last executing test programs:

41.020043552s ago: executing program 0 (id=144):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000001cc0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
getsockname(r0, 0x0, 0x0) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x25c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xc2, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @private2, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @empty, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "447ccd4d820d1a1ad765512a1260eb787b165f22f5f4"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7f8ce04422597b5adac11ca09b76354bcd48d4983ad723"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "cb19a9d6f4a3d9522df5c0bd78ea5852399d039a5d2a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb670}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x240400c4}, 0x50)

41.012901746s ago: executing program 0 (id=146):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000a80)={0x2, 0x4, 0x10, 0x80000000, @vifc_lcl_ifindex, @loopback}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000a80)={0x2, 0x4, 0x10, 0x80000000, @vifc_lcl_ifindex, @loopback}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

40.919644699s ago: executing program 0 (id=147):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x24000004)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40084}, 0xc010)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c050)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004880}, 0x5)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_PKTS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcd72}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x48010)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000800)={@rand_addr, @broadcast, <r4=>0x0}, &(0x7f0000000840)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000880)={'gre0\x00', <r5=>0x0, 0x7800, 0x7800, 0x6, 0x7, {{0x2d, 0x4, 0x1, 0x3e, 0xb4, 0x68, 0x0, 0xf8, 0x29, 0x0, @empty, @multicast1, {[@generic={0x94, 0xd, "cbd822b3d73f3cda93f231"}, @cipso={0x86, 0x65, 0xfffffffffffffffd, [{0x0, 0x10, "a42b6d2866e9e5d482f9b28f648b"}, {0x6, 0xb, "2a6d5ff529d8429c06"}, {0x7, 0xc, "edc5684775c48a35985b"}, {0x6, 0xe, "51caf00ec637daccb0e8e234"}, {0x2, 0x2}, {0x2, 0x6, "b688433f"}, {0x6, 0x11, "b703b7288d4f9b65a7b4ed79317b20"}, {0x5, 0xa, "6380c35461e1fd2d"}, {0x6, 0x7, "aa1154cd12"}]}, @timestamp_addr={0x44, 0x2c, 0xd0, 0x1, 0x9, [{@rand_addr=0x64010101, 0x9}, {@remote, 0xd}, {@rand_addr=0x64010100, 0xc2c1}, {@private=0xa010100}, {@rand_addr=0x64010100, 0xcd1}]}]}}}}})
sendmsg$ETHTOOL_MSG_STATS_GET(r2, &(0x7f0000000e40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x428, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}]}, @ETHTOOL_A_STATS_GROUPS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x1}, @ETHTOOL_A_STATS_GROUPS={0x350, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xf3-:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "51988c8f52edf4c8bf0b00797931a476772bfd9b0059535d962646a2295d7257aeb09c3d5f647fd60da17ecb148bb96861d9c9f5968041e4f6e2b439ac398bddbd4f6d5021c058cd508b2ccd8c8f01162aaa0ce597ed807b34aa5defc501d7ef867965bfbcfeca0f4da79170ad"}, @ETHTOOL_A_BITSET_VALUE={0x88, 0x4, "a8aa29ad40f717d2b37d54059e07b1169bf0b2ab3a42bda383bf2941b9b5ab17b1108f4aa84ae275f8bf15895057cbcd6e4fc785d8be44169851de41e5ab066a51d15e66e17568b6fc5399c273c1d8b2ad83164a98583e166d5d6b3e6c51bfef4da25169806ad48b2c75ad269ddf2da933b6324e0bc96e50d55b7c20cf40eec1e3b9a32f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7c3}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\xaf+,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '][,\',[#}.\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "3e3a7febdfc6608e400eba223a7bd87b1cc1cc4e9e2697ed7ccf8191bb054ea587bd4c9f05ee8bef00c09644f92d53aebd88d3f14649372b302b7db97f79ddb1290547d9b119c13069e19491b99bdce25b954a5ea59c2918d69e26da1f19577f6433acd614250acd37badfb4af72ce950164f1cc9f7658c994811b62cc036bf0608005568a884c49d1942a5c4d2bd6a2c4ca944ea6f179a2d3024b07b62fff01a65e2801b7ded6a2e2bb90efffb73c0076feb008a77c5faa6c2e4c844f2d67b2f5a7ff4fc9bd14321c7207b92a9d16f95eb79a0c5b0ed3f1bddc11aea45a4c8f7527ec35ad49a81d61afdfe4ff"}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}]}, 0x428}, 0x1, 0x0, 0x0, 0x82}, 0x4000)
r6 = accept$unix(r2, &(0x7f0000000e80), &(0x7f0000000f00)=0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f40)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0xa}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x14)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, r9, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
statfs(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=""/139)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xc}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000)
r11 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0xfffffffffffffffc, 0x0, r11)
syz_emit_vhci(&(0x7f0000001580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x2, 0xc}, {0x4, 0x1, 0xff80, 0x0, [0x30f4, 0x7]}}}}, 0x19)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff5, 0x6a}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r8, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6005}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000045}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r8, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0xd}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4)

40.386257418s ago: executing program 0 (id=155):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400"], 0x0, 0x37}, 0x28)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x800)
ioctl(r0, 0xc138fd10, &(0x7f0000000280)="0400000000000000000000007e01")
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = epoll_create1(0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x2f, 0x2001)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000002c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000fc0)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x1d4)
write(r6, &(0x7f0000001080)='3', 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
getsockopt$MRT(r5, 0x0, 0xcf, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(r7, 0xc0045103, &(0x7f0000000e00))
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="707951f902b9b75992a223694f8f696e0e226227dd7e6144cbaa29adc89e40244c5fac831954461fa40e17ba7aed291ae95be7d5de418df274be408d1c545a27c885036f71d620248640a6835d7dbd81b3863b25bd0c3c9266b1d298aa8ab5f62cb2ddf46527af2a22c167a2811c60e1054a0f129d16d9669507df592342023d847f12ca487c3f08e1d13cf35c275224afa5499c75666436", 0x98}, {&(0x7f00000007c0)="1c7a34f0ffb7d96ee0386dc77757a4b76c67fcc2fde9481e0faaac324da5fbc44a0c1249", 0x24}, {&(0x7f0000000800)="1a71b445af10c15ccf203f6f9a315f50e8463c710dc579c9215abc23ce33b0a4769e7226d2bfd2091b53b2c086607efa6fd790fd5b9b282c0005bac90d972380103b91b9e14e7e844ee9a9ec85406a1acb6baf7ee3f4bd9f9f9fec7f3fd4d34b0085ee1fb44936be165369164c648fc0f5d0189f066e0f33052602b0e4b9bfcc1cd2", 0x82}, {&(0x7f00000008c0)="528eb332bd3b33c7a76f", 0xa}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000980)="a84d952383bd62", 0x7}, {&(0x7f00000009c0)="90d3b7cb22a31b96", 0x8}, {&(0x7f0000000a00)="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", 0x10d}, {&(0x7f0000000b40)="7e1e89d3ffc6ba9ae5a34f16b65e2d6555e5f2549e15a0a2", 0x18}, {&(0x7f0000000b80)="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", 0x210}], 0x5}}], 0x5, 0x40028d0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa0002029})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7442, 0x17)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x20, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0xc}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r8, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x800})

40.290270802s ago: executing program 0 (id=158):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880dc0008800c000780080006007a00000034000780080005"], 0x108}}, 0x0)

40.010090654s ago: executing program 0 (id=160):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000040)=""/28, 0x1c, <r0=>0x0, &(0x7f0000000100)=""/134, 0x86}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f00000000c0), 0x10, r0}, 0x94)

39.976390022s ago: executing program 32 (id=160):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000040)=""/28, 0x1c, <r0=>0x0, &(0x7f0000000100)=""/134, 0x86}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f00000000c0), 0x10, r0}, 0x94)

7.56015971s ago: executing program 3 (id=389):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115)
readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000001c0)=""/136, 0x88}, {0x0}], 0x3) (async, rerun: 64)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000280)=@x={0x94, 0x3, "7ccf9f19296c"}) (async, rerun: 64)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xe40, 0x0)

7.558485285s ago: executing program 3 (id=390):
prctl$PR_SET_SECCOMP(0x3a, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000280)={{0xf}, 0x1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r3=>0x0})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000400)=0x1, 0x4)
ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a)
connect$can_j1939(r2, &(0x7f0000000480)={0x1d, r3, 0x0, {0x0, 0xee}, 0xff}, 0x18)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000001c0)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r6, &(0x7f0000000640)='off', 0x3)
write(r5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

6.716682047s ago: executing program 3 (id=395):
syz_emit_ethernet(0x10aa, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @multicast, @void, {@ipv4={0x800, @generic={{0x27, 0x4, 0x3, 0x3, 0x109c, 0x7, 0x0, 0x4, 0xc, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0xb, [{@loopback, 0xfffffff8}, {@local, 0xff}]}, @noop, @timestamp_addr={0x44, 0x14, 0xe4, 0x1, 0x3, [{@private=0xa010102, 0x3}, {@private=0xa010100}]}, @lsrr={0x83, 0xb, 0xe, [@broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4d, 0x2, [{0x1, 0x4, "c173"}, {0x1, 0x3, "97"}, {0x0, 0x8, "dc2742847eef"}, {0x7, 0xd, "cb1337190e533b09a2fbc3"}, {0x0, 0xb, "7bae5b75a5278ceafb"}, {0x2, 0x12, "81a93ecdc027609d33a8a3c6343597da"}, {0x5, 0xe, "0147fcd3a033656df4828cbb"}]}, @generic={0x83, 0x2}]}}, "8b782ab6c850dd08b9919fcafd4f9043635b387142333ef58d1836e3e2e22209111f67f1ff18a983d9950482ebae6060d791dc64effcd0b6c5c898c3d5d3b94272176f2f27cb439e60a1e9943c03859a221d2345344f16d3dda26bb7b84749bb83b92d27a6d971a58fb8a342f6143c4a4e7bb279f3f718439e8383ddb932010473d5d67cfb1c527173b0d3a67bdd96d556798e84b0d288065d2d29ce65d955a18df4f8ebc0e3c86d2c4b65cac863aa240ebbd7202d8e067c8f82c652dcb73aba5b60308ccaf907130e857877176e53bf0e0a065ef52cab49fc2121eca18dbc73ca1496fe241be7083ea664aa87e5591a5de95cb643c625b9b89bc29495ce18d13ec6f3cbf162d1a79331f7e629995100036f2801eaed1d228a2f70230708bd8565fefc58e6449d4ad9915bc29fc14e192a4c853afec7b81e18eafc8ca3a981eb5cdb3c4eff9ca249120ae9925102ebc049e2ac9f95cc09df3a90495d2a771d9d6f3f03a89ba103d547ec92e77ec07bbbc5347480d9bcb3e3e54efb3d1bf5ca0cd9969888103a6074e647b78a8df1a82edc1dc2e95322f3833755e93afcaab4f734a2ba3749c8b566123c4468e74633a869c5c87d6d74db35446dd2f1f946c55fb27f7984329024a24f46ccb0d0190bef1ec90ff8abf142b8f9c7ea9a61e1c4ba153018aa7af242a2eeb42dfb03b5af85c64ad509aa27d23d9f7546fc14d48f1781779738de854aa4a9db80c9832a0d229c51fd0cda449eda4a8ff5271cb769a9b21cead75c609244ae752a5be5768c7f1a597fa597b404c4ab76c4046566f583b005b081c7624944341a32f85f43dde658505dc909de24a0d86d242496d51b7638749875f072d4c270da5b47adbbbb80f8a8b146dbd99790ee7dd075c9a0ca8ddb2c26739883408d78e9d0e6ec7c56a29db5fa8885e0f1253c7f0b8d5d46341a454b4deab497c0532420ea263e8145d61557e8ef86609c92097df4fdaf3002b76297ec6e57de1a6aeee7afc905359113da64f86c7c4bd4c226d32386e3d11d7ec5f4450a15fd63b668cd6e6578f8b61b34a3b4c87d03f89fd0178293d459563c7abe3595ed7294ff8805400f5fbff89dd25898c5c7e502d9276f2d5d81bee46983cddec706e258ad60c2070c956f7677b4b87adf0407aa8e65d062cbe8a2ea5694b058a4c17ebd436b0f214ceabe81536d0dbcf348ed1c02e0f7aec8c678151cac4c1c4e2cda85b8d2d0544ebee7d61ee5607582620e955ff1e0fe624f6b41217ff400988a782470224a3f703617baf4d96067243b51a15877747573906d68b27dda04f9242729033026115c8f49067dfcf2ebe3b6bd76fbe46d7e159d5b1eb41618ff83908a35e37f9c6472be2becc8ebd617c62a0ac2ffb8e925cbbfd0426baa73ed08a7dcbfba0add5db0788bfffa9c87dd992d08809a0c51076a102defebbdefdbfe9032690adb15806ada0701c002423ca30ac8a8d96c5af63956241eab1d4cdccb55eb87511ff320fe768cae033392c689b9499a52754b5d68ed5a2a8ca8cc63f4d246aa984293cb66809727b0a169b902cc94bc5cb8b20b352079d602cb04459b799391c5dd60c032f2d49ab26daa58f793cab5cf47c7f770062891883ad037d2e3f55243d41b3be3d9dbeb5b7bff9a974d8e3dcfe6e64ea5d62c9a6afa89e12f878595d672aa6cd5b76d53c003daa30ed849c80271554aa732aabf3ff29568db558b7fe6d63fb52cd059dc175dc85edb5c281a23604f112e1388b8c7f4114ab0496b983ae988cf11481572e021a5fb72e99802fc39156bbbf7aca64546ea729231ee5ba4bbf67745ec55030442a5de625e2cc57288d013309bddbf6357eeb19382243396c01c24fb6fe838f81015b8591629aeae24437a03cf940b73f7799cdb871dff021fe3b0d660a4755e2f5d94e0f7cae67bb0c526a0bfd7d4a26fd7ffa77560934462f8c16bf41917a95a63c90d807b6db8350bbd42f1d73e1d7f4c725fdaec7716914ed38cdf7da04541b5b03bda8d83b81436e62485c332800bd3a35c160ad1a8df0832396458800877b77d2a1ca38775cd2172334dcd8a000c2029cfe95d029ad2c5a3098e09c9a59f6718cbe9ebea71c7d4a20498117a5b0b5d61e95380983c6da0bf4845cd7d92275c368601ebc310af5efc5f7eb0c7efba259f209a129c33224a72fa04fe2aa33831cd284fa7e940123a0b15a10a0a1a1d42286fec9410450eed42d25c87a5aa3a6eb5dc9e4424eb80e6e7e3ccb153e26bfd1e6036d6e4b98c81f3f28fce8fa7fad512cae307b70b54264ec1035090324e0b5c251361d5c290302f00a8c097d6e5ab7a0a6f1e3a009f5832178f13c534f5372f1ff908cd8dac550934ce9fda71af45d62ca8743eec61efb7c1e60a094811a4aa82828425c64bdf9c67bcad73d4e9c5d570f0d2678a5beb3e53b23b5b4b0cbd52f6beae6865d68e546407e87ff8ab6517bd9a9e2c4961c935aa311f910476d73afbc03c2fbe8c02b87be0836df55aa6f4ae7790507f23bc469675e037781b098bbd0b96c136ba1c34b4cdd270cbca5e34776962140e886df1a5a5c43d1c39a00d22b3cf8ec07fc766dc6f7d2167e37c1d859707b87194201b555a144f99bc841efe47367f0d744ff730f83e927487677007f838d31dcef73dea9e3614d5926d6743b83eac7302cb6c3a160755d2d82c6dba52d8d35d92a461cbdd6724efc5963efd2fa3b5fb1cc354a2ffc70cd54aae904549a8b6f1d02658d9c9d912d1ea4c205d49a7775dd012c518665b6839a6a684a24d68ffd68c727f5c3e9150e3abe96c4bd08316c9831c56336dc9e4b6afd5cad2722b669d7194d0453c4605ff441dc4f2a911b4be9835561528d165d2b92713148944f543f573273e3e120378c9fe020bb849392f8756f5abeff5e8af2f9834a861920c8f572d50828157d37debf42e1dd46bfde7d32c7780ae6f6add84516bf70e9d41559521cbfeeeead92dc4446570063044261154686122d8a676f6f30b1fea0a462f6c71af76e0c02e4d9a26870b1a956cf56741f241e9c8d94c075f95b7eba27fbfad0de10e4521217315009c594f621de24bd476bd5282115e5d7a72dd42538f35e104a6205453aa77d3690ec61c2d614273c418e7a859810da7fd17046500b3cb841ed3c868f68eb74402cb9703222a9006bc72271cd667358e26f3dc6a0a83b521b634e64632fed9eddef5c4db40b813f37ac89fe416b7b5451a496c66e7fe15ae4ff73c1f311a767664a99598af0a412292dbe4ecb2e6ed3e9e6ef2dd1fd4941bc5aaa8e64a41f56c828ff256c9f8e21eac92576a014f7ee303b1c8bc01b55eb009d6a8a04073e0b4be4d2c333d5ccd584e9cab825be034d4b9f2dc0157af67e258eadd415a51c28081b116b6ac41014ba0267c48518cf8abce9df16e2fa3f46359e6980626e512ed148249877a62fe8613ea518c678805ef3386346007d3b2026629d0d1a11ccee37c79ba13c2610484d8349f5fe6c731df447007ffef4a2f3ab1aeb71dbc2e137a0e41cf431274b597f159ead0bec966e3b1bd1d70d780bc346787508f41c52dcccd23227f1f06a079755834ae520848887e243e6c913189394b539279f7e8a20266789214de45ce2873675e98886bc01cfb06f7fe988597b3a2ee1a753c9592d7aaea3f76f4e857b171f81771ca00f0cb3755021dbd676976eff1ce9e7001949ca8f55bda71c04d94061ffe7a05122d07c7d2d67029805241808cdbbe86d4a933d6c4ab263b8637bed803d9d32a09805bb42a12a9c23c992e9b23a7d41bce77ecdaeb725d6b167720dada950770036964590b90e7c8d0f8205212d83b65954d4954a48d64a42de5066bc84ca9781812c2ee9c63c55af1ce75344e14608d336258664f8b9c6ce5b2712cf39780f708357210c62d71c2d121c379ff9f0bf231df67800b0c7f8eb9cb91ab24dad2a09f23a73faa66760f54e7a42096ad8858cadbb19645416bcdd4a54d5233fbebfb048f9f196ade93c8aacaedfb3cd054263fb0c2e8930a1928298c5326ca0bf0dd7223b8ca87544afaaa0a0ee6583f4a70a4eecfc0fb3042d6d05ae33f8ed5e4552546afe6155c43d9876e9d8b433e30957c8991b15d6b867b6ba3e41c64788da5741248a1c9a2cbfad0a2fd6881e924141f7603eba681dca1a55a45c0f38da9249ab27b9ea3a87312cac780f7837bd57b51b728b1853fcd44962846bdfe95331b9a69073c30a5e4140c103df1480aa6fa3b98947304530f065b3d6f9bb19765ec85df30f558bdba3f60490c58c4f9be650af54af55a4da7d4c05735adca8b0694f72012edb46c145341bb32bb7cf67cee6f829f20f9be28d713d9bfd9c0f5934f8aa91f229d4530b6fd0f56fc0951b8190f7f9ee0e9adf0087d41bb47e60d8f1e8c23627f0504e19ae55ef4db76594cb60a3ef1dbed0773509b2380661b069152b92c6cf4fe68c2745f0aa637d108ccccf828ac2779293a88a8afe204e9dbc79c55998598a95b040b121f45d337d9b522374bbd32e14096b3518213f680f3b42405ebae58edc43e430a1c49368e92fdaab8365a70f97e1934605ecd9ff6fd81e8a8597ffa88f5684d96d8a9d298bd1b08c4cd40cce857e06a4ccae941cb1c34b07b964dbe86ad164b9f89d9924385b3346472ba1c68b529d0b78123e6edcc6ac1cf6e4e5585421577cce1aa478605f19be24175b67a181042384826fa07256f940131713c84be1919a6890d0eed2082c7b2e2106fad39b116696e3b49948948c04f828f640d5a6fc12941bbbbe6f2ffc0fdf4a36d8c85929a65770918b549faecd9b17d9c426416c83740431613a35e5b2e6ac3b2356a359719ad5cd933bc03d15c974117050df1e45396aa1fd53e02074d188118a2c2842d97664510df27b72746ef1644862b3b40be5f686b35ca635913d4abaa88309a0f9dee5bd80c73e723f0671c6fcd3d57a0a2fdea11de2792fd723a0adc660e71d4f07bf50d4b25628f1a0c6f0a6eb351b10d49326a2af03154277e82f33f624fbba6e54acd1feda94de6df115dc4dcc8f3973779a662c347bb79f820d4955286aca0129ea8dcba218b05e97da55b5f2d1d53763a6f04ae20aa2d95a5758f94c574571524bea5530c08a7e2d8682d6779125f75c7004352ef53b69a77eab1b52f30195eee8546ed86f6e10fe258d9a0d8d4559832850f31376a6e79d2775a6a3c29a1f719030ca7f3e8054e8d60f7662033a670a9662aebd61250fa782bc4f6156f260edd912c645c8f2aaf98871c835d698b8b41bb692bdec16538cb044cfa7cd6643ec68472c61d1c867fc9aa124ba4fa1944262ce0d940e04b9d8f969907c6004f8502d4eda6c3e897f7d3b3386a1984f3364e2ce7004899dbd83f504a0567a2332040b35edf14363fd5d770b87ea559d7f01cd85f1c976284414f0bdcde10285265d76fa4e3abf014f9f3a8c9fea01d8449e53666f8c2e55845b665fd3cca79e83cb7058c395f9b417a532b23a5e065fe30a768445887717b61ff401e56383093825cb4ccad14bfc104f0fc2cc72cfc11c3a6758b3888693856c55d70eae3101c7c923aab7fc6399ce0b557357384e2b2af0507248f6fa5cb15bd3b9aa87c8aa2e1ba3eef73ac2694e05e868534b73eb0e2cac4832b255983ce1d250caf1ec2e095a4f7056417b872e2d40d6862c2b316a855da28d0224b874932fe1448e2bea8761d5ae9e4ab9c788db495a38bec1996faa4d712efad100019107576bc98b1ea38462d549e278f89f11dc57b854625029c8c757dc139270beb"}}}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000340)=0x809, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000906010200000000000000000500000924000880100007800c001b400000000000000007100007800900130073797a3100000000140008801000070000032000078008000840000000100900130073797a31000000000500030003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
write$binfmt_misc(r0, &(0x7f0000000380), 0xfe46)

6.628339945s ago: executing program 3 (id=396):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32)
r0 = socket$inet(0x2, 0x2, 0x0) (rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ifreq(r0, 0x8991, 0x0)
r2 = getpid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r3, 0x8916, &(0x7f0000000300)="76657468303a30000000000000000000020000000a") (async)
ioctl(r3, 0x8914, &(0x7f0000000340)='veth0:0')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000200)='casefold,strict_encoding\x00') (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/dir\x00', 0x1ff) (async, rerun: 64)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/dir\x00', 0x10000, 0x0) (async, rerun: 32)
r4 = syz_pidfd_open(r2, 0x0) (rerun: 32)
setns(r4, 0x24020000) (async)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)) (async, rerun: 32)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9800, &(0x7f00000000c0)={0x4, 0x8}, 0x20) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, 0x920}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
mkdir(&(0x7f00000003c0)='./file1\x00', 0x8) (async, rerun: 64)
mount(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='tmpfs\x00', 0x8, &(0x7f0000000480)='usrquota') (async)
chdir(&(0x7f00000004c0)='./file1\x00')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, &(0x7f0000000540)={0x8000000000000000, 0x6, 0xfffffffe, 0x3, 0x40008, 0x6, 0x1, 0xfffffffffffffffc, 0x100fff}) (async)
open(&(0x7f00000005c0)='./file1\x00', 0x66842, 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

6.547828629s ago: executing program 3 (id=398):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000105000000080000000000cf0000000085000000000000000001000000000000010000"], 0x0, 0x42}, 0x20)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480)=0x1)
setns(0xc9, 0x0)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNADDRESOURCE(r2, 0x89ee, &(0x7f00000004c0)=0x1)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000500), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000540)={'filter\x00'}, &(0x7f00000005c0)=0x54)
getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)={'filter\x00', 0x33e, '\x00'/830}, &(0x7f0000000980)=0x362)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000009c0)={'raw\x00'}, &(0x7f0000000a40)=0x54)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x6}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000b4000000183200000500000000000000850000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xe7, &(0x7f0000000080)=""/231, 0x41000, 0x42, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xf, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r4, r5], &(0x7f0000000380)=[{0x3, 0x1, 0x10, 0x9}, {0x5, 0x1, 0x9, 0xb}, {0x4, 0x5, 0x2, 0xb}, {0x1, 0x5, 0x9, 0x7}], 0x10, 0x3}, 0x94)

6.199734511s ago: executing program 3 (id=401):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x10, &(0x7f0000000d80), 0x0, 0x0, 0x1a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000009c0), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b00)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000b40)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000bc0)={0x48, 0xb, r2, 0x0, r1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000340)="300ad69edbb843f0001541657ed4b0a3e3746ddac3f4e3", &(0x7f00000006c0)=""/223}, 0x20)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/dynamic_events\x00', 0x2, 0x0)
r7 = syz_io_uring_setup(0x3bd4, 0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000cc0)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1b}, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_sqe_flags_allowed={0x2, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1}, @ioring_restriction_sqe_flags_required={0x3, 0x1e}, @ioring_restriction_register_op={0x0, 0x5}, @ioring_restriction_sqe_flags_required={0x3, 0xe}, @ioring_restriction_register_op={0x0, 0x1b}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1e}], 0x9)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
preadv(r6, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/187, 0xbb}], 0x1, 0x2, 0x9814)
syz_emit_vhci(&(0x7f0000000f80)=ANY=[@ANYBLOB="04060306536b9480030000000690066c9d53fa2882f48ca532f8ecf4c90087ca30cc87db14fd974a52187e26b9d3d891de1bb65227c1e4fe0ed0e09892a5d8a956efb7c2a65f067c4521e0d22d1032fcdb9e624d9eacc58ff7118be37ea0ab92e347594eb13a2e34fe3f13cb694f9681a5f159d4c56602f6167bb8e05dd99ff524e1784c317efa46c5d25ce9f342"], 0x6)
mount(&(0x7f0000000e80)=@filename='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='virtiofs\x00', 0x12020, &(0x7f0000000140)='-}-\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000e00)=@assoc_value, &(0x7f0000000e40)=0x8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000ec0)={0x34, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r9, &(0x7f0000000f40)="8efefb8ba5b0b96cddb64a25604105c950e6b46a2f4b914cc74c17b0b12f8030213a17", 0x23)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r10, 0x58, &(0x7f0000000600)}, 0x10)
syz_create_resource$binfmt(&(0x7f0000000c80)='./trace\x00')
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x9)

6.133918807s ago: executing program 33 (id=401):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x10, &(0x7f0000000d80), 0x0, 0x0, 0x1a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000009c0), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b00)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000b40)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000bc0)={0x48, 0xb, r2, 0x0, r1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000340)="300ad69edbb843f0001541657ed4b0a3e3746ddac3f4e3", &(0x7f00000006c0)=""/223}, 0x20)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/dynamic_events\x00', 0x2, 0x0)
r7 = syz_io_uring_setup(0x3bd4, 0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000cc0)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1b}, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_sqe_flags_allowed={0x2, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1}, @ioring_restriction_sqe_flags_required={0x3, 0x1e}, @ioring_restriction_register_op={0x0, 0x5}, @ioring_restriction_sqe_flags_required={0x3, 0xe}, @ioring_restriction_register_op={0x0, 0x1b}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1e}], 0x9)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
preadv(r6, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/187, 0xbb}], 0x1, 0x2, 0x9814)
syz_emit_vhci(&(0x7f0000000f80)=ANY=[@ANYBLOB="04060306536b9480030000000690066c9d53fa2882f48ca532f8ecf4c90087ca30cc87db14fd974a52187e26b9d3d891de1bb65227c1e4fe0ed0e09892a5d8a956efb7c2a65f067c4521e0d22d1032fcdb9e624d9eacc58ff7118be37ea0ab92e347594eb13a2e34fe3f13cb694f9681a5f159d4c56602f6167bb8e05dd99ff524e1784c317efa46c5d25ce9f342"], 0x6)
mount(&(0x7f0000000e80)=@filename='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='virtiofs\x00', 0x12020, &(0x7f0000000140)='-}-\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000e00)=@assoc_value, &(0x7f0000000e40)=0x8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000ec0)={0x34, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r9, &(0x7f0000000f40)="8efefb8ba5b0b96cddb64a25604105c950e6b46a2f4b914cc74c17b0b12f8030213a17", 0x23)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r10, 0x58, &(0x7f0000000600)}, 0x10)
syz_create_resource$binfmt(&(0x7f0000000c80)='./trace\x00')
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x9)

4.209291972s ago: executing program 5 (id=431):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)

4.09995733s ago: executing program 5 (id=432):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setns(0xc9, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
unshare(0x8000280)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rthdr={{0x18, 0x29, 0x39, {0x21, 0x0, 0x0, 0x8}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x40}}], 0x1, 0x800)

3.729582337s ago: executing program 4 (id=438):
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
syz_usbip_server_init(0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000001406fffe8000000000000000000000000000aafe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5410ffff90e10000"], 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a20c00", "9e8ecc7cb535247672a2eff75b30ff2bb17b550800", "0002d900", "a1014200000102a0"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xc0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x10)
setresuid(0x0, 0xffffffffffffffff, 0xee01)

3.509913423s ago: executing program 1 (id=442):
openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prctl$PR_SET_SECCOMP(0x3a, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000280)={{0xf}, 0x1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r3=>0x0})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000400)=0x1, 0x4)
ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a)
connect$can_j1939(r2, &(0x7f0000000480)={0x1d, r3, 0x0, {0x0, 0xee}, 0xff}, 0x18)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000001c0)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r6, &(0x7f0000000640)='off', 0x3)
write(r5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

3.239702432s ago: executing program 5 (id=443):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x182)
pipe2(&(0x7f0000000100)={0x0, <r0=>0x0}, 0x0)
syz_io_uring_setup(0x4a72, &(0x7f0000000180)={0x0, 0x975d, 0x10000, 0x2, 0x36a, 0x0, r0}, 0x0, &(0x7f0000001880), 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82c03, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56)
sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x2, r6, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
syz_emit_ethernet(0x349, &(0x7f0000000940)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "91676d", 0x313, 0x6, 0xff, @private1, @mcast1, {[@fragment={0x87, 0x0, 0x40, 0x1, 0x0, 0x8, 0x67}, @hopopts={0x6c, 0x14, '\x00', [@pad1, @generic={0x0, 0x39, "d7b2c06ab431af8d6c2c0972e75de2108250182eefca991b2b053b08908ae6ea9dc3c914bb97f257daa32839102c55a5c1aa298930c85e6ee6"}, @generic={0x0, 0x5d, "f2136a80f0552eacbe965940f7cd3e764532c3e0f2a31c6e7986e4929b07ab12e1cd9b9c563f5883737c99dcfc36289adce1431ebbfb5876b6a174bea663e0d54c0e37e145c2b1b28dfc233de7b26c95985064abaecd6093800e98986c"}, @enc_lim={0x4, 0x1, 0x14}]}, @routing={0x2b, 0xa, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}, @hopopts={0x2b, 0x2c, '\x00', [@pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}, @generic={0x9a, 0xd5, "c20829abf525f4e0a3e008e82342bcf3a51be6db8a238dc108d990e59d68f1811de435d9a0435588c70c69f2f9f19de6410209d172810570e093069092672127ca8a2b1e9d9a5b98eadcc5ba435834b674eb04e242849b353ac0d712fca82cd8fecb754a59083ac7e42d81e1d3ff9ef50e6ae5a54a8abb4d960e12ebc804ae8cccb7183c2ebf7287e86b6a048c34ec6527769d6b9d1c59c0818154ec12b9a8d38376e198adb2599773af319aa8bf1ed45dbe9ae45704b91bd783ff2ddd55340e2ef41fada49a6cbd98c76020b6ee8da72e2c6ac1c9"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x81, 0x9d73, [0x0, 0xf, 0x1, 0x6, 0x2c590b1d, 0x9, 0x3, 0x4]}}]}, @srh={0x89, 0x4, 0x4, 0x2, 0xf, 0x40, 0x7, [@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback]}], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x206, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x11a0}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @eol]}}, {"cd6e48b4d5a2368c8e8a4a73d2a19084d4e002f123671d7d3244fc2f93a99aa90f768aa4f5fd21e997053aac9c1dbce0afc6c323f60bb0befd31875b546b87e8d924b85c80ec9b814e3ec91384a425"}}}}}}}, 0x0)
r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x14, 0x40080)
ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205647, &(0x7f00000000c0)={0x9e0000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @irqchip={0x572, 0x7fffffff}}]})
setns(0xc9, 0x0)
r13 = socket(0x8, 0x5, 0x5)
ioctl$sock_TIOCINQ(r13, 0x400461f1, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)

3.109862149s ago: executing program 4 (id=444):
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000100))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000180))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000240))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000002c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000300))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000340))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000380))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000003c0))
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0x40101, 0x0)
openat$incfs(r0, &(0x7f0000000440)='.log\x00', 0x0, 0x101)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000480))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000004c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000500))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000540))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000580))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000005c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000600))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000640))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000680))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000006c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000700))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0)

3.107035909s ago: executing program 4 (id=445):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x2) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2004000)

2.929673643s ago: executing program 4 (id=447):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x900, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000540)=0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000580))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "55667788"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}]}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x32, 0x6, "cd795b930a9b1c423b44296efb528e1d7eb9779bc6dc3fc537127d30b690e24c02405ae13e08419784c9eda84fe4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x168}}, 0x800)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0)

2.678581267s ago: executing program 1 (id=448):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffff314f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800051200000000000000001c140000fe0000010000000008000100000101"], 0x2c}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x1)
write(r4, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

2.490084895s ago: executing program 1 (id=449):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x20040)
mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x2000002, 0x10, r0, 0xe180d000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)={0x114, 0x2f, 0x1, 0x400, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x6, 0xe9, 0x0, 0x0, @str='\xff\xff'}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0xbf2fc3beeb87d909, "811c9feced5e9a50dc51534f9f79149464446cb095358747f9e59106ca8ea155", 0xa, 0x4, 0x5, 0xfffffffffbffffff, 0x95a1, 0x7, 0x3, 0x0, [0x8, 0x1ff, 0x1, 0x10000]})

2.48984345s ago: executing program 1 (id=450):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x80000000200)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.379750475s ago: executing program 1 (id=451):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x2, 0x7e, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0)
ioctl$CDROMRESUME(r5, 0x5302)
sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x5, 0x0, 0x0, 0xc8, 0x5, 0x800}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x20000010)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x4}}, 0x18)
bind$bt_hci(r0, &(0x7f0000000280), 0x6)
fchmod(r0, 0x98)

2.299489807s ago: executing program 1 (id=452):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x102)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2, 0x0) (async)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@ipv6_newroute={0x28, 0x18, 0xffffffffffffffff, 0x70bd2c, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x900}, [@RTA_MARK={0x8, 0x10, 0x18b}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async)
migrate_pages(0x0, 0x5, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x272) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000580)='./dev\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) (async)
chdir(&(0x7f0000000640)='./mnt\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c80), r5)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r7, 0xb344d34fde71f723, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44004818) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x80000, 0x106)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0185879, &(0x7f00000006c0)={@desc={0x1, 0x0, @desc3}})
syz_usb_control_io$uac3(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x40, 0x5, 0xbe, {0xbe, 0xc, "96407bee6c17401598bf58e38bc52c41a2b881e6e7c74c09c006e8375c13caa0a3de0e52680fdb6a17b743f40018f1bb6011be00bc2090a53072f4f71dc83873865f64972de87e9d83b9419a1a2b4a667f0ceb702b1eb618e0104901c63e952932f4259be5e0dcfa16fccf7ece6697a8413566532a6a8f72656a1d8063498ba9134f78bb9de67912c6b4905d9a59636cdd933fd7df4966562f64f145cb6d7a6ce4de2a77d91d4732c4897766679aa8d8c64f11ddc6af38983ae93d9b"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x20, 0xf, 0x9f, "b10ae8b63f1cc08ba78790a5c139ac45118ea52589571a5b0030d9166b7812e29f53688b40d62f644609cac4367f685be2c2ed2b6f588678f4335bc1b05bf968a877a8b9e185800e4de08bf0a28708db31571a541c8eae15b784cecd360b604e8d8b45849cb7bb92f0e732e894773089b2a5f51819abd3803ae32a8d381873304a63314770d699a1ee9e0113c07535ebef1cf655cd34ab152689038ab1e4ba"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x81, 0x3, "b3fd90"}, &(0x7f0000000880)={0x20, 0x82, 0x2, '3p'}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "f473"}, &(0x7f0000000900)={0x20, 0x84, 0x4, "ab2ffbf5"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "369050"}})

2.069578813s ago: executing program 4 (id=454):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000140))
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0xffffffff, 0x8, 0x800000, 0x0, 0xffff8001, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x6, 0xfffff5db, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0xd, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7fe], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0xa877, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0x200, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x66, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="e0", 0x1}], 0x1}, 0xc000)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23cf0d8e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4109, 0x100d}, {&(0x7f00000019c0)=""/4108, 0x100c}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000740)=@framed={{}, [@generic={0x15, 0x8, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UI_DEV_CREATE(r0, 0x5501)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0xf, 0x32c30327, 0x9, 0x3}})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000040))
close(0x3)

1.990977856s ago: executing program 5 (id=456):
openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prctl$PR_SET_SECCOMP(0x3a, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000280)={{0xf}, 0x1})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r3=>0x0})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000400)=0x1, 0x4)
ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a)
connect$can_j1939(r2, &(0x7f0000000480)={0x1d, r3, 0x0, {0x0, 0xee}, 0xff}, 0x18)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000001c0)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r6, &(0x7f0000000640)='off', 0x3)
write(r5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

1.345591195s ago: executing program 2 (id=458):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f00000004c0), 0x1}) (async)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f00000004c0), 0x1})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_emit_ethernet(0x13e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x108, 0x0, 0xff, @private2, @local, {[@dstopts={0x3c, 0x20, '\x00', [@generic={0x5, 0xfe, "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"}]}]}}}}}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000400)='./file0\x00', 0x126)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r3, 0x25, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x2})
preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000001580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000001540), 0x2, 0x0)

1.344177517s ago: executing program 2 (id=459):
r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x3, 0x40002)
ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000340)={0x0, 0x1, @value=0x1011})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x42, 0xb1, 0xd5, 0x40, 0xbda, 0x184, 0x6f98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0xc, 0x40, 0x7, "", [{{0x9, 0x4, 0xd, 0x7, 0x1, 0x7f, 0xa2, 0x25, 0x6, [], [{{0x9, 0x5, 0xa, 0x1, 0x20, 0xb, 0x4, 0xf0}}]}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x6, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x4, 0x80, 0x9a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x5, 0xfd}, {0x6, 0x24, 0x1a, 0xd00, 0x16}, [@call_mgmt={0x5, 0x24, 0x1, 0x7, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x26, 0xfff}, @dmm={0x7, 0x24, 0x14, 0x3, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xe, 0xe, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4b}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa9, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x69, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x24, 0xb}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x9, 0x9, 0x0, 0xff, 0x1}, 0xa4, &(0x7f0000000100)={0x5, 0xf, 0xa4, 0x2, [@ptm_cap={0x3}, @generic={0x9c, 0x10, 0x3, "4254811ae5273246fc10ed3607ca23c8d95bdb37c4c8baa22a2c674dfb8861e4e9751bd6922d6c8928a5670c34447aeb591f108129c2ea5a4bc226e6b8a2c4a128c6ba48bdc0f0905576d52bcdf9ab747fe67e436c802ee1c86ac3f993eb03a6189bb44875e58ecad8b4d573c4b9460813be4f568fdf3df90960ea8e7af83452e471130d6cb06d15f9db9db44cff8b89d94f9c12a91c0012dc"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x408}}, {0x7b, &(0x7f0000000200)=@string={0x7b, 0x3, "f83d8d7873f0c20e2d05bf996817f1fd4b848de87b8ef25848b1eca55bf9dd895351404d007023c57b2472d54269d45fa029737656889045b62017fb4130726ef3eb400d57a49cf9c51a057caa49daf7f948031ad6048afd938614eac3c39267c01f88081a93f72d751702cf54680e178ac7aae9a6cf46b160"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}]})

1.217909816s ago: executing program 4 (id=460):
r0 = socket$inet(0x2, 0x0, 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x30)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1.130950147s ago: executing program 5 (id=461):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00')
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/206, 0xce}], 0x2, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0x5})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
getpid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000200)={r3, 0x3, r2, 0x0, 0x80000})
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000340)=0x809, 0x4)
write$binfmt_misc(r0, &(0x7f0000000380), 0xfe46)

209.731475ms ago: executing program 5 (id=462):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d4ffffff00000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800400b703000085bb23318500000083000000bf09000000000000550901000000000095000000000000000709000004000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) (async)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001200)={{<r3=>r1, &(0x7f0000000740)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x4080, &(0x7f0000000780)={@align=0x1, {0x9, 0x9, 0x2, 0x6}}, 0x28, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x1}, 0x7, &(0x7f0000001100)=[{0x1, 0x0, &(0x7f0000000a00)='tls', &(0x7f0000000a40)="2ad0117996dc0fc03cc60ffc3a5bcc735d787d4fcafc9cd674f66190403fe388d0b4126a68ba4c0631f591eb0cfe43897274abc9ea4bd6ff84a9553a93e62ca8de38365dd3b5b3fb8b2ed7b7b84382f16a14005e5e1d5602d563c7b1e0171f4aab09f33aaa034420b052", 0x6a, 0x2}, {0x0, 0x3, &(0x7f0000000ac0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f0000000b00)="c15f9ad093423cdce3a961f91678c5544785b06c91bafd03901f5479d04de8fb954c3b0ac3180c25cd6733cb7cf9a1bdc0f49359d8ed863f51f135a42e1d63451e145bbd477000820376ccd52b2e6acdd51c024f383411c540dd14950c9b154d1f81c533bf59719440667e069cd582f8a7a96a146b628a80c26032c9cafdc915f9eb94537db169a9da058adb8860114c9ad1908eef9b3c8da0620e580e2300d0ba87bdc84c62f90d", 0xa8, 0x8}, {0x2, 0x6, &(0x7f0000000bc0)='[))%\x00', &(0x7f0000000c00)="c1c531cb446850f724829835ba17965dd9b4a883be0cf47cdd0927688b1612cd16d1575c8e82c1eea787ce77228e47cba2f8bf61d538fa332565e0d401ce7b7b1533895cb10dd3baa7337dfe4722f6d579be0f570f044c6999e3880950dfa60979a4fdc120d92cea2c2defb528ef8feb95397f7e06fa44bef6a58de8b975699c8ca9b6103eabbd530e730c14b31649674219d94d93d0e5871153b4009f59881eec1c3fc5055db4c6bbe01cac793a63b80b8a38a90f3d4c9225a982dfbfd72f5d755a3bf7273d0ad5d561487a25595bf696147c789559832b644d6f3e7b8cfd1fa1a4b6146e748b194aff476f51af9d", 0xef, 0x20}, {0x3, 0x9c94, &(0x7f0000000d00)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f0000000d40)="5cbf60290f", 0x5, 0x30}, {0x1, 0x5b1, &(0x7f0000000d80)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f0000000dc0)="6a5648d7a1b1335c45c693cbcae53f23a96946757a4566600989e15b620e4d8d5f26dc805853a92e720ae33edc0322dd667a7464e0046796faff9683a0deca434d396032e2c995997d9f2f5998b691f71532188ce2e123dfac759d146965146d0ddda7f652254aec7ad2630b9539cf960320925a578cae0b70b8955246b05b071c27709247898573bd032509de0a521a3cdcb8ac5e6eae668fe02644a050f4e9bc06c29559defa0de152a3c4c45000804fbe76b09ec3607fb84c20098ad939ccc57a2eaa21317bd10f057873a2c2f444527d4a6aa6c0a9acc6cfa0777db026e871529f79dc21", 0xe6, 0x18}, {0x1, 0x3000000, &(0x7f0000000ec0)='-()\\\x00', &(0x7f0000000f00)="31538690e5c31a3e73dd310852b23017d7bab90d4945f1908631f7d6bff289825872476599bb6fc8a7fd84c155fb52d8298cbd1c72cb17009407f714ac3b5e8371ce1099926c54ff9ecccce45a4489d7b0752f1d57a053003863d030accc9192c23c72de4abd4416ff7ddcc204f2c4fd6ac7d4b0e003f6522248ea176477ce8be398afc300fd701c0bfd9cf7d35b7422894bd5a3b581ef18ffce8adf9f44bdaad5cf46b955783fb492622dbcb37a1f43c505c76b7723115579c71b1ae5a4ee0dab4c52116f6396abfb6f73365e98e27515517cf6c870362aef1c695b666a349103fdd0ecf3ad474e836367312f3b9f5261", 0xf1, 0x32}, {0x1, 0x4, &(0x7f0000001000)='!%]\x00', &(0x7f0000001040)="6883d1e8cdbb73b534c971f2e3e30bf523e8c90a45edc20d66aaa22ecff003466a5931e0061c8e1da30ecce1c5dc118c7ada6d581e351cb9e57f1b9df9b849d557f275fb566527c7b3b3970c84d114b8e03dca662aac631532a007b62b841d77f9c9137540a4211d962159ccc5131c8334036bc9c3da15e2f449ac1cd0dea5666f30488972a6bf80b8c31b6ca6d513496f8b7d965058da10f0862b4dd67ce9d1fb1be8a07a", 0xa5}]})
getsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000001280), &(0x7f00000012c0)=0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x28)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000003c0)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) (async)
setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000400), 0x44) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) (async)
r8 = socket(0x1e, 0x1, 0x0)
connect$tipc(r8, &(0x7f0000000640)=@id, 0x10) (async)
shutdown(r8, 0x2) (async)
r9 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x10200000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x13, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2004, 0x408000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2012, 0x30000, 0x0, 0xffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x140})
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
setfsgid(0xee01) (async)
setresgid(0x0, 0x0, 0x0)
r10 = memfd_secret(0x0)
r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x21, &(0x7f0000000800)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async)
copy_file_range(r10, 0x0, r11, 0x0, 0x3b, 0x0)
write(r4, &(0x7f0000000040)='+b', 0x2)
bind$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)

209.497044ms ago: executing program 2 (id=463):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002)
setns(0xc9, 0x0)
r2 = socket(0x2a, 0x2, 0x5)
connect$inet6(r2, &(0x7f0000000100)={0x2a, 0x4e20, 0x8, @private1, 0x200}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x1fff)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x6, 0x4000, 0x1000, &(0x7f0000ff2000/0x1000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000380)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x5, 0x2, 0x0, 0x802, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0x200000000000d, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x1, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x7, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x4, 0x3000000003, 0x2, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x44, 0x0, 0x7, 0xe, 0x1000003]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
pwrite64(0xffffffffffffffff, &(0x7f0000000880)='2', 0x4, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f0000000980)}, 0x10)
r5 = io_uring_setup(0x899, &(0x7f0000000a00)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

79.511657ms ago: executing program 2 (id=464):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r6, 0x5)
sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendto$unix(r0, &(0x7f0000000340)="61ac20", 0x3, 0x804, 0x0, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x40000100, 0x1})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)

78.520594ms ago: executing program 2 (id=465):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x4, "7386184a8e7040746dd3897a19be2281d9"}, 0x13, 0x1)

0s ago: executing program 2 (id=466):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0))
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e)
setns(0xc9, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/unix\x00')
read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r4, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000080)=0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl(r6, 0x15b0cb27, &(0x7f00000005c0)="714517573fd10123860e9cdf860860ce49932117e7d3699f3c78e97f8a2be27fd64843766d00b020fb013b2c81b95a2f61261f7c456354d454e0705361144de5382f4c97c6470a1ef01f421e3297075984c8de7a76578eee5264d646daac7b3c1d0aeb4a888d83f729d64141176fbaaf4af53e02304596761bb9b89f050d89daf2fc57f13669e2af94198acc908b0ca796fe78fd20c0f059326705332a61026a56ea4d4f84149a4df6f0bbb4c5b32eb73a35b53c4da941de774469c5be8bfb802c60fd5c7f4db327b0bef11e69371e68d7151501")
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1031}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x505}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r7 = socket(0x11, 0x3, 0x300)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'hsr0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000300)="01154e000100001122334455892f", 0xe, 0x44011, &(0x7f0000000340)={0x11, 0xd, r8, 0x0, 0x0, 0x0}, 0x14)
symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0\x00')
mkdir(&(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
bind$inet6(r7, &(0x7f0000000380)={0xa, 0x4e22, 0xa60, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)

kernel console output (not intermixed with test programs):

ave_1
[   48.833338][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.833351][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.889581][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.892846][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.900051][ T5776] hsr_slave_0: entered promiscuous mode
[   48.900826][ T5776] hsr_slave_1: entered promiscuous mode
[   48.901347][ T5776] debugfs: 'hsr0' already exists in 'hsr'
[   48.901364][ T5776] Cannot create hsr debugfs directory
[   48.901713][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.905828][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.913770][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.919623][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.920013][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.922941][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.049358][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.101034][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   49.114751][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.114840][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.130289][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.136245][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.137234][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.140197][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.141752][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.141832][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.149631][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.153359][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.159542][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.164603][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.169917][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.200944][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.205187][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   49.222765][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.222842][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.227684][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.227727][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.252992][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   49.270860][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.270937][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.285009][ T5785] Bluetooth: hci3: command tx timeout
[   49.285125][ T5785] Bluetooth: hci1: command tx timeout
[   49.285168][ T5785] Bluetooth: hci2: command tx timeout
[   49.285211][ T5785] Bluetooth: hci0: command tx timeout
[   49.289404][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.289480][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.377703][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.400096][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   49.407461][  T116] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.407546][  T116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.427345][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.427390][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.572589][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.574750][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.612813][ T5786] veth0_vlan: entered promiscuous mode
[   49.623176][ T5778] veth0_vlan: entered promiscuous mode
[   49.623618][ T5786] veth1_vlan: entered promiscuous mode
[   49.628435][ T5778] veth1_vlan: entered promiscuous mode
[   49.645600][ T5786] veth0_macvtap: entered promiscuous mode
[   49.647438][ T5786] veth1_macvtap: entered promiscuous mode
[   49.654547][ T5778] veth0_macvtap: entered promiscuous mode
[   49.657648][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.659426][ T5778] veth1_macvtap: entered promiscuous mode
[   49.662744][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.681441][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.690351][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.698916][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.713130][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.724455][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.733486][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.733504][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.754264][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.785474][  T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.785487][  T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.788574][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.788587][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.798731][ T5777] veth0_vlan: entered promiscuous mode
[   49.820087][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.820099][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.824052][ T5777] veth1_vlan: entered promiscuous mode
[   49.824945][ T5776] veth0_vlan: entered promiscuous mode
[   49.828002][ T5776] veth1_vlan: entered promiscuous mode
[   49.834210][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.834252][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.834271][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.834288][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.834306][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.834323][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.841909][ T5776] veth0_macvtap: entered promiscuous mode
[   49.845994][ T5776] veth1_macvtap: entered promiscuous mode
[   49.860195][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.862582][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.886934][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.887077][ T5777] veth0_macvtap: entered promiscuous mode
[   49.889284][ T5777] veth1_macvtap: entered promiscuous mode
[   49.930490][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.933120][  T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.933131][  T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.959311][  T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.959324][  T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.960140][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.005829][ T5947] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   50.011425][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.011437][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.027128][  T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.027141][  T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.045636][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.045784][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.046778][ T5950] Zero length message leads to an empty skb
[   50.154040][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.156086][ T5957] batman_adv: Routing algorithm '' is not supported
[   50.165013][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.166562][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.166683][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.167037][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.175498][ T5959] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   50.184666][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.203703][ T5960] rxe_eth0 speed is unknown, defaulting to 1000
[   50.261933][ T5961] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[   51.021067][ T5970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62736 sclass=netlink_route_socket pid=5970 comm=syz.0.8
[   51.059690][ T5972] ip_tables: iptables: counters copy to user failed while replacing table
[   51.083842][ T5972] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   51.088569][   T63] Bluetooth: hci4: Frame reassembly failed (-84)
[   51.160746][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   51.200427][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   51.283478][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=5994 comm=syz.1.14
[   51.283838][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5994 comm=syz.1.14
[   51.291164][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   51.312160][ T1296] IPVS: starting estimator thread 0...
[   51.365202][ T5782] Bluetooth: hci2: command tx timeout
[   51.365228][ T5782] Bluetooth: hci3: command tx timeout
[   51.365246][ T5782] Bluetooth: hci0: command tx timeout
[   51.365264][ T5782] Bluetooth: hci1: command tx timeout
[   51.375448][ T5999] FAULT_INJECTION: forcing a failure.
[   51.375448][ T5999] name failslab, interval 1, probability 0, space 0, times 0
[   51.375476][ T5999] CPU: 3 UID: 0 PID: 5999 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) 
[   51.375496][ T5999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   51.375522][ T5999] Call Trace:
[   51.375528][ T5999]  <TASK>
[   51.375536][ T5999]  dump_stack_lvl+0x100/0x190
[   51.375568][ T5999]  should_fail_ex.cold+0x5/0xa
[   51.375595][ T5999]  should_failslab+0xc2/0x120
[   51.375620][ T5999]  kmem_cache_alloc_noprof+0x92/0x6a0
[   51.375643][ T5999]  ? do_getname+0x35/0x390
[   51.375665][ T5999]  do_getname+0x35/0x390
[   51.375687][ T5999]  do_sys_openat2+0xc3/0x1d0
[   51.375717][ T5999]  ? __pfx_do_sys_openat2+0x10/0x10
[   51.375746][ T5999]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   51.375778][ T5999]  __x64_sys_openat+0x12d/0x210
[   51.375808][ T5999]  ? __pfx___x64_sys_openat+0x10/0x10
[   51.375847][ T5999]  do_syscall_64+0x123/0x790
[   51.375872][ T5999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.375891][ T5999] RIP: 0033:0x7f08c699f559
[   51.375906][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.375923][ T5999] RSP: 002b:00007f08c783b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   51.375941][ T5999] RAX: ffffffffffffffda RBX: 00007f08c6c25fa0 RCX: 00007f08c699f559
[   51.375953][ T5999] RDX: 0000000000000800 RSI: 0000200000000800 RDI: ffffffffffffff9c
[   51.375965][ T5999] RBP: 00007f08c6a36b20 R08: 0000000000000000 R09: 0000000000000000
[   51.375975][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.375985][ T5999] R13: 00007f08c6c26038 R14: 00007f08c6c25fa0 R15: 00007fff0ad15368
[   51.376011][ T5999]  </TASK>
[   51.378586][ T5999] netlink: 25 bytes leftover after parsing attributes in process `syz.2.17'.
[   51.381994][ T5999] eql: entered promiscuous mode
[   51.388040][ T5999] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.17'.
[   51.395472][ T5999] 0�X��D��: renamed from eql
[   51.399304][ T5999] 0�X��D��: remember to turn off Van-Jacobson compression on your slave devices
[   51.399332][ T5999] 0�X��D��: left promiscuous mode
[   51.399344][ T5999] 0�X��D��: entered allmulticast mode
[   51.404941][ T5997] IPVS: using max 43 ests per chain, 103200 per kthread
[   51.479419][ T6010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20'.
[   51.483322][ T6008] jffs2: notice: (6008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   51.533456][ T6016] ip6t_rt: unknown flags B
[   51.695100][ T6032] qnx6: wrong signature (magic) in superblock #1.
[   51.738284][ T6032] No such timeout policy "syz1"
[   51.929625][ T6042] i2c i2c-0: new_device: Missing parameters
[   51.966226][   T42] kauditd_printk_skb: 93 callbacks suppressed
[   51.966242][   T42] audit: type=1400 audit(1792849772.094:257): avc:  denied  { block_suspend } for  pid=6043 comm="syz.2.28" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.966338][   T42] audit: type=1400 audit(1792849772.094:258): avc:  denied  { create } for  pid=6043 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   52.163275][   T42] audit: type=1400 audit(1792849772.284:259): avc:  denied  { bind } for  pid=6050 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.163525][   T42] audit: type=1400 audit(1792849772.284:260): avc:  denied  { write } for  pid=6050 comm="syz.1.30" path="socket:[10071]" dev="sockfs" ino=10071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.163781][ T6051] Bluetooth: MGMT ver 1.23
[   52.171307][ T6051] evm: overlay not supported
[   52.846749][   T42] audit: type=1400 audit(1792849772.974:261): avc:  denied  { create } for  pid=6058 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   52.848820][   T42] audit: type=1400 audit(1792849772.974:262): avc:  denied  { read write } for  pid=6058 comm="syz.2.32" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   52.849078][   T42] audit: type=1400 audit(1792849772.974:263): avc:  denied  { open } for  pid=6058 comm="syz.2.32" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   52.849602][   T42] audit: type=1400 audit(1792849772.974:264): avc:  denied  { ioctl } for  pid=6058 comm="syz.2.32" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   52.863049][   T42] audit: type=1400 audit(1792849772.984:265): avc:  denied  { create } for  pid=6058 comm="syz.2.32" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   52.863090][   T42] audit: type=1400 audit(1792849772.984:266): avc:  denied  { read write } for  pid=6058 comm="syz.2.32" name="dm0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   52.929854][ T6066] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   52.934086][ T6068] overlayfs: failed to resolve './bus': -2
[   52.936420][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.34'.
[   53.091859][ T6072] veth1_macvtap: left promiscuous mode
[   53.134206][ T5782] Bluetooth: hci4: command 0x1003 tx timeout
[   53.136481][ T5138] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   53.454281][ T5138] Bluetooth: hci1: command tx timeout
[   53.454626][ T5782] Bluetooth: hci0: command tx timeout
[   53.454669][ T5782] Bluetooth: hci2: command tx timeout
[   53.454669][   T67] Bluetooth: hci3: command tx timeout
[   54.097749][ T5138] Bluetooth: Unknown BR/EDR signaling command 0x11
[   54.097768][ T5138] Bluetooth: Wrong link type (-22)
[   54.152479][ T6085] netlink: 'syz.2.38': attribute type 49 has an invalid length.
[   54.160496][ T6085] bond0: (slave bond_slave_0): Releasing backup interface
[   54.218350][ T6085] bond_slave_0: entered promiscuous mode
[   54.218370][ T6085] bond_slave_0: entered allmulticast mode
[   54.244823][ T5785] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[   54.589760][ T6019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   54.699500][ T6099] syzkaller1: entered promiscuous mode
[   54.699513][ T6099] syzkaller1: entered allmulticast mode
[   54.913855][ T6115] FAULT_INJECTION: forcing a failure.
[   54.913855][ T6115] name failslab, interval 1, probability 0, space 0, times 0
[   54.913875][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(full) 
[   54.913887][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   54.913893][ T6115] Call Trace:
[   54.913910][ T6115]  <TASK>
[   54.913915][ T6115]  dump_stack_lvl+0x100/0x190
[   54.913970][ T6115]  should_fail_ex.cold+0x5/0xa
[   54.913987][ T6115]  should_failslab+0xc2/0x120
[   54.914004][ T6115]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   54.914017][ T6115]  ? selinux_socket_create+0xe7/0x590
[   54.914036][ T6115]  ? sock_alloc_inode+0x26/0x2c0
[   54.914062][ T6115]  ? __pfx_sock_alloc_inode+0x10/0x10
[   54.914078][ T6115]  sock_alloc_inode+0x26/0x2c0
[   54.914093][ T6115]  ? __pfx_sock_alloc_inode+0x10/0x10
[   54.914108][ T6115]  alloc_inode+0x68/0x250
[   54.914121][ T6115]  sock_alloc+0x42/0x240
[   54.914138][ T6115]  __sock_create+0xc2/0x860
[   54.914152][ T6115]  inet_ctl_sock_create+0x94/0x230
[   54.914182][ T6115]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[   54.914198][ T6115]  ? ndisc_net_init+0x148/0x3e0
[   54.914211][ T6115]  ? __pfx_ndisc_net_init+0x10/0x10
[   54.914228][ T6115]  igmp6_net_init+0x1b2/0x430
[   54.914242][ T6115]  ? __pfx_igmp6_net_init+0x10/0x10
[   54.914255][ T6115]  ops_init+0x1e2/0x5f0
[   54.914273][ T6115]  setup_net+0x118/0x3a0
[   54.914289][ T6115]  ? __pfx_setup_net+0x10/0x10
[   54.914307][ T6115]  ? bpf_lsm_namespace_init+0x9/0x10
[   54.914325][ T6115]  copy_net_ns+0x340/0x7a0
[   54.914342][ T6115]  create_new_namespaces+0x3ea/0xac0
[   54.914360][ T6115]  unshare_nsproxy_namespaces+0xf6/0x210
[   54.914374][ T6115]  ksys_unshare+0x44f/0x980
[   54.914387][ T6115]  ? __pfx_ksys_unshare+0x10/0x10
[   54.914406][ T6115]  __x64_sys_unshare+0x31/0x40
[   54.914417][ T6115]  do_syscall_64+0x123/0x790
[   54.914434][ T6115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.914445][ T6115] RIP: 0033:0x7ffa87b9f559
[   54.914455][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.914465][ T6115] RSP: 002b:00007ffa889d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   54.914476][ T6115] RAX: ffffffffffffffda RBX: 00007ffa87e25fa0 RCX: 00007ffa87b9f559
[   54.914483][ T6115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   54.914489][ T6115] RBP: 00007ffa87c36b20 R08: 0000000000000000 R09: 0000000000000000
[   54.914495][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.914501][ T6115] R13: 00007ffa87e26038 R14: 00007ffa87e25fa0 R15: 00007fff13fe0988
[   54.914516][ T6115]  </TASK>
[   54.919680][ T6115] socket: no more sockets
[   54.919720][ T6115] Failed to initialize the IGMP6 autojoin socket (err -23)
[   54.970352][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[   55.051836][ T6120] ieee802154 phy0 wpan0: encryption failed: -22
[   55.142433][ T6118] syzkaller0: entered promiscuous mode
[   55.142453][ T6118] syzkaller0: entered allmulticast mode
[   55.143687][ T6118] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   55.171445][ T6134] overlayfs: failed to resolve './bus': -2
[   55.185312][ T6126] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   55.199614][ T6137] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.209920][ T6137] bond1: Removing last ns target with arp_interval on
[   55.321738][ T6150] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   55.332013][ T6150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.56'.
[   55.414439][ T6154] fuse: Bad value for 'fd'
[   55.524044][ T5785] Bluetooth: hci3: command tx timeout
[   55.534411][ T5785] Bluetooth: hci2: command tx timeout
[   55.534432][ T5785] Bluetooth: hci1: command 0x0419 tx timeout
[   56.085815][ T6142] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   56.085944][ T6142] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   56.090630][ T6142] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   56.092900][ T6142] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   56.092955][ T6142] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   56.096632][ T6142] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   56.104083][ T6142] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   56.104134][ T6142] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   56.109646][ T6142] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   56.114940][ T6142] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   56.114995][ T6142] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   56.117451][ T6142] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   56.188669][ T6175] netlink: 'syz.3.59': attribute type 12 has an invalid length.
[   56.189324][ T6179] syzkaller0: entered promiscuous mode
[   56.189339][ T6179] syzkaller0: entered allmulticast mode
[   56.190746][ T6178] tipc: Started in network mode
[   56.190768][ T6178] tipc: Node identity 6a64f7e53a2f, cluster identity 4711
[   56.191325][ T6178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.200353][ T6171] tipc: Resetting bearer <eth:syzkaller0>
[   56.258388][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.258781][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.259029][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.259276][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.259541][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.259880][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.260126][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.260374][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.260615][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.260935][ T6184] ip_tables: iptables: counters copy to user failed while replacing table
[   56.289752][ T6189] fuseblk: block size(7168) > page size(4096) not supported by filesystem
[   56.307082][ T6189] process 'syz.0.63' launched './file1' with NULL argv: empty string added
[   56.351575][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'.
[   56.360340][ T6196] vlan0: entered promiscuous mode
[   56.360356][ T6196] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[   56.551986][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[   56.561232][ T6168] tipc: Disabling bearer <eth:syzkaller0>
[   56.773101][ T6232] --map-set only usable from mangle table
[   56.883188][ T6235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'.
[   57.026866][ T6251] netlink: 'syz.2.77': attribute type 10 has an invalid length.
[   57.027106][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.027970][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.032700][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.032756][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.032883][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.032930][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.035742][ T6251] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   57.085992][   T42] kauditd_printk_skb: 75 callbacks suppressed
[   57.086010][   T42] audit: type=1400 audit(1792849777.214:342): avc:  denied  { bind } for  pid=6252 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.086649][   T42] audit: type=1400 audit(1792849777.214:343): avc:  denied  { listen } for  pid=6252 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.088757][   T42] audit: type=1400 audit(1792849777.214:344): avc:  denied  { connect } for  pid=6252 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.089068][   T42] audit: type=1400 audit(1792849777.214:345): avc:  denied  { write } for  pid=6252 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.089357][   T42] audit: type=1400 audit(1792849777.214:346): avc:  denied  { accept } for  pid=6252 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.093380][   T42] audit: type=1400 audit(1792849777.214:347): avc:  denied  { read } for  pid=6252 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.171150][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.79'.
[   57.175450][ T6260] netlink: 'syz.3.79': attribute type 1 has an invalid length.
[   57.231579][   T42] audit: type=1400 audit(1792849777.354:348): avc:  denied  { mount } for  pid=6269 comm="syz.1.81" name="/" dev="autofs" ino=10822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   57.240429][   T42] audit: type=1400 audit(1792849777.364:349): avc:  denied  { watch watch_reads } for  pid=6269 comm="syz.1.81" path="/" dev="autofs" ino=10822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[   57.364078][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout
[   57.436321][   T42] audit: type=1400 audit(1792849777.564:350): avc:  denied  { setopt } for  pid=6289 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.447172][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   57.453347][   T42] audit: type=1400 audit(1792849777.574:351): avc:  denied  { mounton } for  pid=6289 comm="syz.3.87" path="/20/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   57.511801][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'.
[   57.582739][ T6301] trusted_key: encrypted_key: insufficient parameters specified
[   57.702560][ T6318] FAULT_INJECTION: forcing a failure.
[   57.702560][ T6318] name failslab, interval 1, probability 0, space 0, times 0
[   57.702594][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(full) 
[   57.702640][ T6318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.702652][ T6318] Call Trace:
[   57.702679][ T6318]  <TASK>
[   57.702689][ T6318]  dump_stack_lvl+0x100/0x190
[   57.702755][ T6318]  should_fail_ex.cold+0x5/0xa
[   57.702782][ T6318]  should_failslab+0xc2/0x120
[   57.702811][ T6318]  kmem_cache_alloc_noprof+0x92/0x6a0
[   57.702836][ T6318]  ? do_getname+0x35/0x390
[   57.702859][ T6318]  do_getname+0x35/0x390
[   57.702882][ T6318]  __getname_maybe_null+0x6e/0x140
[   57.702907][ T6318]  vfs_fstatat+0x4c/0xe0
[   57.702938][ T6318]  __do_sys_newfstatat+0x9d/0x120
[   57.702956][ T6318]  ? __pfx___do_sys_newfstatat+0x10/0x10
[   57.703012][ T6318]  do_syscall_64+0x123/0x790
[   57.703051][ T6318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.703071][ T6318] RIP: 0033:0x7ffa87b9f559
[   57.703086][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.703103][ T6318] RSP: 002b:00007ffa889d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[   57.703121][ T6318] RAX: ffffffffffffffda RBX: 00007ffa87e25fa0 RCX: 00007ffa87b9f559
[   57.703134][ T6318] RDX: 0000200000000680 RSI: 0000200000000640 RDI: ffffffffffffff9c
[   57.703145][ T6318] RBP: 00007ffa87c36b20 R08: 0000000000000000 R09: 0000000000000000
[   57.703156][ T6318] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000
[   57.703166][ T6318] R13: 00007ffa87e26038 R14: 00007ffa87e25fa0 R15: 00007fff13fe0988
[   57.703189][ T6318]  </TASK>
[   57.732121][ T6324] =======================================================
[   57.732121][ T6324] WARNING: The mand mount option has been deprecated and
[   57.732121][ T6324]          and is ignored by this kernel. Remove the mand
[   57.732121][ T6324]          option from the mount to silence this warning.
[   57.732121][ T6324] =======================================================
[   57.741863][ T6324] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[   57.743753][ T6324] exFAT-fs (nullb0): invalid boot record signature
[   57.743765][ T6324] exFAT-fs (nullb0): failed to read boot sector
[   57.743773][ T6324] exFAT-fs (nullb0): failed to recognize exfat type
[   57.858488][ T6337] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   57.858509][ T6337] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   57.858598][ T6337] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   58.164568][ T5138] Bluetooth: hci3: command 0x0c1a tx timeout
[   58.164599][ T5138] Bluetooth: hci1: command 0x0419 tx timeout
[   58.169303][ T5785] Bluetooth: hci2: command 0x0c1a tx timeout
[   58.194655][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'.
[   58.252383][ T5890] rxe_eth0 speed is unknown, defaulting to 1000
[   58.437961][ T6381] veth1_macvtap: entered promiscuous mode
[   59.302858][ T6401] ip6gre1: entered promiscuous mode
[   59.302896][ T6401] ip6gre1: entered allmulticast mode
[   59.444844][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout
[   60.244597][ T5785] Bluetooth: hci1: command 0x0419 tx timeout
[   60.244634][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout
[   60.254096][ T5138] Bluetooth: hci2: command 0x0c1a tx timeout
[   60.883112][ T6341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.954759][ T6417] nbd0: detected capacity change from 0 to 63
[   60.959972][ T6417] block nbd0: NBD_DISCONNECT
[   60.961954][ T6417] block nbd0: Disconnected due to user request.
[   60.963234][ T6417] block nbd0: shutting down sockets
[   60.975082][    C3] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.975369][    C3] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.975396][    C3] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[   60.975447][    C3] Buffer I/O error on dev nbd0, logical block 1, async page read
[   60.975487][    C3] Buffer I/O error on dev nbd0, logical block 2, async page read
[   60.975523][    C3] Buffer I/O error on dev nbd0, logical block 3, async page read
[   60.975931][ T5150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.975952][ T5150] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.976081][ T5150] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.976098][ T5150] Buffer I/O error on dev nbd0, logical block 1, async page read
[   60.976151][ T5150] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.976167][ T5150] Buffer I/O error on dev nbd0, logical block 2, async page read
[   60.976219][ T5150] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.976235][ T5150] Buffer I/O error on dev nbd0, logical block 3, async page read
[   60.976441][ T5150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.976459][ T5150] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.976511][ T5150] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.976526][ T5150] Buffer I/O error on dev nbd0, logical block 1, async page read
[   60.976577][ T5150] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.976636][ T5150] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.977634][ T5791] ldm_validate_partition_table(): Disk read failed.
[   60.979040][ T5791] Dev nbd0: unable to read RDB block 0
[   60.979884][ T5791]  nbd0: unable to read partition table
[   60.991318][ T5791] ldm_validate_partition_table(): Disk read failed.
[   60.991564][ T5791] Dev nbd0: unable to read RDB block 0
[   60.991871][ T5791]  nbd0: unable to read partition table
[   61.008890][ T6427] netlink: 44 bytes leftover after parsing attributes in process `syz.0.121'.
[   61.055457][ T6420] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   61.055599][ T6420] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   61.055686][ T6420] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   61.055762][ T6420] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   61.099263][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.647193][ T5138] Bluetooth: hci0: unexpected event for opcode 0x2062
[   61.973117][ T6463] NILFS (loop1): device size too small
[   62.129494][   T42] kauditd_printk_skb: 55 callbacks suppressed
[   62.129520][   T42] audit: type=1400 audit(1792849782.254:407): avc:  denied  { write } for  pid=6475 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.312244][   T42] audit: type=1400 audit(1792849782.434:408): avc:  denied  { unmount } for  pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   62.340369][   T42] audit: type=1400 audit(1792849782.464:409): avc:  denied  { write } for  pid=6477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.382096][ T6479] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   62.382330][ T6479] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   62.382459][ T6479] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   62.382576][ T6479] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   62.384092][   T42] audit: type=1400 audit(1792849782.504:410): avc:  denied  { ioctl } for  pid=6478 comm="syz.0.130" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x40043311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   62.408654][   T42] audit: type=1400 audit(1792849782.534:411): avc:  denied  { write } for  pid=6483 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.616114][ T6494] kvm: pic: non byte write
[   62.622560][   T42] audit: type=1400 audit(1792849782.744:412): avc:  denied  { create } for  pid=6493 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   62.623412][   T42] audit: type=1400 audit(1792849782.744:413): avc:  denied  { bind } for  pid=6493 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   62.624128][   T42] audit: type=1400 audit(1792849782.754:414): avc:  denied  { listen } for  pid=6493 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   62.865770][   T42] audit: type=1400 audit(1792849782.984:415): avc:  denied  { read write } for  pid=6506 comm="syz.2.136" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   62.865817][   T42] audit: type=1400 audit(1792849782.984:416): avc:  denied  { open } for  pid=6506 comm="syz.2.136" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   62.939545][ T6511] net_ratelimit: 56 callbacks suppressed
[   62.939568][ T6511] ip_tables: iptables: counters copy to user failed while replacing table
[   62.998267][ T6520] CIFS: enabling forcegid mount option implicitly because gid= option is specified
[   62.998281][ T6520] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   62.998451][ T6520] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   63.058756][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   63.058774][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'.
[   63.058793][ T6522] netlink: 'syz.1.141': attribute type 12 has an invalid length.
[   63.058804][ T6522] netlink: 'syz.1.141': attribute type 7 has an invalid length.
[   63.084119][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.084158][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.084185][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.084213][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.311054][ T6530] jffs2: notice: (6530) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   63.551960][ T6543] pimreg: entered allmulticast mode
[   63.604778][ T5138] Bluetooth: hci0: ACL packet for unknown connection handle 201
[   63.945023][ T6575] program syz.1.151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   64.027097][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.046221][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.069161][ T6591] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   64.228675][ T6599] MTD: Couldn't look up 'mtd0/file0': -2
[   64.318455][ T6606] xt_hashlimit: size too large, truncated to 1048576
[   64.320379][ T6605] SELinux: syz.1.159 (6605) wrote to checkreqprot. This is no longer supported.
[   64.405243][ T5138] Bluetooth: hci3: command 0x0c1a tx timeout
[   64.405269][ T5785] Bluetooth: hci1: command 0x0419 tx timeout
[   64.405275][ T5138] Bluetooth: hci2: command 0x0c1a tx timeout
[   64.560608][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.617657][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.619305][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.620146][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.620638][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.620945][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.655572][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.695561][ T6618] bond2: entered promiscuous mode
[   64.726728][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.811385][ T6627] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   64.811625][ T6627] team0: Device ipvlan2 is already an upper device of the team interface
[   64.831214][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.850139][ T6615] rxe_eth0 speed is unknown, defaulting to 1000
[   65.013886][   T13] bridge_slave_1: left allmulticast mode
[   65.013985][   T13] bridge_slave_1: left promiscuous mode
[   65.014969][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.020557][   T13] bridge_slave_0: left allmulticast mode
[   65.020571][   T13] bridge_slave_0: left promiscuous mode
[   65.020708][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.028142][   T13] pimreg: left allmulticast mode
[   65.113477][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.114934][ T6653] ip_tables: iptables: counters copy to user failed while replacing table
[   65.121699][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.123807][   T13] bond0 (unregistering): Released all slaves
[   65.141128][ T6658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'.
[   65.169890][ T5138] Bluetooth: hci1: unexpected event for opcode 0x2023
[   65.208484][ T6663] Cannot find add_set index 65532 as target
[   65.230933][ T6671] netlink: 'syz.2.176': attribute type 15 has an invalid length.
[   65.321869][ T6671] vxlan0: entered promiscuous mode
[   65.321883][ T6671] vxlan0: entered allmulticast mode
[   65.337414][ T5858] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0
[   65.337454][ T5858] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0
[   65.337482][ T5858] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0
[   65.337510][ T5858] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0
[   65.388665][ T6681] db_root: cannot be changed because it's in use
[   65.388959][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2
[   65.520754][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.520830][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.520888][ T6615] bridge_slave_0: entered allmulticast mode
[   65.521546][ T6615] bridge_slave_0: entered promiscuous mode
[   65.523698][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.523765][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.523818][ T6615] bridge_slave_1: entered allmulticast mode
[   65.524717][ T6615] bridge_slave_1: entered promiscuous mode
[   65.542824][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.549820][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.576397][ T6615] team0: Port device team_slave_0 added
[   65.577963][ T6615] team0: Port device team_slave_1 added
[   65.610768][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.610780][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.610792][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.611710][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.611717][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.611729][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.662720][ T6615] hsr_slave_0: entered promiscuous mode
[   65.667980][ T6615] hsr_slave_1: entered promiscuous mode
[   65.668311][ T6615] debugfs: 'hsr0' already exists in 'hsr'
[   65.668323][ T6615] Cannot create hsr debugfs directory
[   65.726621][   T13] hsr_slave_0: left promiscuous mode
[   65.727864][   T13] hsr_slave_1: left promiscuous mode
[   65.730060][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.730089][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.730889][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.730903][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.748692][   T13] veth1_macvtap: left promiscuous mode
[   65.748734][   T13] veth0_macvtap: left promiscuous mode
[   65.748817][   T13] veth1_vlan: left promiscuous mode
[   65.748917][   T13] veth0_vlan: left promiscuous mode
[   65.813691][ T6710] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[   65.968342][   T13] team0 (unregistering): Port device team_slave_1 removed
[   65.986639][   T13] team0 (unregistering): Port device team_slave_0 removed
[   66.072948][ T6715] random: crng reseeded on system resumption
[   66.102206][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'.
[   66.132809][ T6710] bond3: entered promiscuous mode
[   66.133223][ T6710] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.159527][ T6712] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.159824][ T6712] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address
[   66.159841][ T6712] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[   66.162845][ T6712] bond3: (slave xfrm1): making interface the new active one
[   66.162863][ T6712] xfrm1: entered promiscuous mode
[   66.165328][ T6712] bond3: (slave xfrm1): Enslaving as an active interface with an up link
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   66.347365][ T6615] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.355228][ T6615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.355682][ T6615] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.359427][ T6615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.359857][ T6615] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.370848][ T6615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.371269][ T6615] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.376322][ T6615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.453071][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.461490][ T6615] 8021q: adding VLAN 0 to HW filter on device team0
[   66.466489][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.466550][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.470467][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.470510][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.492686][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3
[   66.572440][ T6298] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   66.645056][ T5138] Bluetooth: hci0: command tx timeout
[   66.726456][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4
[   66.727793][ T6298] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   66.729864][ T6298] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   66.729884][ T6298] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   66.729912][ T6298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.739734][ T6298] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[   66.750991][ T6298] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[   66.813151][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.007035][ T5491] 8021q: adding VLAN 0 to HW filter on device eth5
[   67.020230][ T6615] veth0_vlan: entered promiscuous mode
[   67.028642][ T6615] veth1_vlan: entered promiscuous mode
[   67.051179][ T6615] veth0_macvtap: entered promiscuous mode
[   67.055865][ T6615] veth1_macvtap: entered promiscuous mode
[   67.070014][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.074787][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.128467][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.129373][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.129400][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.129422][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.156955][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.156974][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.186531][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.186550][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.201268][   T42] kauditd_printk_skb: 51 callbacks suppressed
[   67.201291][   T42] audit: type=1400 audit(1792849787.324:468): avc:  denied  { mounton } for  pid=6615 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   67.262788][   T42] audit: type=1400 audit(1792849787.384:469): avc:  denied  { mounton } for  pid=6615 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   67.298417][   T42] audit: type=1400 audit(1792849787.424:470): avc:  denied  { mount } for  pid=6738 comm="syz.2.187" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   67.317742][   T42] audit: type=1400 audit(1792849787.444:471): avc:  denied  { watch_reads } for  pid=6805 comm="syz.4.168" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   67.327167][ T6810] ip6t_ah: unknown flags 7
[   67.387468][   T42] audit: type=1400 audit(1792849787.514:472): avc:  denied  { shutdown } for  pid=6814 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.554913][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[   67.558956][   T42] audit: type=1400 audit(1792849787.684:473): avc:  denied  { mount } for  pid=6817 comm="syz.3.194" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   67.574021][    T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[   67.579176][   T42] audit: type=1400 audit(1792849787.704:474): avc:  denied  { unmount } for  pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   67.609964][ T6822] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   67.726842][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   67.727926][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   67.727946][    T9] usb 6-1: config 0 has no interface number 0
[   67.728017][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   67.728034][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   67.728054][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   67.728073][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   67.728092][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   67.728112][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   67.728143][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.731027][    T9] usb 6-1: config 0 descriptor??
[   67.732636][ T6812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   67.732772][ T6812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   67.793559][    T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   67.946736][   T24] usb 6-1: USB disconnect, device number 2
[   67.965416][   T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[   68.026402][   T42] audit: type=1400 audit(1792849788.154:475): avc:  denied  { create } for  pid=6834 comm="syz.3.198" name="dev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:mnt_t tclass=chr_file permissive=1
[   68.148210][ T6838] openvswitch: netlink: Key type 8195 is out of range max 32
[   68.371872][   T42] audit: type=1400 audit(1792849788.494:476): avc:  denied  { map } for  pid=6851 comm="syz.3.203" path="socket:[15072]" dev="sockfs" ino=15072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   68.397305][ T6855] netlink: 'syz.4.204': attribute type 5 has an invalid length.
[   68.397323][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'.
[   68.421218][ T6857] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.422075][   T42] audit: type=1400 audit(1792849788.544:477): avc:  denied  { execute } for  pid=6851 comm="syz.3.203" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.441367][ T6860] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.477539][ T6865] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[   68.477688][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477721][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477751][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477786][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477816][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477845][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477876][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477905][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.477934][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478507][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478560][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478631][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478687][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478739][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478798][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478850][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478901][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.478945][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479074][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479129][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479182][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479230][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479292][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479323][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479351][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479380][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479408][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479438][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.479466][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.481810][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.481846][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.481875][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.481904][ T6865] nvme_fabrics: unknown parameter or missing value '#! ./file0  ^-)$$::*-& %! -�:\' in ctrl creation request
[   68.662533][ T6877] FAULT_INJECTION: forcing a failure.
[   68.662533][ T6877] name failslab, interval 1, probability 0, space 0, times 0
[   68.662566][ T6877] CPU: 2 UID: 0 PID: 6877 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(full) 
[   68.662589][ T6877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.662632][ T6877] Call Trace:
[   68.662641][ T6877]  <TASK>
[   68.662649][ T6877]  dump_stack_lvl+0x100/0x190
[   68.662775][ T6877]  should_fail_ex.cold+0x5/0xa
[   68.662814][ T6877]  should_failslab+0xc2/0x120
[   68.662863][ T6877]  kmem_cache_alloc_noprof+0x92/0x6a0
[   68.662884][ T6877]  ? lock_acquire+0x1d1/0x380
[   68.662913][ T6877]  ? __kernfs_new_node+0xd2/0xa10
[   68.662946][ T6877]  __kernfs_new_node+0xd2/0xa10
[   68.662971][ T6877]  ? __pfx___kernfs_new_node+0x10/0x10
[   68.662995][ T6877]  ? lock_acquire+0x1d1/0x380
[   68.663016][ T6877]  ? kernfs_root+0x23/0x2a0
[   68.663036][ T6877]  ? find_held_lock+0x2b/0x80
[   68.663064][ T6877]  ? kernfs_root+0xee/0x2a0
[   68.663080][ T6877]  ? kernfs_root+0xee/0x2a0
[   68.663103][ T6877]  kernfs_new_node+0x194/0x200
[   68.663124][ T6877]  ? __pfx_kernfs_new_node+0x10/0x10
[   68.663141][ T6877]  ? kernfs_create_link+0xe4/0x280
[   68.663162][ T6877]  ? kernfs_create_link+0xe4/0x280
[   68.663189][ T6877]  kernfs_create_link+0x100/0x280
[   68.663214][ T6877]  sysfs_do_create_link_sd+0x90/0x140
[   68.663233][ T6877]  sysfs_create_link+0x61/0xc0
[   68.663251][ T6877]  device_add+0x553/0x1970
[   68.663304][ T6877]  ? __pfx_device_add+0x10/0x10
[   68.663330][ T6877]  ? lockdep_init_map_type+0x5c/0x250
[   68.663351][ T6877]  ? __init_waitqueue_head+0xca/0x150
[   68.663383][ T6877]  rfkill_register+0x1ad/0xb30
[   68.663428][ T6877]  nfc_register_device+0x11f/0x3e0
[   68.663456][ T6877]  nci_register_device+0x7f1/0xb80
[   68.663477][ T6877]  ? __pfx_nci_register_device+0x10/0x10
[   68.663500][ T6877]  ? lockdep_init_map_type+0x5c/0x250
[   68.663531][ T6877]  virtual_ncidev_open+0x141/0x220
[   68.663553][ T6877]  ? __pfx_virtual_ncidev_open+0x10/0x10
[   68.663570][ T6877]  misc_open+0x26d/0x450
[   68.663589][ T6877]  ? __pfx_misc_open+0x10/0x10
[   68.663607][ T6877]  chrdev_open+0x234/0x6a0
[   68.663631][ T6877]  ? __pfx_chrdev_open+0x10/0x10
[   68.663658][ T6877]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   68.663683][ T6877]  do_dentry_open+0x674/0x1470
[   68.663702][ T6877]  ? __pfx_chrdev_open+0x10/0x10
[   68.663729][ T6877]  vfs_open_consume+0xcc/0x460
[   68.663756][ T6877]  path_openat+0x1547/0x23f0
[   68.663784][ T6877]  ? __pfx_path_openat+0x10/0x10
[   68.663815][ T6877]  do_file_open+0x20e/0x430
[   68.663841][ T6877]  ? __pfx_do_file_open+0x10/0x10
[   68.663888][ T6877]  ? _raw_spin_unlock+0x28/0x50
[   68.663932][ T6877]  ? alloc_fd+0x471/0x7a0
[   68.663971][ T6877]  do_sys_openat2+0x163/0x1d0
[   68.664003][ T6877]  ? __pfx_do_sys_openat2+0x10/0x10
[   68.664045][ T6877]  __x64_sys_openat+0x12d/0x210
[   68.664077][ T6877]  ? __pfx___x64_sys_openat+0x10/0x10
[   68.664118][ T6877]  do_syscall_64+0x123/0x790
[   68.664140][ T6877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.664168][ T6877] RIP: 0033:0x7ffa87b9f559
[   68.664184][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.664201][ T6877] RSP: 002b:00007ffa889d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   68.664218][ T6877] RAX: ffffffffffffffda RBX: 00007ffa87e25fa0 RCX: 00007ffa87b9f559
[   68.664228][ T6877] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c
[   68.664238][ T6877] RBP: 00007ffa87c36b20 R08: 0000000000000000 R09: 0000000000000000
[   68.664249][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.664260][ T6877] R13: 00007ffa87e26038 R14: 00007ffa87e25fa0 R15: 00007fff13fe0988
[   68.664293][ T6877]  </TASK>
[   68.734951][ T5790] Bluetooth: hci0: command tx timeout
[   68.960722][ T6900] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[   68.961030][ T6900] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14)
[   69.176643][ T6909] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   69.184035][ T6298] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   69.260617][ T6916] bridge1: entered promiscuous mode
[   69.263398][ T6920] zonefs (loop1) ERROR: Not a zoned block device
[   69.334732][ T6916] FAULT_INJECTION: forcing a failure.
[   69.334732][ T6916] name failslab, interval 1, probability 0, space 0, times 0
[   69.334762][ T6916] CPU: 2 UID: 0 PID: 6916 Comm: syz.3.216 Not tainted syzkaller #0 PREEMPT(full) 
[   69.334790][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.334801][ T6916] Call Trace:
[   69.334808][ T6916]  <TASK>
[   69.334815][ T6916]  dump_stack_lvl+0x100/0x190
[   69.334864][ T6916]  should_fail_ex.cold+0x5/0xa
[   69.334893][ T6916]  should_failslab+0xc2/0x120
[   69.334918][ T6916]  __kmalloc_noprof+0xfc/0x840
[   69.334956][ T6916]  ? ima_alloc_init_template+0x19d/0x6d0
[   69.334985][ T6916]  ima_alloc_init_template+0x19d/0x6d0
[   69.335010][ T6916]  ima_store_measurement+0x1e3/0x5b0
[   69.335032][ T6916]  ? __pfx_ima_store_measurement+0x10/0x10
[   69.335062][ T6916]  ? __pfx_ima_get_hash_algo+0x10/0x10
[   69.335094][ T6916]  process_measurement+0x19cc/0x2350
[   69.335121][ T6916]  ? __pfx_process_measurement+0x10/0x10
[   69.335141][ T6916]  ? __pfx_avc_has_perm+0x10/0x10
[   69.335161][ T6916]  ? avc_has_perm_noaudit+0x56/0x470
[   69.335180][ T6916]  ? find_held_lock+0x2b/0x80
[   69.335207][ T6916]  ? avc_has_perm_noaudit+0x11e/0x470
[   69.335249][ T6916]  ? __file_map_prot_check+0x25e/0x850
[   69.335276][ T6916]  ima_file_mmap+0x1b1/0x1e0
[   69.335295][ T6916]  ? __pfx_ima_file_mmap+0x10/0x10
[   69.335316][ T6916]  ? __pfx_futex_wait+0x10/0x10
[   69.335342][ T6916]  security_mmap_file+0x278/0x9b0
[   69.335372][ T6916]  vm_mmap_pgoff+0xec/0x470
[   69.335392][ T6916]  ? find_held_lock+0x2b/0x80
[   69.335420][ T6916]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   69.335437][ T6916]  ? __fget_files+0x215/0x3d0
[   69.335468][ T6916]  ? __fget_files+0x21f/0x3d0
[   69.335499][ T6916]  ksys_mmap_pgoff+0x3cb/0x610
[   69.335521][ T6916]  ? __x64_sys_futex+0x358/0x4d0
[   69.335540][ T6916]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[   69.335561][ T6916]  ? xfd_validate_state+0x129/0x190
[   69.335588][ T6916]  __x64_sys_mmap+0x125/0x190
[   69.335612][ T6916]  do_syscall_64+0x123/0x790
[   69.335638][ T6916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.335658][ T6916] RIP: 0033:0x7ff6aa99f559
[   69.335675][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.335692][ T6916] RSP: 002b:00007ff6ab950028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   69.335711][ T6916] RAX: ffffffffffffffda RBX: 00007ff6aac25fa0 RCX: 00007ff6aa99f559
[   69.335722][ T6916] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000
[   69.335733][ T6916] RBP: 00007ff6aaa36b20 R08: 000000000000000c R09: 0000000000000000
[   69.335744][ T6916] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000
[   69.335755][ T6916] R13: 00007ff6aac26038 R14: 00007ff6aac25fa0 R15: 00007ffe810cc628
[   69.335786][ T6916]  </TASK>
[   69.336390][ T6298] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   69.337139][   T10] usb 7-1: USB disconnect, device number 2
[   69.337994][ T6298] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[   69.338014][ T6298] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   69.338028][ T6298] usb 9-1: config 220 has no interface number 2
[   69.338073][ T6298] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   69.338121][ T6298] usb 9-1: config 220 interface 0 has no altsetting 0
[   69.338137][ T6298] usb 9-1: config 220 interface 76 has no altsetting 0
[   69.338150][ T6298] usb 9-1: config 220 interface 1 has no altsetting 0
[   69.343065][ T6298] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.343085][ T6298] usb 9-1: Product: syz
[   69.343097][ T6298] usb 9-1: Manufacturer: syz
[   69.343109][ T6298] usb 9-1: SerialNumber: syz
[   69.347950][   T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   69.348379][   T10] spcp8x5 7-1:1.0: device disconnected
[   69.508549][ T6943] xt_CT: No such helper "netbios-ns"
[   69.578337][ T6952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.225'.
[   69.630204][ T6298] usb 9-1: selecting invalid altsetting 0
[   69.638209][ T6298] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   69.638235][ T6298] uvcvideo 9-1:220.0: No valid video chain found.
[   69.648965][ T6298] usb 9-1: selecting invalid altsetting 0
[   69.648988][ T6298] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[   69.655528][ T6298] usb 9-1: USB disconnect, device number 2
[   69.815776][   T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   69.974779][   T41] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   69.977659][   T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.977679][   T41] usb 7-1: Product: syz
[   69.977691][   T41] usb 7-1: Manufacturer: syz
[   69.977703][   T41] usb 7-1: SerialNumber: syz
[   70.329167][   T41] rtl8150 7-1:1.0: couldn't reset the device
[   70.329435][   T41] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[   70.342782][   T41] usb 7-1: USB disconnect, device number 3
[   70.804029][ T5790] Bluetooth: hci0: command 0x040f tx timeout
[   70.849201][ T6988] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966669
[   70.901323][ T6992] loop5: detected capacity change from 0 to 7
[   70.914623][ T6992] Dev loop5: unable to read RDB block 7
[   70.914657][ T6992]  loop5: unable to read partition table
[   70.914818][ T6992] loop5: partition table beyond EOD, truncated
[   70.914865][ T6992] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   70.935752][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'.
[   71.209231][ T1448] ieee802154 phy0 wpan0: encryption failed: -22
[   71.209282][ T1448] ieee802154 phy1 wpan1: encryption failed: -22
[   71.222491][ T1487] cfg80211: failed to load regulatory.db
[   71.230440][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   71.300143][ T7019] usb3503 0-0008: unknown mode is requested
[   71.300156][ T7019] usb3503 0-0008: usb3503_probe: probed in standby mode
[   71.300955][ T7019] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08
[   71.414145][ T7024] ALSA: seq fatal error: cannot create timer (-19)
[   71.777428][ T7030] netlink: 'syz.3.249': attribute type 4 has an invalid length.
[   71.777711][ T5138] Bluetooth: hci1: SCO packet for unknown connection handle 201
[   71.809597][ T7029] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   72.210514][   T42] kauditd_printk_skb: 46 callbacks suppressed
[   72.210538][   T42] audit: type=1400 audit(1792849792.334:524): avc:  denied  { write } for  pid=7038 comm="syz.1.251" name="ip_vs_stats_percpu" dev="proc" ino=4026532977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   72.211711][ T7040] fuse: Bad value for 'fd'
[   72.239126][ T7042] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.252'.
[   72.242016][   T42] audit: type=1400 audit(1792849792.364:525): avc:  denied  { create } for  pid=7044 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.288966][ T7051] capability: warning: `syz.1.255' uses 32-bit capabilities (legacy support in use)
[   72.291659][   T42] audit: type=1400 audit(1792849792.414:526): avc:  denied  { read } for  pid=7048 comm="syz.4.256" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[   72.291955][   T42] audit: type=1400 audit(1792849792.414:527): avc:  denied  { open } for  pid=7048 comm="syz.4.256" path="/19/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[   72.297648][ T7052] netlink: 'syz.4.256': attribute type 1 has an invalid length.
[   72.333155][   T42] audit: type=1400 audit(1792849792.454:528): avc:  denied  { append } for  pid=7053 comm="syz.3.258" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   72.342702][   T42] audit: type=1400 audit(1792849792.464:529): avc:  denied  { write } for  pid=7054 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   72.342739][   T42] audit: type=1400 audit(1792849792.464:530): avc:  denied  { mount } for  pid=7054 comm="syz.1.257" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   72.342774][   T42] audit: type=1400 audit(1792849792.464:531): avc:  denied  { remount } for  pid=7054 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   72.360500][   T42] audit: type=1400 audit(1792849792.484:532): avc:  denied  { unmount } for  pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   72.410084][ T7063] ip_tables: iptables: counters copy to user failed while replacing table
[   72.419555][ T7065] syz.4.261 uses obsolete (PF_INET,SOCK_PACKET)
[   72.459151][   T42] audit: type=1400 audit(1792849792.584:533): avc:  denied  { bind } for  pid=7067 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.483486][ T7069] batman_adv: batadv0: Adding interface: syzkaller0
[   72.483510][ T7069] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.483533][ T7069] batman_adv: batadv0: Interface activated: syzkaller0
[   72.550381][ T7082] loop7: detected capacity change from 0 to 7
[   72.554935][    C0] blk_print_req_error: 86 callbacks suppressed
[   72.554946][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.554990][    C0] buffer_io_error: 138 callbacks suppressed
[   72.555001][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556453][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.556490][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556570][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.556597][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556679][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.556707][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556760][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.556786][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556834][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.556865][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556909][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.556934][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.556961][ T7082] ldm_validate_partition_table(): Disk read failed.
[   72.557077][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.557104][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.557166][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.557191][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.557246][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   72.557272][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.557349][ T7082] Dev loop7: unable to read RDB block 0
[   72.557598][ T7082]  loop7: unable to read partition table
[   72.557713][ T7082] loop7: partition table beyond EOD, truncated
[   72.557748][ T7082] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   72.748573][ T7068] batman_adv: batadv0: Interface deactivated: syzkaller0
[   72.769656][ T7068] batman_adv: batadv0: Removing interface: syzkaller0
[   72.803462][ T7085] netlink: 'syz.2.267': attribute type 16 has an invalid length.
[   72.803475][ T7085] netlink: 'syz.2.267': attribute type 17 has an invalid length.
[   72.844628][ T7085] ip6gre1: left promiscuous mode
[   72.844642][ T7085] ip6gre1: left allmulticast mode
[   72.845088][ T7085] vxlan0: left promiscuous mode
[   72.845097][ T7085] vxlan0: left allmulticast mode
[   72.884404][ T5138] Bluetooth: hci0: command 0x040f tx timeout
[   72.910701][ T7097] kAFS: bad VL server IP address
[   73.014279][ T7125] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[   73.020279][ T7132] netlink: 'syz.3.277': attribute type 10 has an invalid length.
[   73.029439][ T7125] bond4: entered promiscuous mode
[   73.029845][ T7125] 8021q: adding VLAN 0 to HW filter on device bond4
[   73.032101][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   73.036680][ T7124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.276'.
[   73.040693][ T7132] team0: Device wg2 is of different type
[   73.094728][ T7143] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[   73.139378][ T7145] netlink: 'syz.3.279': attribute type 1 has an invalid length.
[   73.155791][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.943427][ T7224] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[   74.119613][ T7222] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[   74.135897][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'.
[   74.150385][ T7226] EXT4-fs (nbd3): unable to read superblock
[   74.398465][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'.
[   74.430415][ T7265] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   74.603355][ T6960] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[   74.964436][ T5138] Bluetooth: hci0: command 0x040f tx timeout
[   76.085464][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[   78.168153][   T42] kauditd_printk_skb: 35 callbacks suppressed
[   78.168172][   T42] audit: type=1400 audit(1792849798.294:569): avc:  denied  { write } for  pid=7312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.231863][   T42] audit: type=1400 audit(1792849798.354:570): avc:  denied  { write } for  pid=7315 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.439798][   T42] audit: type=1400 audit(1792849798.564:571): avc:  denied  { write } for  pid=7318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.505949][   T42] audit: type=1400 audit(1792849798.634:572): avc:  denied  { write } for  pid=7321 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.621525][   T42] audit: type=1400 audit(1792849798.744:573): avc:  denied  { write } for  pid=7324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.693269][   T42] audit: type=1400 audit(1792849798.814:574): avc:  denied  { write } for  pid=7327 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.791464][   T42] audit: type=1400 audit(1792849798.914:575): avc:  denied  { write } for  pid=7330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.847254][   T42] audit: type=1400 audit(1792849798.974:576): avc:  denied  { write } for  pid=7333 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.799611][   T42] audit: type=1400 audit(1792849799.924:577): avc:  denied  { write } for  pid=7336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.857010][   T42] audit: type=1400 audit(1792849799.984:578): avc:  denied  { write } for  pid=7339 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.928037][   T42] kauditd_printk_skb: 2 callbacks suppressed
[   86.928057][   T42] audit: type=1400 audit(1792849807.054:581): avc:  denied  { write } for  pid=7358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.000020][   T42] audit: type=1400 audit(1792849807.124:582): avc:  denied  { write } for  pid=7361 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.883326][   T42] audit: type=1400 audit(1792849808.004:583): avc:  denied  { map } for  pid=7367 comm="syz.1.303" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   87.888787][   T42] audit: type=1400 audit(1792849808.014:584): avc:  denied  { remount } for  pid=7367 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   88.082412][   T42] audit: type=1400 audit(1792849808.204:585): avc:  denied  { read } for  pid=7396 comm="syz.1.310" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   88.083075][   T42] audit: type=1400 audit(1792849808.204:586): avc:  denied  { ioctl } for  pid=7396 comm="syz.1.310" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x80084d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   88.198145][ T7401] netlink: 'syz.4.312': attribute type 1 has an invalid length.
[   88.261675][ T7405] netlink: 'syz.1.313': attribute type 1 has an invalid length.
[   88.264285][ T7406] kvm: pic: non byte write
[   88.264710][ T7406] kvm: pic: non byte write
[   88.265061][ T7406] kvm: pic: non byte write
[   88.272878][   T24] nintendo 0005:057E:2017.0002: hidraw1: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0
[   88.281553][ T7405] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.285860][ T7406] macvlan2: entered promiscuous mode
[   88.285871][ T7406] macvlan2: entered allmulticast mode
[   88.286394][ T7406] bond5: entered promiscuous mode
[   88.286780][ T7406] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.297165][ T7406] bond5: left promiscuous mode
[   88.477144][ T7417] Invalid source name
[   88.477169][ T7417] UBIFS error (pid: 7417): cannot open "./file0", error -22
[   88.515050][  T374] IPVS: starting estimator thread 0...
[   88.592571][   T42] audit: type=1400 audit(1792849808.714:587): avc:  denied  { mounton } for  pid=7422 comm="syz.1.317" path="/105/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   88.595658][ T7423] FAULT_INJECTION: forcing a failure.
[   88.595658][ T7423] name fail_futex, interval 1, probability 0, space 0, times 1
[   88.595712][ T7423] CPU: 0 UID: 0 PID: 7423 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(full) 
[   88.595732][ T7423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.595756][ T7423] Call Trace:
[   88.595764][ T7423]  <TASK>
[   88.595773][ T7423]  dump_stack_lvl+0x100/0x190
[   88.595892][ T7423]  should_fail_ex.cold+0x5/0xa
[   88.595927][ T7423]  get_futex_key+0x1c9/0x13e0
[   88.595998][ T7423]  ? __pfx_get_futex_key+0x10/0x10
[   88.596022][ T7423]  ? __mutex_unlock_slowpath+0x35d/0x930
[   88.596059][ T7423]  futex_wake+0xf4/0x5e0
[   88.596078][ T7423]  ? __pfx_futex_wake+0x10/0x10
[   88.596092][ T7423]  ? lock_acquire+0x1d1/0x380
[   88.596106][ T7423]  ? detach_task_ctx_data+0x83/0x490
[   88.596131][ T7423]  do_futex+0x2b2/0x440
[   88.596142][ T7423]  ? __pfx_do_futex+0x10/0x10
[   88.596151][ T7423]  ? __might_fault+0xc5/0x140
[   88.596171][ T7423]  mm_exit_exec_release+0x256/0x2f0
[   88.596184][ T7423]  do_exit+0x6d8/0x2a00
[   88.596199][ T7423]  ? __pfx_do_exit+0x10/0x10
[   88.596212][ T7423]  ? do_raw_spin_lock+0x128/0x260
[   88.596227][ T7423]  ? find_held_lock+0x2b/0x80
[   88.596243][ T7423]  ? get_signal+0x7db/0x21d0
[   88.596255][ T7423]  do_group_exit+0xd5/0x2a0
[   88.596269][ T7423]  get_signal+0x1ebd/0x21d0
[   88.596285][ T7423]  ? __pfx_get_signal+0x10/0x10
[   88.596297][ T7423]  ? do_futex+0x190/0x440
[   88.596309][ T7423]  arch_do_signal_or_restart+0x91/0x7e0
[   88.596326][ T7423]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   88.596350][ T7423]  exit_to_user_mode_loop+0x139/0x700
[   88.596366][ T7423]  ? rcu_is_watching+0x13/0xc0
[   88.596384][ T7423]  do_syscall_64+0x661/0x790
[   88.596397][ T7423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.596416][ T7423] RIP: 0033:0x7ffa87b9f559
[   88.596426][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.596436][ T7423] RSP: 002b:00007ffa889d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   88.596447][ T7423] RAX: fffffffffffffe00 RBX: 00007ffa87e25fa8 RCX: 00007ffa87b9f559
[   88.596454][ T7423] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa87e25fa8
[   88.596461][ T7423] RBP: 00007ffa87e25fa0 R08: 0000000000000000 R09: 0000000000000000
[   88.596467][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.596473][ T7423] R13: 00007ffa87e26038 R14: 00007fff13fe08a0 R15: 00007fff13fe0988
[   88.596487][ T7423]  </TASK>
[   88.616957][ T7421] IPVS: using max 44 ests per chain, 105600 per kthread
[   88.634400][ T5138] Bluetooth: hci2: unexpected event for opcode 0x0c7a
[   88.635205][   T42] audit: type=1400 audit(1792849808.764:588): avc:  denied  { read write } for  pid=7425 comm="syz.1.318" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   88.635232][   T42] audit: type=1400 audit(1792849808.764:589): avc:  denied  { open } for  pid=7425 comm="syz.1.318" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   88.635328][   T42] audit: type=1400 audit(1792849808.764:590): avc:  denied  { read write } for  pid=7425 comm="syz.1.318" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   88.917999][ T7434] Bluetooth: MGMT ver 1.23
[   88.918030][ T7434] Bluetooth: hci0: unsupported parameter 5161
[   88.918042][ T7434] Bluetooth: hci0: unsupported parameter 8192
[   88.918052][ T7434] Bluetooth: hci0: unsupported parameter 5161
[   88.918062][ T7434] Bluetooth: hci0: unsupported parameter 8192
[   89.584004][ T6298] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   89.744872][ T6298] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   89.746011][ T6298] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[   89.746031][ T6298] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   89.746046][ T6298] usb 6-1: config 220 has no interface number 2
[   89.746094][ T6298] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   89.746114][ T6298] usb 6-1: config 220 interface 0 has no altsetting 0
[   89.746128][ T6298] usb 6-1: config 220 interface 76 has no altsetting 0
[   89.746142][ T6298] usb 6-1: config 220 interface 1 has no altsetting 0
[   89.748088][ T6298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.748107][ T6298] usb 6-1: Product: syz
[   89.748119][ T6298] usb 6-1: Manufacturer: syz
[   89.748130][ T6298] usb 6-1: SerialNumber: syz
[   89.935334][ T7451] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[   89.966118][ T6298] usb 6-1: selecting invalid altsetting 0
[   89.967285][ T6298] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   89.967312][ T6298] uvcvideo 6-1:220.0: No valid video chain found.
[   89.978574][ T6298] usb 6-1: selecting invalid altsetting 0
[   89.978597][ T6298] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[   89.983167][ T6298] usb 6-1: USB disconnect, device number 3
[   90.519998][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[   90.573221][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'.
[   90.691749][ T7469] mtrr: base(0x742f636f72702f2e000) is not aligned on a size(0x61657268000) boundary
[   90.701149][ T7469] netlink: 48 bytes leftover after parsing attributes in process `syz.1.328'.
[   90.721422][ T7469] bridge3: entered allmulticast mode
[   90.892903][ T7456] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   90.893109][ T7456] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   90.893268][ T7456] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   90.893413][ T7456] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   90.893485][ T7456] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   90.898552][ T7456] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   90.943370][ T7476] null_blk: disk my_nullb created
[   90.954441][ T7482] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030

syzkaller
syzkaller login: [   91.157041][ T7495] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   91.214100][ T2324] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   91.360650][ T7509] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   91.367021][ T2324] usb 7-1: Using ep0 maxpacket: 16
[   91.367374][ T7509] VFS: Can't find a romfs filesystem on dev nullb0.
[   91.367374][ T7509] 
[   91.367579][ T2324] usb 7-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.40
[   91.369682][ T2324] usb 7-1: config 1 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 248, changing to 11
[   91.369699][ T2324] usb 7-1: config 1 interface 0 has no altsetting 0
[   91.387496][ T2324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.387509][ T2324] usb 7-1: Product: 褽硏۱㦻豭济ኪ꒠哮쟅ᬭ끀鰊͚৸췙蹵〛ᕅ್ꨴ䞐ꥠ谀ퟓ
[   91.387519][ T2324] usb 7-1: Manufacturer: и
[   91.387526][ T2324] usb 7-1: SerialNumber: ῠᗤ휙✣潲篦벥Ꚑ蝙
[   91.805881][ T2324] usbhid 7-1:1.0: can't add hid device: -71
[   91.805931][ T2324] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[   91.807622][ T2324] usb 7-1: USB disconnect, device number 4
[   92.218971][ T7514] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   92.219402][ T7514] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   92.219539][ T7514] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   92.219702][ T7514] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   92.283001][   T42] kauditd_printk_skb: 45 callbacks suppressed
[   92.283021][   T42] audit: type=1400 audit(1792849812.404:634): avc:  denied  { write } for  pid=7529 comm="syz.1.344" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   92.321443][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'.
[   92.321476][ T7534] netlink: 'syz.3.345': attribute type 11 has an invalid length.
[   92.321488][ T7534] netlink: 404 bytes leftover after parsing attributes in process `syz.3.345'.
[   92.340752][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'.
[   92.340783][ T7538] netlink: 'syz.3.345': attribute type 11 has an invalid length.
[   92.340794][ T7538] netlink: 404 bytes leftover after parsing attributes in process `syz.3.345'.
[   92.414052][   T24] nintendo 0005:057E:2017.0002: Failed to get joycon info; ret=-110
[   92.414074][   T24] nintendo 0005:057E:2017.0002: Failed to retrieve controller info; ret=-110
[   92.414089][   T24] nintendo 0005:057E:2017.0002: Failed to initialize controller; ret=-110
[   92.419486][   T24] nintendo 0005:057E:2017.0002: probe - fail = -110
[   92.419588][   T24] nintendo 0005:057E:2017.0002: probe with driver nintendo failed with error -110
[   92.430339][ T7545] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   92.430947][ T7545] batman_adv: batadv0: Adding interface: gretap1
[   92.430960][ T7545] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.430986][ T7545] batman_adv: batadv0: Interface activated: gretap1
[   92.495367][ T7546] syzkaller0: entered promiscuous mode
[   92.495394][ T7546] syzkaller0: entered allmulticast mode
[   92.501762][   T42] audit: type=1400 audit(1792849812.624:635): avc:  denied  { create } for  pid=7535 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   92.502456][   T42] audit: type=1400 audit(1792849812.624:636): avc:  denied  { setopt } for  pid=7535 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   92.503270][   T42] audit: type=1400 audit(1792849812.624:637): avc:  denied  { write } for  pid=7535 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   92.602869][ T7555] bond6: option min_links: invalid value (18446744073709551615)
[   92.602885][ T7555] bond6: option min_links: allowed values 0 - 2147483647
[   92.605167][ T7555] bond6 (unregistering): Released all slaves
[   92.666992][ T7560] bond6: option min_links: invalid value (18446744073709551615)
[   92.667007][ T7560] bond6: option min_links: allowed values 0 - 2147483647
[   92.674490][ T7560] bond6 (unregistering): Released all slaves
[   92.972317][   T42] audit: type=1400 audit(1792849813.094:638): avc:  denied  { name_bind } for  pid=7567 comm="syz.4.353" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   92.972800][   T42] audit: type=1400 audit(1792849813.094:639): avc:  denied  { setopt } for  pid=7567 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.973087][   T42] audit: type=1400 audit(1792849813.094:640): avc:  denied  { node_bind } for  pid=7567 comm="syz.4.353" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   93.423103][ T7554] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   93.427414][ T7554] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   93.427597][ T7554] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   93.427754][ T7554] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   93.483091][ T7581] jffs2: notice: (7581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   93.483550][   T42] audit: type=1400 audit(1792849813.614:641): avc:  denied  { ioctl } for  pid=7579 comm="syz.4.356" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc0189374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   93.498144][   T42] audit: type=1400 audit(1792849813.624:642): avc:  denied  { unmount } for  pid=7576 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   93.518376][   T42] audit: type=1400 audit(1792849813.644:643): avc:  denied  { bind } for  pid=7576 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   93.821289][ T7590] netlink: 9 bytes leftover after parsing attributes in process `syz.3.357'.
[   93.877122][ T7591] netlink: 5 bytes leftover after parsing attributes in process `syz.3.357'.
[   94.226487][ T7582] FAULT_INJECTION: forcing a failure.
[   94.226487][ T7582] name fail_futex, interval 1, probability 0, space 0, times 0
[   94.226537][ T7582] CPU: 2 UID: 0 PID: 7582 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT(full) 
[   94.226557][ T7582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.226566][ T7582] Call Trace:
[   94.226572][ T7582]  <TASK>
[   94.226579][ T7582]  dump_stack_lvl+0x100/0x190
[   94.226610][ T7582]  should_fail_ex.cold+0x5/0xa
[   94.226637][ T7582]  get_futex_key+0x1c9/0x13e0
[   94.226667][ T7582]  ? __pfx_get_futex_key+0x10/0x10
[   94.226698][ T7582]  futex_wait_setup+0x91/0x540
[   94.226726][ T7582]  __futex_wait+0x19f/0x360
[   94.226748][ T7582]  ? __pfx___futex_wait+0x10/0x10
[   94.226769][ T7582]  ? futex_hash+0x311/0x400
[   94.226796][ T7582]  ? __pfx_futex_wake_mark+0x10/0x10
[   94.226820][ T7582]  ? __pfx_futex_hash+0x10/0x10
[   94.226844][ T7582]  ? __pfx_get_futex_key+0x10/0x10
[   94.226876][ T7582]  futex_wait+0xe6/0x370
[   94.226913][ T7582]  ? __pfx_futex_wait+0x10/0x10
[   94.226941][ T7582]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   94.226973][ T7582]  do_futex+0x265/0x440
[   94.226992][ T7582]  ? __pfx_do_futex+0x10/0x10
[   94.227010][ T7582]  ? sock_ioctl+0x2dc/0x6b0
[   94.227050][ T7582]  __x64_sys_futex+0x34f/0x4d0
[   94.227077][ T7582]  ? __pfx___x64_sys_futex+0x10/0x10
[   94.227105][ T7582]  do_syscall_64+0x123/0x790
[   94.227128][ T7582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.227146][ T7582] RIP: 0033:0x7f4b0d59f559
[   94.227162][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.227179][ T7582] RSP: 002b:00007f4b0e3ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   94.227199][ T7582] RAX: ffffffffffffffda RBX: 00007f4b0d826188 RCX: 00007f4b0d59f559
[   94.227210][ T7582] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b0d826188
[   94.227221][ T7582] RBP: 00007f4b0d826180 R08: 0000000000000000 R09: 0000000000000000
[   94.227231][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.227241][ T7582] R13: 00007f4b0d826218 R14: 00007ffceff13a20 R15: 00007ffceff13b08
[   94.227266][ T7582]  </TASK>
[   94.230455][ T7590] gretap0: entered promiscuous mode
[   94.231942][ T7591] 0��{X��: renamed from gretap0
[   94.234788][ T7591] 0��{X��: left promiscuous mode
[   94.234799][ T7591] 0��{X��: entered allmulticast mode
[   94.236294][ T7591] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   94.241973][ T7575] rxe_eth0 speed is unknown, defaulting to 1000
[   94.281713][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'.
[   94.331883][ T7596] nfs: Unknown parameter 'mask'
[   94.338107][ T7596] No such timeout policy "syz1"
[   95.229061][ T7602] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.231947][ T7602] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   95.232146][ T7602] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   95.232252][ T7602] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   95.299008][ T7626] netlink: 'syz.2.368': attribute type 8 has an invalid length.
[   95.302947][ T7626] netlink: 'syz.2.368': attribute type 8 has an invalid length.
[   95.355931][ T7632] jffs2: notice: (7632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   95.479941][ T7640] netlink: 'syz.2.372': attribute type 8 has an invalid length.
[   95.492156][ T7643] netlink: 'syz.4.370': attribute type 15 has an invalid length.
[   95.519109][ T7643] netlink: 'syz.4.370': attribute type 15 has an invalid length.
[   95.534993][ T5866] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   95.535044][ T5866] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   95.535087][ T5866] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   95.535114][ T5866] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   95.729949][ T7657] __nla_validate_parse: 5 callbacks suppressed
[   95.729962][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'.
[   96.442072][ T7653] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   96.442338][ T7653] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   96.442575][ T7653] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   96.442709][ T7653] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   96.867240][ T7702] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.868362][ T7702] bond0: (slave bond6): Enslaving as an active interface with an up link
[   96.878424][ T7703] 8021q: adding VLAN 0 to HW filter on device bond7
[   96.879347][ T7703] bond0: (slave bond7): Enslaving as an active interface with an up link
[   96.884894][ T7703] /dev/sr0: Can't open blockdev
[   96.888697][ T7702] /dev/sr0: Can't open blockdev
[   97.012402][ T7723] tmpfs: User quota block hardlimit too large.
[   97.100173][ T7734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.101310][ T7734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.517957][   T42] kauditd_printk_skb: 46 callbacks suppressed
[   97.517969][   T42] audit: type=1400 audit(1792849817.644:690): avc:  denied  { ioctl } for  pid=7743 comm="syz.1.394" path="socket:[23781]" dev="sockfs" ino=23781 ioctlcmd=0x89a3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   97.556311][ T7744] tipc: Started in network mode
[   97.556327][ T7744] tipc: Node identity ac1414aa, cluster identity 4711
[   97.556876][ T7744] tipc: New replicast peer: 172.20.20.187
[   97.557422][ T7744] tipc: Enabled bearer <udp:syz0>, priority 10
[   97.766229][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout
[   97.847449][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'.
[   97.892434][ T7749] tmpfs: Using encoding : utf8-12.1.0
[   97.892971][ T7749] tmpfs: Using encoding : utf8-12.1.0
[   97.893427][ T7749] tmpfs: Using encoding : utf8-12.1.0
[   97.893868][ T7749] tmpfs: Using encoding : utf8-12.1.0
[   97.897684][ T7749] tmpfs: Using encoding : utf8-12.1.0
[   97.898456][ T7749] tmpfs: Using encoding : utf8-12.1.0
[   97.899417][   T42] audit: type=1400 audit(1792849818.024:691): avc:  denied  { create } for  pid=7748 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   97.912866][   T42] audit: type=1400 audit(1792849818.034:692): avc:  denied  { sys_admin } for  pid=7748 comm="syz.3.396" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   97.918111][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.918266][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.918406][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.918570][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.918712][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.918844][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.918977][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.920958][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.921100][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.921181][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.922564][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.922693][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.922835][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.922964][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.923093][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.923329][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.923464][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.923673][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.923813][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.923961][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.924093][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.924196][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.924327][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.924457][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.924591][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926213][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926300][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926379][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926460][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926612][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926698][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.926785][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927318][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927403][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927482][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927568][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927650][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927734][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927814][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927893][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.927974][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928444][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928529][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928609][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928690][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928776][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928856][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.928935][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929016][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929134][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929250][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929329][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929411][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929490][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929569][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929648][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929737][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929818][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929898][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.929978][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.930057][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.930136][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.930255][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.930342][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   97.930423][ T7751] bond0: option mode: unable to set because the bond device has slaves
[   98.003240][   T42] audit: type=1400 audit(1792849818.124:693): avc:  denied  { ioctl } for  pid=7756 comm="syz.1.397" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4020ae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   98.031513][   T42] audit: type=1400 audit(1792849818.154:694): avc:  denied  { connect } for  pid=7758 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.335624][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   98.483800][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.484267][ T5138] Bluetooth: hci0: command 0x040f tx timeout
[   98.484299][ T5138] Bluetooth: hci3: command 0x0c1a tx timeout
[   98.485075][ T5890] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   98.486747][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.486754][ T5890] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[   98.486773][ T5890] usb 6-1: config 0 has no interface number 0
[   98.486798][ T5890] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   98.488309][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.490332][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.490345][ T5890] usb 6-1: Product: syz
[   98.490352][ T5890] usb 6-1: Manufacturer: syz
[   98.490359][ T5890] usb 6-1: SerialNumber: syz
[   98.492177][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.492928][ T5890] usb 6-1: config 0 descriptor??
[   98.492984][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.499195][ T5890] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[   98.675909][ T6298] tipc: Node number set to 2886997162
[   98.680908][ T7765] rxe_eth0 speed is unknown, defaulting to 1000
[   98.708058][ T5890] usb 6-1: USB disconnect, device number 4
[   98.716386][ T5890] yurex 6-1:0.50: USB YUREX #0 now disconnected
[   98.903577][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.903647][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.903803][ T7765] bridge_slave_0: entered allmulticast mode
[   98.905189][ T7765] bridge_slave_0: entered promiscuous mode
[   98.908130][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.908213][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.908308][ T7765] bridge_slave_1: entered allmulticast mode
[   98.909690][ T7765] bridge_slave_1: entered promiscuous mode
[   98.938660][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.940884][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.952972][ T7765] team0: Port device team_slave_0 added
[   98.954421][ T7765] team0: Port device team_slave_1 added
[   98.966462][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.966497][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.966518][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.967877][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.967888][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.967909][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.004132][ T7765] hsr_slave_0: entered promiscuous mode
[   99.004927][ T7765] hsr_slave_1: entered promiscuous mode
[   99.005466][ T7765] debugfs: 'hsr0' already exists in 'hsr'
[   99.005483][ T7765] Cannot create hsr debugfs directory
[   99.162110][ T7765] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   99.166675][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.167327][ T7765] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   99.170758][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.171415][ T7765] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   99.174344][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   99.175017][ T7765] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.177894][   T42] audit: type=1400 audit(1792849819.304:695): avc:  denied  { append } for  pid=7783 comm="syz.2.404" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   99.178456][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.199522][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.199614][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.199811][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.199897][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.230397][ T7793] FAULT_INJECTION: forcing a failure.
[   99.230397][ T7793] name failslab, interval 1, probability 0, space 0, times 0
[   99.230418][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) 
[   99.230431][ T7793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.230439][ T7793] Call Trace:
[   99.230443][ T7793]  <TASK>
[   99.230447][ T7793]  dump_stack_lvl+0x100/0x190
[   99.230490][ T7793]  should_fail_ex.cold+0x5/0xa
[   99.230509][ T7793]  should_failslab+0xc2/0x120
[   99.230526][ T7793]  kmem_cache_alloc_noprof+0x92/0x6a0
[   99.230540][ T7793]  ? anon_vma_clone+0x2b3/0xca0
[   99.230558][ T7793]  anon_vma_clone+0x2b3/0xca0
[   99.230576][ T7793]  __split_vma+0x750/0x1d70
[   99.230595][ T7793]  ? __pfx___split_vma+0x10/0x10
[   99.230610][ T7793]  ? can_vma_merge_after+0x2b5/0x6f0
[   99.230632][ T7793]  vma_modify+0x137b/0x29b0
[   99.230654][ T7793]  ? __pfx_vma_modify+0x10/0x10
[   99.230669][ T7793]  ? queue_pages_test_walk+0x258/0x420
[   99.230685][ T7793]  ? __pfx_find_vma+0x10/0x10
[   99.230696][ T7793]  ? __pfx_queue_pages_test_walk+0x10/0x10
[   99.230712][ T7793]  ? walk_page_test+0x78/0x180
[   99.230728][ T7793]  vma_modify_policy+0x2a4/0x390
[   99.230739][ T7793]  ? __pfx_vma_modify_policy+0x10/0x10
[   99.230754][ T7793]  ? mas_next_slot+0xc05/0x13a0
[   99.230774][ T7793]  mbind_range+0x175/0x550
[   99.230785][ T7793]  do_mbind+0x7dc/0xfd0
[   99.230799][ T7793]  ? __pfx_do_mbind+0x10/0x10
[   99.230816][ T7793]  ? __pfx_get_nodes+0x10/0x10
[   99.230829][ T7793]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   99.230874][ T7793]  kernel_mbind+0x1b7/0x200
[   99.230889][ T7793]  ? __pfx_kernel_mbind+0x10/0x10
[   99.230918][ T7793]  do_syscall_64+0x123/0x790
[   99.230933][ T7793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.230945][ T7793] RIP: 0033:0x7f08c699f559
[   99.230955][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.230966][ T7793] RSP: 002b:00007f08c783b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   99.230978][ T7793] RAX: ffffffffffffffda RBX: 00007f08c6c25fa0 RCX: 00007f08c699f559
[   99.230985][ T7793] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000
[   99.230992][ T7793] RBP: 00007f08c6a36b20 R08: 0000000000000000 R09: 0000000000000002
[   99.230999][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.231006][ T7793] R13: 00007f08c6c26038 R14: 00007f08c6c25fa0 R15: 00007fff0ad15368
[   99.231020][ T7793]  </TASK>
[   99.257165][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.269012][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.270794][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.280888][ T7797] genirq: Flags mismatch irq 1. 00200000 (pcmmio) vs. 00200080 (i8042)
[   99.292042][ T7765] 8021q: adding VLAN 0 to HW filter on device team0
[   99.301312][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.301391][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.309319][   T42] audit: type=1400 audit(1792849819.434:696): avc:  denied  { open } for  pid=7795 comm="syz.1.406" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   99.314462][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.314552][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.349219][ T7765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.349233][ T7765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.378674][ T7800] comedi comedi2: comedi_config --init_data is deprecated
[   99.386177][ T7800] comedi comedi2: comedi_config --init_data is deprecated
[   99.438645][ T7813] netlink: 'syz.2.411': attribute type 10 has an invalid length.
[   99.439008][ T7813] syz_tun: entered promiscuous mode
[   99.442040][ T7813] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   99.520970][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[   99.589960][   T42] audit: type=1400 audit(1792849819.714:697): avc:  denied  { getopt } for  pid=7826 comm="syz.1.414" laddr=::1 lport=58 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   99.613583][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.756783][   T42] audit: type=1400 audit(1792849819.884:698): avc:  denied  { read write } for  pid=7852 comm="syz.4.418" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   99.757112][   T42] audit: type=1400 audit(1792849819.884:699): avc:  denied  { open } for  pid=7852 comm="syz.4.418" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   99.770279][ T7852] ima: policy update failed
[   99.826586][ T7765] veth0_vlan: entered promiscuous mode
[   99.838015][ T7765] veth1_vlan: entered promiscuous mode
[   99.860658][ T7765] veth0_macvtap: entered promiscuous mode
[   99.864369][ T7765] veth1_macvtap: entered promiscuous mode
[   99.878165][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.885242][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.924732][ T5866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.924800][ T5866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.925063][ T5866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.925094][ T5866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.952481][ T7213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.952500][ T7213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.976658][ T7195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.976670][ T7195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.255388][ T7894] X.509: Couldn't decode AuthKeyIdentifier
[  100.309807][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'.
[  100.563310][ T7916] syzkaller0: entered promiscuous mode
[  100.563330][ T7916] syzkaller0: entered allmulticast mode
[  100.564038][ T5138] Bluetooth: hci1: command tx timeout
[  100.565219][ T5790] Bluetooth: hci0: command 0x040f tx timeout
[  100.770661][ T7926] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  100.770677][ T7926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  100.772666][ T7926] vhci_hcd vhci_hcd.0: Device attached
[  100.778482][ T7927] vhci_hcd: connection closed
[  100.782307][ T5824] vhci_hcd vhci_hcd.4: stop threads
[  100.782835][ T5824] vhci_hcd vhci_hcd.4: release socket
[  100.782863][ T5824] vhci_hcd vhci_hcd.4: disconnect device
[  100.846669][ T7930] netlink: 244 bytes leftover after parsing attributes in process `syz.1.439'.
[  100.904428][ T7932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  100.946926][ T7935] use of bytesused == 0 is deprecated and will be removed in the future,
[  100.946940][ T7935] use the actual size instead.
[  101.287912][ T7940] syzkaller0: entered promiscuous mode
[  101.287933][ T7940] syzkaller0: entered allmulticast mode
[  101.300096][ T7940] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.443:7940
[  101.562240][ T7949] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  101.913655][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[  102.016919][ T7956] netlink: 'syz.1.449': attribute type 1 has an invalid length.
[  102.016938][ T7956] netlink: 224 bytes leftover after parsing attributes in process `syz.1.449'.
[  102.121350][ T7961] bridge_slave_1: default FDB implementation only supports local addresses
[  102.454489][   T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  102.487909][ T7968] input: syz0 as /devices/virtual/input/input11
[  102.541739][   T42] kauditd_printk_skb: 9 callbacks suppressed
[  102.541751][   T42] audit: type=1400 audit(1792849822.664:709): avc:  denied  { write } for  pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.589940][   T42] audit: type=1400 audit(1792849822.714:710): avc:  denied  { write } for  pid=7976 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.626442][   T57] usb 6-1: Using ep0 maxpacket: 8
[  102.627126][   T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  102.627954][   T57] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  102.627976][   T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  102.627989][   T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  102.628001][   T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.628013][   T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.628039][   T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.644577][ T5790] Bluetooth: hci0: command 0x040f tx timeout
[  102.644668][ T5138] Bluetooth: hci1: command tx timeout
[  102.688015][   T42] audit: type=1400 audit(1792849822.814:711): avc:  denied  { write } for  pid=7980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.741235][   T42] audit: type=1400 audit(1792849822.864:712): avc:  denied  { write } for  pid=7983 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.806620][   T42] audit: type=1400 audit(1792849822.934:713): avc:  denied  { write } for  pid=7985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.830845][   T57] usb 6-1: usb_control_msg returned -32
[  102.830868][   T57] usbtmc 6-1:16.0: can't read capabilities
[  102.856260][ T7988] ip6erspan0: entered allmulticast mode
[  102.863384][   T42] audit: type=1400 audit(1792849822.984:714): avc:  denied  { write } for  pid=7989 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.949400][   T42] audit: type=1400 audit(1792849823.074:715): avc:  denied  { write } for  pid=7995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.996065][   T42] audit: type=1400 audit(1792849823.124:716): avc:  denied  { write } for  pid=7998 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.073825][   T42] audit: type=1400 audit(1792849823.194:717): avc:  denied  { write } for  pid=8000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.129754][   T42] audit: type=1400 audit(1792849823.254:718): avc:  denied  { write } for  pid=8006 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.444163][   T57] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  103.595660][   T57] usb 7-1: unable to get BOS descriptor or descriptor too short
[  103.595748][   T57] usb 7-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98
[  103.596604][   T57] usb 7-1: config 4 has an invalid interface number: 13 but max is 0
[  103.596617][   T57] usb 7-1: config 4 has no interface number 0
[  103.596635][   T57] usb 7-1: config 4 interface 13 has no altsetting 0
[  103.599124][   T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.599137][   T57] usb 7-1: Product: syz
[  103.599144][   T57] usb 7-1: Manufacturer: syz
[  103.599151][   T57] usb 7-1: SerialNumber: syz
[  103.810860][   T57] ums-realtek 7-1:4.13: USB Mass Storage device detected
[  103.888213][   T57] usb 7-1: USB disconnect, device number 5
[  104.513340][ T8044] netlink: 'syz.2.466': attribute type 39 has an invalid length.
[  104.570016][ T2324] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  104.570033][ T2324] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  104.574172][    C1] ------------[ cut here ]------------
[  104.574180][    C1] workqueue: cannot queue hci_cmd_timeout on wq hci2
[  104.574208][    C1] WARNING: kernel/workqueue.c:2436 at __queue_work+0xe18/0x16f0, CPU#1: syz.2.466/8044
[  104.587745][    C1] Modules linked in:
[  104.589120][    C1] CPU: 1 UID: 0 PID: 8044 Comm: syz.2.466 Not tainted syzkaller #0 PREEMPT(full) 
[  104.592452][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.596220][    C1] RIP: 0010:__queue_work+0xe1c/0x16f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  104.598152][    C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d 88 38 99 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03
[  104.605478][    C1] RSP: 0018:ffffc900006a0b68 EFLAGS: 00010046
[  104.607797][    C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007c3094e
[  104.610540][    C1] RDX: ffff888038fe9978 RSI: ffffffff8ad47470 RDI: ffffffff926b7260
[  104.613686][    C1] RBP: ffff88803e184a58 R08: 0000000000000007 R09: 0000000000000000
[  104.616307][    C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff888038fe9800
[  104.619484][    C1] R13: 0000000000000000 R14: 1ffff920000d418e R15: ffffffff81d242c0
[  104.622233][    C1] FS:  00007f08c783b6c0(0000) GS:ffff8880d45c3000(0000) knlGS:0000000000000000
[  104.624326][ T8048] overlayfs: failed to resolve './file1': -2
[  104.627705][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.630358][    C1] CR2: 00007f08c781ad58 CR3: 000000005c116000 CR4: 0000000000352ef0
[  104.633115][    C1] Call Trace:
[  104.634439][    C1]  <IRQ>
[  104.635641][    C1]  ? lock_acquire+0x1d1/0x380
[  104.637550][    C1]  ? call_timer_fn+0x11d/0x5f0
[  104.639291][    C1]  ? __pfx___queue_work+0x10/0x10
[  104.641103][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  104.643391][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  104.645502][    C1]  call_timer_fn+0x198/0x5f0
[  104.647123][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  104.649067][    C1]  ? __run_timers+0x560/0xb00
[  104.650439][    C1]  ? __run_timers+0x560/0xb00
[  104.652229][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  104.654583][    C1]  __run_timers+0x570/0xb00
[  104.656103][    C1]  ? __pfx___run_timers+0x10/0x10
[  104.658014][    C1]  ? lock_acquire+0x1d1/0x380
[  104.659901][    C1]  ? _raw_spin_lock_irq+0x45/0x50
[  104.661556][    C1]  run_timer_base+0x114/0x190
[  104.663481][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  104.665205][    C1]  run_timer_softirq+0x1a/0x50
[  104.666978][    C1]  handle_softirqs+0x216/0xa20
[  104.668907][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  104.670968][    C1]  ? _raw_spin_unlock+0x28/0x50
[  104.672593][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  104.674843][    C1]  __irq_exit_rcu+0x178/0x220
[  104.676742][    C1]  irq_exit_rcu+0x9/0x30
[  104.678247][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  104.680314][    C1]  </IRQ>
[  104.681519][    C1]  <TASK>
[  104.682735][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.684706][    C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0
[  104.687304][    C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 a3 9b 0e 0a e8 5e 81 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[  104.694486][    C1] RSP: 0018:ffffc9000cbbed50 EFLAGS: 00000202
[  104.696575][    C1] RAX: 0000000000001215 RBX: ffff888028b3a580 RCX: 0000000000000040
[  104.700347][    C1] RDX: 0000000000000001 RSI: ffffffff8e60f71c RDI: ffff888028b3bc98
[  104.703468][    C1] RBP: ffffc9000cbbeda8 R08: 0000000000000001 R09: 0000000000000000
[  104.706238][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880206c0000
[  104.708824][    C1] R13: 0000000000000000 R14: ffffffff9268ba24 R15: ffff88806a13c480
[  104.711930][    C1]  __schedule+0x1266/0x6990
[  104.713795][    C1]  ? __lock_acquire+0x5c0/0x1f40
[  104.715715][    C1]  ? __pfx___schedule+0x10/0x10
[  104.717352][    C1]  ? find_held_lock+0x2b/0x80
[  104.719270][    C1]  ? schedule+0x225/0x2c0
[  104.721021][    C1]  schedule+0xdd/0x2c0
[  104.722577][    C1]  synchronize_rcu_expedited+0x390/0x440
[  104.724548][    C1]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  104.727009][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  104.729055][    C1]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  104.730969][    C1]  synchronize_net+0x7f/0xa0
[  104.732830][    C1]  wg_peer_remove_all+0x21f/0x3a0
[  104.734858][    C1]  ? __pfx_wg_peer_remove_all+0x10/0x10
[  104.736680][    C1]  ? synchronize_net+0x84/0xa0
[  104.738616][    C1]  ? wg_socket_reinit+0x1cf/0x370
[  104.740635][    C1]  wg_destruct+0x1c3/0x3f0
[  104.742245][    C1]  ? __pfx_wg_destruct+0x10/0x10
[  104.744041][    C1]  netdev_run_todo+0x9dd/0x1620
[  104.746010][    C1]  ? unregister_netdevice_many_notify+0x15c8/0x1e00
[  104.748553][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  104.750376][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  104.753073][    C1]  ? unregister_netdevice_queue+0x22e/0x3c0
[  104.755188][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  104.757425][    C1]  ? __nla_parse+0x40/0x60
[  104.759235][    C1]  rtnl_dellink+0x47e/0xb30
[  104.760695][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  104.763034][    C1]  ? kasan_save_free_info+0x3b/0x70
[  104.764805][    C1]  ? __kasan_slab_free+0x5f/0x80
[  104.766416][    C1]  ? kmem_cache_free+0x127/0x6c0
[  104.768426][    C1]  ? __pfx_rtnl_dellink+0x10/0x10
[  104.770480][    C1]  ? dev_hard_start_xmit+0x121/0x760
[  104.772220][    C1]  ? netlink_unicast+0x708/0x950
[  104.774213][    C1]  ? netlink_sendmsg+0x9ac/0x10c0
[  104.776286][    C1]  ? __lock_acquire+0x5c0/0x1f40
[  104.777882][    C1]  ? hook_capable+0x1bc/0x500
[  104.779750][    C1]  ? lock_acquire+0x1d1/0x380
[  104.781645][    C1]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  104.783494][    C1]  ? find_held_lock+0x2b/0x80
[  104.785209][    C1]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  104.787300][    C1]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  104.789323][    C1]  ? __pfx_rtnl_dellink+0x10/0x10
[  104.790975][    C1]  rtnetlink_rcv_msg+0x95e/0xe90
[  104.792978][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.795191][    C1]  netlink_rcv_skb+0x159/0x420
[  104.796742][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.798920][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.801060][    C1]  ? netlink_deliver_tap+0x1ae/0xb50
[  104.802843][    C1]  netlink_unicast+0x668/0x950
[  104.804772][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  104.806924][    C1]  netlink_sendmsg+0x9ac/0x10c0
[  104.808660][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.810626][    C1]  ? selinux_socket_sendmsg+0x198/0x2f0
[  104.812846][    C1]  ? ____sys_sendmsg+0xa99/0xc30
[  104.814678][    C1]  ____sys_sendmsg+0xa99/0xc30
[  104.816350][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.818492][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.820644][    C1]  ___sys_sendmsg+0x190/0x1e0
[  104.822146][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.824230][    C1]  ? futex_wait+0x11e/0x370
[  104.826082][    C1]  ? find_held_lock+0x2b/0x80
[  104.827883][    C1]  __sys_sendmsg+0x160/0x210
[  104.829491][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  104.831579][    C1]  do_syscall_64+0x123/0x790
[  104.833459][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.835427][    C1] RIP: 0033:0x7f08c699f559
[  104.837036][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.844005][    C1] RSP: 002b:00007f08c783b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.846710][    C1] RAX: ffffffffffffffda RBX: 00007f08c6c25fa0 RCX: 00007f08c699f559
[  104.849732][    C1] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000006
[  104.852403][    C1] RBP: 00007f08c6a36b20 R08: 0000000000000000 R09: 0000000000000000
[  104.855236][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.858083][    C1] R13: 00007f08c6c26038 R14: 00007f08c6c25fa0 R15: 00007fff0ad15368
[  104.860900][    C1]  </TASK>
[  104.862080][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  104.864963][    C1] CPU: 1 UID: 0 PID: 8044 Comm: syz.2.466 Not tainted syzkaller #0 PREEMPT(full) 
[  104.868161][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.871835][    C1] Call Trace:
[  104.872939][    C1]  <IRQ>
[  104.874116][    C1]  dump_stack_lvl+0x100/0x190
[  104.875913][    C1]  vpanic+0x553/0x970
[  104.877181][    C1]  ? __pfx_vpanic+0x10/0x10
[  104.878857][    C1]  panic+0xd1/0xe0
[  104.880421][    C1]  ? __pfx_panic+0x10/0x10
[  104.881991][    C1]  check_panic_on_warn.cold+0x19/0x34
[  104.884000][    C1]  ? __queue_work+0xe18/0x16f0
[  104.885932][    C1]  __warn.cold+0x191/0x318
[  104.887639][    C1]  __report_bug+0x30f/0x440
[  104.889015][    C1]  ? __queue_work+0xe18/0x16f0
[  104.890855][    C1]  ? __pfx___report_bug+0x10/0x10
[  104.892795][    C1]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  104.894757][    C1]  ? __pfx_sched_balance_find_src_group+0x10/0x10
[  104.897056][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  104.899165][    C1]  report_bug_entry+0xe2/0x290
[  104.901085][    C1]  ? __queue_work+0xe1c/0x16f0
[  104.902638][    C1]  handle_bug+0x1cd/0x2a0
[  104.904390][    C1]  exc_invalid_op+0x17/0x50
[  104.906199][    C1]  asm_exc_invalid_op+0x1a/0x20
[  104.907935][    C1] RIP: 0010:__queue_work+0xe1c/0x16f0
[  104.909896][    C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c5 08 00 00 48 8d 3d 88 38 99 10 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03
[  104.917044][    C1] RSP: 0018:ffffc900006a0b68 EFLAGS: 00010046
[  104.919472][    C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007c3094e
[  104.922371][    C1] RDX: ffff888038fe9978 RSI: ffffffff8ad47470 RDI: ffffffff926b7260
[  104.925299][    C1] RBP: ffff88803e184a58 R08: 0000000000000007 R09: 0000000000000000
[  104.928433][    C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff888038fe9800
[  104.931174][    C1] R13: 0000000000000000 R14: 1ffff920000d418e R15: ffffffff81d242c0
[  104.934317][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  104.936351][    C1]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  104.938414][    C1]  ? __queue_work+0xdea/0x16f0
[  104.940380][    C1]  ? lock_acquire+0x1d1/0x380
[  104.942129][    C1]  ? call_timer_fn+0x11d/0x5f0
[  104.943848][    C1]  ? __pfx___queue_work+0x10/0x10
[  104.945781][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  104.947958][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  104.949773][    C1]  call_timer_fn+0x198/0x5f0
[  104.951563][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  104.953618][    C1]  ? __run_timers+0x560/0xb00
[  104.955536][    C1]  ? __run_timers+0x560/0xb00
[  104.957034][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  104.959380][    C1]  __run_timers+0x570/0xb00
[  104.961232][    C1]  ? __pfx___run_timers+0x10/0x10
[  104.963014][    C1]  ? lock_acquire+0x1d1/0x380
[  104.964801][    C1]  ? _raw_spin_lock_irq+0x45/0x50
[  104.966863][    C1]  run_timer_base+0x114/0x190
[  104.968667][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  104.970457][    C1]  run_timer_softirq+0x1a/0x50
[  104.972403][    C1]  handle_softirqs+0x216/0xa20
[  104.974349][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  104.976137][    C1]  ? _raw_spin_unlock+0x28/0x50
[  104.978054][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  104.980336][    C1]  __irq_exit_rcu+0x178/0x220
[  104.982082][    C1]  irq_exit_rcu+0x9/0x30
[  104.983410][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  104.985504][    C1]  </IRQ>
[  104.986701][    C1]  <TASK>
[  104.987908][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.990008][    C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0
[  104.992471][    C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 a3 9b 0e 0a e8 5e 81 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[  104.999699][    C1] RSP: 0018:ffffc9000cbbed50 EFLAGS: 00000202
[  105.002009][    C1] RAX: 0000000000001215 RBX: ffff888028b3a580 RCX: 0000000000000040
[  105.004885][    C1] RDX: 0000000000000001 RSI: ffffffff8e60f71c RDI: ffff888028b3bc98
[  105.008051][    C1] RBP: ffffc9000cbbeda8 R08: 0000000000000001 R09: 0000000000000000
[  105.010815][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880206c0000
[  105.013957][    C1] R13: 0000000000000000 R14: ffffffff9268ba24 R15: ffff88806a13c480
[  105.016732][    C1]  __schedule+0x1266/0x6990
[  105.018582][    C1]  ? __lock_acquire+0x5c0/0x1f40
[  105.020610][    C1]  ? __pfx___schedule+0x10/0x10
[  105.022300][    C1]  ? find_held_lock+0x2b/0x80
[  105.024077][    C1]  ? schedule+0x225/0x2c0
[  105.025822][    C1]  schedule+0xdd/0x2c0
[  105.027462][    C1]  synchronize_rcu_expedited+0x390/0x440
[  105.029328][    C1]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  105.031694][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  105.033973][    C1]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  105.036078][    C1]  synchronize_net+0x7f/0xa0
[  105.037955][    C1]  wg_peer_remove_all+0x21f/0x3a0
[  105.039986][    C1]  ? __pfx_wg_peer_remove_all+0x10/0x10
[  105.042092][    C1]  ? synchronize_net+0x84/0xa0
[  105.043974][    C1]  ? wg_socket_reinit+0x1cf/0x370
[  105.045890][    C1]  wg_destruct+0x1c3/0x3f0
[  105.047676][    C1]  ? __pfx_wg_destruct+0x10/0x10
[  105.049685][    C1]  netdev_run_todo+0x9dd/0x1620
[  105.051651][    C1]  ? unregister_netdevice_many_notify+0x15c8/0x1e00
[  105.054172][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  105.056211][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  105.058733][    C1]  ? unregister_netdevice_queue+0x22e/0x3c0
[  105.061075][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  105.063337][    C1]  ? __nla_parse+0x40/0x60
[  105.064846][    C1]  rtnl_dellink+0x47e/0xb30
[  105.066692][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  105.069177][    C1]  ? kasan_save_free_info+0x3b/0x70
[  105.071201][    C1]  ? __kasan_slab_free+0x5f/0x80
[  105.073139][    C1]  ? kmem_cache_free+0x127/0x6c0
[  105.075105][    C1]  ? __pfx_rtnl_dellink+0x10/0x10
[  105.077009][    C1]  ? dev_hard_start_xmit+0x121/0x760
[  105.079069][    C1]  ? netlink_unicast+0x708/0x950
[  105.081007][    C1]  ? netlink_sendmsg+0x9ac/0x10c0
[  105.083092][    C1]  ? __lock_acquire+0x5c0/0x1f40
[  105.084922][    C1]  ? hook_capable+0x1bc/0x500
[  105.086713][    C1]  ? lock_acquire+0x1d1/0x380
[  105.088486][    C1]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  105.090231][    C1]  ? find_held_lock+0x2b/0x80
[  105.091730][    C1]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  105.093336][    C1]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  105.094942][    C1]  ? __pfx_rtnl_dellink+0x10/0x10
[  105.096522][    C1]  rtnetlink_rcv_msg+0x95e/0xe90
[  105.098079][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  105.099794][    C1]  netlink_rcv_skb+0x159/0x420
[  105.101253][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  105.102931][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.104914][    C1]  ? netlink_deliver_tap+0x1ae/0xb50
[  105.107002][    C1]  netlink_unicast+0x668/0x950
[  105.108914][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  105.111006][    C1]  netlink_sendmsg+0x9ac/0x10c0
[  105.112934][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.115021][    C1]  ? selinux_socket_sendmsg+0x198/0x2f0
[  105.117161][    C1]  ? ____sys_sendmsg+0xa99/0xc30
[  105.119065][    C1]  ____sys_sendmsg+0xa99/0xc30
[  105.120862][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.122730][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.124357][    C1]  ___sys_sendmsg+0x190/0x1e0
[  105.125835][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.127504][    C1]  ? futex_wait+0x11e/0x370
[  105.128971][    C1]  ? find_held_lock+0x2b/0x80
[  105.130664][    C1]  __sys_sendmsg+0x160/0x210
[  105.132415][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  105.134350][    C1]  do_syscall_64+0x123/0x790
[  105.136142][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.138357][    C1] RIP: 0033:0x7f08c699f559
[  105.139951][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.146509][    C1] RSP: 002b:00007f08c783b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.149647][    C1] RAX: ffffffffffffffda RBX: 00007f08c6c25fa0 RCX: 00007f08c699f559
[  105.152622][    C1] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000006
[  105.155538][    C1] RBP: 00007f08c6a36b20 R08: 0000000000000000 R09: 0000000000000000
[  105.158335][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.160710][    C1] R13: 00007f08c6c26038 R14: 00007f08c6c25fa0 R15: 00007fff0ad15368
[  105.163155][    C1]  </TASK>
[  105.164714][    C1] Kernel Offset: disabled
[  105.166047][    C1] Rebooting in 86400 seconds..