last executing test programs:

17.671287516s ago: executing program 2 (id=6):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000140)={0x1, 0x0, 0x7, 0x1})
mmap(&(0x7f00004e3000/0x2000)=nil, 0x2000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)

17.571256415s ago: executing program 2 (id=7):
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x300}})
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3)
sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, 0x0, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0a390305c9"], 0x6)
bind$x25(r3, &(0x7f0000000100), 0x12)
listen(r3, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88)

17.459939736s ago: executing program 2 (id=12):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854)
socket$packet(0x11, 0x3, 0x300)

17.37183046s ago: executing program 2 (id=13):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x2800810, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x262)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r3, 0x701, 0x74bd2b, 0x2, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x4, 0xa, 0xa}], 0x10, 0x7ff}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="81020200fea901ffffffff34000002d66c0001000a0400000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)

17.230825646s ago: executing program 2 (id=14):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40402, 0x0)
openat(r0, &(0x7f0000000340)='./file0\x00', 0x4c4000, 0x60)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c00078008000640000075000500010006000000050005000200000005000400000000000900020073797a010000000016000300686173683a6e65742c706f72742c6e65740000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[], 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={r2, 0x20, &(0x7f0000002400)={&(0x7f0000001300)=""/4096, 0x1000, <r3=>0x0, &(0x7f0000002300)=""/252, 0xfc}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
open$dir(&(0x7f0000000040)='./file0\x00', 0x40402, 0x0) (async)
openat(r0, &(0x7f0000000340)='./file0\x00', 0x4c4000, 0x60) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c00078008000640000075000500010006000000050005000200000005000400000000000900020073797a010000000016000300686173683a6e65742c706f72742c6e65740000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async)
write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[], 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={r2, 0x20, &(0x7f0000002400)={&(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000002300)=""/252, 0xfc}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)

15.872002012s ago: executing program 2 (id=23):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf25030000000000000008000500a9a1a888eef7b6e6bd24b6359743cd00b9acba9360877de5bbc3754a6d586737896d3f1690fc9586d761bfd7dccf4a5aee4a7544feb4b62716982b8330a0518a52bb532a4788eb8e40ebbd6071b85256569d23f9a6f42809317bc6b5f8ec06678605e56ae9bc87eb383a29e59e26bed4e829b9136ac4903334d50c37a13b9aaa69f5b6cf7df498fe80de1a806f6c279db3db95ac62a11f65f7bb767311ce48adc63ef04a10a8f167d52edbc36c158c780036ced219a0261b9e39dab8b3e04ae1280988d7b334c0d219fa289d18b32398", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x8004)
mount$nfs4(&(0x7f00000000c0)='\xfe%\'&,&\'S:\\\\\x00', 0x0, 0x0, 0x80000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]})

15.826047392s ago: executing program 32 (id=23):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf25030000000000000008000500a9a1a888eef7b6e6bd24b6359743cd00b9acba9360877de5bbc3754a6d586737896d3f1690fc9586d761bfd7dccf4a5aee4a7544feb4b62716982b8330a0518a52bb532a4788eb8e40ebbd6071b85256569d23f9a6f42809317bc6b5f8ec06678605e56ae9bc87eb383a29e59e26bed4e829b9136ac4903334d50c37a13b9aaa69f5b6cf7df498fe80de1a806f6c279db3db95ac62a11f65f7bb767311ce48adc63ef04a10a8f167d52edbc36c158c780036ced219a0261b9e39dab8b3e04ae1280988d7b334c0d219fa289d18b32398", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x8004)
mount$nfs4(&(0x7f00000000c0)='\xfe%\'&,&\'S:\\\\\x00', 0x0, 0x0, 0x80000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]})

3.11162226s ago: executing program 3 (id=212):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
read(r0, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r2, 0xfffffff7, 0x0)
write$binfmt_format(r2, &(0x7f0000000140)='1\x00', 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0xd0, 0x1f0, 0xd0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@tos={{0x28}, {0x5, 0xff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xff000000, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7, 0x1}}, './file0\x00'})
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r6, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000000b00)=""/4081, 0x1000, 0x0, 0x1, 0x2}}, 0x78)
write$vhost_msg_v2(r6, &(0x7f0000000500)={0x2, 0x0, {&(0x7f0000001c00)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000040)=""/101, 0x65, 0x0, 0x3, 0x2}}, 0x48)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x302, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffe0, 0x2}, {0x6, 0xb}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4014004}, 0x400)
write$vhost_msg_v2(r6, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000440)=""/174, 0xae, 0x0, 0x2, 0x2}}, 0x48)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f0000000100), 0x4)

2.940849946s ago: executing program 3 (id=218):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x44}, @l2cap_cid_signaling={{0x40}, [@l2cap_info_rsp={{0xb, 0x8, 0x3c}, {0xa2e3, 0x9, "ee43b56a679b07d9a6d4f3a7f193eb6f6c2851549b8c66d7c7a4e5f5b4356d026c664d8bcaff0e52df295fedb6b200"/56}}]}}, 0x49)

2.872208368s ago: executing program 3 (id=220):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', <r1=>0x0})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x800)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netpci0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
socket(0x10, 0x2, 0x0)
setns(0xc9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fa87e760bc592f3cd82f3bafc55287e6e937fed30cf070cad8a7d56dbe982c8ad6935792e2beb8f86240567dc77888dbee89a06a7575a705f94a56a62be4f27c1b9add9abe7164bbc04fca2e9d06134bf17b40c7e38e9b7e4ebb7f09152ed0ee", 0x60}, {&(0x7f0000000200)="db3ba967799364e0d97876dc1b052f29e8614ab2cfc5b57033058c505fae5363feceac53ebac579048177a436eda67db5c9354ca9ef956d24e4cfd00ca4e160136a4b5fff683bd55bc9cde801a5b6de79ab5bf723841a43d3db09c6e740f00aada12bd7bac9d4bc305f5f60a00c8014e0993a1c2ab6429794a48a4c6cabf6be954f09a64ddc9a7f9", 0x88}, {&(0x7f00000002c0)="e9a84aa5", 0x4}, {&(0x7f0000000340)="7aa0a0c8f7eaf05dd939dd4c6d96fee476c790e98bc1a01e19bef35ed57203f885b542801f5052f7cfb86951382891a38f43aa932648ebba71a5edad52e181d19e0615c83c08d68a20b7199e293b3bed3c05842bb77fdb4eff897a18f219bad5c6d6bd5b42d2a0758e7d26b8688bbd2701d871b78fbcdc7f28ecce1069564cb9b4182bfea64fcdb103d454aee493b2a49b77ec4467253a", 0x97}, {&(0x7f0000000400)="9196071a84f82a3009e53a84128aa5fec1c55320ad3729a8773e4e7d40879ce69c98d6adedee1fd73bd11f38b9e104221489b1eef30b46501a", 0x39}], 0x5, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x212e}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}], 0xa8}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x1e4, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1b4, 0x2, [@TCA_FLOWER_ACT={0x1b0, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x5, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x15c, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23a1, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x19d9, 0x30000002}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x69e, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe17, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x8, 0x1, 0x3, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11fb, 0x1}}]}, {0xda, 0x6, "8d3c630195155466e4ed0beceaacdee684a7129e2e7aa36689fe55be0ef19fb68fbe084b7ba58a444ec967526a3e7357509186c9a6fa4e8022d817c36b26b3dc4831d8caafb798dee3e31e15d0707aa7676c3e3c10a55be926e1c03fa946c9f03198b11284a618b98a0a192e2f247cbf640a4927e8851ea76d20d679c810da0299ea3888117810eb0616a1adbd37bf5fbb8d2e30995f76e9b5a6849499bb04ca6e4d25525ce4176b93e6d1d583968eb8c451abb51e7896107ff53312c3a68819d6dde9e80cee3c242b1dc9e573d063e3d0bfaf2b7400"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)

2.819041493s ago: executing program 0 (id=222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x163480, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0)
pread64(r1, 0x0, 0x0, 0x1)
socket$packet(0x11, 0x2, 0x300)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="102a05f4ffffff000c001a800800028004000180300012800b0001006272696467650000200002800800050001da000005002c00020000000c00210000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x400408c)

2.761447783s ago: executing program 0 (id=224):
creat(&(0x7f00000000c0)='./file0\x00', 0xe4) (async)
setns(0xc9, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000100)) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async)
r4 = dup(r3)
getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x9, 0x6, 0x7, 0x4, 0x1000, 0x8, 0x3da7, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x7, 0x1, 0xc0000000, 0x2}}, &(0x7f0000000480)=0xb0) (async)
write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8ef34bb2bac8dd"], 0x13) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @void}, 0x10) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0)

2.701774566s ago: executing program 0 (id=225):
setns(0xc9, 0x0)
r0 = socket(0xf, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000000)="09000000e700140000007e7bfbf788a83baa9900d6f10806950088a8000088a8", 0x69, 0x4042810, &(0x7f0000000080)={0x11, 0x88a8, r8, 0x1, 0x8, 0x6, @broadcast}, 0x14)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000007911b8000000000003fffffffffff0009500000c0038f6d115410e8781d89f999d87bf87000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r11 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r11, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='Gb', 0x2}, {&(0x7f0000000b40)="22003c93b682ef5cb6dc5c145ff000000000", 0x12}], 0x2}, 0x24008881)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x2c, 0x2d, 0x400, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff2}, {0x1, 0xd}, {0x10, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c894}, 0x4048000)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000140)=""/209, &(0x7f0000000280)=0xd1)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4d00000010001fff000000000000006a261cb600", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x3c}}, 0x0)

2.621987027s ago: executing program 0 (id=226):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x8, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfefffffffffffff8, 0x1fe, 0x6, 0x7fff, 0x2, 0x5})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000e0000000500000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="019800000313000020001280080400000000000000000280080003001f35ee2f08000c0040000000"], 0x40}}, 0x0)

1.969194067s ago: executing program 3 (id=231):
setns(0xc9, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x2f6, @time={0x300}, 0x0, {0x0, 0x1}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88)

1.891686272s ago: executing program 3 (id=233):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000035000101ffffffffffff000004000080"], 0x14}], 0x1}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x358, 0x10002) (async)
ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffff81) (async)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001900), 0x2) (async)
r3 = getpid()
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
clock_gettime(0x6, &(0x7f0000000580)) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x1000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001940)=<r7=>0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001980)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000001a80)=0xe8) (async)
stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}) (async, rerun: 32)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x83}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r11 = socket$unix(0x1, 0x5, 0x0) (async)
r12 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64)
r13 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={<r14=>0x0}, &(0x7f0000001bc0)=0xc) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000001d00)=0xe8) (async)
r16 = getegid()
sendmsg$netlink(r0, &(0x7f0000001e40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000000200)={0x34c, 0x41, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x76, 0xec, 0x0, 0x1, [@generic="6dbb7bb1b8f73034047add8a0ef371", @typed={0xc, 0x26, 0x0, 0x0, @u64=0x6}, @generic="7860d44b2028f802b6405f610139b881318e26ed5223270b5ac6c9e790fd0eb5321aabde469ed9fa426ead5802a62f1efd04cf58be2caef174c4f979f403808a3501f42470f004", @typed={0x4, 0x10f}, @nested={0x4, 0x6d}, @typed={0x8, 0x128, 0x0, 0x0, @ipv4=@remote}]}, @generic="f14425a00f28d7a58f13f5b07170e3d632f5793087d25c08a7bd3aaaec1e458847592f693cf312add4b147a34b087f2849aa6b4dc3c6b9d1424d18aeeb9944be78e428c59746c4b72632591f6413c0e0648bdb6aa03083abd721a90c34ed12b86452ff1617c48c9ee72d076484330f8aa2f486022c4fa7aa84ed0314c1bf68df17931ec2c6b335e44e6e3f03e9995c7091e555269b45f9818c4eb0cbc3b4c2ead12ac0ba4c505d897e33e8807d4bbaec4c", @generic="98a3f2e466ecca3f50011600bd008e23b116f873872f1a02f7637a24349873feb89e3f75883d7112156ebdab5ed6bded4b8d167db2d073e711e0262e0f1a014a022f6da3169d8184a312b017559570a7a48ecdcec72486c0bd2901b88b3838ae9c612f5eef54854385d9dc3ab59a995969866092ea8db12ab237dbf93af03ede534c11426b88e095cd8fcb837a2461bab4483e80de6c7d4ae59c85a3270bc426728233e53d75802aed0edf2758689ad2b805ec", @typed={0x4, 0xd8}, @nested={0x10, 0x91, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0x8, 0xff, 0x0, 0x0, @fd}]}, @generic="e84a6ce7488c7a79fa3800a5aef2c045dfc00910dba5837f448a71b7079687daeb72126eae224409fb39fb37fbccb3cef7ed35929e8ea10666f82e523caccc10a63db90ef5e8feec2faed2b98a754309cb86cfbfa38cec787eec88f419a006148132410ca4c8f9543314ab36b6bdbe8f5ef46e6be9123c25d16d53a5bec2f95976b7e72922615aa953f3d4107887cd01aba69f95f8fe1e2b262f28dc31dc33a7", @generic="92408b1785a03cc939c680d7ce0da2f69e29966f11d0bf1257aa6d4d77e84dabd34f4a27c3f83326f19ad0e5121cd29822a4150e930f786f4fd06da07fcad2f06a47f0f90f563bc95ea259c2bfe3640bfe71f6dee0463a0b3ba19d35a9e1a4e9148cd77da3d69867ac169883eb2cc3b50c17cc37529aa4453593c1ab2597ded620d467436bad4beef6eb162029cf72743fbd55ccc9f6ff4ebdf663abcb6216affb46d373ef75a6fc18"]}, 0x34c}, {&(0x7f00000021c0)=ANY=[@ANYBLOB="0c130000340002002cbd7000ffdbdf25ac10a48041fd53fc38ccbd7b8fec182082e286c355eb6f4b0839e62df2e9b69fc862d6e3e7c405ea7e36322bd86894eb220e7cd0fb99173abd570b42c2d6b8abc1ad2e2d2322c06c4c76972d637e4a9b2cf7653635577fd081ab25d9b0207b48357fa917177e76abca770b9badb62b02a905a8f921c0a22287ab66db7009b044b75832659837d197ed6ddd3ce4451ec046b076bd4dc485f1d826405cb4a6cb5c97c0bdbb1856c354baf6c0dc54c7956d12041e7517fd566d4ecb324eacc632b36c0f0d3891c0e5c890614f19e80a1cb14b5c4eee264706a733276027efdf5cc2c1c277b237bca9d4bb733a05a862e4ace1cf6864c23a8527892e9240d43d9c1cc294815af51d1d749cc7ad77c5511994fbf49fa9993d344ec8ec9bb569c47fb6ae23e8edbb843eacf8d5498d6babf8ac87c64e0691b97e9060c140fdb2a82837770f86fbbc848e30dac46b8c7504e35c74ba026142cf59762a0a05f622d2ea33ad691d36a489fc3e927a059c90974a1ea98f29fc0aec8eef329779b7414c4c2400c730ce284a9dd4ffba533b49199bf1cfceded2a161709717c53ceadfdae34857b6c1477c601b2f5e259d29a960791aa6be83b5ee3e485e259f08ddaeede93a8320972dee874c27daef4afc209d3179a3661f63735b1f88215220327ef4088ea72a3d95293183a74568d042ccd8f4e99a3f664e4b9e69c06d3e5e66c85d6ffb7919210308087018e934532a1eab5d708405ff2ea6e413098abdf17ce93a91d7e9c8bd96a8e8fa2bb274b8fdcb18c0c58a22135e93b89c2a4515323f8ace004d9bf15188e60a50ecddc0d67489f3c439398d7b3261298bce036716aa375bdd93f3211a445e95cb9142e78595e23af26c16342c722214d4057878a8f78647361380807310c10fd60d2564c3521fd5376f337d982c673f845a2c0afd151201c55d9efdfc01f561cebd0daff39f692976103fbcecf79efb309ddb84fe4d49a5a8ae9a50d69a3464ea12d5313ab593daef923f2b19b9ee91a9d4d240caba06d1e1e9d2d6cbb79b45f20df6fe8f04779cb54f3e1de78a59ae225bce86c585e897348ba957fa7ea50ef223b62d1bb32e5ecb82ff978e38015f75bee41b8200f1505fca80913e91ef8caca36ad9d7d98606ebdc3338b7e3deae8f2e53129ba7dd28db828802d44a1a3d8d589e7f1adaa26e7be11c045513c36c32d91a6f00abb1251086cdbae8714f7f9d2895b1dfdcfc51f0d98893cbb48193e4937ede9dee5962f0a190fe21e8f761c0ccdac10613a27ff4bedace8604ca3fa037cf666275fa480dae7fb97854b0f6705f1f97977219f65e3918a15e3ed04ed7f8c713a51571545d23795cf391809b3ac217e0208fe494c3513ec34de087c3541caa4fe87c02e0fef05a70f942038b65a98e267c13d4a1c3b0b7b0a96d190cdc09d332e96edf5be50c06ff6563ea75de81806baf6ee562b2db4a2c0de8bded6c18c3be0bcaa017984ea397c57dc04e864fae2e18a39d22ca02319ff5b1ec0e15cdf58a0c55cd8f94920771cde0156156d59624556880d11176c1ee501fe884fdfa97fde6e338126af4fa3e085e1b34851c0d6e991f560f96948ccde88f55638828e5862ec9168d28d9a2452a739d7cbe970736db690719287ac3a45cb5a0938b06e20c0191e1a3cc90af2b576d0f1a2c7df7a5daeb69be82463cfaecda7e3bc473c63542cfcef789525b33e5bdd49ce01ae04da8874f63c17358a6cf16a554a0b23bbfd8a6d71ba743d1b1d30ef05ed079816ea10851394f316df29c618288e691b38c3c8f1599ff61aeb4b19ecfe7c9eab8c6d15298556c24c9f3f7045f1b12ba057fb9f9138e114c2c20c7424da7004249fd749fa490aad87abd51b30e6922599078e91e757e0c9cd9fd5790f7df1c0bcc848f84f283dfd3b0eefc278e37bc245b5ba93d00b45cbbcebb6df62edba7b328b2b0144103946a8b897609bd91f36937906e8a70b5d91626ca5fd81b0206f301bd60b5cf016a5c12592908222daa11aaa3ddb891e39bb07d98ef77f22eeb2a85fde7a4ff5d84e995043e1bd942f446ecf8508c1179455001246c3c5a1c635925a5123f20bed111e527e86750b92f5ef97d3c01ea40055172798ec67766217b7442d27b25cbd9811258b69d4e90959fe0e3e39c505fe8ceebe6474c57f2e705294bff558574d317030df382eda7e091fd5edc43a7f579e681bc84779f99dd299a250e9e8dd7df4f0f79004e05a1c3ab913179767fa381054873ff543f7313b17f0c8cbec0382fc34c826a719cd3e9f03db5f36fe0d78fe5d31551e79c6db83d900aca8fa0b290a6e7dca42ae39af36a72347c512cd95137015006365844e0a19850340bad3ab80ab61b7c4ce730cffb7d0e132e45649471cddf393e6979024136ff0b5d8aa3595d9fcdb8d7fbef2883276ce01fb66a517f279d625a4f5f5e01b48617a79ba70ed11deab3c19fe34449e0536f28cd499873570f9a85e30f503795d5e6431b12bbc8f6cf2e2f59036c048876d3b41ef25b88ac6ac5c6b87a0d8c45bace4d5bd2a624c9d8c1c5881b66ae3b6c1ace4d0ec62e4ae8cbc81ecdc1c1dea5e62ca76869d18c50d229cc404c19e973cce5ba351ab101e388f1add51b44193339cbafced5eff7e4d482dc2605c73dbb9ba157bf9ade78fe21395966bea2b70f088bc54cfc59d8ca19b002ae27bebc4a03de1db1ffbcc6af1ef2d1e4dc3d68e6d321e1d7b2cbf4520415a07a9d7119816faa8ab9d791070eac732c033c9c800d9305b12437455fc906c876269d5d9ddf3d0b12e65e28180cc3e6b3a3a35135d78021234bd4dd099ea720ec42c896922311875c75be359c7dc2cfc3a6d6460740083e2a38a5aacd8018bdb28e20fada738e7827b7c33860e547205d452df1016f1ad311a3dbf08deb859f08acc1fa859547dfc7a022a74935141be1ec758b544eac3a8c1e20ab56334f1b814e2cbb3e1aa7d06cacbadb4b1a164a8fedbbc15bbbeef1b094b62d0ab881d7814275fb28fdd08a2a989dc1d53e312b74c42b2f123d1120152ad79deb6c800ee039f7bb009352af803e327d155d41b94ae0d7c2e3cae991b5fd000e36c7fe2494958f6e6ee25c52c463dcfa3ff4a74388b42b1d7ea63f30e3b97d2314727f494715f37a52737c73dd40090a5bb1b0a2362e632e68676fddbea38d4604bd37a780a70e1585b128acfb7482d52d10d5ff64cde460e7c72ebec21480755118caa90093a254541a6e4da3bfaa738a07be8137b4cf57fae6d1181b8114630618bd421086c8545ee18fd13d6322028ef046d5fe66ae76819c3de387d6724091fdf7b4fe253656dfc3767983259277bbf0b8332ad285c190255ec3e32774b0aa7949704dfcf243372e700ce30c1c6397d07e39528fcfbab6f64b2b5cd0bd66999604ba47db72679c2c0b5e2fdc592286b6349fdba2fad561e6bff918e910a8cee8860dfa96f9c035b0b0a3c6d0ae02f2beb8abfab0daa9a1a8ad0c219a52d3de147683698e7b69d91a4797ef7e98f62235abd8b005b7aa8a5aff41c0da99e2d47461b3505ded20796c468c8ebd6053f523b0098c5ce476fc59d20a84ad4077283225757a023efee25672b97799a68783fd8cf6ad3d302261e8202072db040a3d91d034a8d5126c3637f2e3ff79a92d70c9fe71e6b4d7fe2bde03b21c11402ca035103318c7fd419992249958450b0ebe54ccbb5ad46b3d96e801a1b129cf60f7d3ae6ac14bcd60341e9e867aa760d596f29aa7b67aedf3b3520182afbffcaa4f1d6f86e6138a5450fed612cb7f78069baeb1e6a6bc66c6b64867977d4f88af55d6d2b5ed085d39f009b72ca6d2c55bd9e43316fbb557547c23a160377dfdb9ba739539ed6fac02a67132d8a4be5b27121040eb4895bd8da6ea3b5dc2c61b8362a3448c12a7c0b83edc0a7f80f357af3f162eab93281fd0eb62fdfc898fcc961bf447449e1cca535858ab976e60a7806ccf75ae2aa61fbca422865572f5bdbbf90347d30ba1b78296de5cfe607ce55fbbee3406630c037ad4a615b0878cc0aeeaa7717f18f4ca5daf548bfe279fe76e3c75357500fd27e409c850e7aed8ba5c2688fdcd4ffc28c0580536a5605c9d5a67b655e51f91a3c7460536b9078e0a66ed5335ab2d7fce4cd442233fe5d2c18a9a96f36eed958a0bf18de15de83dc009039363b00bdc1346892cc1ebbd10c643a00d09fd8773c9ed5f4fcc9a541a8270d423558012edf98f83ed30856c54e1958938ade7c9bc2a63f9f19d8fa86125f5be17ca87c6bafd5abab1496a3a1ce8a13a9642202e0d7d229ffdd6226990b22698c62428428ce955809b06c4cc3891be55d3a042f579c56cfc0565cd31c0348694e253de3da50ff9d6ecba76d30bebdff1a5dcf7d8c34c41dd95201cd8fa5ebad41ca18563512c7ce61b32a36ee8e0b6d29ab0fddbfd6ac6b6825f0fac68160fa062ebaf773efb0a3b7b81c88055603e5ab27eab0a7f1f8aa97825a8806566daeb37ebfdba31fddaff38e93533b1bb7a30ecc41b5f047dfa2ad7f53f5025fe61c0abc90c36ead6249d162739a3f44b7e5ed04ebd85771aa92e8bce73158d70be174f78cb4955d3fd0bfdd54742b4ef18626fca0bfb00e0ace1856fe04469ff31b2f9bf94fb53117b61cf04680f2168c1a470fd70442d81b3ae7749c7bac2cc3d780d4b30288b466d2b562a7cf42fec8c0acbdd1fde9ae1667922fb3d42caf14c32ea0d8eb1a17c6cde2fde0a8c8de74796d4cd9b74fb33b6e4114a7c3def8e4d833531ee9f997b8a1ee815a01030aa9ed102c834ad832217dfe417bb333a7ffbaa1adf4f1aa651c31f6219cd7053e882de1511155597fa9f2cc2d1f4bd3e105a41a186894cc102b5690576862566c421c81f3e4f09beacd28015e971c1f360a622a16bdd0f2a622d4fb6d61cde37933bd7f521c9095dcedfeceefdd6125d5072065b9d9dbaae3872af64302fcfb2e7d8746c35975dec1c1a0341b7ddd64c1add6c971af78bca4cb5ef05c454b205f499c7a667ac29855f0209422deda6cf2a6b540720094d57730be0640d07d880056d4b820bd3a3f179a6bdf8f17e9777a0c1af604cf00dd7296553a9a86892235f7a85dfd2d64bdc04755e7bbe876cb182a65e615c94567155ed682d7c84992691c9e3c55560fc1cbc1a88f50a7f31c2564364f52b0bc197d8a3b2e5a8e3f4c5f9d4cf4a5cd5c8e0134dc9842f4b8da4da7d6532f44ebb6590d18ce638a4ffa81e01001d995e4c9903df4b89214f818321983e6aa5a1a0353b92edb2b85759a2a93241d29f47db7af018b0afc68284f546339ec2a4990804680a5b6eb67e2b739baa258407a71dd938e1ebd50db194358cd3105f6af0c95ac61c53ec77eb8e92c74aca30b37afc09c4778de4441579b167b44591b29d97ffaafc18317cd0e2f24d893ba3c4a5806801a196aed72394483f1dbdc34d552877ef84a493403332879002307a6b47f0ee840beac28aecd2915411734473cd2a5c58664563e4cda8d47327165bd2a0c1d824f710b2f53646656309d72ff67eeb438ae871b272ffaf1e4e610e421509a5a3fd51c5ae23eaaee5112cbfdcd90e76444cf27ca78ebcd875eb715133ce6849ee1b75e3d66376948ef6a137310c38f8c82322c7612a317f2c22f29b079f5224c24d1a77046eec92d89d544d2122baee2c3e0f7bc97d36d66d782549afd8fa3102a495cc2c6374bc3ccddd4cab0e54691f8fa2e6625c3217585755f34eae73af752d47313c5d39dfee38e9ec360ec3a45e36142e6301234c0ded3faa675bbb08009600b0c3f2f829c7aff5de00f678bc6df5444e7d591d18edca0cf7589b93830055cbccc9102df382ed19767f735f1bbd56dc43a8f5a9f5515caadb084cd0351b05267e2ead168e5f18410723f7e7b95d55bdc873d94845cf3ad2ee10922c2c472372ea0f98dc9acc443b599a062061a2a7a573b8d6b6798ca6", @ANYRES32=r1, @ANYBLOB="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"], 0x130c}], 0x2, &(0x7f0000001d40)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r11, r0, r12]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xf0, 0x4004000}, 0x11)

1.73192545s ago: executing program 0 (id=236):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, <r2=>0xffffffffffffffff}, 0x4)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf250500000008000600", @ANYRES32=r7, @ANYBLOB="7d7b5f5e0397b92afe45b95c81f2fdac027481fc6d4f50d9535cf8ae3fb969660fbf54f420e36a25ddc4202c2ea4069bd731bd2e28cd11a54a57b416a6b76c4dd5ebee4d74d9b5580e70e4805228ec30cb73914e460b33a8d6010fea5023ac9822a487a1d2499a8a12f6b6adac23b122f76819ff986e9aeb2cfe441d0cd8d1d120df128a8fe7c428e09b6d68552c267dc552058bcb1e9c67dd4be730c5c30182343a27b0ffa346ae849292c247e77b192a0c81bc65d21916434623dacc6c45201fc5859ef754eb28f06a1c393eb1bcd1564e42dd501f8d1dbae81b5ebfb6fc5b1571fdc3f76992089ac9ad9663f895bf", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24004c04)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x81, 0x263b12a3, 0x75, @mcast2, @local, 0x7, 0x8000, 0x3, 0x1000}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', <r9=>0x0, 0x29, 0x6, 0x81, 0x263b12a3, 0x75, @mcast2, @local, 0x7, 0x8000, 0x3, 0x1000}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x38, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6778}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x1, 0x2, 0x2, 0x3, 0x1f2b5ba414a4b54d, 0x1, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x0, 0x1, 0x8, 0x80, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x8, 0xb, 0x4, 0x0, 0x7ffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='GPL\x00', 0x1ff, 0x9d, &(0x7f0000000680)=""/157, 0x41100, 0x12, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x2, 0xad}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840), &(0x7f0000000880)=[{0x0, 0x4, 0x0, 0x6}, {0x2, 0x4, 0x1}, {0x1, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x9, 0x2}, {0x0, 0x5, 0x3}, {0x4, 0x4, 0x4, 0x9}]}, 0x94)
pipe(&(0x7f00000000c0)) (async)
pipe(&(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$binfmt_misc(r11, &(0x7f0000000000)="a5ce", 0xfed0)
accept$alg(r11, 0x0, 0x0) (async)
accept$alg(r11, 0x0, 0x0)
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r12)
shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) (async)
shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000)
mq_open(&(0x7f00000079c0)='.:-\\!\x00', 0x40, 0x12, 0x0)
ioctl$KVM_SET_CPUID(r12, 0x4008ae8a, &(0x7f0000000280)={0x8, 0x0, [{0x80000008, 0x8, 0x6, 0x5, 0x101}, {0x80000000, 0x6, 0x1, 0x2, 0x57cfe942}, {0x80000000, 0x0, 0x8, 0x7, 0x100}, {0x80000008, 0x2, 0x8, 0x6, 0x372}, {0xc0000001, 0x7ff, 0x2, 0x6e, 0x9}, {0x6, 0x5, 0x1, 0x7, 0x9f}, {0xa, 0x6, 0x1, 0x7, 0x9}, {0x80000007, 0xf1e, 0x7102, 0x7ff, 0xc}]})
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r10}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x1}}, 0x20)
shmctl$SHM_UNLOCK(0x0, 0xc)
read$char_usb(r12, &(0x7f0000000380)=""/151, 0x97)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0xa88, 0x0, 0xf}, {0x2fd, 0x0, 0x3ff}, {0x214, 0x0, 0x9}]})
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) (async)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0xffffffff}, {0x81}, {0x3, 0x0, 0x80}, {0x16, 0x0, 0xff}]})

1.728379129s ago: executing program 4 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000600)=@FILEID_INO32_GEN={0x80}, 0x0)

1.661879292s ago: executing program 1 (id=238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}]}, 0x98}}, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, r0, 0x26189000)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'ipvlan0\x00', 0x100})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cd40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_getnexthop={0x28, 0x6a, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400000c}, 0x2400c001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

1.625237853s ago: executing program 4 (id=239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
ioctl(r0, 0x8b22, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x83}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0xa00c891}, 0x4080)
r3 = socket(0x10, 0x803, 0x0)
write(r3, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xcc, [@remote]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0)

1.624970665s ago: executing program 0 (id=240):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x10, 0x12, "129ff70446e017258c6ac788d89f982c4ea9"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)

1.571648231s ago: executing program 4 (id=241):
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000a000668586ea195d688b700"], 0xf) (async)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0)
mkdir(&(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0}) (async)
close(r0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) (async)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='/dev/loop0,1', 0xc)

1.571101804s ago: executing program 1 (id=242):
io_setup(0xffff984a, &(0x7f0000000080)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x80003, 0xa)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000002a40)=[{&(0x7f0000002300)=""/246, 0xf6}], 0x1, 0x1ff, 0x2)
io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000280)="cf142e1b60951f9da0c006bc598beb100a1e6f6772565c6bd93505915cace869dd7d60590399b1530265de676a20ee189d8de9b739bc8b93dee09f53c8bc5e17c46d7ec90bf3f6377b00a6553121baf062ddbacbac26dc1146aca7c027bc38c328819dbdd2104ce02f625dc764ae92f6e76a47f9af3712f9fd3da6ab6eaabef1f9f40c28ba657e8bb377b48347dab08561488bbf536ba58ec4b4c65c51664ca08add7d5f3085b25d8af8e04b826b531a5a8bd50f14c06a1f3118a5defb63d0d0096c98982ee996cc0811020e", 0xcc, 0x0, 0x0, 0x1, r2}, &(0x7f0000000180))
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

1.512048083s ago: executing program 4 (id=243):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f})

1.421934502s ago: executing program 4 (id=244):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "088faeae71cb2c8016ce5a26dd57c8e3b85de050ad1065e1247fbdd7b48a2cad", "faa4a2190f2056f3dd98242c2765ebd4628d27b3a438bb2c3942914d8fc252bd", "56b1e81bca36bfb15636d23a08b57c399ad0be96573c8a040b6ca0ee92a61519", "f11944190968857758729f09206d229d45de48ab6da2f85bfcd59e046c65c4c3", "b81ed2ff398d4d079510c21b16f048516ac785fd228f4f85015fe9f272d7de5b", "99a40c1bddc8b91781d9bc15", 0x1ff, 0xc3e, 0x6b9, 0x3}})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0xfffffffffffffffc)

1.280829977s ago: executing program 1 (id=245):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x463}]}}}]}, 0x3c}}, 0x0)
r2 = syz_pidfd_open(r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto(r4, 0x0, 0x63, 0x4, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r6, 0x801, 0x400, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x28}}, 0x40014)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="33fafdfffffffbdbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000ffffff6600000214000400636177663000000000000000000000000800050001"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2c4, r6, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4765a34c5b22bad9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="31dd17d81a25363bb61d6be952182354dee1f865ebbc14ee"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d6738d82eb7cf3b1c272028168e0711a"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aeb12107266437b3c0f3d1917be76431"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x566efd16}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc38}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="526142c2a39aed402121232b4b688d4e3cd2c679e2b35b5f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b9c6a6dd63bfb95d"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "922caf9cf67787f1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9d4a56ecd5dee28f5ecd6dcb8e6c870235a5d6bc4c448d6e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="74ac42b5837036c3cc7bfc5850a2d256bb6486e762bdf08d4a78aa5103cc4f3f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5a6db198c79b704c9a2205174a1cf1e0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce8fb2f898e115e9"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "63e749199060a345"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3ac0e9c7c2b93d978071a2b8115a39393307c7482f576a56"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0c3f856af3043d41ffde6c037e4204aaeaf967b88917365390eaa97542cb7699"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x54ad}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf1087e89b9a8326"}]}, @NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="27cca4f8b836246e986277e9c2957541"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="20e558df66040b840c02c58b63004eeb6c378dc4c16f5d9a373216ed52c7cb22"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7d8b604b7fdd679feb47e252500ee36ad6bbbd882c346f60"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc5b96259aa3e763"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="761ca9ffafd034e0a17989f1783e631f40881c7e0d8054477d0f2e73ff63a2fa"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a3bc36f275e05d6ef3ff25a48d4deafca50949b10fc88453f19a953da8001fb5"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3e35d63c65e1cbe9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "19c600de2830b512"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="464207781f5bcdd4e33cd25128e8bff8b5efa3c2f8874d0017cd123389a22410"}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40}, 0x4048000)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r12, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x40}}, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000000)={0xd6, 0x80000, r2})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff02, 0x0)

1.199858509s ago: executing program 1 (id=246):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={0xffffffffffffffff, 0x18000000000002a0, 0x19f, 0x0, &(0x7f0000001480)="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", 0x0, 0x1, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffe2)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pwrite64(r2, 0x0, 0x0, 0x4)
read$FUSE(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x4c}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r6 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x8, 0x3})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r8 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x20680)
ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000300)={0x31, &(0x7f0000000100)=[{0x1d, '\x00', @st={0x4, [{0x2, @uvalue=0xacd7}, {0x1, @uvalue=0x3cc03893}, {0x2}, {0x0, @svalue=0x9}]}, 0x2}]})
sendmsg$inet6(r7, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x6}, 0x1c, 0x0}, 0x20008814)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a83000810020000800458600280067000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="029e2fabd72520d8098f6ef20008752165f32938a30388"], 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000002020500000000000000000003000008ea55d3caa8d7975d2331bc1122392b1257b285bffc8c796a5bc9fc7f34e3c1a3ab9fc3332f76ee9e362aaaa691521f35f799d490987830513ac383f5a6d25c699ba55e55fb03fd57d8fc5381463e8903245b5205b209819f004d7b12c148d7094ce390913a4a0e15f59925aa875c9888275fb598906160c02e9a8cf9de31090066bde68d7929631a"], 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x50)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)

990.339448ms ago: executing program 3 (id=247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x6, "8075861e28ea85dca02d43e03a9f6809"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0))
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000280)="05", 0x70, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14)

309.424917ms ago: executing program 1 (id=248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000600)=@FILEID_INO32_GEN={0x80}, 0x0)

309.026847ms ago: executing program 1 (id=249):
mkdir(0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x3, 0x1)
syz_open_dev$media(&(0x7f0000000000), 0xa3f, 0x101000)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000400)={0x200, 0x200, 0x20})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='1', 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', &(0x7f0000000280), &(0x7f0000000380)={0x0, 0xfb, 0x110, 0x1, 0x7, "987c02b46431414244aed2eb15b7bcd5", "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"}, 0x110, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="00010000000000000000000000000a44000000120a09000000000000000000a2c7232ff901fec2020000000900010073797a30000000000900020073797a3100000000080003400000000108000840000000000800044000000000140000001100010000000000000000000000000a0000000000"], 0x6c}}, 0x0)
fsopen(&(0x7f0000001300)='jffs2\x00', 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 4 (id=250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
fcntl$setsig(r2, 0xa, 0x34)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x24008804)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r7, 0x5523)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendfile(r4, r4, 0x0, 0xa)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x8}, {0xd, 0x10}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31891' (ED25519) to the list of known hosts.
[   41.306958][   T43] kauditd_printk_skb: 20 callbacks suppressed
[   41.307066][   T43] audit: type=1400 audit(1788066786.401:141): avc:  denied  { mounton } for  pid=5711 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   41.311197][   T43] audit: type=1400 audit(1788066786.411:142): avc:  denied  { mount } for  pid=5711 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   41.313389][ T5711] cgroup: Unknown subsys name 'net'
[   41.314466][   T43] audit: type=1400 audit(1788066786.411:143): avc:  denied  { unmount } for  pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   41.461643][ T5711] cgroup: Unknown subsys name 'cpuset'
[   41.466679][ T5711] cgroup: Unknown subsys name 'rlimit'
[   41.626637][   T43] audit: type=1400 audit(1788066786.721:144): avc:  denied  { setattr } for  pid=5711 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   41.629127][   T43] audit: type=1400 audit(1788066786.721:145): avc:  denied  { create } for  pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   41.629159][   T43] audit: type=1400 audit(1788066786.721:146): avc:  denied  { write } for  pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   41.629182][   T43] audit: type=1400 audit(1788066786.721:147): avc:  denied  { read } for  pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   41.671334][   T43] audit: type=1400 audit(1788066786.771:148): avc:  denied  { read } for  pid=5440 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   41.678808][   T43] audit: type=1400 audit(1788066786.781:149): avc:  denied  { read } for  pid=5440 comm="dhcpcd" name="n31" dev="tmpfs" ino=1888 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.679024][   T43] audit: type=1400 audit(1788066786.781:150): avc:  denied  { open } for  pid=5440 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1888 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.698052][ T5721] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   42.435228][ T5711] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.533671][   T43] kauditd_printk_skb: 5 callbacks suppressed
[   46.533734][   T43] audit: type=1400 audit(1788066791.631:156): avc:  denied  { execmem } for  pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   46.751423][   T43] audit: type=1400 audit(1788066791.851:157): avc:  denied  { create } for  pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.751970][   T43] audit: type=1400 audit(1788066791.851:158): avc:  denied  { read write } for  pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.752513][   T43] audit: type=1400 audit(1788066791.851:159): avc:  denied  { open } for  pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.764974][   T43] audit: type=1400 audit(1788066791.861:160): avc:  denied  { ioctl } for  pid=5728 comm="syz-executor" path="socket:[5703]" dev="sockfs" ino=5703 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.792628][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.797038][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.799760][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   46.800412][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.801832][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.802226][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.802463][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.804760][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   46.806165][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.809424][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.810029][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.813348][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   46.813456][   T43] audit: type=1400 audit(1788066791.911:161): avc:  denied  { read } for  pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   46.813964][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   46.814098][   T43] audit: type=1400 audit(1788066791.911:162): avc:  denied  { open } for  pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   46.815767][   T43] audit: type=1400 audit(1788066791.911:163): avc:  denied  { mounton } for  pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   46.815866][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.817510][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.818779][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.818973][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.825118][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.826208][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.828412][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.829115][   T43] audit: type=1400 audit(1788066791.931:164): avc:  denied  { module_request } for  pid=5728 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   46.856415][   T43] audit: type=1400 audit(1788066791.951:165): avc:  denied  { sys_module } for  pid=5728 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   47.562290][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.562380][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.562537][ T5730] bridge_slave_0: entered allmulticast mode
[   47.563892][ T5730] bridge_slave_0: entered promiscuous mode
[   47.591071][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.591177][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.591273][ T5728] bridge_slave_0: entered allmulticast mode
[   47.592829][ T5728] bridge_slave_0: entered promiscuous mode
[   47.610837][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.613506][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.615997][ T5730] bridge_slave_1: entered allmulticast mode
[   47.616765][ T5730] bridge_slave_1: entered promiscuous mode
[   47.633455][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.633552][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.633610][ T5728] bridge_slave_1: entered allmulticast mode
[   47.634346][ T5728] bridge_slave_1: entered promiscuous mode
[   47.667373][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.676250][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.677674][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.696487][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.696632][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.696724][ T5737] bridge_slave_0: entered allmulticast mode
[   47.697611][ T5737] bridge_slave_0: entered promiscuous mode
[   47.699290][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.699331][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.699389][ T5737] bridge_slave_1: entered allmulticast mode
[   47.700201][ T5737] bridge_slave_1: entered promiscuous mode
[   47.704757][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.718853][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.718980][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.719069][ T5729] bridge_slave_0: entered allmulticast mode
[   47.719872][ T5729] bridge_slave_0: entered promiscuous mode
[   47.737381][ T5728] team0: Port device team_slave_0 added
[   47.738738][ T5728] team0: Port device team_slave_1 added
[   47.738817][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.738879][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.738935][ T5729] bridge_slave_1: entered allmulticast mode
[   47.739644][ T5729] bridge_slave_1: entered promiscuous mode
[   47.762601][ T5730] team0: Port device team_slave_0 added
[   47.785389][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.790049][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.792056][ T5730] team0: Port device team_slave_1 added
[   47.810951][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.811685][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.811699][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.811720][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.834048][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.834470][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.834483][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.834503][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.835441][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.835457][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.835480][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.836314][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.836323][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.836342][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.879170][ T5737] team0: Port device team_slave_0 added
[   47.882393][ T5737] team0: Port device team_slave_1 added
[   47.891138][ T5729] team0: Port device team_slave_0 added
[   47.893421][ T5729] team0: Port device team_slave_1 added
[   47.927982][ T5730] hsr_slave_0: entered promiscuous mode
[   47.928518][ T5730] hsr_slave_1: entered promiscuous mode
[   47.947693][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.947742][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.947781][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.955162][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.955177][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.955197][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.956210][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.956219][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.956232][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.965334][ T5728] hsr_slave_0: entered promiscuous mode
[   47.965893][ T5728] hsr_slave_1: entered promiscuous mode
[   47.966275][ T5728] debugfs: 'hsr0' already exists in 'hsr'
[   47.966335][ T5728] Cannot create hsr debugfs directory
[   47.967042][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.967056][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.967079][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.069521][ T5729] hsr_slave_0: entered promiscuous mode
[   48.069980][ T5729] hsr_slave_1: entered promiscuous mode
[   48.070304][ T5729] debugfs: 'hsr0' already exists in 'hsr'
[   48.070315][ T5729] Cannot create hsr debugfs directory
[   48.077900][ T5737] hsr_slave_0: entered promiscuous mode
[   48.078357][ T5737] hsr_slave_1: entered promiscuous mode
[   48.078729][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[   48.078794][ T5737] Cannot create hsr debugfs directory
[   48.334632][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.341353][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.347013][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.350438][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.350859][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.357881][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.358788][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.365162][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.457441][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.464568][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.475180][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.481831][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.482629][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.485915][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.487382][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.496223][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.559549][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.566519][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.567241][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.571837][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.577402][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.583012][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.583612][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.588355][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.618263][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.661721][ T5730] 8021q: adding VLAN 0 to HW filter on device team0
[   48.677263][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.683891][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.684622][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.690141][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.693692][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.693807][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.699351][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.703533][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.706845][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.707001][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.712322][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.716574][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.760884][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.780144][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.794035][ T5728] 8021q: adding VLAN 0 to HW filter on device team0
[   48.802234][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.802708][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.812341][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.812430][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.840821][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.840932][ T5731] Bluetooth: hci2: command tx timeout
[   48.841042][ T5738] Bluetooth: hci3: command tx timeout
[   48.841072][ T5088] Bluetooth: hci0: command tx timeout
[   48.867745][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[   48.874494][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.887176][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.887250][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.889741][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.889829][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.905717][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   48.921362][ T5738] Bluetooth: hci1: command tx timeout
[   48.927355][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.927481][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.930865][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.930923][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.132899][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.175249][ T5730] veth0_vlan: entered promiscuous mode
[   49.192702][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.194978][ T5730] veth1_vlan: entered promiscuous mode
[   49.237000][ T5730] veth0_macvtap: entered promiscuous mode
[   49.243075][ T5730] veth1_macvtap: entered promiscuous mode
[   49.270798][ T5728] veth0_vlan: entered promiscuous mode
[   49.279680][ T5728] veth1_vlan: entered promiscuous mode
[   49.286559][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.296316][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.313545][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.339178][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.372024][ T5728] veth0_macvtap: entered promiscuous mode
[   49.388208][ T5728] veth1_macvtap: entered promiscuous mode
[   49.399963][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.419323][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.440044][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.440128][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.447200][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.450256][ T5729] veth0_vlan: entered promiscuous mode
[   49.462624][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.486428][ T5729] veth1_vlan: entered promiscuous mode
[   49.489065][ T5737] veth0_vlan: entered promiscuous mode
[   49.499357][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.500027][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.500475][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.500487][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.507403][ T5737] veth1_vlan: entered promiscuous mode
[   49.545025][ T5729] veth0_macvtap: entered promiscuous mode
[   49.565852][ T5730] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.573640][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.573689][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.574841][ T5729] veth1_macvtap: entered promiscuous mode
[   49.575820][ T5737] veth0_macvtap: entered promiscuous mode
[   49.597471][ T5737] veth1_macvtap: entered promiscuous mode
[   49.609064][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.609151][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.623295][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.624826][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.634761][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.640234][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.658692][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.658804][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.658874][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.658909][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.658943][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.658976][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.659009][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.659042][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.679825][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.699362][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.720024][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.720078][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.783914][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.783955][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.788403][ T5884] syzkaller0: entered promiscuous mode
[   49.788415][ T5884] syzkaller0: entered allmulticast mode
[   49.825012][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.825065][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.849749][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.849784][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.864170][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.864234][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.995677][ T5893] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use)
[   50.068276][ T5900] use of bytesused == 0 is deprecated and will be removed in the future,
[   50.068353][ T5900] use the actual size instead.
[   50.070609][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'.
[   50.107793][ T5903] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   50.199109][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   50.225671][ T5920] =======================================================
[   50.225671][ T5920] WARNING: The mand mount option has been deprecated and
[   50.225671][ T5920]          and is ignored by this kernel. Remove the mand
[   50.225671][ T5920]          option from the mount to silence this warning.
[   50.225671][ T5920] =======================================================
[   50.370205][ T5837] usb 6-1: Using ep0 maxpacket: 8
[   50.373265][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   50.379882][ T5837] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   50.379976][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   50.379990][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   50.380002][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   50.380013][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   50.380033][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.399367][ T1039] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   50.549829][ T1039] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   50.554613][ T1039] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[   50.554706][ T1039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.554727][ T1039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.554745][ T1039] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   50.554776][ T1039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.556319][ T1039] usb 5-1: config 0 descriptor??
[   50.589207][ T5837] usb 6-1: usb_control_msg returned -32
[   50.589261][ T5837] usbtmc 6-1:16.0: can't read capabilities
[   50.763222][ T5932] nfs4: Unknown parameter '
ÿÿÿ'
[   50.763515][ T5932] nfs4: Unknown parameter '
ÿÿÿ'
[   50.763697][ T5932] nfs4: Unknown parameter '
ÿÿÿ'
[   50.844350][ T5887] usbtmc 6-1:16.0: usb_control_msg returned -32
[   50.918963][ T5738] Bluetooth: hci0: command tx timeout
[   50.918970][ T5088] Bluetooth: hci3: command tx timeout
[   50.998975][ T5088] Bluetooth: hci1: command tx timeout
[   51.192614][ T5978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=5978 comm=syz.3.18
[   51.262570][ T5985] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   51.583048][   T43] kauditd_printk_skb: 77 callbacks suppressed
[   51.583108][   T43] audit: type=1400 audit(1788066796.681:243): avc:  denied  { read } for  pid=6022 comm="syz.3.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   51.583296][   T43] audit: type=1400 audit(1788066796.681:244): avc:  denied  { open } for  pid=6022 comm="syz.3.22" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   51.583604][   T43] audit: type=1400 audit(1788066796.681:245): avc:  denied  { ioctl } for  pid=6022 comm="syz.3.22" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   51.617544][   T43] audit: type=1400 audit(1788066796.721:246): avc:  denied  { create } for  pid=6022 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   51.619901][   T43] audit: type=1400 audit(1788066796.721:247): avc:  denied  { setopt } for  pid=6022 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   51.620180][   T43] audit: type=1400 audit(1788066796.721:248): avc:  denied  { getopt } for  pid=6022 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   51.688054][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.776453][   T43] audit: type=1400 audit(1788066796.871:249): avc:  denied  { execute } for  pid=6042 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   51.778689][   T43] audit: type=1400 audit(1788066796.871:250): avc:  denied  { execute_no_trans } for  pid=6042 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   51.856703][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.858480][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.859316][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.860042][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.860598][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.904019][   T43] audit: type=1400 audit(1788066797.001:251): avc:  denied  { sys_module } for  pid=6048 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   52.001462][   T43] audit: type=1400 audit(1788066797.101:252): avc:  denied  { create } for  pid=6060 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   52.001894][ T6070] netlink: Unknown conntrack attr (type=262, max=9)
[   52.001934][ T6070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.301947][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.302072][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.302132][ T6048] bridge_slave_0: entered allmulticast mode
[   52.302889][ T6048] bridge_slave_0: entered promiscuous mode
[   52.304097][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.304164][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.304221][ T6048] bridge_slave_1: entered allmulticast mode
[   52.304974][ T6048] bridge_slave_1: entered promiscuous mode
[   52.320174][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.321747][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.333010][ T6048] team0: Port device team_slave_0 added
[   52.334181][ T6048] team0: Port device team_slave_1 added
[   52.346473][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.348634][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.348728][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.350370][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.350381][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.350399][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.385103][ T6048] hsr_slave_0: entered promiscuous mode
[   52.385603][ T6048] hsr_slave_1: entered promiscuous mode
[   52.386085][ T6048] debugfs: 'hsr0' already exists in 'hsr'
[   52.386097][ T6048] Cannot create hsr debugfs directory
[   52.487628][ T6048] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   52.493853][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   52.497866][ T6048] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   52.502913][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   52.503408][ T6048] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   52.514872][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   52.515773][ T6048] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   52.520859][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   52.584133][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.595990][ T6048] 8021q: adding VLAN 0 to HW filter on device team0
[   52.601378][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.601460][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.610306][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.610375][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.656158][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.717904][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.788431][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.852918][ T6125] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   52.858128][   T35] usb 6-1: USB disconnect, device number 2
[   52.965188][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[   52.971204][ T6135] afs: Unknown parameter 'dynK)ïV'
[   52.998751][ T5738] Bluetooth: hci0: command tx timeout
[   53.016598][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.029830][   T13] bridge_slave_1: left allmulticast mode
[   53.029967][   T13] bridge_slave_1: left promiscuous mode
[   53.031075][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.044715][   T13] bridge_slave_0: left allmulticast mode
[   53.044815][   T13] bridge_slave_0: left promiscuous mode
[   53.045030][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.088809][ T5738] Bluetooth: hci1: command tx timeout
[   53.223545][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.235007][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.245362][   T13] bond0 (unregistering): Released all slaves
[   53.295662][ T6161] Zero length message leads to an empty skb
[   53.389787][ T6171] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   53.443183][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'.
[   53.480643][ T6179] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   53.480984][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'.
[   53.483714][ T6048] veth0_vlan: entered promiscuous mode
[   53.536929][ T1039] usbhid 5-1:0.0: can't add hid device: -71
[   53.537047][ T1039] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   53.539492][ T1039] usb 5-1: USB disconnect, device number 2
[   53.560602][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2
[   53.565714][ T6048] veth1_vlan: entered promiscuous mode
[   53.611730][   T13] hsr_slave_0: left promiscuous mode
[   53.614621][   T13] hsr_slave_1: left promiscuous mode
[   53.617005][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.620371][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.623916][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.624069][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.637155][   T13] veth1_macvtap: left promiscuous mode
[   53.637231][   T13] veth0_macvtap: left promiscuous mode
[   53.637493][   T13] veth1_vlan: left promiscuous mode
[   53.637534][   T13] veth0_vlan: left promiscuous mode
[   53.803258][ T6197] program syz.1.42 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.826774][   T13] team0 (unregistering): Port device team_slave_1 removed
[   53.840079][   T13] team0 (unregistering): Port device team_slave_0 removed
[   53.889500][ T5738] Bluetooth: hci2: command tx timeout
[   53.947853][ T6048] veth0_macvtap: entered promiscuous mode
[   53.971779][ T6048] veth1_macvtap: entered promiscuous mode
[   53.976035][ T6199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   54.006686][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.017958][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.090728][ T5781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.091067][ T5781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.091139][ T5781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.091157][ T5781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.159403][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.159468][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.160426][ T6209] netlink: 128 bytes leftover after parsing attributes in process `syz.3.46'.
[   54.160438][ T6209] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   54.227780][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3
[   54.228545][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.228556][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.319768][ T6232] /dev/sg0: Can't lookup blockdev
[   54.351470][ T6235] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   54.358314][ T6235] netlink: 'syz.3.53': attribute type 13 has an invalid length.
[   54.387860][ T6235] gretap0: refused to change device tx_queue_len
[   54.387937][ T6235] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   54.394324][ T6241] 9pnet_fd: p9_fd_create_unix (6241): problem connecting socket: éq‰Y’3aK: -111
[   54.437093][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4
[   54.471432][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'.
[   54.483893][ T6252] team0: Port device team_slave_0 removed
[   54.490556][ T6256] netlink: 'syz.0.60': attribute type 8 has an invalid length.
[   54.540326][ T6264] cgroup: Unknown subsys name 'permit_directio'
[   54.607684][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5
[   54.614227][ T6275] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   54.614257][ T6275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   54.614842][ T6275] vhci_hcd vhci_hcd.0: Device attached
[   54.620677][ T6275] vhci_hcd vhci_hcd.0: port 0 already used
[   54.633514][ T6285] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11)
[   54.633545][ T6285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   54.633624][ T6285] vhci_hcd vhci_hcd.0: Device attached
[   54.634569][ T6289] overlay: filesystem on ./file0 not supported as upperdir
[   54.640003][ T6283] vhci_hcd vhci_hcd.0: port 1 already used
[   54.644890][ T6286] vhci_hcd: connection closed
[   54.652625][ T5781] vhci_hcd vhci_hcd.3: stop threads
[   54.652904][ T6277] vhci_hcd: connection closed
[   54.653031][ T5781] vhci_hcd vhci_hcd.3: release socket
[   54.653197][ T5781] vhci_hcd vhci_hcd.3: disconnect device
[   54.653447][ T5781] vhci_hcd vhci_hcd.3: stop threads
[   54.653457][ T5781] vhci_hcd vhci_hcd.3: release socket
[   54.653467][ T5781] vhci_hcd vhci_hcd.3: disconnect device
[   54.688689][ T6296] 9pnet_fd: p9_fd_create_tcp (6296): problem binding to privport
[   54.727975][ T6296] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   54.728194][ T6296] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   55.088903][ T5738] Bluetooth: hci0: command tx timeout
[   55.160016][ T5738] Bluetooth: hci1: command tx timeout
[   55.548305][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'.
[   55.925311][ T6341] process 'syz.1.78' launched './file0' with NULL argv: empty string added
[   55.958762][ T5738] Bluetooth: hci2: command tx timeout
[   56.050219][ T5738] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   56.050433][ T5738] Bluetooth: hci3: Injecting HCI hardware error event
[   56.052723][ T5088] Bluetooth: hci3: hardware error 0x00
[   56.081576][ T6360] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   56.095896][ T6360] bond1: entered promiscuous mode
[   56.096153][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.110391][ T6351] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   56.110458][ T6351] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   56.110903][ T6351] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   56.112780][ T6351] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   56.148778][ T6359] netlink: 'syz.4.82': attribute type 1 has an invalid length.
[   56.149455][ T6359] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.82'.
[   56.149476][ T6359] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.82'.
[   56.161257][ T6360] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   56.161308][ T6360] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   56.162213][ T6360] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   56.170659][ T6212] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   56.209330][ T6369] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   56.213743][ T6369] netlink: 'syz.4.83': attribute type 10 has an invalid length.
[   56.217913][ T6369] syz_tun: entered promiscuous mode
[   56.224734][ T6369] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   56.328807][ T6212] usb 5-1: Using ep0 maxpacket: 32
[   56.329313][ T6212] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   56.330178][ T6212] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   56.330191][ T6212] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   56.330203][ T6212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   56.330223][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   56.330235][ T6212] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   56.330249][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   56.330268][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.334911][ T6212] usb 5-1: config 0 descriptor??
[   56.525070][ T6390] ufs: You didn't specify the type of your ufs filesystem
[   56.525070][ T6390] 
[   56.525070][ T6390] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   56.525070][ T6390] 
[   56.525070][ T6390] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   56.546213][ T6212] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   56.548926][ T6212] usb 5-1: USB disconnect, device number 3
[   56.560627][ T6212] usblp0: removed
[   56.617841][ T6390] fuse: root generation should be zero
[   56.795820][   T43] kauditd_printk_skb: 72 callbacks suppressed
[   56.795923][   T43] audit: type=1400 audit(1788066801.891:325): avc:  denied  { mount } for  pid=6393 comm="syz.3.89" name="/" dev="configfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   56.800132][   T43] audit: type=1400 audit(1788066801.901:326): avc:  denied  { search } for  pid=6393 comm="syz.3.89" name="/" dev="configfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   56.801818][   T43] audit: type=1400 audit(1788066801.901:327): avc:  denied  { search } for  pid=6393 comm="syz.3.89" name="usb_gadget" dev="configfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   56.873780][   T43] audit: type=1400 audit(1788066801.971:328): avc:  denied  { unmount } for  pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   56.889636][   T43] audit: type=1400 audit(1788066801.991:329): avc:  denied  { getopt } for  pid=6411 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   56.958834][ T5837] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   56.991103][ T6212] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   57.128858][ T5837] usb 9-1: Using ep0 maxpacket: 8
[   57.130352][ T5837] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   57.131374][ T5837] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[   57.131395][ T5837] usb 9-1: config 0 has no interface number 0
[   57.131427][ T5837] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   57.131461][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.134378][ T5837] usb 9-1: config 0 descriptor??
[   57.142619][ T5837] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   57.149400][ T6212] usb 5-1: Using ep0 maxpacket: 32
[   57.150029][ T6212] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   57.151062][ T6212] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   57.151083][ T6212] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   57.151101][ T6212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   57.151139][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   57.151158][ T6212] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   57.151179][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   57.151212][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.156984][ T6212] usb 5-1: config 0 descriptor??
[   57.332537][   T43] audit: type=1400 audit(1788066802.431:330): avc:  denied  { create } for  pid=6451 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.333389][   T43] audit: type=1400 audit(1788066802.431:331): avc:  denied  { write } for  pid=6451 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.334279][   T43] audit: type=1400 audit(1788066802.431:332): avc:  denied  { create } for  pid=6451 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   57.341636][   T43] audit: type=1400 audit(1788066802.441:333): avc:  denied  { mount } for  pid=6404 comm="syz.4.92" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   57.343921][   T43] audit: type=1400 audit(1788066802.441:334): avc:  denied  { search } for  pid=6404 comm="syz.4.92" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   57.361960][ T6212] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   57.407142][ T6456] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[   57.420682][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'.
[   57.490118][ T6463] FAULT_INJECTION: forcing a failure.
[   57.490118][ T6463] name failslab, interval 1, probability 0, space 0, times 1
[   57.490184][ T6463] CPU: 3 UID: 0 PID: 6463 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) 
[   57.490208][ T6463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.490219][ T6463] Call Trace:
[   57.490226][ T6463]  <TASK>
[   57.490234][ T6463]  dump_stack_lvl+0x100/0x190
[   57.490268][ T6463]  should_fail_ex.cold+0x5/0xa
[   57.490302][ T6463]  should_failslab+0xc2/0x120
[   57.490327][ T6463]  __kmalloc_node_noprof+0xff/0x880
[   57.490346][ T6463]  ? __get_vm_area_node+0x1ff/0x350
[   57.490366][ T6463]  ? __get_vm_area_node+0x22b/0x350
[   57.490385][ T6463]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[   57.490409][ T6463]  __vmalloc_node_range_noprof+0x3d4/0x1420
[   57.490432][ T6463]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   57.490459][ T6463]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   57.490486][ T6463]  ? find_held_lock+0x2b/0x80
[   57.490508][ T6463]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   57.490532][ T6463]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   57.490560][ T6463]  ? avc_has_perm_noaudit+0x145/0x3b0
[   57.490584][ T6463]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   57.490605][ T6463]  __vmalloc_node_noprof+0xad/0xf0
[   57.490629][ T6463]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   57.490652][ T6463]  __vmalloc_noprof+0xa3/0x120
[   57.490675][ T6463]  ? __pfx___vmalloc_noprof+0x10/0x10
[   57.490700][ T6463]  ? rcu_is_watching+0x13/0xc0
[   57.490722][ T6463]  ? cap_capable+0x107/0x430
[   57.490745][ T6463]  bpf_prog_alloc_no_stats+0x59/0x690
[   57.490765][ T6463]  ? security_capable+0x80/0x260
[   57.490790][ T6463]  bpf_prog_alloc+0x3b/0x200
[   57.490809][ T6463]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   57.490832][ T6463]  bpf_prog_load+0x49e/0x2a80
[   57.490859][ T6463]  ? __pfx_bpf_prog_load+0x10/0x10
[   57.490902][ T6463]  __sys_bpf+0x1f46/0x4a30
[   57.490936][ T6463]  ? __pfx___sys_bpf+0x10/0x10
[   57.490962][ T6463]  ? find_held_lock+0x2b/0x80
[   57.490986][ T6463]  ? futex_wake+0x4ea/0x5e0
[   57.491029][ T6463]  ? rcu_read_lock_any_held+0x6a/0x90
[   57.491053][ T6463]  ? find_held_lock+0x2b/0x80
[   57.491077][ T6463]  ? ksys_write+0x190/0x250
[   57.491094][ T6463]  ? ksys_write+0x190/0x250
[   57.491127][ T6463]  ? __x64_sys_futex+0x34f/0x4d0
[   57.491150][ T6463]  ? __x64_sys_futex+0x358/0x4d0
[   57.491175][ T6463]  ? fput+0x7c/0x100
[   57.491196][ T6463]  ? __pfx___x64_sys_futex+0x10/0x10
[   57.491219][ T6463]  ? ksys_write+0x1ac/0x250
[   57.491239][ T6463]  ? __x64_sys_bpf+0xce/0x140
[   57.491255][ T6463]  __x64_sys_bpf+0xce/0x140
[   57.491281][ T6463]  ? do_syscall_64+0xae/0x790
[   57.491306][ T6463]  do_syscall_64+0x123/0x790
[   57.491330][ T6463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.491351][ T6463] RIP: 0033:0x7f35a919e159
[   57.491367][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.491385][ T6463] RSP: 002b:00007f35aa103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   57.491407][ T6463] RAX: ffffffffffffffda RBX: 00007f35a9425fa0 RCX: 00007f35a919e159
[   57.491420][ T6463] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[   57.491433][ T6463] RBP: 00007f35a9235024 R08: 0000000000000000 R09: 0000000000000000
[   57.491444][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.491456][ T6463] R13: 00007f35a9426038 R14: 00007f35a9425fa0 R15: 00007ffeb4a938e8
[   57.491481][ T6463]  </TASK>
[   57.491641][ T6463] syz.1.99: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[   57.491750][ T6463] CPU: 3 UID: 0 PID: 6463 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) 
[   57.491773][ T6463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.491782][ T6463] Call Trace:
[   57.491787][ T6463]  <TASK>
[   57.491793][ T6463]  dump_stack_lvl+0x100/0x190
[   57.491822][ T6463]  warn_alloc.cold+0x9e/0xb2
[   57.491844][ T6463]  ? __pfx_warn_alloc+0x10/0x10
[   57.491874][ T6463]  ? dump_stack_lvl+0x17c/0x190
[   57.491901][ T6463]  ? rcu_is_watching+0x13/0xc0
[   57.491927][ T6463]  ? __kasan_kmalloc+0x8a/0xb0
[   57.491946][ T6463]  ? __kmalloc_node_noprof+0x360/0x880
[   57.491965][ T6463]  ? __get_vm_area_node+0x1ff/0x350
[   57.491987][ T6463]  ? __get_vm_area_node+0x22b/0x350
[   57.492008][ T6463]  ? __vmalloc_node_range_noprof+0x3d4/0x1420
[   57.492038][ T6463]  __vmalloc_node_range_noprof+0x10f4/0x1420
[   57.492063][ T6463]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   57.492093][ T6463]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   57.492120][ T6463]  ? find_held_lock+0x2b/0x80
[   57.492146][ T6463]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   57.492170][ T6463]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   57.492198][ T6463]  ? avc_has_perm_noaudit+0x145/0x3b0
[   57.492223][ T6463]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   57.492245][ T6463]  __vmalloc_node_noprof+0xad/0xf0
[   57.492268][ T6463]  ? bpf_prog_alloc_no_stats+0x59/0x690
[   57.492355][ T6463]  __vmalloc_noprof+0xa3/0x120
[   57.492382][ T6463]  ? __pfx___vmalloc_noprof+0x10/0x10
[   57.492410][ T6463]  ? rcu_is_watching+0x13/0xc0
[   57.492434][ T6463]  ? cap_capable+0x107/0x430
[   57.492461][ T6463]  bpf_prog_alloc_no_stats+0x59/0x690
[   57.492485][ T6463]  ? security_capable+0x80/0x260
[   57.492512][ T6463]  bpf_prog_alloc+0x3b/0x200
[   57.492534][ T6463]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   57.492558][ T6463]  bpf_prog_load+0x49e/0x2a80
[   57.492588][ T6463]  ? __pfx_bpf_prog_load+0x10/0x10
[   57.492632][ T6463]  __sys_bpf+0x1f46/0x4a30
[   57.492669][ T6463]  ? __pfx___sys_bpf+0x10/0x10
[   57.492696][ T6463]  ? find_held_lock+0x2b/0x80
[   57.492720][ T6463]  ? futex_wake+0x4ea/0x5e0
[   57.492802][ T6463]  ? rcu_read_lock_any_held+0x6a/0x90
[   57.492832][ T6463]  ? find_held_lock+0x2b/0x80
[   57.492858][ T6463]  ? ksys_write+0x190/0x250
[   57.492878][ T6463]  ? ksys_write+0x190/0x250
[   57.492911][ T6463]  ? __x64_sys_futex+0x34f/0x4d0
[   57.492934][ T6463]  ? __x64_sys_futex+0x358/0x4d0
[   57.492960][ T6463]  ? fput+0x7c/0x100
[   57.492981][ T6463]  ? __pfx___x64_sys_futex+0x10/0x10
[   57.493004][ T6463]  ? ksys_write+0x1ac/0x250
[   57.493024][ T6463]  ? __x64_sys_bpf+0xce/0x140
[   57.493040][ T6463]  __x64_sys_bpf+0xce/0x140
[   57.493058][ T6463]  ? do_syscall_64+0xae/0x790
[   57.493081][ T6463]  do_syscall_64+0x123/0x790
[   57.493104][ T6463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.493126][ T6463] RIP: 0033:0x7f35a919e159
[   57.493144][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.493163][ T6463] RSP: 002b:00007f35aa103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   57.493183][ T6463] RAX: ffffffffffffffda RBX: 00007f35a9425fa0 RCX: 00007f35a919e159
[   57.493196][ T6463] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[   57.493208][ T6463] RBP: 00007f35a9235024 R08: 0000000000000000 R09: 0000000000000000
[   57.493221][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.493232][ T6463] R13: 00007f35a9426038 R14: 00007f35a9425fa0 R15: 00007ffeb4a938e8
[   57.493258][ T6463]  </TASK>
[   57.493266][ T6463] Mem-Info:
[   57.493275][ T6463] active_anon:8887 inactive_anon:23 isolated_anon:0
[   57.493275][ T6463]  active_file:0 inactive_file:56063 isolated_file:0
[   57.493275][ T6463]  unevictable:1000 dirty:28 writeback:0
[   57.493275][ T6463]  slab_reclaimable:12152 slab_unreclaimable:66966
[   57.493275][ T6463]  mapped:26106 shmem:1576 pagetables:1272
[   57.493275][ T6463]  sec_pagetables:295 bounce:0
[   57.493275][ T6463]  kernel_misc_reclaimable:0
[   57.493275][ T6463]  free:461793 free_pcp:11533 free_cma:0
[   57.493331][ T6463] Node 0 active_anon:35548kB inactive_anon:92kB active_file:0kB inactive_file:224056kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:104424kB dirty:104kB writeback:0kB shmem:4304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:4904kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   57.493380][ T6463] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   57.493426][ T6463] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   57.493479][ T6463] lowmem_reserve[]: 0 1223 1223 1223 1223
[   57.493514][ T6463] Node 0 DMA32 free:183444kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35548kB inactive_anon:92kB active_file:0kB inactive_file:224056kB unevictable:2000kB writepending:228kB zspages:184kB present:2080628kB managed:1253044kB mlocked:0kB bounce:0kB free_pcp:41300kB local_pcp:4448kB free_cma:0kB
[   57.493568][ T6463] lowmem_reserve[]: 0 0 0 0 0
[   57.493600][ T6463] Node 1 Normal free:1648368kB boost:0kB min:39876kB low:49844kB high:59812kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:4832kB local_pcp:0kB free_cma:0kB
[   57.493652][ T6463] lowmem_reserve[]: 0 0 0 0 0
[   57.493686][ T6463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   57.493797][ T6463] Node 0 DMA32: 1515*4kB (UM) 643*8kB (UME) 417*16kB (UM) 79*32kB (UME) 17*64kB (UME) 11*128kB (UME) 17*256kB (ME) 35*512kB (UME) 23*1024kB (UM) 20*2048kB (UME) 18*4096kB (M) = 183412kB
[   57.493953][ T6463] Node 1 Normal: 10*4kB (U) 7*8kB (UM) 9*16kB (UM) 22*32kB (UM) 9*64kB (UM) 8*128kB (UM) 1*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 400*4096kB (M) = 1648368kB
[   57.494108][ T6463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   57.494123][ T6463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   57.494137][ T6463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   57.494152][ T6463] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   57.494166][ T6463] 57648 total pagecache pages
[   57.494172][ T6463] 0 pages in swap cache
[   57.494178][ T6463] Free swap  = 124988kB
[   57.494184][ T6463] Total swap = 124996kB
[   57.494191][ T6463] 1048443 pages RAM
[   57.494197][ T6463] 0 pages HighMem/MovableOnly
[   57.494202][ T6463] 285872 pages reserved
[   57.494208][ T6463] 0 pages cma reserved
[   57.567863][ T6465] bond2: entered promiscuous mode
[   57.567899][ T6465] bond2: entered allmulticast mode
[   57.568193][ T6465] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.038830][ T5738] Bluetooth: hci2: command tx timeout
[   58.130098][ T5088] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   58.376710][ T5630] usb 9-1: USB disconnect, device number 2
[   58.378758][   T35] usb 5-1: USB disconnect, device number 4
[   58.395410][   T35] usblp1: removed
[   58.871613][ T6501] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   58.872958][ T6501] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   58.885622][ T6501] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   58.892341][ T6501] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   58.892476][ T6501] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   58.906577][ T6501] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   58.915465][ T6501] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   58.915613][ T6501] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   58.923734][ T6501] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   58.984336][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'.
[   58.985838][ T6543] netlink: 72 bytes leftover after parsing attributes in process `syz.1.117'.
[   58.999375][ T6541] ieee802154 phy0 wpan0: encryption failed: -22
[   59.208789][ T5630] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   59.305008][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   59.360310][ T5630] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   59.361824][ T5630] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.361848][ T5630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.370045][ T5630] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[   59.370164][ T5630] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[   59.370281][ T5630] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[   59.376504][ T5630] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[   59.377073][ T5630] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[   59.385034][ T5630] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   59.386770][ T6559] Invalid argument reading file caps for ./file0
[   59.388323][ T6559] sctp: [Deprecated]: syz.4.122 (pid 6559) Use of int in max_burst socket option.
[   59.388323][ T6559] Use struct sctp_assoc_value instead
[   59.389176][ T5630] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[   59.389212][ T5630] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[   59.396922][ T5630] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   59.474361][ T6563] overlayfs: failed to resolve 'work': -2
[   59.574754][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.584575][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.585303][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.588410][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.590851][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.591066][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.591597][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.591802][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.594717][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.594926][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.608989][  T851] usb 6-1: USB disconnect, device number 3
[   59.623535][  T851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   59.668534][  T851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   59.677410][  T851] keyspan 6-1:1.0: device disconnected
[   59.772321][ T6587] overlayfs: failed to resolve 'work': -2
[   59.904858][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'.
[   60.104133][ T6621] Bluetooth: MGMT ver 1.23
[   60.128959][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout
[   60.184417][ T6627] overlayfs: failed to resolve 'work': -2
[   60.321581][ T6638] evm: overlay not supported
[   60.454441][ T6656] netlink: 'syz.1.151': attribute type 10 has an invalid length.
[   60.462087][ T6656] team0: Port device veth0 added
[   60.504326][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'.
[   60.504382][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'.
[   60.571882][ T6671] overlayfs: failed to resolve 'upper': -2
[   60.663643][ T6675] can0: slcan on ttyS3.
[   60.897225][ T6685] 9p: Bad value for 'rfdno'
[   60.928810][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout
[   60.928883][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout
[   61.133889][ T6675] can0 (unregistered): slcan off ttyS3.
[   61.870056][ T6718] xt_hashlimit: max too large, truncated to 1048576
[   61.872228][ T6718] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   61.915264][ T6721] mmap: syz.0.164 (6721) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   61.920280][   T43] kauditd_printk_skb: 95 callbacks suppressed
[   61.920294][   T43] audit: type=1400 audit(1788066807.011:430): avc:  denied  { getopt } for  pid=6720 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   61.997373][ T6726] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   62.033578][ T6728] overlayfs: failed to resolve 'lower': -2
[   62.198911][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout
[   62.209567][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'.
[   62.222585][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'.
[   62.225838][   T43] audit: type=1400 audit(1788066807.321:431): avc:  denied  { write } for  pid=6742 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.238782][ T5781] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.238832][ T5781] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.239847][ T5781] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.239868][ T5781] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.401151][ T6747] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   62.419287][ T6746] nbd0: detected capacity change from 0 to 63
[   62.443941][   T66] block nbd0: Receive control failed (result -104)
[   62.504007][ T6754] xt_HMARK: spi-set and port-set can't be combined
[   62.539306][   T43] audit: type=1400 audit(1788066807.631:432): avc:  denied  { write } for  pid=6755 comm="syz.4.173" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   62.631636][ T6760] overlayfs: failed to resolve 'lower': -2
[   62.641720][ T6762] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   62.691148][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.691211][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.691951][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.691962][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.692311][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.692321][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.692812][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.692823][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   62.742851][ T6778] SELinux:  Context system_u:object_r:null_device_t:s0 is not valid (left unmapped).
[   62.745181][   T43] audit: type=1400 audit(1788066807.841:433): avc:  denied  { relabelto } for  pid=6777 comm="syz.4.180" name="file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:null_device_t:s0"
[   62.745233][   T43] audit: type=1400 audit(1788066807.841:434): avc:  denied  { associate } for  pid=6777 comm="syz.4.180" name="file0" dev="tmpfs" ino=225 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:null_device_t:s0"
[   62.745275][   T43] audit: type=1400 audit(1788066807.841:435): avc:  denied  { ioctl } for  pid=6777 comm="syz.4.180" path="/34/file0" dev="tmpfs" ino=225 ioctlcmd=0x4d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:null_device_t:s0"
[   62.760463][   T43] audit: type=1400 audit(1788066807.861:436): avc:  denied  { unlink } for  pid=6048 comm="syz-executor" name="file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:null_device_t:s0"
[   62.830336][ T6782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   62.875819][ T6788] gretap0: entered allmulticast mode
[   62.932784][   T43] audit: type=1400 audit(1788066808.031:437): avc:  denied  { sqpoll } for  pid=6790 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   62.949878][ T6793] jffs2: notice: (6793) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   62.957571][ T6801] overlayfs: failed to resolve 'lower': -2
[   62.973260][ T6804] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   62.999423][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout
[   63.000080][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout
[   63.023501][   T43] audit: type=1400 audit(1788066808.121:438): avc:  denied  { mount } for  pid=6808 comm="syz.4.189" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   63.041727][ T6806] warning: `syz.1.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.051227][   T43] audit: type=1400 audit(1788066808.151:439): avc:  denied  { open } for  pid=6811 comm="syz.0.190" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   63.056305][ T6819] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   63.105822][ T6812] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[   63.107610][ T6806] CacheFiles: No cache directory specified
[   63.122143][ T6809] pci_bus 0000:01: busn_res: [bus 01] is released
[   63.216011][ T6827] futex_wake_op: syz.3.194 tries to shift op by 144; fix this program
[   63.271353][ T6832] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.386818][ T6841] netlink: 'syz.0.195': attribute type 4 has an invalid length.
[   63.416518][ T6844] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22)
[   63.482458][ T6850] netlink: 'syz.3.202': attribute type 1 has an invalid length.
[   63.528745][ T5829] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   63.680582][ T5829] usb 9-1: unable to get BOS descriptor or descriptor too short
[   63.684883][ T5829] usb 9-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98
[   63.690014][ T5829] usb 9-1: config 4 has an invalid interface number: 13 but max is 0
[   63.696772][ T5829] usb 9-1: config 4 has no interface number 0
[   63.699691][ T5829] usb 9-1: config 4 interface 13 has no altsetting 0
[   63.704698][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.708490][ T5829] usb 9-1: Product: syz
[   63.711565][ T5829] usb 9-1: Manufacturer: syz
[   63.713756][ T5829] usb 9-1: SerialNumber: syz
[   63.926944][ T5738] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   63.929960][ T5738] Bluetooth: hci2: ACL packet for unknown connection handle 220
[   63.942429][ T5829] ums-realtek 9-1:4.13: USB Mass Storage device detected
[   64.027310][ T5829] usb 9-1: USB disconnect, device number 3
[   64.213843][ T6872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6872 comm=syz.1.206
[   64.289942][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout
[   64.554851][ T6906] nfs: Unknown parameter 'reýtrans'
[   64.576451][ T6907] binder: 6899:6907 ioctl c0306201 2000000003c0 returned -22
[   64.729726][ T6912] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   64.730401][ T6912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6912 comm=syz.4.217
[   64.769679][ T6927] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[   64.902500][ T6938] capability: warning: `syz.0.225' uses deprecated v2 capabilities in a way that may be insecure
[   64.904225][ T6938] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   64.904245][ T6938] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[   64.962307][ T5738] Bluetooth: hci2: unexpected event for opcode 0x0025
[   65.088673][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout
[   65.516009][ T6925] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   65.516232][ T6925] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   65.516302][ T6925] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   65.554669][ T6950] pim6reg1: entered promiscuous mode
[   65.554759][ T6950] pim6reg1: entered allmulticast mode
[   65.640375][ T6957] overlayfs: failed to resolve 'lower': -2
[   65.896048][ T6987] overlayfs: failed to resolve 'work': -2
[   65.998813][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   66.110735][ T7013] FAT-fs (nbd1): unable to read boot sector
[   66.229097][ T5829] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   66.385151][ T7035] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[   66.403447][ T5829] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   66.404522][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.404567][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.426819][ T5829] as10x_usb: device has been detected
[   66.427770][ T5829] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   66.428696][ T5882] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   66.457981][ T5829] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   66.508944][ T5829] as10x_usb: error during firmware upload part1
[   66.509952][ T5829] Registered device Abilis Systems DVB-Titan
[   66.591643][ T5882] usb 9-1: Using ep0 maxpacket: 8
[   66.592449][ T5882] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   66.593399][ T5882] usb 9-1: config index 0 descriptor too short (expected 5924, got 36)
[   66.593418][ T5882] usb 9-1: config 250 has an invalid interface number: 228 but max is -1
[   66.593434][ T5882] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0
[   66.593450][ T5882] usb 9-1: config 250 has no interface number 0
[   66.593483][ T5882] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   66.593504][ T5882] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   66.593523][ T5882] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   66.593540][ T5882] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   66.593558][ T5882] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   66.593579][ T5882] usb 9-1: config 250 interface 228 has no altsetting 0
[   66.594950][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   66.594967][ T5882] usb 9-1: Product: syz
[   66.594979][ T5882] usb 9-1: SerialNumber: syz
[   66.605221][ T5882] hub 9-1:250.228: bad descriptor, ignoring hub
[   66.605250][ T5882] hub 9-1:250.228: probe with driver hub failed with error -5
[   66.634492][ T7049] syzkaller0: entered promiscuous mode
[   66.634516][ T7049] syzkaller0: entered allmulticast mode
[   66.819975][ T5882] usblp 9-1:250.228: usblp1: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   66.848835][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.015832][   T43] kauditd_printk_skb: 56 callbacks suppressed
[   67.016071][   T43] audit: type=1400 audit(1788066812.111:496): avc:  denied  { mounton } for  pid=7015 comm="syz.4.244" path="<too_long>" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.016462][   T43] audit: type=1400 audit(1788066812.111:497): avc:  denied  { mount } for  pid=7015 comm="syz.4.244" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   67.142905][ T5882] usb 9-1: USB disconnect, device number 4
[   67.145168][ T5882] usblp1: removed
[   67.265029][ T7057] overlayfs: failed to resolve 'work': -2
[   67.480075][ T7059] Console: switching to colour dummy device 80x25
[   67.562885][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout
[   67.565904][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout
[   67.835467][ T7066] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[   67.850225][ T7059] =============================================================================
[   67.850259][ T7059] BUG virtio-gpu-vbufs (Tainted: G             L     ): Objects remaining on __kmem_cache_shutdown()
[   67.850276][ T7059] -----------------------------------------------------------------------------
[   67.850276][ T7059] 
[   67.850955][ T7066] __nla_validate_parse: 12 callbacks suppressed
[   67.850970][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'.
[   67.854572][ T7059] Object 0xffff888038cc7180 @offset=4480
[   67.854586][ T7059] Object 0xffff888038cc7298 @offset=4760
[   67.854593][ T7059] Slab 0xffffea0000e33180 objects=29 used=2 fp=0xffff888038cc6000 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[   67.854611][ T7059] Disabling lock debugging due to kernel taint
[   67.854751][ T7059] ------------[ cut here ]------------
[   67.854756][ T7059] 1
[   67.854759][ T7059] WARNING: mm/slub.c:1268 at __slab_err+0x15/0x20, CPU#3: syz.1.249/7059
[   67.886784][ T7059] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   67.888380][ T7059] CPU: 3 UID: 0 PID: 7059 Comm: syz.1.249 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[   67.892012][ T7059] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[   67.894143][ T7059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   67.897964][ T7059] RIP: 0010:__slab_err+0x15/0x20
[   67.899697][ T7059] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 7c e8 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
[   67.905759][ T7059] RSP: 0018:ffffc90006ddf740 EFLAGS: 00010083
[   67.907720][ T7059] RAX: 000000000003fe3b RBX: ffffc90006ddf790 RCX: ffffc9000c3a1000
[   67.910891][ T7059] RDX: 0000000000080000 RSI: ffffffff81c8391d RDI: ffff88802c5f0000
[   67.913654][ T7059] RBP: ffff88802836c618 R08: 0000000000000007 R09: 0000000000000000
[   67.916368][ T7059] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001ea0
[   67.918910][ T7059] R13: ffff888038cc7fb8 R14: ffff88802836c600 R15: ffffea0000e33180
[   67.921412][ T7059] FS:  00007f35aa1036c0(0000) GS:ffff8880d5e64000(0000) knlGS:0000000000000000
[   67.924271][ T7059] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.926415][ T7059] CR2: 00007f35a93ed158 CR3: 000000002adc8000 CR4: 0000000000352ef0
[   67.929273][ T7059] Call Trace:
[   67.930558][ T7059]  <TASK>
[   67.931726][ T7059]  __kmem_cache_shutdown.cold+0x16e/0x177
[   67.933839][ T7059]  kmem_cache_destroy+0x7d/0x1a0
[   67.935509][ T7059]  virtio_gpu_free_vbufs+0x38/0x80
[   67.937170][ T7059]  ? __pfx_virtio_gpu_release+0x10/0x10
[   67.938972][ T7059]  virtio_gpu_release+0x5c/0x1c0
[   67.940562][ T7059]  ? __pfx_virtio_gpu_release+0x10/0x10
[   67.942371][ T7059]  drm_dev_put.part.0+0xbd/0x140
[   67.943989][ T7059]  drm_dev_put+0x1f/0x30
[   67.945364][ T7059]  virtio_dev_remove+0xb8/0x170
[   67.946996][ T7059]  ? __pfx_virtio_dev_remove+0x10/0x10
[   67.948806][ T7059]  device_remove+0xcb/0x180
[   67.950532][ T7059]  device_release_driver_internal+0x44e/0x620
[   67.952782][ T7059]  bus_remove_device+0x2bc/0x560
[   67.954669][ T7059]  ? __pfx_bus_remove_device+0x10/0x10
[   67.956729][ T7059]  ? __pfx_device_remove_attrs+0x10/0x10
[   67.958525][ T7059]  device_del+0x376/0x9b0
[   67.960070][ T7059]  ? __pfx_device_del+0x10/0x10
[   67.961673][ T7059]  ? __pfx___might_resched+0x10/0x10
[   67.963360][ T7059]  ? __pfx_pci_device_is_present+0x10/0x10
[   67.965405][ T7059]  device_unregister+0x1d/0xe0
[   67.967217][ T7059]  unregister_virtio_device+0x39/0x60
[   67.969096][ T7059]  virtio_pci_remove+0x7c/0x110
[   67.970723][ T7059]  pci_device_remove+0xb2/0x1d0
[   67.972322][ T7059]  ? __pfx_pci_device_remove+0x10/0x10
[   67.974322][ T7059]  device_remove+0xcb/0x180
[   67.975888][ T7059]  device_release_driver_internal+0x44e/0x620
[   67.978019][ T7059]  pci_stop_bus_device+0x120/0x160
[   67.980177][ T7059]  pci_stop_and_remove_bus_device+0x58/0xa0
[   67.982353][ T7059]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   67.984618][ T7059]  remove_store+0x123/0x140
[   67.986099][ T7059]  ? __pfx_remove_store+0x10/0x10
[   67.987838][ T7059]  ? find_held_lock+0x2b/0x80
[   67.989622][ T7059]  ? sysfs_file_kobj+0xe4/0x290
[   67.991388][ T7059]  ? sysfs_file_kobj+0xe4/0x290
[   67.992978][ T7059]  ? __pfx_remove_store+0x10/0x10
[   67.994840][ T7059]  dev_attr_store+0x58/0x80
[   67.996620][ T7059]  ? __pfx_dev_attr_store+0x10/0x10
[   67.998467][ T7059]  sysfs_kf_write+0xf2/0x150
[   68.000240][ T7059]  kernfs_fop_write_iter+0x3e0/0x5f0
[   68.002025][ T7059]  ? __pfx_sysfs_kf_write+0x10/0x10
[   68.003820][ T7059]  vfs_write+0x6af/0x1050
[   68.005296][ T7059]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   68.007303][ T7059]  ? __pfx_vfs_write+0x10/0x10
[   68.009057][ T7059]  ? find_held_lock+0x2b/0x80
[   68.010707][ T7059]  ksys_write+0x12a/0x250
[   68.012093][ T7059]  ? __pfx_ksys_write+0x10/0x10
[   68.013667][ T7059]  do_syscall_64+0x123/0x790
[   68.015371][ T7059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.017472][ T7059] RIP: 0033:0x7f35a919e159
[   68.019030][ T7059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.025894][ T7059] RSP: 002b:00007f35aa103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   68.028825][ T7059] RAX: ffffffffffffffda RBX: 00007f35a9425fa0 RCX: 00007f35a919e159
[   68.031351][ T7059] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000000
[   68.033907][ T7059] RBP: 00007f35a9235024 R08: 0000000000000000 R09: 0000000000000000
[   68.036539][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.039229][ T7059] R13: 00007f35a9426038 R14: 00007f35a9425fa0 R15: 00007ffeb4a938e8
[   68.042319][ T7059]  </TASK>
[   68.043426][ T7059] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   68.045862][ T7059] CPU: 3 UID: 0 PID: 7059 Comm: syz.1.249 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[   68.050076][ T7059] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[   68.051971][ T7059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.055382][ T7059] Call Trace:
[   68.056615][ T7059]  <TASK>
[   68.057791][ T7059]  dump_stack_lvl+0x100/0x190
[   68.059499][ T7059]  vpanic+0x553/0x970
[   68.060822][ T7059]  ? __pfx_vpanic+0x10/0x10
[   68.062657][ T7059]  ? lock_release+0x24d/0x310
[   68.064664][ T7059]  panic+0xd1/0xe0
[   68.066292][ T7059]  ? __pfx_panic+0x10/0x10
[   68.068030][ T7059]  check_panic_on_warn.cold+0x19/0x34
[   68.069848][ T7059]  ? __slab_err+0x15/0x20
[   68.071243][ T7059]  __warn.cold+0x191/0x318
[   68.072715][ T7059]  __report_bug+0x30f/0x440
[   68.074202][ T7059]  ? __slab_err+0x15/0x20
[   68.075796][ T7059]  ? __pfx___report_bug+0x10/0x10
[   68.077517][ T7059]  ? irq_work_queue+0xd1/0x100
[   68.079148][ T7059]  ? __wake_up_klogd+0xe5/0x140
[   68.080798][ T7059]  ? vprintk_emit+0x1c9/0x6b0
[   68.082419][ T7059]  ? __pfx_vprintk_emit+0x10/0x10
[   68.084070][ T7059]  ? __pfx_vprintk_emit+0x10/0x10
[   68.085690][ T7059]  ? __pfx_vprintk_emit+0x10/0x10
[   68.087722][ T7059]  ? __slab_err+0x15/0x20
[   68.089789][ T7059]  report_bug+0xb3/0x220
[   68.091580][ T7059]  ? __slab_err+0x15/0x20
[   68.093396][ T7059]  handle_bug+0x16a/0x2a0
[   68.094820][ T7059]  exc_invalid_op+0x17/0x50
[   68.096324][ T7059]  asm_exc_invalid_op+0x1a/0x20
[   68.097976][ T7059] RIP: 0010:__slab_err+0x15/0x20
[   68.099763][ T7059] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 7c e8 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
[   68.106031][ T7059] RSP: 0018:ffffc90006ddf740 EFLAGS: 00010083
[   68.108122][ T7059] RAX: 000000000003fe3b RBX: ffffc90006ddf790 RCX: ffffc9000c3a1000
[   68.111096][ T7059] RDX: 0000000000080000 RSI: ffffffff81c8391d RDI: ffff88802c5f0000
[   68.113824][ T7059] RBP: ffff88802836c618 R08: 0000000000000007 R09: 0000000000000000
[   68.116482][ T7059] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001ea0
[   68.119227][ T7059] R13: ffff888038cc7fb8 R14: ffff88802836c600 R15: ffffea0000e33180
[   68.121942][ T7059]  ? add_taint+0x6d/0xb0
[   68.123456][ T7059]  __kmem_cache_shutdown.cold+0x16e/0x177
[   68.125458][ T7059]  kmem_cache_destroy+0x7d/0x1a0
[   68.127378][ T7059]  virtio_gpu_free_vbufs+0x38/0x80
[   68.129350][ T7059]  ? __pfx_virtio_gpu_release+0x10/0x10
[   68.131239][ T7059]  virtio_gpu_release+0x5c/0x1c0
[   68.132877][ T7059]  ? __pfx_virtio_gpu_release+0x10/0x10
[   68.134900][ T7059]  drm_dev_put.part.0+0xbd/0x140
[   68.136560][ T7059]  drm_dev_put+0x1f/0x30
[   68.137918][ T7059]  virtio_dev_remove+0xb8/0x170
[   68.139484][ T7059]  ? __pfx_virtio_dev_remove+0x10/0x10
[   68.141377][ T7059]  device_remove+0xcb/0x180
[   68.142867][ T7059]  device_release_driver_internal+0x44e/0x620
[   68.144880][ T7059]  bus_remove_device+0x2bc/0x560
[   68.146495][ T7059]  ? __pfx_bus_remove_device+0x10/0x10
[   68.148410][ T7059]  ? __pfx_device_remove_attrs+0x10/0x10
[   68.150757][ T7059]  device_del+0x376/0x9b0
[   68.152628][ T7059]  ? __pfx_device_del+0x10/0x10
[   68.154442][ T7059]  ? __pfx___might_resched+0x10/0x10
[   68.156175][ T7059]  ? __pfx_pci_device_is_present+0x10/0x10
[   68.158080][ T7059]  device_unregister+0x1d/0xe0
[   68.159722][ T7059]  unregister_virtio_device+0x39/0x60
[   68.161508][ T7059]  virtio_pci_remove+0x7c/0x110
[   68.163086][ T7059]  pci_device_remove+0xb2/0x1d0
[   68.164640][ T7059]  ? __pfx_pci_device_remove+0x10/0x10
[   68.166462][ T7059]  device_remove+0xcb/0x180
[   68.167945][ T7059]  device_release_driver_internal+0x44e/0x620
[   68.170134][ T7059]  pci_stop_bus_device+0x120/0x160
[   68.172128][ T7059]  pci_stop_and_remove_bus_device+0x58/0xa0
[   68.174174][ T7059]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   68.176362][ T7059]  remove_store+0x123/0x140
[   68.177959][ T7059]  ? __pfx_remove_store+0x10/0x10
[   68.179663][ T7059]  ? find_held_lock+0x2b/0x80
[   68.181306][ T7059]  ? sysfs_file_kobj+0xe4/0x290
[   68.182880][ T7059]  ? sysfs_file_kobj+0xe4/0x290
[   68.184450][ T7059]  ? __pfx_remove_store+0x10/0x10
[   68.186077][ T7059]  dev_attr_store+0x58/0x80
[   68.187586][ T7059]  ? __pfx_dev_attr_store+0x10/0x10
[   68.189279][ T7059]  sysfs_kf_write+0xf2/0x150
[   68.191179][ T7059]  kernfs_fop_write_iter+0x3e0/0x5f0
[   68.193036][ T7059]  ? __pfx_sysfs_kf_write+0x10/0x10
[   68.194950][ T7059]  vfs_write+0x6af/0x1050
[   68.196550][ T7059]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   68.198760][ T7059]  ? __pfx_vfs_write+0x10/0x10
[   68.200604][ T7059]  ? find_held_lock+0x2b/0x80
[   68.202190][ T7059]  ksys_write+0x12a/0x250
[   68.203728][ T7059]  ? __pfx_ksys_write+0x10/0x10
[   68.205320][ T7059]  do_syscall_64+0x123/0x790
[   68.206834][ T7059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.208929][ T7059] RIP: 0033:0x7f35a919e159
[   68.210784][ T7059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.218804][ T7059] RSP: 002b:00007f35aa103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   68.221510][ T7059] RAX: ffffffffffffffda RBX: 00007f35a9425fa0 RCX: 00007f35a919e159
[   68.224199][ T7059] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000000
[   68.226770][ T7059] RBP: 00007f35a9235024 R08: 0000000000000000 R09: 0000000000000000
[   68.229631][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.232447][ T7059] R13: 00007f35a9426038 R14: 00007f35a9425fa0 R15: 00007ffeb4a938e8
[   68.235199][ T7059]  </TASK>
[   68.237394][ T7059] Kernel Offset: disabled
[   68.239417][ T7059] Rebooting in 86400 seconds..