: hci3: connection err: -111
[   46.666142][ T5732] Bluetooth: hci3: connection err: -111
[   46.666197][ T5732] Bluetooth: hci3: connection err: -111
[   46.666252][ T5732] Bluetooth: hci3: connection err: -111
[   46.667041][ T5732] Bluetooth: hci3: connection err: -111
[   46.667126][ T5732] Bluetooth: hci3: connection err: -111
[   46.667182][ T5732] Bluetooth: hci3: connection err: -111
[   46.667236][ T5732] Bluetooth: hci3: connection err: -111
[   46.667291][ T5732] Bluetooth: hci3: connection err: -111
[   46.667346][ T5732] Bluetooth: hci3: connection err: -111
[   46.667403][ T5732] Bluetooth: hci3: connection err: -111
[   46.667501][ T5732] Bluetooth: hci3: connection err: -111
[   46.667584][ T5732] Bluetooth: hci3: connection err: -111
[   46.667641][ T5732] Bluetooth: hci3: connection err: -111
[   46.667696][ T5732] Bluetooth: hci3: connection err: -111
[   46.667751][ T5732] Bluetooth: hci3: connection err: -111
[   46.667805][ T5732] Bluetooth: hci3: connection err: -111
[   46.667860][ T5732] Bluetooth: hci3: connection err: -111
[   46.667914][ T5732] Bluetooth: hci3: connection err: -111
[   46.667968][ T5732] Bluetooth: hci3: connection err: -111
[   46.668033][ T5732] Bluetooth: hci3: connection err: -111
[   46.668088][ T5732] Bluetooth: hci3: connection err: -111
[   46.668147][ T5732] Bluetooth: hci3: connection err: -111
[   46.668204][ T5732] Bluetooth: hci3: connection err: -111
[   46.668262][ T5732] Bluetooth: hci3: connection err: -111
[   46.668318][ T5732] Bluetooth: hci3: connection err: -111
[   46.668397][ T5732] Bluetooth: hci3: connection err: -111
[   46.668831][ T5732] Bluetooth: hci3: connection err: -111
[   46.668908][ T5732] Bluetooth: hci3: connection err: -111
[   46.668964][ T5732] Bluetooth: hci3: connection err: -111
[   46.669025][ T5732] Bluetooth: hci3: connection err: -111
[   46.669080][ T5732] Bluetooth: hci3: connection err: -111
[   46.669136][ T5732] Bluetooth: hci3: connection err: -111
[   46.669192][ T5732] Bluetooth: hci3: connection err: -111
[   46.669247][ T5732] Bluetooth: hci3: connection err: -111
[   46.697840][ T5842] usb usb5-port1: unable to enumerate USB device
[   46.917083][ T5735] Bluetooth: hci0: command tx timeout
[   46.917106][ T5735] Bluetooth: hci1: command tx timeout
[   46.917119][ T5735] Bluetooth: hci3: command tx timeout
[   46.917148][ T5732] Bluetooth: hci2: command tx timeout
[   47.346103][ T6184] usb usb1: check_ctrlrecip: process 6184 (syz.1.107) requesting ep 01 but needs 81
[   47.346128][ T6184] usb usb1: usbfs: process 6184 (syz.1.107) did not claim interface 0 before use
[   47.864769][  T853] usb 8-1: USB disconnect, device number 2
[   47.902609][ T6187] netlink: 'syz.3.108': attribute type 10 has an invalid length.
[   47.950716][ T6189] ip_tables: iptables: counters copy to user failed while replacing table
[   47.992406][ T6191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12377 sclass=netlink_route_socket pid=6191 comm=syz.3.110
[   48.040521][ T6195] netlink: 260 bytes leftover after parsing attributes in process `syz.2.113'.
[   48.042200][ T6195] veth1_macvtap: left promiscuous mode
[   48.042216][ T6195] macsec0: entered allmulticast mode
[   48.044771][ T6195] veth1_macvtap: entered promiscuous mode
[   48.044781][ T6195] veth1_macvtap: entered allmulticast mode
[   48.045274][ T6195] macsec0: left allmulticast mode
[   48.045283][ T6195] veth1_macvtap: left allmulticast mode
[   48.050575][ T6197] ip_tables: iptables: counters copy to user failed while replacing table
[   48.051329][ T6197] FAULT_INJECTION: forcing a failure.
[   48.051329][ T6197] name failslab, interval 1, probability 0, space 0, times 0
[   48.051353][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) 
[   48.051372][ T6197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.051382][ T6197] Call Trace:
[   48.051389][ T6197]  <TASK>
[   48.051395][ T6197]  dump_stack_lvl+0x100/0x190
[   48.051426][ T6197]  should_fail_ex.cold+0x5/0xa
[   48.051451][ T6197]  should_failslab+0xc2/0x120
[   48.051475][ T6197]  __kmalloc_cache_noprof+0x91/0x6d0
[   48.051495][ T6197]  ? tcp_sendmsg_fastopen+0x24d/0x750
[   48.051522][ T6197]  tcp_sendmsg_fastopen+0x24d/0x750
[   48.051549][ T6197]  tcp_sendmsg_locked+0x27da/0x4420
[   48.051575][ T6197]  ? __lock_acquire+0x5c0/0x1f40
[   48.051600][ T6197]  ? reacquire_held_locks+0xdd/0x1f0
[   48.051626][ T6197]  ? release_sock+0x21/0x280
[   48.051652][ T6197]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[   48.051674][ T6197]  ? lock_acquire+0x1d1/0x380
[   48.051694][ T6197]  ? do_raw_spin_lock+0x128/0x260
[   48.051718][ T6197]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   48.051747][ T6197]  ? __local_bh_enable_ip+0xa5/0x120
[   48.051770][ T6197]  tcp_sendmsg+0x2e/0x50
[   48.051789][ T6197]  ? __pfx_tcp_sendmsg+0x10/0x10
[   48.051810][ T6197]  inet_sendmsg+0xb9/0x140
[   48.051831][ T6197]  __sys_sendto+0x453/0x4e0
[   48.051852][ T6197]  ? __pfx_inet_sendmsg+0x10/0x10
[   48.051874][ T6197]  ? __pfx___sys_sendto+0x10/0x10
[   48.051903][ T6197]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   48.051933][ T6197]  ? ksys_write+0x1ac/0x250
[   48.051953][ T6197]  ? __pfx_ksys_write+0x10/0x10
[   48.051976][ T6197]  __x64_sys_sendto+0xe0/0x1c0
[   48.051999][ T6197]  ? do_syscall_64+0xae/0x790
[   48.052017][ T6197]  ? lockdep_hardirqs_on+0x7d/0x110
[   48.052037][ T6197]  do_syscall_64+0x123/0x790
[   48.052058][ T6197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.052076][ T6197] RIP: 0033:0x7fe67df9e199
[   48.052091][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.052106][ T6197] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   48.052124][ T6197] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   48.052135][ T6197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   48.052161][ T6197] RBP: 00007fe67ee97090 R08: 0000200000e68000 R09: 0000000000000010
[   48.052172][ T6197] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001
[   48.052182][ T6197] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   48.052206][ T6197]  </TASK>
[   48.119980][ T6200] x_tables: duplicate underflow at hook 2
[   48.276327][ T6210] syzkaller1: entered promiscuous mode
[   48.276341][ T6210] syzkaller1: entered allmulticast mode
[   48.386713][   T43] kauditd_printk_skb: 91 callbacks suppressed
[   48.386731][   T43] audit: type=1400 audit(1791271778.788:471): avc:  denied  { unmount } for  pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   48.414638][   T43] audit: type=1400 audit(1791271778.818:472): avc:  denied  { mount } for  pid=6216 comm="syz.0.123" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.421070][   T43] audit: type=1400 audit(1791271778.828:473): avc:  denied  { write } for  pid=6216 comm="syz.0.123" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.576773][ T5842] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   48.637436][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'.
[   48.648656][   T43] audit: type=1400 audit(1791271779.058:474): avc:  denied  { read write } for  pid=6215 comm="syz.1.122" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   48.648686][   T43] audit: type=1400 audit(1791271779.058:475): avc:  denied  { open } for  pid=6215 comm="syz.1.122" path="/28/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   48.649549][   T43] audit: type=1400 audit(1791271779.058:476): avc:  denied  { ioctl } for  pid=6215 comm="syz.1.122" path="/28/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   48.675230][ T6224] vlan2: entered allmulticast mode
[   48.675290][ T6224] veth1_to_bond: entered allmulticast mode
[   48.726711][ T5842] usb 7-1: Using ep0 maxpacket: 8
[   48.728271][ T5842] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   48.729825][ T5842] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   48.729842][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   48.729855][ T5842] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   48.729866][ T5842] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   48.729885][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.759534][   T43] audit: type=1400 audit(1791271779.168:477): avc:  denied  { create } for  pid=6228 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   48.760698][   T43] audit: type=1400 audit(1791271779.168:478): avc:  denied  { setopt } for  pid=6228 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   48.835163][ T6233] JFS: discard option not supported on device
[   48.835865][ T6233] Mount JFS Failure: -5
[   48.835873][ T6233] jfs_mount failed w/return code = -5
[   48.846616][   T43] audit: type=1400 audit(1791271779.248:479): avc:  denied  { allowed } for  pid=6232 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   48.935234][ T5842] usb 7-1: GET_CAPABILITIES returned 0
[   48.935259][ T5842] usbtmc 7-1:16.0: can't read capabilities
[   48.952524][ T6240] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary
[   48.968526][   T43] audit: type=1400 audit(1791271779.378:480): avc:  denied  { unmount } for  pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   49.141185][ T5842] usb 7-1: USB disconnect, device number 2
[   49.296798][   T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   49.425745][ T6268] =======================================================
[   49.425745][ T6268] WARNING: The mand mount option has been deprecated and
[   49.425745][ T6268]          and is ignored by this kernel. Remove the mand
[   49.425745][ T6268]          option from the mount to silence this warning.
[   49.425745][ T6268] =======================================================
[   49.447591][   T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   49.448813][   T25] usb 5-1: unable to read config index 0 descriptor/start: -61
[   49.448830][   T25] usb 5-1: can't read configurations, error -61
[   49.496801][ T5520] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   49.529504][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   49.576710][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   49.656934][ T5520] usb 8-1: Using ep0 maxpacket: 8
[   49.658328][ T5520] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   49.661262][ T5520] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.661281][ T5520] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   49.661314][ T5520] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.661346][ T5520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.668970][ T5520] hub 8-1:1.0: bad descriptor, ignoring hub
[   49.668991][ T5520] hub 8-1:1.0: probe with driver hub failed with error -5
[   49.669592][ T5520] cdc_wdm 8-1:1.0: skipping garbage
[   49.669606][ T5520] cdc_wdm 8-1:1.0: skipping garbage
[   49.676011][ T5520] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   49.676028][ T5520] cdc_wdm 8-1:1.0: Unknown control protocol
[   49.731571][ T6290] FAULT_INJECTION: forcing a failure.
[   49.731571][ T6290] name failslab, interval 1, probability 0, space 0, times 0
[   49.731602][ T6290] CPU: 2 UID: 0 PID: 6290 Comm: syz.2.149 Not tainted syzkaller #0 PREEMPT(full) 
[   49.731630][ T6290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.731641][ T6290] Call Trace:
[   49.731647][ T6290]  <TASK>
[   49.731655][ T6290]  dump_stack_lvl+0x100/0x190
[   49.731686][ T6290]  should_fail_ex.cold+0x5/0xa
[   49.731712][ T6290]  should_failslab+0xc2/0x120
[   49.731738][ T6290]  kmem_cache_alloc_noprof+0x92/0x6a0
[   49.731760][ T6290]  ? path_mount+0x1ed7/0x24c0
[   49.731777][ T6290]  ? alloc_vfsmnt+0x23/0x710
[   49.731800][ T6290]  alloc_vfsmnt+0x23/0x710
[   49.731820][ T6290]  path_mount+0x1f31/0x24c0
[   49.731842][ T6290]  ? __pfx_path_mount+0x10/0x10
[   49.731859][ T6290]  ? lockdep_hardirqs_on+0x7d/0x110
[   49.731883][ T6290]  ? putname+0xb1/0x110
[   49.731906][ T6290]  ? kmem_cache_free+0x127/0x6c0
[   49.731933][ T6290]  ? __x64_sys_mount+0x293/0x310
[   49.731950][ T6290]  __x64_sys_mount+0x293/0x310
[   49.731969][ T6290]  ? __pfx___x64_sys_mount+0x10/0x10
[   49.731995][ T6290]  do_syscall_64+0x123/0x790
[   49.732033][ T6290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.732054][ T6290] RIP: 0033:0x7fd123d9e199
[   49.732069][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.732084][ T6290] RSP: 002b:00007fd121ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   49.732101][ T6290] RAX: ffffffffffffffda RBX: 00007fd124026090 RCX: 00007fd123d9e199
[   49.732112][ T6290] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000
[   49.732123][ T6290] RBP: 00007fd123e358e0 R08: 0000000000000000 R09: 0000000000000000
[   49.732133][ T6290] R10: 0000000002200cd0 R11: 0000000000000246 R12: 0000000000000000
[   49.732144][ T6290] R13: 00007fd124026128 R14: 00007fd124026090 R15: 00007fff61395ce8
[   49.732168][ T6290]  </TASK>
[   49.749443][   T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   49.754371][   T25] usb 5-1: unable to read config index 0 descriptor/start: -61
[   49.754401][   T25] usb 5-1: can't read configurations, error -61
[   49.754783][   T25] usb usb5-port1: attempt power cycle
[   49.790339][ T6296] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   49.791938][ T6301] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   49.871410][ T6307] FAULT_INJECTION: forcing a failure.
[   49.871410][ T6307] name failslab, interval 1, probability 0, space 0, times 0
[   49.871491][ T6307] CPU: 2 UID: 0 PID: 6307 Comm: syz.1.154 Not tainted syzkaller #0 PREEMPT(full) 
[   49.871511][ T6307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.871525][ T6307] Call Trace:
[   49.871532][ T6307]  <TASK>
[   49.871540][ T6307]  dump_stack_lvl+0x100/0x190
[   49.871570][ T6307]  should_fail_ex.cold+0x5/0xa
[   49.871591][ T6307]  should_failslab+0xc2/0x120
[   49.871614][ T6307]  __kmalloc_cache_noprof+0x91/0x6d0
[   49.871639][ T6307]  ? rxrpc_lookup_local+0x3f7/0x1220
[   49.871669][ T6307]  rxrpc_lookup_local+0x3f7/0x1220
[   49.871696][ T6307]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[   49.871726][ T6307]  ? __local_bh_enable_ip+0xa5/0x120
[   49.871750][ T6307]  rxrpc_sendmsg+0x34a/0x680
[   49.871782][ T6307]  ____sys_sendmsg+0xa4d/0xbe0
[   49.871801][ T6307]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[   49.871832][ T6307]  ? __pfx_____sys_sendmsg+0x10/0x10
[   49.871857][ T6307]  ? lock_acquire+0x1d1/0x380
[   49.871878][ T6307]  ? get_pid_task+0x2a/0x250
[   49.871907][ T6307]  ___sys_sendmsg+0x190/0x1e0
[   49.871931][ T6307]  ? __pfx____sys_sendmsg+0x10/0x10
[   49.871952][ T6307]  ? get_pid_task+0x106/0x250
[   49.871987][ T6307]  ? find_held_lock+0x2b/0x80
[   49.872031][ T6307]  __sys_sendmsg+0x160/0x210
[   49.872058][ T6307]  ? __pfx___sys_sendmsg+0x10/0x10
[   49.872098][ T6307]  do_syscall_64+0x123/0x790
[   49.872122][ T6307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.872140][ T6307] RIP: 0033:0x7fcec859e199
[   49.872157][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.872173][ T6307] RSP: 002b:00007fcec9503028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   49.872192][ T6307] RAX: ffffffffffffffda RBX: 00007fcec8825fa0 RCX: 00007fcec859e199
[   49.872204][ T6307] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[   49.872214][ T6307] RBP: 00007fcec9503090 R08: 0000000000000000 R09: 0000000000000000
[   49.872225][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.872236][ T6307] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   49.872262][ T6307]  </TASK>
[   49.930986][ T6310] tipc: Started in network mode
[   49.931011][ T6310] tipc: Node identity ac1414aa, cluster identity 4711
[   49.931622][ T6310] tipc: New replicast peer: 172.20.20.187
[   49.932313][ T6310] tipc: Enabled bearer <udp:syz0>, priority 10
[   50.069104][ T6314] kvm: apic: phys broadcast and lowest prio
[   50.106819][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   50.133504][   T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   50.135917][   T25] usb 5-1: unable to read config index 0 descriptor/start: -61
[   50.135944][   T25] usb 5-1: can't read configurations, error -61
[   50.246917][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'.
[   50.256792][   T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   50.280490][   T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   50.281885][   T25] usb 5-1: unable to read config index 0 descriptor/start: -61
[   50.281903][   T25] usb 5-1: can't read configurations, error -61
[   50.283870][   T25] usb usb5-port1: unable to enumerate USB device
[   50.536226][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536277][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536309][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536420][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536452][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536558][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536581][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536601][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   50.536620][ T6329] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   51.057444][   T25] tipc: Node number set to 2886997162
[   51.526787][   T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   51.656774][   T25] usb 6-1: device descriptor read/64, error -71
[   51.907308][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   52.037405][   T25] usb 6-1: device descriptor read/64, error -71
[   52.149188][   T25] usb usb6-port1: attempt power cycle
[   52.175463][ T6349] use of bytesused == 0 is deprecated and will be removed in the future,
[   52.175472][ T6349] use the actual size instead.
[   52.258286][ T5103] usb 8-1: USB disconnect, device number 3
[   52.279433][ T6355] FAULT_INJECTION: forcing a failure.
[   52.279433][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.279452][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) 
[   52.279465][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.279471][ T6355] Call Trace:
[   52.279475][ T6355]  <TASK>
[   52.279479][ T6355]  dump_stack_lvl+0x100/0x190
[   52.279499][ T6355]  should_fail_ex.cold+0x5/0xa
[   52.279514][ T6355]  _copy_to_user+0x32/0xd0
[   52.279529][ T6355]  simple_read_from_buffer+0xcb/0x170
[   52.279546][ T6355]  proc_fail_nth_read+0x1af/0x230
[   52.279577][ T6355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   52.279593][ T6355]  ? rw_verify_area+0xce/0x6d0
[   52.279603][ T6355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   52.279618][ T6355]  vfs_read+0x1e4/0xb40
[   52.279631][ T6355]  ? lock_acquire+0x1d1/0x380
[   52.279643][ T6355]  ? __fget_files+0x34/0x3d0
[   52.279657][ T6355]  ? __pfx_vfs_read+0x10/0x10
[   52.279668][ T6355]  ? find_held_lock+0x2b/0x80
[   52.279684][ T6355]  ? __fget_files+0x215/0x3d0
[   52.279701][ T6355]  ? __fget_files+0x21f/0x3d0
[   52.279719][ T6355]  ksys_read+0x12a/0x250
[   52.279731][ T6355]  ? __pfx_ksys_read+0x10/0x10
[   52.279747][ T6355]  do_syscall_64+0x123/0x790
[   52.279761][ T6355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.279773][ T6355] RIP: 0033:0x7f8f2335e9ce
[   52.279782][ T6355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   52.279792][ T6355] RSP: 002b:00007f8f241adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   52.279803][ T6355] RAX: ffffffffffffffda RBX: 00007f8f241ae6c0 RCX: 00007f8f2335e9ce
[   52.279810][ T6355] RDX: 000000000000000f RSI: 00007f8f241ae0a0 RDI: 0000000000000004
[   52.279817][ T6355] RBP: 00007f8f241ae090 R08: 0000000000000000 R09: 0000000000000000
[   52.279823][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.279829][ T6355] R13: 00007f8f23626038 R14: 00007f8f23625fa0 R15: 00007ffeab594268
[   52.279843][ T6355]  </TASK>
[   52.312747][ T6357] tipc: Started in network mode
[   52.312808][ T6357] tipc: Node identity 766976d8cc37, cluster identity 4711
[   52.312919][ T6357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.313081][ T6358] syzkaller0: entered promiscuous mode
[   52.313098][ T6358] syzkaller0: entered allmulticast mode
[   52.315852][ T6357] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   52.326163][ T6358] tipc: Resetting bearer <eth:syzkaller0>
[   52.334932][ T6356] tipc: Resetting bearer <eth:syzkaller0>
[   52.353019][ T6356] tipc: Disabling bearer <eth:syzkaller0>
[   52.446836][ T5520] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   52.486718][   T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   52.507331][   T25] usb 6-1: device descriptor read/8, error -71
[   52.567060][ T6366] openvswitch: netlink: Key type 110 is out of range max 32
[   52.582357][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.589859][ T6366] bridge_slave_0 (unregistering): left allmulticast mode
[   52.589874][ T6366] bridge_slave_0 (unregistering): left promiscuous mode
[   52.589915][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.601025][ T5520] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.40
[   52.602093][ T5520] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 87, changing to 10
[   52.602117][ T5520] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   52.602139][ T5520] usb 5-1: config 1 interface 0 has no altsetting 0
[   52.604542][ T5520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.604615][ T5520] usb 5-1: Product: syz
[   52.604629][ T5520] usb 5-1: Manufacturer: syz
[   52.604640][ T5520] usb 5-1: SerialNumber: syz
[   52.746799][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   52.767981][   T25] usb 6-1: device descriptor read/8, error -71
[   52.826998][ T5520] usbhid 5-1:1.0: can't add hid device: -71
[   52.827049][ T5520] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   52.829244][ T5520] usb 5-1: USB disconnect, device number 11
[   52.887078][   T25] usb usb6-port1: unable to enumerate USB device
[   52.898398][ T6376] ieee802154 phy0 wpan0: encryption failed: -22
[   52.920526][ T6376] jffs2: notice: (6376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   53.354374][ T6385] FAULT_INJECTION: forcing a failure.
[   53.354374][ T6385] name failslab, interval 1, probability 0, space 0, times 0
[   53.354403][ T6385] CPU: 2 UID: 0 PID: 6385 Comm: syz.0.179 Not tainted syzkaller #0 PREEMPT(full) 
[   53.354423][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   53.354434][ T6385] Call Trace:
[   53.354440][ T6385]  <TASK>
[   53.354448][ T6385]  dump_stack_lvl+0x100/0x190
[   53.354479][ T6385]  should_fail_ex.cold+0x5/0xa
[   53.354506][ T6385]  should_failslab+0xc2/0x120
[   53.354531][ T6385]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[   53.354561][ T6385]  ? sidtab_sid2str_get+0x84/0x670
[   53.354589][ T6385]  ? sidtab_sid2str_get+0x17a/0x670
[   53.354619][ T6385]  kmemdup_noprof+0x29/0x60
[   53.354658][ T6385]  sidtab_sid2str_get+0x17a/0x670
[   53.354688][ T6385]  security_sid_to_context_core+0x373/0x700
[   53.354718][ T6385]  avc_audit_post_callback+0x109/0x910
[   53.354748][ T6385]  ? __pfx_audit_log_lsm_data+0x10/0x10
[   53.354773][ T6385]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   53.354798][ T6385]  ? skb_put+0x138/0x180
[   53.354819][ T6385]  ? audit_log_n_string+0x2a3/0x5a0
[   53.354846][ T6385]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   53.354872][ T6385]  common_lsm_audit+0x23f/0x2b0
[   53.354897][ T6385]  ? __pfx_common_lsm_audit+0x10/0x10
[   53.354922][ T6385]  ? lockdep_hardirqs_on+0x7d/0x110
[   53.354940][ T6385]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   53.354962][ T6385]  slow_avc_audit+0x186/0x210
[   53.354991][ T6385]  ? __pfx_slow_avc_audit+0x10/0x10
[   53.355022][ T6385]  ? avc_denied+0x14a/0x190
[   53.355051][ T6385]  ? avc_has_perm_noaudit+0x3a2/0x470
[   53.355082][ T6385]  avc_has_perm+0x1a6/0x1e0
[   53.355100][ T6385]  ? __pfx_avc_has_perm+0x10/0x10
[   53.355136][ T6385]  sock_has_perm+0x253/0x2f0
[   53.355157][ T6385]  ? __pfx_sock_has_perm+0x10/0x10
[   53.355184][ T6385]  ? find_held_lock+0x2b/0x80
[   53.355212][ T6385]  ? get_pid_task+0xfc/0x250
[   53.355235][ T6385]  ? get_pid_task+0xfc/0x250
[   53.355261][ T6385]  security_socket_getsockopt+0x9b/0x230
[   53.355285][ T6385]  do_sock_getsockopt+0x1e3/0x6e0
[   53.355308][ T6385]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   53.355332][ T6385]  ? __fget_files+0x34/0x3d0
[   53.355356][ T6385]  ? find_held_lock+0x2b/0x80
[   53.355389][ T6385]  ? __fget_files+0x21f/0x3d0
[   53.355419][ T6385]  __sys_getsockopt+0x148/0x260
[   53.355453][ T6385]  ? __x64_sys_getsockopt+0xbd/0x160
[   53.355477][ T6385]  __x64_sys_getsockopt+0xbd/0x160
[   53.355501][ T6385]  ? do_syscall_64+0xae/0x790
[   53.355520][ T6385]  ? lockdep_hardirqs_on+0x7d/0x110
[   53.355539][ T6385]  do_syscall_64+0x123/0x790
[   53.355567][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.355587][ T6385] RIP: 0033:0x7fe67df9e199
[   53.355602][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.355618][ T6385] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   53.355637][ T6385] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   53.355648][ T6385] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004
[   53.355659][ T6385] RBP: 00007fe67ee97090 R08: 0000200000000240 R09: 0000000000000000
[   53.355670][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.355681][ T6385] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   53.355708][ T6385]  </TASK>
[   53.391127][   T71] IPVS: starting estimator thread 0...
[   53.477033][ T6388] IPVS: using max 31 ests per chain, 74400 per kthread
[   53.626772][ T5842] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   53.788471][ T5842] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   53.789944][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.789984][ T5842] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   53.790006][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   53.790022][ T5842] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   53.790040][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   53.790070][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.794563][ T6387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   53.799698][ T5842] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[   53.802941][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[   53.803024][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[   53.810107][ T5842] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   53.817807][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[   53.817869][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[   53.820545][ T5842] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   53.897976][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'.
[   53.938061][ T6402] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[   53.970297][   T43] kauditd_printk_skb: 27 callbacks suppressed
[   53.970314][   T43] audit: type=1400 audit(1791271784.378:508): avc:  denied  { sqpoll } for  pid=6404 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   53.972080][   T43] audit: type=1400 audit(1791271784.378:509): avc:  denied  { create } for  pid=6404 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   54.002072][   T43] audit: type=1400 audit(1791271784.408:510): avc:  denied  { mount } for  pid=6386 comm="syz.0.180" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   54.010483][ T6387] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   54.018642][ T6405] nvme nvme0: failed to connect socket: -111
[   54.059884][   T43] audit: type=1400 audit(1791271784.468:511): avc:  denied  { read } for  pid=6409 comm="syz.3.187" name="state_hashed" dev="binder" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.059992][   T43] audit: type=1400 audit(1791271784.468:512): avc:  denied  { open } for  pid=6409 comm="syz.3.187" path="/dev/binderfs/binder_logs/state_hashed" dev="binder" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.067163][   T43] audit: type=1400 audit(1791271784.478:513): avc:  denied  { ioctl } for  pid=6409 comm="syz.3.187" path="/dev/binderfs/binder_logs/state_hashed" dev="binder" ino=1048629 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.076428][   T43] audit: type=1400 audit(1791271784.478:514): avc:  denied  { write } for  pid=6409 comm="syz.3.187" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   54.115898][ T6414] JFS: discard option not supported on device
[   54.116144][ T6414] Mount JFS Failure: -5
[   54.116151][ T6414] jfs_mount failed w/return code = -5
[   54.144781][   T25] usb 5-1: USB disconnect, device number 12
[   54.148682][   T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   54.154028][   T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   54.154813][   T25] keyspan 5-1:1.0: device disconnected
[   54.229653][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'.
[   54.238709][   T43] audit: type=1400 audit(1791271784.648:515): avc:  denied  { mount } for  pid=6415 comm="syz.3.189" name="/" dev="ramfs" ino=11198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   54.240364][   T43] audit: type=1400 audit(1791271784.648:516): avc:  denied  { bind } for  pid=6415 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   54.350913][ T6422] warning: `syz.1.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.378218][ T6424] ptrace attach of "/syz-executor exec"[5733] was attempted by ""[6424]
[   54.723283][ T6426] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   54.723299][ T6426] overlayfs: missing 'lowerdir'
[   54.724819][   T43] audit: type=1400 audit(1791271785.128:517): avc:  denied  { unmount } for  pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   54.771161][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   54.783069][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'.
[   54.891935][ T6443] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   54.936839][ T6447] netlink: 84 bytes leftover after parsing attributes in process `syz.2.199'.
[   54.940117][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'.
[   55.177340][ T6466] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[   55.394495][ T6484] hugetlbfs: Unknown parameter 'n'
[   55.590262][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.590516][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.635644][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.640646][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.756986][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.757031][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.757063][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.757093][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.887646][ T6503] bond0: (slave bond_slave_1): Releasing backup interface
[   55.894040][ T6503] bond0: option mode: unable to set because the bond device has slaves
[   55.933784][ T6505] fuse: Unknown parameter 'vroup_id'
[   56.128300][ T6526] No control pipe specified
[   56.346766][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[   56.346938][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[   56.396995][ T6551] kAFS: unable to lookup cell '(,c¾ûL'
[   56.855740][ T6560] block nbd1: shutting down sockets
[   56.940155][ T6564] trusted_key: encrypted_key: insufficient parameters specified
[   56.941892][ T6564] FAULT_INJECTION: forcing a failure.
[   56.941892][ T6564] name failslab, interval 1, probability 0, space 0, times 0
[   56.941916][ T6564] CPU: 2 UID: 0 PID: 6564 Comm: syz.1.242 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   56.941934][ T6564] Tainted: [L]=SOFTLOCKUP
[   56.941939][ T6564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.941955][ T6564] Call Trace:
[   56.941959][ T6564]  <TASK>
[   56.941964][ T6564]  dump_stack_lvl+0x100/0x190
[   56.941997][ T6564]  should_fail_ex.cold+0x5/0xa
[   56.942015][ T6564]  should_failslab+0xc2/0x120
[   56.942041][ T6564]  __kmalloc_cache_noprof+0x91/0x6d0
[   56.942054][ T6564]  ? snd_pcm_oss_open+0x5c5/0x1380
[   56.942080][ T6564]  snd_pcm_oss_open+0x5c5/0x1380
[   56.942102][ T6564]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[   56.942124][ T6564]  ? __pfx_default_wake_function+0x10/0x10
[   56.942146][ T6564]  ? __lock_acquire+0x5c0/0x1f40
[   56.942172][ T6564]  ? do_raw_spin_lock+0x128/0x260
[   56.942201][ T6564]  ? soundcore_open+0x231/0x5a0
[   56.942230][ T6564]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[   56.942260][ T6564]  soundcore_open+0x2e3/0x5a0
[   56.942278][ T6564]  ? __pfx_soundcore_open+0x10/0x10
[   56.942294][ T6564]  chrdev_open+0x234/0x6a0
[   56.942310][ T6564]  ? __pfx_chrdev_open+0x10/0x10
[   56.942327][ T6564]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   56.942342][ T6564]  do_dentry_open+0x6ab/0x14d0
[   56.942355][ T6564]  ? __pfx_chrdev_open+0x10/0x10
[   56.942374][ T6564]  vfs_open+0x82/0x3f0
[   56.942392][ T6564]  path_openat+0x19fa/0x2440
[   56.942410][ T6564]  ? __pfx_path_openat+0x10/0x10
[   56.942429][ T6564]  do_file_open+0x20e/0x430
[   56.942446][ T6564]  ? __pfx_do_file_open+0x10/0x10
[   56.942471][ T6564]  ? _raw_spin_unlock+0x28/0x50
[   56.942494][ T6564]  ? alloc_fd+0x471/0x7a0
[   56.942519][ T6564]  do_sys_openat2+0x10f/0x1e0
[   56.942539][ T6564]  ? __pfx_do_sys_openat2+0x10/0x10
[   56.942557][ T6564]  ? __do_sys_add_key+0x37d/0x460
[   56.942568][ T6564]  ? kfree+0x22b/0x6d0
[   56.942582][ T6564]  __x64_sys_openat+0x12d/0x210
[   56.942599][ T6564]  ? __pfx___x64_sys_openat+0x10/0x10
[   56.942621][ T6564]  do_syscall_64+0x123/0x790
[   56.942635][ T6564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.942649][ T6564] RIP: 0033:0x7fcec859e199
[   56.942659][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.942671][ T6564] RSP: 002b:00007fcec9503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   56.942683][ T6564] RAX: ffffffffffffffda RBX: 00007fcec8825fa0 RCX: 00007fcec859e199
[   56.942690][ T6564] RDX: 0000000000123901 RSI: 0000200000000100 RDI: ffffffffffffff9c
[   56.942697][ T6564] RBP: 00007fcec86358e0 R08: 0000000000000000 R09: 0000000000000000
[   56.942704][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.942711][ T6564] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   56.942726][ T6564]  </TASK>
[   57.079181][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'.
[   57.085286][ T6572] validate_nla: 45 callbacks suppressed
[   57.085305][ T6572] netlink: 'syz.2.245': attribute type 1 has an invalid length.
[   57.085349][ T6572] netlink: 'syz.2.245': attribute type 2 has an invalid length.
[   57.104908][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'.
[   57.180181][ T6587] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   57.180198][ T6587] overlayfs: missing 'lowerdir'
[   57.319217][ T6602] FAULT_INJECTION: forcing a failure.
[   57.319217][ T6602] name failslab, interval 1, probability 0, space 0, times 0
[   57.319254][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.254 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   57.319284][ T6602] Tainted: [L]=SOFTLOCKUP
[   57.319292][ T6602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.319304][ T6602] Call Trace:
[   57.319311][ T6602]  <TASK>
[   57.319319][ T6602]  dump_stack_lvl+0x100/0x190
[   57.319352][ T6602]  should_fail_ex.cold+0x5/0xa
[   57.319381][ T6602]  should_failslab+0xc2/0x120
[   57.319411][ T6602]  kmem_cache_alloc_noprof+0x92/0x6a0
[   57.319435][ T6602]  ? anon_vma_clone+0x2b3/0xca0
[   57.319465][ T6602]  anon_vma_clone+0x2b3/0xca0
[   57.319499][ T6602]  copy_vma+0x934/0x1100
[   57.319523][ T6602]  ? __pfx_copy_vma+0x10/0x10
[   57.319540][ T6602]  ? __pfx_vms_complete_munmap_vmas+0x10/0x10
[   57.319567][ T6602]  ? __lock_acquire+0x5c0/0x1f40
[   57.319606][ T6602]  ? lock_acquire+0x1d1/0x380
[   57.319628][ T6602]  ? avc_has_perm_noaudit+0x56/0x470
[   57.319665][ T6602]  copy_vma_and_data+0x23f/0x780
[   57.319690][ T6602]  ? __pfx_copy_vma_and_data+0x10/0x10
[   57.319718][ T6602]  ? rcu_is_watching+0x13/0xc0
[   57.319764][ T6602]  ? percpu_counter_add_batch+0xb9/0x230
[   57.319796][ T6602]  ? __vm_enough_memory+0x184/0x390
[   57.319828][ T6602]  move_vma+0x57c/0x12e0
[   57.319852][ T6602]  ? __pfx_move_vma+0x10/0x10
[   57.319873][ T6602]  ? selinux_mmap_addr+0x2b/0x110
[   57.319894][ T6602]  ? security_mmap_addr+0x71/0x1e0
[   57.319920][ T6602]  ? __get_unmapped_area+0x255/0x3e0
[   57.319948][ T6602]  ? vrm_set_new_addr+0x1f5/0x2a0
[   57.319977][ T6602]  mremap_to+0x234/0x4c0
[   57.319998][ T6602]  ? __pfx_mremap_to+0x10/0x10
[   57.320025][ T6602]  __do_sys_mremap+0xc70/0x1780
[   57.320047][ T6602]  ? futex_wait+0x11e/0x370
[   57.320069][ T6602]  ? __pfx_futex_wait+0x10/0x10
[   57.320091][ T6602]  ? __pfx___do_sys_mremap+0x10/0x10
[   57.320122][ T6602]  ? do_futex+0x190/0x440
[   57.320152][ T6602]  ? __pfx_do_futex+0x10/0x10
[   57.320178][ T6602]  ? __pfx___might_resched+0x10/0x10
[   57.320208][ T6602]  ? __pfx___x64_sys_futex+0x10/0x10
[   57.320236][ T6602]  ? rcu_is_watching+0x13/0xc0
[   57.320270][ T6602]  do_syscall_64+0x123/0x790
[   57.320294][ T6602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.320313][ T6602] RIP: 0033:0x7fe67df9e199
[   57.320355][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.320375][ T6602] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   57.320394][ T6602] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   57.320407][ T6602] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000
[   57.320418][ T6602] RBP: 00007fe67e0358e0 R08: 0000200000000000 R09: 0000000000000000
[   57.320429][ T6602] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[   57.320444][ T6602] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   57.320469][ T6602]  </TASK>
[   57.322025][ T6602] Sensor A: =================  START STATUS  =================
[   57.322040][ T6602] Sensor A: Test Pattern: 75% Colorbar
[   57.322062][ T6602] Sensor A: Show Information: All
[   57.322080][ T6602] Sensor A: Vertical Flip: false
[   57.322095][ T6602] Sensor A: Horizontal Flip: false
[   57.322108][ T6602] Sensor A: Brightness: 3
[   57.322122][ T6602] Sensor A: Contrast: 128
[   57.322136][ T6602] Sensor A: Hue: 0
[   57.322149][ T6602] Sensor A: Saturation: 128
[   57.322163][ T6602] Sensor A: Pixel Rate: 160000000
[   57.322178][ T6602] Sensor A: Horizontal Blanking: 800
[   57.322193][ T6602] Sensor A: Vertical Blanking: 3223
[   57.322208][ T6602] Sensor A: ==================  END STATUS  ==================
[   57.583909][ T6610] kvm: MONITOR instruction emulated as NOP!
[   58.019642][ T5732] Bluetooth: hci3: connection err: -111
[   58.346543][ T6647] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(80.0.120), cmd(3)
[   58.347056][ T6647] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[   58.699459][ T5732] Bluetooth: hci1: Malformed LE Event: 0x0f
[   58.782693][ T6687] TCP: TCP_TX_DELAY enabled
[   58.885318][ T6673] hfsplus: unable to find HFS+ superblock
[   58.900180][ T6692] device-mapper: ioctl: only supply one of name or uuid, cmd(11)
[   58.910492][ T5732] Bluetooth: hci2: unexpected subevent 0x2b length: 16 < 253
[   58.920715][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.445784][ T6698] FAULT_INJECTION: forcing a failure.
[   59.445784][ T6698] name failslab, interval 1, probability 0, space 0, times 0
[   59.445808][ T6698] CPU: 2 UID: 0 PID: 6698 Comm: syz.3.285 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   59.445849][ T6698] Tainted: [L]=SOFTLOCKUP
[   59.445855][ T6698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.445862][ T6698] Call Trace:
[   59.445867][ T6698]  <TASK>
[   59.445872][ T6698]  dump_stack_lvl+0x100/0x190
[   59.445893][ T6698]  should_fail_ex.cold+0x5/0xa
[   59.445910][ T6698]  should_failslab+0xc2/0x120
[   59.445929][ T6698]  kmem_cache_alloc_noprof+0x92/0x6a0
[   59.445945][ T6698]  ? anon_vma_clone+0x2b3/0xca0
[   59.445964][ T6698]  anon_vma_clone+0x2b3/0xca0
[   59.445984][ T6698]  __split_vma+0x750/0x1de0
[   59.445998][ T6698]  ? __pfx___split_vma+0x10/0x10
[   59.446008][ T6698]  ? validate_mm+0x392/0x4e0
[   59.446026][ T6698]  vms_gather_munmap_vmas+0x1d2/0x1720
[   59.446037][ T6698]  ? vma_iter_store_overwrite+0x392/0x650
[   59.446051][ T6698]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[   59.446063][ T6698]  ? __lock_acquire+0x5c0/0x1f40
[   59.446076][ T6698]  ? __pfx_vma_link+0x10/0x10
[   59.446095][ T6698]  do_vmi_align_munmap+0x287/0x5f0
[   59.446109][ T6698]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[   59.446138][ T6698]  ? mas_walk+0x260/0x310
[   59.446152][ T6698]  do_vmi_munmap+0x1f8/0x3e0
[   59.446166][ T6698]  unmap_source_vma+0x35c/0x8f0
[   59.446180][ T6698]  ? __pfx_unmap_source_vma+0x10/0x10
[   59.446197][ T6698]  ? __vm_enough_memory+0x184/0x390
[   59.446211][ T6698]  ? vm_stat_account+0x162/0x190
[   59.446229][ T6698]  move_vma+0x630/0x12e0
[   59.446243][ T6698]  ? __pfx_move_vma+0x10/0x10
[   59.446254][ T6698]  ? selinux_mmap_addr+0x2b/0x110
[   59.446269][ T6698]  ? security_mmap_addr+0x71/0x1e0
[   59.446286][ T6698]  ? __get_unmapped_area+0x255/0x3e0
[   59.446303][ T6698]  ? vrm_set_new_addr+0x1f5/0x2a0
[   59.446316][ T6698]  mremap_to+0x234/0x4c0
[   59.446328][ T6698]  ? __pfx_mremap_to+0x10/0x10
[   59.446343][ T6698]  __do_sys_mremap+0xc70/0x1780
[   59.446355][ T6698]  ? futex_wait+0x11e/0x370
[   59.446368][ T6698]  ? __pfx_futex_wait+0x10/0x10
[   59.446381][ T6698]  ? __pfx___do_sys_mremap+0x10/0x10
[   59.446398][ T6698]  ? do_futex+0x190/0x440
[   59.446415][ T6698]  ? __pfx_do_futex+0x10/0x10
[   59.446432][ T6698]  ? __pfx___might_resched+0x10/0x10
[   59.446451][ T6698]  ? xfd_validate_state+0x129/0x190
[   59.446469][ T6698]  do_syscall_64+0x123/0x790
[   59.446482][ T6698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.446494][ T6698] RIP: 0033:0x7f8f2339e199
[   59.446504][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.446515][ T6698] RSP: 002b:00007f8f241ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   59.446527][ T6698] RAX: ffffffffffffffda RBX: 00007f8f23625fa0 RCX: 00007f8f2339e199
[   59.446534][ T6698] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000
[   59.446541][ T6698] RBP: 00007f8f234358e0 R08: 0000200000000000 R09: 0000000000000000
[   59.446548][ T6698] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[   59.446555][ T6698] R13: 00007f8f23626038 R14: 00007f8f23625fa0 R15: 00007ffeab594268
[   59.446569][ T6698]  </TASK>
[   59.451343][ T6698] Sensor A: =================  START STATUS  =================
[   59.451355][ T6698] Sensor A: Test Pattern: 75% Colorbar
[   59.451368][ T6698] Sensor A: Show Information: All
[   59.451378][ T6698] Sensor A: Vertical Flip: false
[   59.451388][ T6698] Sensor A: Horizontal Flip: false
[   59.451398][ T6698] Sensor A: Brightness: 3
[   59.451408][ T6698] Sensor A: Contrast: 128
[   59.451418][ T6698] Sensor A: Hue: 0
[   59.451427][ T6698] Sensor A: Saturation: 128
[   59.451436][ T6698] Sensor A: Pixel Rate: 160000000
[   59.451447][ T6698] Sensor A: Horizontal Blanking: 800
[   59.451457][ T6698] Sensor A: Vertical Blanking: 1073
[   59.451468][ T6698] Sensor A: ==================  END STATUS  ==================
[   59.465770][   T43] kauditd_printk_skb: 33 callbacks suppressed
[   59.465781][   T43] audit: type=1400 audit(1791271789.868:551): avc:  denied  { bind } for  pid=6701 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   59.504450][ T5732] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[   59.575773][ T6712] syz.0.290 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[   59.575798][ T6712] CPU: 3 UID: 0 PID: 6712 Comm: syz.0.290 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   59.575815][ T6712] Tainted: [L]=SOFTLOCKUP
[   59.575819][ T6712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.575827][ T6712] Call Trace:
[   59.575832][ T6712]  <TASK>
[   59.575849][ T6712]  dump_stack_lvl+0x100/0x190
[   59.575888][ T6712]  dump_header+0xfb/0x606
[   59.575903][ T6712]  oom_kill_process.cold+0xd/0x380
[   59.575919][ T6712]  out_of_memory+0x340/0x14f0
[   59.575940][ T6712]  ? __pfx_out_of_memory+0x10/0x10
[   59.575966][ T6712]  mem_cgroup_out_of_memory+0xc6/0x130
[   59.575982][ T6712]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   59.575996][ T6712]  ? find_held_lock+0x2b/0x80
[   59.576017][ T6712]  ? do_raw_spin_unlock+0x145/0x1e0
[   59.576033][ T6712]  ? _raw_spin_unlock+0x28/0x50
[   59.576052][ T6712]  try_charge_memcg+0x783/0xf60
[   59.576066][ T6712]  ? __pfx_try_charge_memcg+0x10/0x10
[   59.576077][ T6712]  ? find_held_lock+0x2b/0x80
[   59.576093][ T6712]  ? rcu_read_unlock+0x17/0x60
[   59.576103][ T6712]  ? rcu_read_unlock+0x17/0x60
[   59.576119][ T6712]  obj_cgroup_charge_pages+0x2b/0x1f0
[   59.576132][ T6712]  __memcg_slab_post_alloc_hook+0x47f/0x10c0
[   59.576148][ T6712]  ? kasan_unpoison+0x27/0x60
[   59.576163][ T6712]  __kvmalloc_node_noprof+0x750/0x9b0
[   59.576180][ T6712]  ? do_raw_spin_lock+0x128/0x260
[   59.576195][ T6712]  ? alloc_fdtable+0x110/0x2d0
[   59.576213][ T6712]  alloc_fdtable+0x110/0x2d0
[   59.576229][ T6712]  dup_fd+0x995/0xd10
[   59.576244][ T6712]  ? do_raw_spin_unlock+0x145/0x1e0
[   59.576260][ T6712]  ? _raw_spin_unlock+0x28/0x50
[   59.576276][ T6712]  ? copy_fs_struct+0x2a0/0x340
[   59.576292][ T6712]  ksys_unshare+0x7c7/0xa70
[   59.576306][ T6712]  ? __pfx_ksys_unshare+0x10/0x10
[   59.576348][ T6712]  __x64_sys_unshare+0x31/0x40
[   59.576362][ T6712]  do_syscall_64+0x123/0x790
[   59.576378][ T6712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.576391][ T6712] RIP: 0033:0x7fe67df9e199
[   59.576402][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.576413][ T6712] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   59.576425][ T6712] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   59.576432][ T6712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400
[   59.576439][ T6712] RBP: 00007fe67e0358e0 R08: 0000000000000000 R09: 0000000000000000
[   59.576446][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.576452][ T6712] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   59.576468][ T6712]  </TASK>
[   59.580141][ T6712] memory: usage 4kB, limit 8kB, failcnt 20
[   59.580153][ T6712] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0
[   59.580161][ T6712] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0
[   59.580168][ T6712] Memory cgroup stats for /syz0/test:
[   59.580352][ T6712] cache 0
[   59.580359][ T6712] rss 0
[   59.580363][ T6712] rss_huge 0
[   59.580368][ T6712] shmem 0
[   59.580372][ T6712] mapped_file 0
[   59.580377][ T6712] dirty 0
[   59.580381][ T6712] writeback 0
[   59.580386][ T6712] workingset_refault_anon 0
[   59.580390][ T6712] workingset_refault_file 0
[   59.580394][ T6712] swap 0
[   59.580398][ T6712] swapcached 0
[   59.580403][ T6712] pgpgin 0
[   59.580407][ T6712] pgpgout 0
[   59.580412][ T6712] pgfault 0
[   59.580416][ T6712] pgmajfault 0
[   59.580420][ T6712] inactive_anon 0
[   59.580425][ T6712] active_anon 0
[   59.580429][ T6712] inactive_file 0
[   59.580433][ T6712] active_file 0
[   59.580437][ T6712] unevictable 0
[   59.580441][ T6712] hierarchical_memory_limit 8192
[   59.580446][ T6712] hierarchical_memsw_limit 9223372036854771712
[   59.580450][ T6712] total_cache 0
[   59.580454][ T6712] total_rss 0
[   59.580458][ T6712] total_rss_huge 0
[   59.580462][ T6712] total_shmem 0
[   59.580466][ T6712] total_mapped_file 0
[   59.580470][ T6712] total_dirty 0
[   59.580474][ T6712] total_writeback 0
[   59.580478][ T6712] total_workingset_refault_anon 0
[   59.580483][ T6712] total_workingset_refault_file 0
[   59.580487][ T6712] total_swap 0
[   59.580491][ T6712] total_swapcached 0
[   59.580495][ T6712] total_pgpgin 0
[   59.580499][ T6712] total_pgpgout 0
[   59.580503][ T6712] total_pgfault 0
[   59.580506][ T6712] total_pgmajfault 0
[   59.580511][ T6712] total_inactive_anon 0
[   59.580515][ T6712] total_active_anon 0
[   59.580519][ T6712] total_inactive_file 0
[   59.580523][ T6712] total_active_file 0
[   59.580527][ T6712] total_unevictable 0
[   59.580531][ T6712] anon_cost 0
[   59.580535][ T6712] file_cost 0
[   59.580540][ T6712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.290,pid=6709,uid=0
[   59.581074][ T6712] Memory cgroup out of memory: Killed process 6709 (syz.0.290) total-vm:103864kB, anon-rss:1440kB, file-rss:24788kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[   59.592596][   T43] audit: type=1400 audit(1791271789.998:552): avc:  denied  { shutdown } for  pid=6713 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.648928][ T6720] raw_sendmsg: syz.2.296 forgot to set AF_INET. Fix it!
[   59.678144][ T6723] __nla_validate_parse: 1 callbacks suppressed
[   59.678157][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   59.704573][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   59.750511][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   59.928684][ T6729] mmap: syz.0.294 (6729) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   60.076340][   T43] audit: type=1400 audit(1791271790.478:553): avc:  denied  { write } for  pid=6734 comm="syz.1.298" name="mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   60.377494][ T6739] syzkaller0: entered promiscuous mode
[   60.377516][ T6739] syzkaller0: entered allmulticast mode
[   60.384707][   T43] audit: type=1400 audit(1791271790.788:554): avc:  denied  { read } for  pid=6738 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   60.516726][ T5732] Bluetooth: hci0: command 0x2016 tx timeout
[   61.200588][   T43] audit: type=1400 audit(1791271791.608:555): avc:  denied  { name_bind } for  pid=6749 comm="syz.2.303" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   61.201812][   T43] audit: type=1400 audit(1791271791.608:556): avc:  denied  { create } for  pid=6749 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   61.202973][   T43] audit: type=1400 audit(1791271791.608:557): avc:  denied  { setopt } for  pid=6749 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   61.239640][   T43] audit: type=1400 audit(1791271791.648:558): avc:  denied  { write } for  pid=6751 comm="syz.1.304" lport=60282 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   61.241949][   T43] audit: type=1400 audit(1791271791.648:559): avc:  denied  { create } for  pid=6751 comm="syz.1.304" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   61.242851][   T43] audit: type=1400 audit(1791271791.648:560): avc:  denied  { mounton } for  pid=6751 comm="syz.1.304" path="/82/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   61.246510][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'.
[   61.246539][ T6754] netlink: 'syz.2.305': attribute type 7 has an invalid length.
[   61.246550][ T6754] netlink: 'syz.2.305': attribute type 8 has an invalid length.
[   61.246560][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'.
[   61.283006][ T6754] team0 (unregistering): Port device team_slave_0 removed
[   61.288408][ T6754] team0 (unregistering): Port device team_slave_1 removed
[   61.329093][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'.
[   61.370364][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'.
[   61.547701][ T6784] FAULT_INJECTION: forcing a failure.
[   61.547701][ T6784] name failslab, interval 1, probability 0, space 0, times 0
[   61.547724][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.1.316 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   61.547739][ T6784] Tainted: [L]=SOFTLOCKUP
[   61.547743][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   61.547750][ T6784] Call Trace:
[   61.547754][ T6784]  <TASK>
[   61.547759][ T6784]  dump_stack_lvl+0x100/0x190
[   61.547778][ T6784]  should_fail_ex.cold+0x5/0xa
[   61.547795][ T6784]  should_failslab+0xc2/0x120
[   61.547811][ T6784]  __kmalloc_noprof+0xfc/0x840
[   61.547824][ T6784]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   61.547846][ T6784]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   61.547866][ T6784]  genl_family_rcv_msg_doit+0xc7/0x300
[   61.547884][ T6784]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   61.547911][ T6784]  ? bpf_lsm_capable+0x9/0x10
[   61.547922][ T6784]  ? security_capable+0x80/0x260
[   61.547934][ T6784]  ? ns_capable+0xd2/0xf0
[   61.547947][ T6784]  genl_rcv_msg+0x560/0x800
[   61.547964][ T6784]  ? __pfx_genl_rcv_msg+0x10/0x10
[   61.547981][ T6784]  ? __lock_acquire+0x5c0/0x1f40
[   61.547993][ T6784]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   61.548004][ T6784]  ? __pfx_nl80211_set_cqm+0x10/0x10
[   61.548019][ T6784]  ? __pfx_nl80211_post_doit+0x10/0x10
[   61.548032][ T6784]  ? __lock_acquire+0x5c0/0x1f40
[   61.548047][ T6784]  netlink_rcv_skb+0x159/0x420
[   61.548062][ T6784]  ? __pfx_genl_rcv_msg+0x10/0x10
[   61.548079][ T6784]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   61.548099][ T6784]  ? netlink_deliver_tap+0x1ae/0xcc0
[   61.548115][ T6784]  genl_rcv+0x28/0x40
[   61.548129][ T6784]  netlink_unicast+0x585/0x850
[   61.548146][ T6784]  ? __pfx_netlink_unicast+0x10/0x10
[   61.548164][ T6784]  netlink_sendmsg+0x8b0/0xda0
[   61.548181][ T6784]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.548197][ T6784]  ? selinux_socket_sendmsg+0x198/0x2f0
[   61.548213][ T6784]  ____sys_sendmsg+0xa4d/0xbe0
[   61.548224][ T6784]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.548240][ T6784]  ? __pfx_____sys_sendmsg+0x10/0x10
[   61.548255][ T6784]  ? lock_acquire+0x1d1/0x380
[   61.548267][ T6784]  ? get_pid_task+0x2a/0x250
[   61.548284][ T6784]  ___sys_sendmsg+0x190/0x1e0
[   61.548297][ T6784]  ? __pfx____sys_sendmsg+0x10/0x10
[   61.548339][ T6784]  ? get_pid_task+0x106/0x250
[   61.548366][ T6784]  ? find_held_lock+0x2b/0x80
[   61.548391][ T6784]  __sys_sendmsg+0x160/0x210
[   61.548407][ T6784]  ? __pfx___sys_sendmsg+0x10/0x10
[   61.548430][ T6784]  do_syscall_64+0x123/0x790
[   61.548444][ T6784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.548455][ T6784] RIP: 0033:0x7fcec859e199
[   61.548464][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.548475][ T6784] RSP: 002b:00007fcec9503028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.548487][ T6784] RAX: ffffffffffffffda RBX: 00007fcec8825fa0 RCX: 00007fcec859e199
[   61.548494][ T6784] RDX: 0000000004004080 RSI: 0000200000000200 RDI: 0000000000000003
[   61.548501][ T6784] RBP: 00007fcec9503090 R08: 0000000000000000 R09: 0000000000000000
[   61.548507][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.548513][ T6784] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   61.548528][ T6784]  </TASK>
[   61.769830][ T6794] team0 (unregistering): Port device team_slave_0 removed
[   61.770702][ T6794] team0 (unregistering): Port device team_slave_1 removed
[   61.851309][ T6796] FAULT_INJECTION: forcing a failure.
[   61.851309][ T6796] name failslab, interval 1, probability 0, space 0, times 0
[   61.851338][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.1.320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   61.851361][ T6796] Tainted: [L]=SOFTLOCKUP
[   61.851370][ T6796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   61.851381][ T6796] Call Trace:
[   61.851388][ T6796]  <TASK>
[   61.851395][ T6796]  dump_stack_lvl+0x100/0x190
[   61.851428][ T6796]  should_fail_ex.cold+0x5/0xa
[   61.851457][ T6796]  should_failslab+0xc2/0x120
[   61.851486][ T6796]  __kmalloc_cache_noprof+0x91/0x6d0
[   61.851508][ T6796]  ? sctp_add_bind_addr+0xae/0x3e0
[   61.851534][ T6796]  sctp_add_bind_addr+0xae/0x3e0
[   61.851559][ T6796]  sctp_copy_local_addr_list+0x349/0x550
[   61.851586][ T6796]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[   61.851611][ T6796]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[   61.851644][ T6796]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   61.851672][ T6796]  sctp_bind_addr_copy+0xe0/0x530
[   61.851699][ T6796]  sctp_connect_new_asoc+0x1c9/0x770
[   61.851729][ T6796]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[   61.851765][ T6796]  sctp_sendmsg+0x1743/0x22e0
[   61.851820][ T6796]  ? __pfx_sctp_sendmsg+0x10/0x10
[   61.851847][ T6796]  ? sock_has_perm+0x25a/0x2f0
[   61.851868][ T6796]  ? __pfx_sock_has_perm+0x10/0x10
[   61.851913][ T6796]  ? __pfx_sctp_sendmsg+0x10/0x10
[   61.851944][ T6796]  inet_sendmsg+0x11c/0x140
[   61.851969][ T6796]  ____sys_sendmsg+0x9c9/0xbe0
[   61.851988][ T6796]  ? __pfx_inet_sendmsg+0x10/0x10
[   61.852012][ T6796]  ? __pfx_____sys_sendmsg+0x10/0x10
[   61.852036][ T6796]  ? futex_unqueue+0x133/0x2c0
[   61.852068][ T6796]  ___sys_sendmsg+0x190/0x1e0
[   61.852093][ T6796]  ? __pfx____sys_sendmsg+0x10/0x10
[   61.852113][ T6796]  ? __pfx___futex_wait+0x10/0x10
[   61.852132][ T6796]  ? __pfx_try_to_wake_up+0x10/0x10
[   61.852154][ T6796]  ? futex_hash+0x311/0x400
[   61.852187][ T6796]  ? __fget_files+0x34/0x3d0
[   61.852232][ T6796]  __sys_sendmmsg+0x20c/0x440
[   61.852263][ T6796]  ? __pfx___sys_sendmmsg+0x10/0x10
[   61.852290][ T6796]  ? __local_bh_enable_ip+0xa5/0x120
[   61.852351][ T6796]  ? __pfx_do_futex+0x10/0x10
[   61.852394][ T6796]  ? xfd_validate_state+0x129/0x190
[   61.852423][ T6796]  __x64_sys_sendmmsg+0x9c/0x100
[   61.852451][ T6796]  ? lockdep_hardirqs_on+0x7d/0x110
[   61.852472][ T6796]  do_syscall_64+0x123/0x790
[   61.852496][ T6796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.852517][ T6796] RIP: 0033:0x7fcec859e199
[   61.852534][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.852553][ T6796] RSP: 002b:00007fcec9503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   61.852573][ T6796] RAX: ffffffffffffffda RBX: 00007fcec8825fa0 RCX: 00007fcec859e199
[   61.852587][ T6796] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004
[   61.852598][ T6796] RBP: 00007fcec86358e0 R08: 0000000000000000 R09: 0000000000000000
[   61.852610][ T6796] R10: 0000000000008020 R11: 0000000000000246 R12: 0000000000000000
[   61.852621][ T6796] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   61.852648][ T6796]  </TASK>
[   62.024501][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'.
[   62.072704][ T6810] syzkaller0: entered promiscuous mode
[   62.072724][ T6810] syzkaller0: entered allmulticast mode
[   62.261093][ T6815] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   62.261603][ T6815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   62.597143][ T5732] Bluetooth: hci0: command 0x2016 tx timeout
[   62.742806][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'.
[   62.837238][ T6821] FAULT_INJECTION: forcing a failure.
[   62.837238][ T6821] name failslab, interval 1, probability 0, space 0, times 0
[   62.837260][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.0.332 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   62.837275][ T6821] Tainted: [L]=SOFTLOCKUP
[   62.837280][ T6821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.837286][ T6821] Call Trace:
[   62.837290][ T6821]  <TASK>
[   62.837295][ T6821]  dump_stack_lvl+0x100/0x190
[   62.837315][ T6821]  should_fail_ex.cold+0x5/0xa
[   62.837328][ T6821]  ? __netlink_lookup+0x652/0x900
[   62.837344][ T6821]  should_failslab+0xc2/0x120
[   62.837360][ T6821]  kmem_cache_alloc_noprof+0x92/0x6a0
[   62.837374][ T6821]  ? skb_clone+0x190/0x400
[   62.837396][ T6821]  skb_clone+0x190/0x400
[   62.837412][ T6821]  netlink_deliver_tap+0xaed/0xcc0
[   62.837428][ T6821]  netlink_unicast+0x62b/0x850
[   62.837445][ T6821]  ? __pfx_netlink_unicast+0x10/0x10
[   62.837459][ T6821]  ? __build_skb_around+0x278/0x390
[   62.837475][ T6821]  netlink_sendmsg+0x8b0/0xda0
[   62.837492][ T6821]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.837508][ T6821]  ? selinux_socket_sendmsg+0x198/0x2f0
[   62.837525][ T6821]  ____sys_sendmsg+0xa4d/0xbe0
[   62.837536][ T6821]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.837552][ T6821]  ? __pfx_____sys_sendmsg+0x10/0x10
[   62.837567][ T6821]  ? lock_acquire+0x1d1/0x380
[   62.837579][ T6821]  ? get_pid_task+0x2a/0x250
[   62.837596][ T6821]  ___sys_sendmsg+0x190/0x1e0
[   62.837609][ T6821]  ? __pfx____sys_sendmsg+0x10/0x10
[   62.837621][ T6821]  ? get_pid_task+0x106/0x250
[   62.837641][ T6821]  ? find_held_lock+0x2b/0x80
[   62.837666][ T6821]  __sys_sendmsg+0x160/0x210
[   62.837682][ T6821]  ? __pfx___sys_sendmsg+0x10/0x10
[   62.837704][ T6821]  do_syscall_64+0x123/0x790
[   62.837718][ T6821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.837730][ T6821] RIP: 0033:0x7fe67df9e199
[   62.837739][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.837750][ T6821] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.837761][ T6821] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   62.837768][ T6821] RDX: 000000002400c044 RSI: 00002000000000c0 RDI: 0000000000000003
[   62.837775][ T6821] RBP: 00007fe67ee97090 R08: 0000000000000000 R09: 0000000000000000
[   62.837782][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.837788][ T6821] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   62.837802][ T6821]  </TASK>
[   62.837824][ T6821] netlink: 4496 bytes leftover after parsing attributes in process `syz.0.332'.
[   63.053817][ T6835] xt_hashlimit: size too large, truncated to 1048576
[   63.381575][ T6875] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   63.422477][ T6879] bond0: entered promiscuous mode
[   63.422499][ T6879] bond_slave_0: entered promiscuous mode
[   63.422645][ T6879] bond_slave_1: entered promiscuous mode
[   63.422784][ T6879] veth0_to_bond: entered promiscuous mode
[   63.446317][ T6836] cgroup: fork rejected by pids controller in /syz1
[   63.493291][ T6884] program syz.3.343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.544426][ T6888] (syz.0.344,6888,2):ocfs2_get_sector:1713 ERROR: status = -5
[   63.544448][ T6888] (syz.0.344,6888,2):ocfs2_sb_probe:753 ERROR: status = -5
[   63.544465][ T6888] (syz.0.344,6888,2):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   63.544477][ T6888] (syz.0.344,6888,2):ocfs2_fill_super:1177 ERROR: status = -5
[   63.575779][ T6892] FAULT_INJECTION: forcing a failure.
[   63.575779][ T6892] name failslab, interval 1, probability 0, space 0, times 0
[   63.575800][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.3.345 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   63.575816][ T6892] Tainted: [L]=SOFTLOCKUP
[   63.575847][ T6892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.575854][ T6892] Call Trace:
[   63.575858][ T6892]  <TASK>
[   63.575864][ T6892]  dump_stack_lvl+0x100/0x190
[   63.575896][ T6892]  should_fail_ex.cold+0x5/0xa
[   63.575912][ T6892]  should_failslab+0xc2/0x120
[   63.575931][ T6892]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[   63.575945][ T6892]  ? sidtab_sid2str_get+0x84/0x670
[   63.575963][ T6892]  ? sidtab_sid2str_get+0x17a/0x670
[   63.575981][ T6892]  kmemdup_noprof+0x29/0x60
[   63.575997][ T6892]  sidtab_sid2str_get+0x17a/0x670
[   63.576014][ T6892]  security_sid_to_context_core+0x373/0x700
[   63.576032][ T6892]  avc_audit_post_callback+0x109/0x910
[   63.576050][ T6892]  ? __pfx_audit_log_lsm_data+0x10/0x10
[   63.576066][ T6892]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   63.576081][ T6892]  ? skb_put+0x138/0x180
[   63.576097][ T6892]  ? audit_log_n_string+0x2a3/0x5a0
[   63.576114][ T6892]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   63.576130][ T6892]  common_lsm_audit+0x23f/0x2b0
[   63.576145][ T6892]  ? __pfx_common_lsm_audit+0x10/0x10
[   63.576160][ T6892]  ? lockdep_hardirqs_on+0x7d/0x110
[   63.576177][ T6892]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   63.576190][ T6892]  slow_avc_audit+0x186/0x210
[   63.576207][ T6892]  ? __pfx_slow_avc_audit+0x10/0x10
[   63.576226][ T6892]  ? avc_denied+0x14a/0x190
[   63.576243][ T6892]  ? avc_has_perm_noaudit+0x3a2/0x470
[   63.576263][ T6892]  avc_has_perm+0x1a6/0x1e0
[   63.576274][ T6892]  ? __pfx_avc_has_perm+0x10/0x10
[   63.576318][ T6892]  sock_has_perm+0x253/0x2f0
[   63.576333][ T6892]  ? __pfx_sock_has_perm+0x10/0x10
[   63.576349][ T6892]  ? find_held_lock+0x2b/0x80
[   63.576365][ T6892]  ? get_pid_task+0xfc/0x250
[   63.576380][ T6892]  ? get_pid_task+0xfc/0x250
[   63.576397][ T6892]  security_socket_getsockopt+0x9b/0x230
[   63.576411][ T6892]  do_sock_getsockopt+0x1e3/0x6e0
[   63.576426][ T6892]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   63.576440][ T6892]  ? __fget_files+0x34/0x3d0
[   63.576455][ T6892]  ? find_held_lock+0x2b/0x80
[   63.576475][ T6892]  ? __fget_files+0x21f/0x3d0
[   63.576493][ T6892]  __sys_getsockopt+0x148/0x260
[   63.576512][ T6892]  ? __x64_sys_getsockopt+0xbd/0x160
[   63.576527][ T6892]  __x64_sys_getsockopt+0xbd/0x160
[   63.576541][ T6892]  ? do_syscall_64+0xae/0x790
[   63.576553][ T6892]  ? lockdep_hardirqs_on+0x7d/0x110
[   63.576564][ T6892]  do_syscall_64+0x123/0x790
[   63.576577][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.576589][ T6892] RIP: 0033:0x7f8f2339e199
[   63.576599][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.576609][ T6892] RSP: 002b:00007f8f241ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   63.576621][ T6892] RAX: ffffffffffffffda RBX: 00007f8f23625fa0 RCX: 00007f8f2339e199
[   63.576628][ T6892] RDX: 0000000000000089 RSI: 000000000000010f RDI: 0000000000000003
[   63.576647][ T6892] RBP: 00007f8f241ae090 R08: 0000200000000300 R09: 0000000000000000
[   63.576654][ T6892] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[   63.576661][ T6892] R13: 00007f8f23626038 R14: 00007f8f23625fa0 R15: 00007ffeab594268
[   63.576676][ T6892]  </TASK>
[   63.584870][ T6894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6894 comm=syz.0.346
[   63.631242][ T6899] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   63.640948][ T6897] ptrace attach of "/syz-executor exec"[6901] was attempted by "/syz-executor exec"[6897]
[   63.719340][ T6906] netlink: 'syz.0.349': attribute type 5 has an invalid length.
[   63.719411][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.916572][ T6935] overlayfs: failed to clone upperpath
[   63.924503][ T6935] bridge0: port 3(dummy0) entered blocking state
[   63.924586][ T6935] bridge0: port 3(dummy0) entered disabled state
[   63.924673][ T6935] dummy0: entered allmulticast mode
[   63.925721][ T6935] dummy0: entered promiscuous mode
[   63.930328][ T6935] bridge0: port 3(dummy0) entered blocking state
[   63.930428][ T6935] bridge0: port 3(dummy0) entered forwarding state
[   64.157151][ T6945] overlayfs: missing 'lowerdir'
[   64.194190][ T6947] netlink: 'syz.1.362': attribute type 4 has an invalid length.
[   64.217861][ T6950] overlayfs: missing 'lowerdir'
[   64.237402][ T6955] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   64.524978][ T6969] affs: No valid root block on device sr0
[   64.554198][ T6971] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   64.561745][ T6971] syzkaller1: entered promiscuous mode
[   64.561760][ T6971] syzkaller1: entered allmulticast mode
[   64.594978][ T6974] 9pnet_virtio: no channels available for device syz
[   64.595126][ T6974] 9pnet_virtio: no channels available for device syz
[   64.595289][ T6974] 9pnet_virtio: no channels available for device syz
[   64.595424][ T6974] 9pnet_virtio: no channels available for device syz
[   64.595558][ T6974] 9pnet_virtio: no channels available for device syz
[   64.595720][ T6974] 9pnet_virtio: no channels available for device syz
[   64.595867][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596028][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596161][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596329][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596469][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596620][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596847][ T6974] 9pnet_virtio: no channels available for device syz
[   64.596987][ T6974] 9pnet_virtio: no channels available for device syz
[   64.597167][ T6974] 9pnet_virtio: no channels available for device syz
[   64.597343][ T6974] 9pnet_virtio: no channels available for device syz
[   64.597481][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598031][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598167][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598315][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598447][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598583][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598716][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598847][ T6974] 9pnet_virtio: no channels available for device syz
[   64.598985][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599120][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599253][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599384][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599516][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599649][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599789][ T6974] 9pnet_virtio: no channels available for device syz
[   64.599925][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600057][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600192][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600350][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600486][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600621][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600752][ T6974] 9pnet_virtio: no channels available for device syz
[   64.600889][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601104][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601242][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601375][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601510][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601643][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601774][ T6974] 9pnet_virtio: no channels available for device syz
[   64.601912][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602046][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602190][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602325][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602461][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602593][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602725][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602857][ T6974] 9pnet_virtio: no channels available for device syz
[   64.602993][ T6974] 9pnet_virtio: no channels available for device syz
[   64.603127][ T6974] 9pnet_virtio: no channels available for device syz
[   64.603354][ T6974] 9pnet_virtio: no channels available for device syz
[   64.603490][ T6974] 9pnet_virtio: no channels available for device syz
[   64.603621][ T6974] 9pnet_virtio: no channels available for device syz
[   64.603759][ T6974] 9pnet_virtio: no channels available for device syz
[   64.603897][ T6974] 9pnet_virtio: no channels available for device syz
[   64.604033][ T6974] 9pnet_virtio: no channels available for device syz
[   64.604168][ T6974] 9pnet_virtio: no channels available for device syz
[   64.604322][ T6974] 9pnet_virtio: no channels available for device syz
[   64.604461][ T6974] 9pnet_virtio: no channels available for device syz
[   64.614653][   T43] kauditd_printk_skb: 24 callbacks suppressed
[   64.614664][   T43] audit: type=1400 audit(1791271795.018:585): avc:  denied  { unmount } for  pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   64.674725][ T6978] batman_adv: batadv0: Adding interface: veth0
[   64.674737][ T6978] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.674753][ T6978] batman_adv: batadv0: Interface activated: veth0
[   64.675755][ T6978] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.678576][ T6978] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.680430][ T6978] batman_adv: batadv0: Interface deactivated: veth0
[   64.680444][ T6978] batman_adv: batadv0: Removing interface: veth0
[   64.845815][   T43] audit: type=1400 audit(1791271795.248:586): avc:  denied  { write } for  pid=6979 comm="syz.3.372" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   64.847235][ T6980] binder: 6979:6980 ioctl c0306201 200000000080 returned -14
[   64.847917][   T43] audit: type=1400 audit(1791271795.258:587): avc:  denied  { map } for  pid=6979 comm="syz.3.372" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   64.848651][ T6980] binder: BINDER_SET_CONTEXT_MGR already set
[   64.848658][ T6980] binder: 6979:6980 ioctl 4018620d 200000000040 returned -16
[   64.849543][ T6980] binder: 6979:6980 ioctl c0306201 2000000003c0 returned -14
[   64.968936][   T66] Bluetooth: hci0: unexpected event for opcode 0x2041
[   64.981687][   T43] audit: type=1400 audit(1791271795.388:588): avc:  denied  { create } for  pid=6989 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   64.981986][   T43] audit: type=1400 audit(1791271795.388:589): avc:  denied  { write } for  pid=6989 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   65.035467][   T43] audit: type=1400 audit(1791271795.438:590): avc:  denied  { listen } for  pid=6989 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   65.035808][ T6993] sctp: [Deprecated]: syz.1.377 (pid 6993) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.035808][ T6993] Use struct sctp_sack_info instead
[   65.076821][   T43] audit: type=1400 audit(1791271795.488:591): avc:  denied  { write } for  pid=6996 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.391935][ T7013] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   65.393055][ T7013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.455083][ T7015] __nla_validate_parse: 5 callbacks suppressed
[   65.455098][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'.
[   65.469797][   T43] audit: type=1400 audit(1791271795.878:592): avc:  denied  { ioctl } for  pid=7014 comm="syz.3.389" path="socket:[16407]" dev="sockfs" ino=16407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   65.542639][   T43] audit: type=1400 audit(1791271795.948:593): avc:  denied  { shutdown } for  pid=7014 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   65.860325][ T7035] netlink: 'syz.1.395': attribute type 2 has an invalid length.
[   65.863480][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   65.863502][ T7031] netlink: 'syz.2.394': attribute type 30 has an invalid length.
[   65.885109][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7031 comm=syz.2.394
[   65.885693][ T7031] xt_IDLETIMER: timeout value is zero
[   65.894259][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7031 comm=syz.2.394
[   65.894277][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7031 comm=syz.2.394
[   65.894288][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7031 comm=syz.2.394
[   65.899123][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.899148][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.899166][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.899184][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.937729][ T7042] overlayfs: failed to clone upperpath
[   65.939022][ T7042] overlayfs: failed to clone upperpath
[   66.034295][ T7044] FAULT_INJECTION: forcing a failure.
[   66.034295][ T7044] name failslab, interval 1, probability 0, space 0, times 0
[   66.034319][ T7044] CPU: 2 UID: 0 PID: 7044 Comm: syz.1.399 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   66.034335][ T7044] Tainted: [L]=SOFTLOCKUP
[   66.034339][ T7044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.034346][ T7044] Call Trace:
[   66.034350][ T7044]  <TASK>
[   66.034355][ T7044]  dump_stack_lvl+0x100/0x190
[   66.034375][ T7044]  should_fail_ex.cold+0x5/0xa
[   66.034391][ T7044]  should_failslab+0xc2/0x120
[   66.034409][ T7044]  __kvmalloc_node_noprof+0x113/0x9b0
[   66.034425][ T7044]  ? handler_new_ref+0x603/0xc60
[   66.034438][ T7044]  ? v4l2_ctrl_new+0x4a6/0x23a0
[   66.034452][ T7044]  v4l2_ctrl_new+0x4a6/0x23a0
[   66.034469][ T7044]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[   66.034485][ T7044]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[   66.034496][ T7044]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[   66.034510][ T7044]  v4l2_ctrl_new_custom+0x41b/0xa20
[   66.034531][ T7044]  ? __pfx_v4l2_ctrl_new_custom+0x10/0x10
[   66.034543][ T7044]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[   66.034576][ T7044]  ? __kvmalloc_node_noprof+0x377/0x9b0
[   66.034597][ T7044]  ? media_request_object_init+0x105/0x180
[   66.034619][ T7044]  vim2m_open+0x193/0x830
[   66.034639][ T7044]  v4l2_open+0x1d2/0x490
[   66.034653][ T7044]  ? __pfx_v4l2_open+0x10/0x10
[   66.034665][ T7044]  chrdev_open+0x234/0x6a0
[   66.034682][ T7044]  ? __pfx_chrdev_open+0x10/0x10
[   66.034698][ T7044]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   66.034713][ T7044]  do_dentry_open+0x6ab/0x14d0
[   66.034726][ T7044]  ? __pfx_chrdev_open+0x10/0x10
[   66.034744][ T7044]  vfs_open+0x82/0x3f0
[   66.034762][ T7044]  path_openat+0x19fa/0x2440
[   66.034780][ T7044]  ? __pfx_path_openat+0x10/0x10
[   66.034800][ T7044]  do_file_open+0x20e/0x430
[   66.034823][ T7044]  ? __pfx_do_file_open+0x10/0x10
[   66.034851][ T7044]  ? _raw_spin_unlock+0x28/0x50
[   66.034869][ T7044]  ? alloc_fd+0x471/0x7a0
[   66.034890][ T7044]  do_sys_openat2+0x10f/0x1e0
[   66.034907][ T7044]  ? __pfx_do_sys_openat2+0x10/0x10
[   66.034931][ T7044]  __x64_sys_openat+0x12d/0x210
[   66.034949][ T7044]  ? __pfx___x64_sys_openat+0x10/0x10
[   66.034971][ T7044]  do_syscall_64+0x123/0x790
[   66.034986][ T7044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.034998][ T7044] RIP: 0033:0x7fcec855e9ce
[   66.035008][ T7044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   66.035019][ T7044] RSP: 002b:00007fcec9502b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   66.035032][ T7044] RAX: ffffffffffffffda RBX: 00007fcec95036c0 RCX: 00007fcec855e9ce
[   66.035039][ T7044] RDX: 0000000000000002 RSI: 00007fcec9502c00 RDI: ffffffffffffff9c
[   66.035046][ T7044] RBP: 00007fcec9502c00 R08: 0000000000000000 R09: 0000000000000000
[   66.035053][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   66.035060][ T7044] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   66.035075][ T7044]  </TASK>
[   66.077642][ T7046] ubi0: attaching mtd0
[   66.080304][ T7046] ubi0: scanning is finished
[   66.080332][ T7046] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   66.199784][ T7046] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   66.386966][   T43] audit: type=1400 audit(1791271796.798:594): avc:  denied  { write } for  pid=7055 comm="syz.0.402" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   66.390934][ T7056] netlink: 'syz.0.402': attribute type 7 has an invalid length.
[   66.390947][ T7056] netlink: 'syz.0.402': attribute type 8 has an invalid length.
[   66.554941][ T7080] syzkaller0: entered promiscuous mode
[   66.554963][ T7080] syzkaller0: entered allmulticast mode
[   66.563036][ T7082] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   66.563873][ T7082] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   66.694489][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'.
[   66.694504][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'.
[   66.750453][ T7093] xt_hashlimit: size too large, truncated to 1048576
[   66.802042][ T7095] xt_hashlimit: size too large, truncated to 1048576
[   66.857812][ T7098] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   67.146810][ T5842] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   67.307724][ T5842] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   67.308687][ T5842] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   67.308709][ T5842] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   67.308729][ T5842] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.310559][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   67.310578][ T5842] usb 8-1: Product: syz
[   67.310590][ T5842] usb 8-1: Manufacturer: syz
[   67.310603][ T5842] usb 8-1: SerialNumber: syz
[   67.426744][ T7106] netlink: 68 bytes leftover after parsing attributes in process `syz.2.416'.
[   67.468089][ T7108] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.524031][ T5842] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   68.072519][ T7116] netlink: 64 bytes leftover after parsing attributes in process `syz.2.420'.
[   69.228310][ T7049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.245330][   T25] usb 8-1: USB disconnect, device number 4
[   69.259039][   T25] usblp0: removed
[   69.353599][ T7143] netlink: 'syz.0.430': attribute type 21 has an invalid length.
[   69.353615][ T7143] netlink: 128 bytes leftover after parsing attributes in process `syz.0.430'.
[   69.353652][ T7143] netlink: 35 bytes leftover after parsing attributes in process `syz.0.430'.
[   69.392430][ T7152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.434'.
[   69.425172][ T7157] loop6: detected capacity change from 0 to 2640
[   69.433574][ T5749] buffer_io_error: 1 callbacks suppressed
[   69.433592][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.434034][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.434470][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.434828][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.435228][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.559983][ T7166] loop6: detected capacity change from 0 to 2640
[   69.586092][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.586571][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.588280][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.588634][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.589067][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read
[   69.602559][ T7164] infiniband syz0: set down
[   69.602572][ T7164] infiniband syz0: added ipvlan0
[   69.611669][ T7164] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   69.611693][ T7164] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   69.611714][ T7164] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   69.624985][ T7164] RDS/IB: syz0: added
[   69.625128][ T7164] smc: adding ib device syz0 with port count 1
[   69.625173][ T7164] smc:    ib device syz0 port 1 has no pnetid
[   70.018867][ T7184] FAULT_INJECTION: forcing a failure.
[   70.018867][ T7184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.018928][ T7184] CPU: 2 UID: 0 PID: 7184 Comm: syz.0.445 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   70.018944][ T7184] Tainted: [L]=SOFTLOCKUP
[   70.018949][ T7184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.018955][ T7184] Call Trace:
[   70.018959][ T7184]  <TASK>
[   70.018964][ T7184]  dump_stack_lvl+0x100/0x190
[   70.018984][ T7184]  should_fail_ex.cold+0x5/0xa
[   70.019000][ T7184]  copy_fpstate_to_sigframe+0x82d/0xae0
[   70.019011][ T7184]  ? do_raw_spin_lock+0x128/0x260
[   70.019027][ T7184]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[   70.019048][ T7184]  ? posixtimer_deliver_signal+0x1a0/0x6e0
[   70.019066][ T7184]  ? x86_task_fpu+0x5f/0x90
[   70.019082][ T7184]  get_sigframe+0x3fb/0x940
[   70.019100][ T7184]  ? __pfx_get_sigframe+0x10/0x10
[   70.019115][ T7184]  ? rcu_is_watching+0x13/0xc0
[   70.019131][ T7184]  ? siginfo_layout+0x156/0x290
[   70.019145][ T7184]  x64_setup_rt_frame+0x12f/0xce0
[   70.019164][ T7184]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[   70.019181][ T7184]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   70.019200][ T7184]  arch_do_signal_or_restart+0x5ee/0x7e0
[   70.019216][ T7184]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   70.019240][ T7184]  exit_to_user_mode_loop+0x139/0x700
[   70.019255][ T7184]  ? rcu_is_watching+0x13/0xc0
[   70.019271][ T7184]  do_syscall_64+0x661/0x790
[   70.019285][ T7184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.019296][ T7184] RIP: 0033:0x7fe67df9e199
[   70.019306][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.019316][ T7184] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.019328][ T7184] RAX: 0000000000000000 RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   70.019335][ T7184] RDX: 0000200000000200 RSI: 00000000c0606610 RDI: 0000000000000003
[   70.019341][ T7184] RBP: 00007fe67ee97090 R08: 0000000000000000 R09: 0000000000000000
[   70.019348][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.019354][ T7184] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   70.019368][ T7184]  </TASK>
[   70.056199][ T7186] faux_driver vgem: [drm] Unknown color mode 11179; guessing buffer size.
[   70.186072][ T7190] netlink: 'syz.2.448': attribute type 2 has an invalid length.
[   70.286132][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'.
[   70.451488][ T7210] netlink: zone id is out of range
[   70.451497][ T7210] netlink: zone id is out of range
[   70.451501][ T7210] netlink: zone id is out of range
[   70.451505][ T7210] netlink: zone id is out of range
[   70.451509][ T7210] netlink: zone id is out of range
[   70.451513][ T7210] netlink: zone id is out of range
[   70.451660][ T7210] netlink: zone id is out of range
[   70.451665][ T7210] netlink: zone id is out of range
[   70.451669][ T7210] netlink: zone id is out of range
[   70.506623][   T43] kauditd_printk_skb: 5 callbacks suppressed
[   70.506867][   T43] audit: type=1400 audit(1791271800.908:600): avc:  denied  { create } for  pid=7209 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   70.531939][ T7210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7210 comm=syz.2.454
[   70.542660][   T43] audit: type=1400 audit(1791271800.948:601): avc:  denied  { override_creds } for  pid=7218 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   70.546755][   T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   70.625494][   T43] audit: type=1400 audit(1791271801.028:602): avc:  denied  { read } for  pid=7223 comm="syz.0.459" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   70.625728][   T43] audit: type=1400 audit(1791271801.028:603): avc:  denied  { map } for  pid=7223 comm="syz.0.459" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   70.625795][   T43] audit: type=1400 audit(1791271801.028:604): avc:  denied  { execute } for  pid=7223 comm="syz.0.459" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   70.631879][ T7233] netlink: 27 bytes leftover after parsing attributes in process `syz.2.461'.
[   70.686600][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'.
[   70.697023][   T25] usb 6-1: Using ep0 maxpacket: 32
[   70.697470][   T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   70.698270][   T25] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[   70.698289][   T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   70.698308][   T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   70.698320][   T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[   70.698332][   T25] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   70.698345][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   70.702492][   T25] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   70.702506][   T25] usb 6-1: Product: syz
[   70.702513][   T25] usb 6-1: Manufacturer: syz
[   70.702521][   T25] usb 6-1: SerialNumber: syz
[   70.705773][ T6562] block nbd0: Receive control failed (result -107)
[   70.721452][   T25] usb 6-1: config 0 descriptor??
[   70.735053][   T25] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   70.749315][   T25] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   70.794599][   T43] audit: type=1400 audit(1791271801.198:605): avc:  denied  { read write } for  pid=7242 comm="syz.0.465" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   70.794629][   T43] audit: type=1400 audit(1791271801.198:606): avc:  denied  { open } for  pid=7242 comm="syz.0.465" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   70.873961][   T43] audit: type=1400 audit(1791271801.278:607): avc:  denied  { bind } for  pid=7258 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   70.875692][   T43] audit: type=1400 audit(1791271801.278:608): avc:  denied  { search } for  pid=5443 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.875762][   T43] audit: type=1400 audit(1791271801.278:609): avc:  denied  { search } for  pid=5443 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.926567][ T7199] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90
[   70.929515][   T25] usb 6-1: USB disconnect, device number 6
[   70.932775][   T25] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[   71.117147][ T7268] netlink: 232 bytes leftover after parsing attributes in process `syz.3.472'.
[   71.151068][ T7284] Cannot find map_set index 135 as target
[   71.175566][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[   71.188633][   T10] cfg80211: failed to load regulatory.db
[   71.205504][ T7287] syzkaller0: entered promiscuous mode
[   71.209453][ T7287] syzkaller0: entered allmulticast mode
[   71.331220][ T7292] blkio.reset_stats is deprecated
[   71.332438][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'.
[   71.424805][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'.
[   71.483645][ T7311] FAULT_INJECTION: forcing a failure.
[   71.483645][ T7311] name failslab, interval 1, probability 0, space 0, times 0
[   71.483679][ T7311] CPU: 3 UID: 0 PID: 7311 Comm: syz.0.482 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   71.483706][ T7311] Tainted: [L]=SOFTLOCKUP
[   71.483714][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.483726][ T7311] Call Trace:
[   71.483733][ T7311]  <TASK>
[   71.483743][ T7311]  dump_stack_lvl+0x100/0x190
[   71.483777][ T7311]  should_fail_ex.cold+0x5/0xa
[   71.483845][ T7311]  should_failslab+0xc2/0x120
[   71.483870][ T7311]  kmem_cache_alloc_noprof+0x92/0x6a0
[   71.483891][ T7311]  ? vm_area_dup+0x27/0x9d0
[   71.483921][ T7311]  vm_area_dup+0x27/0x9d0
[   71.483946][ T7311]  __split_vma+0x19c/0x1de0
[   71.483967][ T7311]  ? __pfx___split_vma+0x10/0x10
[   71.483982][ T7311]  ? mas_next_slot+0xc05/0x13a0
[   71.484015][ T7311]  vms_gather_munmap_vmas+0x3a5/0x1720
[   71.484036][ T7311]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[   71.484053][ T7311]  ? lock_acquire+0x1d1/0x380
[   71.484071][ T7311]  ? futex_unqueue+0x29/0x2c0
[   71.484094][ T7311]  ? find_held_lock+0x2b/0x80
[   71.484118][ T7311]  ? futex_unqueue+0x133/0x2c0
[   71.484139][ T7311]  ? futex_unqueue+0x133/0x2c0
[   71.484165][ T7311]  ? futex_unqueue+0x13d/0x2c0
[   71.484192][ T7311]  do_vmi_align_munmap+0x287/0x5f0
[   71.484214][ T7311]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[   71.484233][ T7311]  ? __pfx_futex_wake_mark+0x10/0x10
[   71.484279][ T7311]  ? __lock_acquire+0x5c0/0x1f40
[   71.484321][ T7311]  ? mas_walk+0x260/0x310
[   71.484343][ T7311]  do_vmi_munmap+0x1f8/0x3e0
[   71.484366][ T7311]  __vm_munmap+0x196/0x390
[   71.484387][ T7311]  ? __pfx___vm_munmap+0x10/0x10
[   71.484423][ T7311]  __x64_sys_munmap+0x59/0x80
[   71.484447][ T7311]  do_syscall_64+0x123/0x790
[   71.484470][ T7311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.484488][ T7311] RIP: 0033:0x7fe67df9e199
[   71.484501][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.484518][ T7311] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[   71.484534][ T7311] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   71.484545][ T7311] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 000020000060f000
[   71.484555][ T7311] RBP: 00007fe67e0358e0 R08: 0000000000000000 R09: 0000000000000000
[   71.484565][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.484574][ T7311] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   71.484597][ T7311]  </TASK>
[   71.494759][ T7311] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   71.500982][ T7304] tmpfs: Using encoding : utf8-12.1.0
[   71.553874][ T7316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.483'.
[   71.587669][ T7322] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[   71.606360][ T7322] bridge_slave_0: left allmulticast mode
[   71.606376][ T7322] bridge_slave_0: left promiscuous mode
[   71.606479][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.611913][ T7322] bridge_slave_1: left allmulticast mode
[   71.611929][ T7322] bridge_slave_1: left promiscuous mode
[   71.612024][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.621254][ T7322] bond0: (slave bond_slave_0): Releasing backup interface
[   71.626565][ T7322] bond0: (slave bond_slave_1): Releasing backup interface
[   71.640910][ T7322] team0: Port device team_slave_0 removed
[   71.649869][ T7322] team0: Port device team_slave_1 removed
[   71.650630][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.650647][ T7322] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.652643][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.652658][ T7322] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.662253][ T7332] team0: Port device xfrm0 added
[   71.669261][ T7322] tipc: Started in network mode
[   71.669289][ T7322] tipc: Node identity 5e9d3ea01c6e, cluster identity 4711
[   71.669493][ T7322] tipc: Enabled bearer <eth:team0>, priority 0
[   71.716908][ T7340] SET target dimension over the limit!
[   72.062046][ T7377] overlayfs: failed to clone lowerpath
[   72.305354][ T7409] jffs2: notice: (7409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   72.403087][ T7422] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   72.483458][ T7428] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[   72.529416][ T7435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.513'.
[   72.531334][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'.
[   72.558926][ T7439] net_ratelimit: 500 callbacks suppressed
[   72.558941][ T7439] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[   72.564475][ T7441] xt_ipcomp: unknown flags 1D
[   72.642326][ T7449] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[   72.673357][ T7454] netlink: 'syz.1.521': attribute type 1 has an invalid length.
[   72.766714][ T7462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.766732][ T7462] IPv6: NLM_F_CREATE should be set when creating new route
[   72.773315][ T7458] syzkaller0: entered promiscuous mode
[   72.773339][ T7458] syzkaller0: entered allmulticast mode
[   72.936052][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'.
[   73.019224][ T7474] ip6t_srh: unknown srh invflags 51E8
[   73.077820][ T7475] xt_NFQUEUE: number of total queues is 0
[   73.824828][   T10] tipc: Node number set to 1123237536
[   73.872675][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'.
[   73.900467][ T7492] FAULT_INJECTION: forcing a failure.
[   73.900467][ T7492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.900502][ T7492] CPU: 3 UID: 0 PID: 7492 Comm: syz.1.537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   73.900528][ T7492] Tainted: [L]=SOFTLOCKUP
[   73.900535][ T7492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   73.900546][ T7492] Call Trace:
[   73.900553][ T7492]  <TASK>
[   73.900561][ T7492]  dump_stack_lvl+0x100/0x190
[   73.900592][ T7492]  should_fail_ex.cold+0x5/0xa
[   73.900618][ T7492]  strncpy_from_user+0x3b/0x2d0
[   73.900642][ T7492]  do_getname+0x78/0x390
[   73.900662][ T7492]  do_sys_openat2+0xc7/0x1e0
[   73.900689][ T7492]  ? __pfx_do_sys_openat2+0x10/0x10
[   73.900716][ T7492]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   73.900740][ T7492]  ? __fget_files+0x21f/0x3d0
[   73.900769][ T7492]  __x64_sys_openat+0x12d/0x210
[   73.900795][ T7492]  ? __pfx___x64_sys_openat+0x10/0x10
[   73.900840][ T7492]  ? ksys_write+0x1ac/0x250
[   73.900863][ T7492]  do_syscall_64+0x123/0x790
[   73.900880][ T7492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.900898][ T7492] RIP: 0033:0x7fcec859e199
[   73.900913][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.900932][ T7492] RSP: 002b:00007fcec9503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   73.900951][ T7492] RAX: ffffffffffffffda RBX: 00007fcec8825fa0 RCX: 00007fcec859e199
[   73.900962][ T7492] RDX: 0000000000000001 RSI: 0000200000000680 RDI: ffffffffffffff9c
[   73.900974][ T7492] RBP: 00007fcec9503090 R08: 0000000000000000 R09: 0000000000000000
[   73.900985][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.900996][ T7492] R13: 00007fcec8826038 R14: 00007fcec8825fa0 R15: 00007fff7cf06528
[   73.901020][ T7492]  </TASK>
[   73.910260][ T7494] 9pnet_virtio: no channels available for device syz
[   74.083879][ T7495] EXT4-fs (loop0): unable to read superblock
[   74.214515][ T7528] netlink: 'syz.3.549': attribute type 12 has an invalid length.
[   74.477461][ T7557] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   74.477484][ T7557] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   74.478219][ T7557] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   74.679822][ T7561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7561 comm=syz.1.562
[   75.176196][ T7575] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   75.571695][ T7590] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   75.571706][ T7590] overlayfs: missing 'lowerdir'
[   76.047192][ T7598] __nla_validate_parse: 1 callbacks suppressed
[   76.047205][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[   76.047255][ T7598] dummy0: left allmulticast mode
[   76.047307][ T7598] dummy0: left promiscuous mode
[   76.047461][ T7598] bridge0: port 3(dummy0) entered disabled state
[   76.050048][ T7598] bridge_slave_1: left allmulticast mode
[   76.050064][ T7598] bridge_slave_1: left promiscuous mode
[   76.050169][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.051498][ T7598] bridge_slave_0: left allmulticast mode
[   76.051511][ T7598] bridge_slave_0: left promiscuous mode
[   76.051593][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.170209][ T7607] x_tables: duplicate underflow at hook 3
[   76.206357][ T7611] netlink: 'syz.3.579': attribute type 29 has an invalid length.
[   76.236122][ T7615] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   76.236140][ T7615] overlayfs: missing 'lowerdir'
[   76.412596][   T43] kauditd_printk_skb: 38 callbacks suppressed
[   76.412615][   T43] audit: type=1400 audit(1791271806.818:648): avc:  denied  { watch } for  pid=7627 comm="syz.3.586" path="/126/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   76.412938][ T7628] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[   76.461303][ T7630] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   76.461322][ T7630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   76.463890][ T7630] vhci_hcd vhci_hcd.0: Device attached
[   76.480045][ T7634] CIFS: VFS: UNC: path must begin with // or \\
[   76.480306][ T7634] CIFS: VFS: Malformed UNC in devname
[   76.480954][ T7635] befs: (nullb0): No write support. Marking filesystem read-only
[   76.482535][ T7635] befs: (nullb0): invalid magic header
[   76.491381][ T7638] netlink: 'syz.1.588': attribute type 7 has an invalid length.
[   76.706792][ T5842] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[   76.706939][ T5827] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[   76.758959][ T7645] overlayfs: missing 'lowerdir'
[   76.807831][ T7655] ip_tables: iptables: counters copy to user failed while replacing table
[   76.827440][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.592'.
[   76.863692][ T7663] overlayfs: failed to clone upperpath
[   76.869977][ T5842] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   76.870861][ T5842] usb 8-1: config 0 has no interfaces?
[   76.870889][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.876045][ T5842] usb 8-1: config 0 descriptor??
[   76.913090][ T7671] misc userio: The device must be registered before sending interrupts
[   76.940946][ T7675] syzkaller0: entered promiscuous mode
[   76.940961][ T7675] syzkaller0: entered allmulticast mode
[   77.021601][ T7681] overlayfs: missing 'lowerdir'
[   77.088569][   T35] usb 8-1: USB disconnect, device number 5
[   77.091502][ T7631] vhci_hcd: connection closed
[   77.092882][ T7685] netlink: 168 bytes leftover after parsing attributes in process `syz.2.602'.
[   77.100987][   T13] vhci_hcd vhci_hcd.3: stop threads
[   77.101387][   T13] vhci_hcd vhci_hcd.3: release socket
[   77.102440][   T13] vhci_hcd vhci_hcd.3: disconnect device
[   77.146828][ T5827] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   77.205435][   T66] Bluetooth: Frame is too long (len 12, expected len 4)
[   77.215569][   T43] audit: type=1400 audit(1791271807.618:649): avc:  denied  { ioctl } for  pid=7692 comm="syz.1.606" path="socket:[19684]" dev="sockfs" ino=19684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.219628][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'.
[   77.279752][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.606'.
[   77.637946][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'.
[   77.645846][ T7749] ip6erspan0: entered promiscuous mode
[   77.797411][ T7767] NILFS (nullb0): couldn't find nilfs on the device
[   77.837942][ T7767] bond1: entered promiscuous mode
[   77.837957][ T7767] bond1: entered allmulticast mode
[   77.847679][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'.
[   77.847692][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'.
[   77.867540][   T43] audit: type=1400 audit(1791271808.278:650): avc:  denied  { setopt } for  pid=7766 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   77.946138][   T43] audit: type=1400 audit(1791271808.348:651): avc:  denied  { watch } for  pid=7785 comm="syz.3.619" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   77.956624][   T43] audit: type=1400 audit(1791271808.358:652): avc:  denied  { write } for  pid=7782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.959619][ T7787] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   77.959628][ T7787] overlayfs: missing 'lowerdir'
[   78.020567][   T43] audit: type=1400 audit(1791271808.428:653): avc:  denied  { write } for  pid=7794 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.066542][ T5443] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.091713][   T43] audit: type=1400 audit(1791271808.498:654): avc:  denied  { nlmsg_read } for  pid=7804 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   78.156274][   T43] audit: type=1400 audit(1791271808.558:655): avc:  denied  { write } for  pid=7811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.203914][   T43] audit: type=1400 audit(1791271808.608:656): avc:  denied  { write } for  pid=7821 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.300011][   T43] audit: type=1400 audit(1791271808.708:657): avc:  denied  { write } for  pid=7830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.469749][ T7852] netlink: 'syz.0.629': attribute type 3 has an invalid length.
[   78.469763][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[   78.475506][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'.
[   78.825143][ T7882] netlink: 'syz.1.637': attribute type 2 has an invalid length.
[   78.837291][ T7882] : entered promiscuous mode
[   78.877134][ T7885] syzkaller0: entered promiscuous mode
[   78.877156][ T7885] syzkaller0: entered allmulticast mode
[   79.052994][ T7894] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   79.092155][ T7900] ip_tables: iptables: counters copy to user failed while replacing table
[   79.125125][ T7902] ip_tables: iptables: counters copy to user failed while replacing table
[   79.290400][ T7925] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   79.291564][ T7925] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   79.347342][ T7931] veth1_macvtap: left promiscuous mode
[   79.347360][ T7931] macsec0: entered promiscuous mode
[   79.347368][ T7931] macsec0: entered allmulticast mode
[   79.352161][ T7931] veth1_macvtap: entered promiscuous mode
[   79.352176][ T7931] veth1_macvtap: entered allmulticast mode
[   79.352432][ T7931] macsec0: left promiscuous mode
[   79.352516][ T7931] macsec0: left allmulticast mode
[   79.352525][ T7931] veth1_macvtap: left allmulticast mode
[   79.644078][ T7946] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   79.743384][ T7950] clocksource: Switched to clocksource acpi_pm
[   79.744513][ T7950] clocksource: Switched to clocksource tsc
[   79.763967][   T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   79.812681][ T7956] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   79.828908][ T7956] can: request_module (can-proto-3) failed.
[   79.862687][ T7959] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   79.891993][ T7960] can: request_module (can-proto-3) failed.
[   79.916827][  T853] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   80.030063][   T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   80.066836][  T853] usb 6-1: Using ep0 maxpacket: 8
[   80.067789][  T853] usb 6-1: New USB
** replaying previous printk message **
[   80.067789][  T853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   80.068880][  T853] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   80.068918][  T853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.068943][  T853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   80.068955][  T853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   80.068966][  T853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   80.068985][  T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.081791][ T7967] 
[   80.104868][ T7967] ======================================================
[   80.107067][ T7967] WARNING: possible circular locking dependency detected
[   80.109324][ T7967] syzkaller #0 Tainted: G             L     
[   80.111399][ T7967] ------------------------------------------------------
[   80.113636][ T7967] syz.0.668/7967 is trying to acquire lock:
[   80.115487][ T7967] ffff888026bd00b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110
[   80.118378][ T7967] 
[   80.118378][ T7967] but task is already holding lock:
[   80.120684][ T7967] ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0
[   80.123449][ T7967] 
[   80.123449][ T7967] which lock already depends on the new lock.
[   80.123449][ T7967] 
[   80.126560][ T7967] 
[   80.126560][ T7967] the existing dependency chain (in reverse order) is:
[   80.129365][ T7967] 
[   80.129365][ T7967] -> #2 (rfcomm_mutex){+.+.}-{4:4}:
[   80.131626][ T7967]        lock_acquire+0x1d1/0x380
[   80.133188][ T7967]        __mutex_lock+0x1a4/0x1bd0
[   80.134924][ T7967]        rfcomm_security_cfm+0x3f/0x4b0
[   80.136708][ T7967]        hci_auth_complete_evt+0x811/0x1180
[   80.138601][ T7967]        hci_event_packet+0x8e9/0xcd0
[   80.140344][ T7967]        hci_rx_work+0x451/0xfc0
[   80.142409][ T7967]        process_one_work+0xac7/0x1b10
[   80.144188][ T7967]        worker_thread+0x5ef/0xe50
[   80.145817][ T7967]        kthread+0x373/0x450
[   80.147522][ T7967]        ret_from_fork+0x730/0xd60
[   80.149076][ T7967]        ret_from_fork_asm+0x1a/0x30
[   80.150752][ T7967] 
[   80.150752][ T7967] -> #1 (hci_cb_list_lock){+.+.}-{4:4}:
[   80.153177][ T7967]        lock_acquire+0x1d1/0x380
[   80.154761][ T7967]        __mutex_lock+0x1a4/0x1bd0
[   80.156358][ T7967]        hci_remote_features_evt+0x485/0x9b0
[   80.158278][ T7967]        hci_event_packet+0x8e9/0xcd0
[   80.159974][ T7967]        hci_rx_work+0x451/0xfc0
[   80.161549][ T7967]        process_one_work+0xac7/0x1b10
[   80.163267][ T7967]        worker_thread+0x5ef/0xe50
[   80.164883][ T7967]        kthread+0x373/0x450
[   80.166369][ T7967]        ret_from_fork+0x730/0xd60
[   80.168046][ T7967]        ret_from_fork_asm+0x1a/0x30
[   80.169722][ T7967] 
[   80.169722][ T7967] -> #0 (&hdev->lock){+.+.}-{4:4}:
[   80.171996][ T7967]        check_prev_add+0xeb/0xe60
[   80.173614][ T7967]        __lock_acquire+0x1528/0x1f40
[   80.175296][ T7967]        lock_acquire+0x1d1/0x380
[   80.176902][ T7967]        __mutex_lock+0x1a4/0x1bd0
[   80.178543][ T7967]        l2cap_chan_connect+0xac/0x2110
[   80.180294][ T7967]        l2cap_sock_connect+0x37a/0x770
[   80.182027][ T7967]        kernel_connect+0x107/0x160
[   80.183666][ T7967]        rfcomm_dlc_open+0x838/0xac0
[   80.185325][ T7967]        rfcomm_sock_connect+0x42c/0x690
[   80.187095][ T7967]        __sys_connect_file+0x146/0x1a0
[   80.188858][ T7967]        __sys_connect+0x141/0x170
[   80.190463][ T7967]        __x64_sys_connect+0x72/0xb0
[   80.192120][ T7967]        do_syscall_64+0x123/0x790
[   80.193743][ T7967]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.195764][ T7967] 
[   80.195764][ T7967] other info that might help us debug this:
[   80.195764][ T7967] 
[   80.199856][ T7967] Chain exists of:
[   80.199856][ T7967]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[   80.199856][ T7967] 
[   80.203726][ T7967]  Possible unsafe locking scenario:
[   80.203726][ T7967] 
[   80.206054][ T7967]        CPU0                    CPU1
[   80.207767][ T7967]        ----                    ----
[   80.209465][ T7967]   lock(rfcomm_mutex);
[   80.210788][ T7967]                                lock(hci_cb_list_lock);
[   80.212988][ T7967]                                lock(rfcomm_mutex);
[   80.215064][ T7967]   lock(&hdev->lock);
[   80.216373][ T7967] 
[   80.216373][ T7967]  *** DEADLOCK ***
[   80.216373][ T7967] 
[   80.218904][ T7967] locks held by syz.0.668/7967: 1, last CPU#2:
[   80.220839][ T7967]  #0: ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0
[   80.223747][ T7967] 
[   80.223747][ T7967] stack backtrace:
[   80.225629][ T7967] CPU: 2 UID: 0 PID: 7967 Comm: syz.0.668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   80.228965][ T7967] Tainted: [L]=SOFTLOCKUP
[   80.230274][ T7967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   80.233410][ T7967] Call Trace:
[   80.234480][ T7967]  <TASK>
[   80.235430][ T7967]  dump_stack_lvl+0x100/0x190
[   80.236951][ T7967]  print_circular_bug.cold+0x178/0x1be
[   80.238689][ T7967]  check_noncircular+0x146/0x160
[   80.240271][ T7967]  check_prev_add+0xeb/0xe60
[   80.241734][ T7967]  __lock_acquire+0x1528/0x1f40
[   80.243273][ T7967]  lock_acquire+0x1d1/0x380
[   80.244733][ T7967]  ? l2cap_chan_connect+0xac/0x2110
[   80.246375][ T7967]  ? __pfx___might_resched+0x10/0x10
[   80.248055][ T7967]  __mutex_lock+0x1a4/0x1bd0
[   80.249530][ T7967]  ? l2cap_chan_connect+0xac/0x2110
[   80.251177][ T7967]  ? l2cap_chan_connect+0xac/0x2110
[   80.252833][ T7967]  ? hci_get_route+0x368/0x520
[   80.254363][ T7967]  ? hci_get_route+0x368/0x520
[   80.255893][ T7967]  ? __pfx___mutex_lock+0x10/0x10
[   80.257509][ T7967]  ? _raw_read_unlock+0x28/0x50
[   80.259045][ T7967]  ? hci_get_route+0x368/0x520
[   80.260566][ T7967]  ? __pfx_hci_get_route+0x10/0x10
[   80.262203][ T7967]  ? reacquire_held_locks+0xdd/0x1f0
[   80.263868][ T7967]  ? release_sock+0x21/0x280
[   80.265350][ T7967]  ? l2cap_chan_connect+0xac/0x2110
[   80.266988][ T7967]  l2cap_chan_connect+0xac/0x2110
[   80.268593][ T7967]  ? __local_bh_enable_ip+0xa5/0x120
[   80.270254][ T7967]  l2cap_sock_connect+0x37a/0x770
[   80.271844][ T7967]  ? __pfx_l2cap_sock_connect+0x10/0x10
[   80.273589][ T7967]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   80.275415][ T7967]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   80.277285][ T7967]  kernel_connect+0x107/0x160
[   80.278779][ T7967]  ? __pfx_kernel_connect+0x10/0x10
[   80.280442][ T7967]  ? timer_init_key+0x150/0x310
[   80.281993][ T7967]  rfcomm_dlc_open+0x838/0xac0
[   80.283513][ T7967]  ? __pfx_rfcomm_dlc_open+0x10/0x10
[   80.285181][ T7967]  ? rfcomm_sock_connect+0x3e8/0x690
[   80.286807][ T7967]  ? find_held_lock+0x2b/0x80
[   80.288317][ T7967]  ? rfcomm_sock_connect+0x3e8/0x690
[   80.289970][ T7967]  ? __local_bh_enable_ip+0xa5/0x120
[   80.291625][ T7967]  rfcomm_sock_connect+0x42c/0x690
[   80.293246][ T7967]  __sys_connect_file+0x146/0x1a0
[   80.294933][ T7967]  __sys_connect+0x141/0x170
[   80.296698][ T7967]  ? __pfx___sys_connect+0x10/0x10
[   80.298465][ T7967]  __x64_sys_connect+0x72/0xb0
[   80.299995][ T7967]  ? lockdep_hardirqs_on+0x7d/0x110
[   80.301664][ T7967]  do_syscall_64+0x123/0x790
[   80.303145][ T7967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.305311][ T7967] RIP: 0033:0x7fe67df9e199
[   80.306752][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.312748][ T7967] RSP: 002b:00007fe67ee97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   80.315529][ T7967] RAX: ffffffffffffffda RBX: 00007fe67e225fa0 RCX: 00007fe67df9e199
[   80.318617][ T7967] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000007
[   80.321582][ T7967] RBP: 00007fe67e0358e0 R08: 0000000000000000 R09: 0000000000000000
[   80.324641][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.327665][ T7967] R13: 00007fe67e226038 R14: 00007fe67e225fa0 R15: 00007fffb55135e8
[   80.330582][ T7967]  </TASK>
[   80.383993][  T853] usb 6-1: usb_control_msg returned -32
[   80.384026][  T853] usbtmc 6-1:16.0: can't read capabilities
[   80.537198][   T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   80.568619][ T7950] ceph: No mds server is up or the cluster is laggy
[   80.742871][ T7968] usbtmc 6-1:16.0: stb usb_control_msg returned -32
[   82.356968][ T5732] Bluetooth: hci2: command 0x0405 tx timeout
[   82.828262][   T50] usb 6-1: USB disconnect, device number 7
[   85.636914][ T5732] Bluetooth: hci1: command 0x0406 tx timeout
[   89.098248][   T43] kauditd_printk_skb: 12 callbacks suppressed
[   89.098262][   T43] audit: type=1400 audit(1791271819.507:670): avc:  denied  { write } for  pid=7984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   89.126536][   T43] audit: type=1400 audit(1791271819.527:671): avc:  denied  { write } for  pid=7987 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   89.963186][   T43] audit: type=1400 audit(1791271820.367:672): avc:  denied  { write } for  pid=7990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   89.990157][   T43] audit: type=1400 audit(1791271820.397:673): avc:  denied  { write } for  pid=7993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1