last executing test programs:

24.06297019s ago: executing program 2 (id=54):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00')
pread64(r0, &(0x7f0000000a00)=""/185, 0xb9, 0x3c)

24.06199908s ago: executing program 2 (id=56):
syz_emit_ethernet(0x3b6, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8220037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf730041e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
chdir(0x0)
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000004c0)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000500)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000540)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000005c0)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000600)={0x2c, 0x0, r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x9, 0xfffffffd, 0xb, 0x53c}, 0x10)

23.899171441s ago: executing program 2 (id=61):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200010})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3450, &(0x7f00000000c0)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x0, 0x1, 0xfffff000}, 0x20)

23.897442122s ago: executing program 2 (id=62):
r0 = epoll_create1(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd25, 0x25dfdc05, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x44)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r1)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3e7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ppoll(&(0x7f00000003c0)=[{r3, 0x28}, {r0, 0x100}, {r5, 0x90}, {r1, 0x202}, {0xffffffffffffffff, 0x40}], 0x5, &(0x7f0000000400), &(0x7f0000000440)={[0x6]}, 0x8)
mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00')
r7 = socket$unix(0x1, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f00000000c0)={0xa002803f})

23.811408151s ago: executing program 2 (id=63):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2, 0x1}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x110)
write(r3, &(0x7f0000000800)='27', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, r3}, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0x24d, 0xce, 0xff, 0x6, 0x6, 0x2}}}}]}, 0x58}}, 0x400d4)
sendmsg$nl_route_sched(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)=@newqdisc={0x24, 0x29, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000)

23.59077888s ago: executing program 2 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x2, 0x7e, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x2, 0x70bd2e, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4010)
kexec_load(0x0, 0x0, 0x0, 0x1)
setuid(0xee01)
readv(r3, &(0x7f00000018c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x500e200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettaction={0x64, 0x32, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4840)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x4, 0x8fbc, 0x1}, 0x10)
capget(&(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002540), 0x0, 0x10, &(0x7f0000002580), 0xfffffffffffffd00}, 0x48)

23.499605359s ago: executing program 32 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x2, 0x7e, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x2, 0x70bd2e, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4010)
kexec_load(0x0, 0x0, 0x0, 0x1)
setuid(0xee01)
readv(r3, &(0x7f00000018c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x500e200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettaction={0x64, 0x32, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4840)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x4, 0x8fbc, 0x1}, 0x10)
capget(&(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103f00000000001d440500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002540), 0x0, 0x10, &(0x7f0000002580), 0xfffffffffffffd00}, 0x48)

17.72176018s ago: executing program 4 (id=155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0xffffffffffffff2b, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000180)={r3, 0x0, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r4, 0x80000, <r5=>0xffffffffffffffff})
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r5})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56548, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0)

17.661038847s ago: executing program 4 (id=156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x54, r4, 0x1, 0xfffffffd, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2800000000000}, {0xc, 0x90, 0x7ffdffffffffffff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x6000, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17.011158508s ago: executing program 4 (id=160):
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./proc_mnt\x00', 0x1ed)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0xfddbdf25}, 0xc)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @private0, 0x5}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000000c0)={r3, @in6={{0xa, 0x3, 0x4, @mcast1, 0x1000000}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x8003, 0x6, 0x10}, &(0x7f0000000200)=0x10)
mount(0x0, &(0x7f0000001340)='./proc_mnt\x00', &(0x7f0000001380)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6)
write$selinux_create(r4, &(0x7f00000006c0)=@access={'system_u:object_r:qemu_device_t:s0', 0x20, 'unconfined', 0x20, 0x7}, 0x43)

17.010956802s ago: executing program 4 (id=161):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0)
mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000200)='./file0\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffec4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
syz_clone(0x20100000, &(0x7f0000000480)="e348f417116f4e6b6b0fd977a62dac0ef77911402fccd1e86f7dbc19283fdf9ca315dbc58705553d5d4c35a0a599c5dbfa7c6e7979476bc2a2edd7a9b6a1ccab9fab6cd8dd5c51f2fc374d329bbd46a0d79e5c48bb187e63e2c3d90551cf7e14a02424c260421ce77b9d4f29d5c5b474f93d88ee8185cc09dc7530757a42bb42f373359b1c1e96aa84bdc6122dc1f89b96fb8f63077748adb0ba46fe5933845e7f28d1536db4fcdb049dcd94040a225dc1b9ddf6e87e9134a58e14591e", 0xbd, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="0aa0f20aebfecac74eb939865ff7ba83d90f3248359e91fe4d20ce3517e86adae5415997e7420455c64b5619aac1e78f96e6d053ab83c1d6e953b91b0cb9caa193b0eba34159a2cc9c09c20e1ce1ecd36473668cb020916eadfd8026175eece51c7a5e5cf983582407f3e97f852f0da61b7dc506846f5370ec6e5dda2c9b2531070c6132249b2114293aa084aa1fe71258d1efcf85f96e1f2b42fc9c7b52395635ff2d275e465383718d339f3838f2b029365625d66861c1d28dfd974322dc0e45aa34b25994529ffaf9c1ca88da3f7751f3e23fd6")
ioctl$int_in(r3, 0x5421, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r3}, &(0x7f00000000c0), &(0x7f00000006c0)='%ps    \x00'}, 0x20)
creat(&(0x7f0000000340)='./file0\x00', 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001000030400000000fedbdf2500316800516146510493d7ef0ee528652380a107b5b4a5d3960594bf8ba996d5412c36bb686a420267a810a03a7105e925292d257b256d9a297be824dec7155374a3e237e3bb2dc8b9e0b3c2b7f00546a18a9108cb192398344a3dc87650281169285ca07517220ff59ee56fdb70e363fa25e79c43fe5720eb1f6d77a364e4234a0718790993c628b616ebfb1e43035a83ca1906f8f00de1f4a0b49a3ee4e7e43d8d3952dada5b04", @ANYRES32=0x0, @ANYBLOB="000800000750050004001400"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

16.94853179s ago: executing program 4 (id=165):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c5882, 0x0)
r1 = dup(r0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_b, @initial, {0x0, 0xfd}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x32e}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='cgroup.procs\x00', r6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@chain)
add_key(&(0x7f0000000280)='encrypted\x00', 0x0, &(0x7f00000002c0)="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", 0x592, r6) (async)
accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000a80)=0x4000)
ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0)

16.537445212s ago: executing program 4 (id=171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000130900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800cc5b595d3fabece403400000000a08000140000000090900010073797a30"], 0xec}}, 0x0)

16.320886541s ago: executing program 33 (id=171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000130900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800cc5b595d3fabece403400000000a08000140000000090900010073797a30"], 0xec}}, 0x0)

1.85073072s ago: executing program 0 (id=354):
r0 = syz_open_dev$radio(0x0, 0x1, 0x2)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

1.771487068s ago: executing program 0 (id=355):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0xa)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002580)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000002980)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@deltaction={0x14, 0x31, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5)
close(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
syz_open_procfs(0x0, &(0x7f0000002400))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = creat(&(0x7f0000002840)='./bus\x00', 0x20)
ioctl$FIOCLEX(r5, 0x5451)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000002440)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(r6, &(0x7f0000002540)={0xa, 0x4f20, 0x8004, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
mkdir(&(0x7f0000002400)='./bus\x00', 0x40)
getxattr(&(0x7f00000027c0)='./bus\x00', &(0x7f0000002800)=@known='system.posix_acl_default\x00', 0x0, 0x0)
listen(r6, 0x7c2)
syz_emit_ethernet(0xd6, &(0x7f0000002880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x29, 0xc8, 0x4000, 0x0, 0x3b, 0x6, 0x0, @private=0xa010101, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0x24}, {"983a70ca0146d54dc1f285cd6b77615180bf82d41a2b4ce9743f961eb1ccac3baa79d9876d4672182fa031bf994048a5b8db7ca9732880e28ed4ad19f691d93139458fb6dc1a7fcd3383521a2cc644a56414d63753d901b0f59218cc4278a39b643f28690e1d86786ef63a0834dc1dca9dc4a2c021947fa6dcf51dc7e13c83931d0a8675a2241da32088698f278deb7d5cab0e56f780b46cb1b41d971ea229cb"}}}}}}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
mount(&(0x7f00000026c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f00000023c0)='./cgroup\x00', &(0x7f0000002380)='cramfs\x00', 0x200081, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002300)={0x1, &(0x7f0000002340)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mount$pvfs2(&(0x7f00000025c0), &(0x7f0000002600)='./cgroup\x00', &(0x7f0000002640), 0x880404, &(0x7f0000002680)=ANY=[@ANYBLOB="2d262e285b212c6d6561737572652c01006c617a7976696d652c6f626a5f726fb2a63d786673002c00"])
close_range(r7, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18b503, 0x0)

1.561126394s ago: executing program 0 (id=362):
r0 = socket$inet(0xa, 0x801, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000040)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x9, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x160, 0x98, 0x1f8, 0x1f8, 0x1f8, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x8}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)

1.558796597s ago: executing program 0 (id=365):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000740)=""/4060, &(0x7f0000001740)=0xfdc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00'})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x28102, 0xd)
preadv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/33, 0x21}], 0x1, 0x10001, 0xc9)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x777)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write(r4, &(0x7f00000006c0), 0x0)

1.483582977s ago: executing program 0 (id=368):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0xff, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20)
r2 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r4 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r4, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x800}, 0x8)

1.483359347s ago: executing program 0 (id=369):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x284080, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x1, 0x64}, 0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={<r1=>0x2, 0x6}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x7, 0x8}, 0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8)
syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
io_setup(0x81, &(0x7f0000000200)=<r2=>0x0)
r3 = syz_open_dev$audion(&(0x7f0000000580), 0xc2, 0x66d40)
io_submit(r2, 0x4, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x800, r0, &(0x7f0000000240)="277ba6bce97c9730fa79e86939e06e5758733942844711578ac1f738e7175eb29578459a36733a04ab4eb722745e40bcdfb32f5aff1861ef3ad63a80c58648c0b93538b706795320613f0f11ff77260cdef3bbfc9a3710aba0a1b9db68b8a9d9c910af9a1b08c3e6e9741f78a421172d1af2d673d8bc4da4584d0056b89a9f26feb1426aaaade5af0f6195", 0x8b, 0x2, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f0000000340)="c66c41d63480af12678c29eb8c33771d7acf239b3856f35709d55dc9c4bd49fff85c358b3e3baa14c79472149e5c8a29f7e4c36a7026523b6a140711ce5a47ab788fc30656dab1c60d3c02b6bc89315c03918fae3404b40af17df72219278c719778e8b1b3d7e76a694c965db447e7ea531560e13bb43c27f6bf9f6abb37a608aabe0646a49e208ee440bea4826175d93a41a1da6c44f2f1c0cf01481f797654d8fe00d7ea4b81fa4eabc2144324ecbdeea7e9245010bbe67d63c7164b89c85b33640efc26232cf44a6942", 0xcb, 0x5b8, 0x0, 0x1, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000480)="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", 0xfb, 0x7, 0x0, 0x3, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000600)="54c01d7b1cf7434aa241d6dbb3cdc592419f4e9ab4abc8e167ab0e4e7624bc027ba7a8c0da32534f3300373ed76485dc209bc3d36534332838f0738c9942384a82c4794da3f4e3c5c6952cf17da05b227a50a826a23d319561d9bf51e8eedbee9d912d0ee6452bb8c3fe22c41edd74f494ee2f1895175b218d6e10a47c4cfa6cd5bbab51a7beedae0003b87d3570fc492e276d5f57b0ed92e49ab47702ee6afa9c7eb4fbd4d77ccbf3aacb57991ba85702884ab7f558dc68ffe4d39f70ca93f1861fe0bf8ae53a3033c0a60d1b9ea5d95865ab7b9397408ddb5ca69f9e4d8e11568d6b48ea54572f", 0xe8, 0x3, 0x0, 0x1}])
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r4=>r3, {0x8}}, './file0\x00'})
sendmsg$nl_generic(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {0x1c}, [@typed={0x19, 0x11e, 0x0, 0x0, @binary="d310414d89b5206cbdcba98809cfb32c6c06ef592e"}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@mcast1}, @generic="7d29ac62ddbc4ef9aa4f4064ce5d69cf2bda747f11600d41e8f282d15cbe53e36a9933a7e7b48c6dd9126f3c95f630e27327e1802e786f26d90ab582dc3bf7da61c8f5d1d0b43318", @typed={0x8, 0x75, 0x0, 0x0, @fd=r0}, @generic="5f7cd4ae0363b79dea00e03443eb4fe134690f2bb64e6ceb0b0480337366dc70851bb88c5fdae4c6"]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000009c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xf9, 0x8, 0x1d, 0x9, 0xfffffffa, 0x1000, "83a0b2b7973875c571991ad90dc4820892ddc9ed2e4864493afb6f2b4a69dfce4fed564be6004616f86e1c2320ab3b0580a4530b9d97814cf982419c0c35ce5507fa1043e4c64274102b7345e958961cb51cf721355781519ed804698773d13d96a13129551bad576e6c8e412d23e6b54f6686fede9b7943095cc353f2b52a3bf0b5d6822eff6f7cbb7c96702050fbfdcf8c58955287f231994fe4ede7449bb3979b137963d8e461f8c10b3992ba7bc9d48144d6ad158b5c407c09449da693bf626cd460f33f63b90e433aba752dae99ec14769e3081c8b2c912ae421c09f59df47e00fc98dedf7ca37406d6063fd9003ed895d1b0873c1d34"}}, 0x211)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x604042, 0x0)
ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0)
clock_gettime(0x0, &(0x7f0000000d00)={<r7=>0x0, <r8=>0x0})
io_pgetevents(r2, 0x1, 0x6, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000d40)={r7, r8+60000000}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0x7]}, 0x8})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000e40)=@attr_other={0x0, 0x7, 0x8000000000000001, &(0x7f0000000e00)=0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000000e80)={r1, 0xffffffff}, 0x8)
ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000ec0)={0x3, 0x4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000f00))
ioctl$SNDCTL_SEQ_RESETSAMPLES(r4, 0x40045109, &(0x7f0000000f40)=0x1000)
recvfrom(r0, &(0x7f0000000f80)=""/147, 0x93, 0x2000, 0x0, 0x0)
bind$rds(r4, &(0x7f0000001040)={0x2, 0x4e24, @multicast2}, 0x10)
clock_gettime(0x0, &(0x7f0000001080)={<r9=>0x0, <r10=>0x0})
nanosleep(&(0x7f00000010c0)={r9, r10+10000000}, &(0x7f0000001100))
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001140))

1.411584529s ago: executing program 5 (id=371):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="30000000110001000000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000", 0x30}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
socket$inet(0x2, 0x2, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00')
pread64(r8, &(0x7f0000001300)=""/102399, 0x18fff, 0xb5)
bind$xdp(r2, &(0x7f000001a300)={0x2c, 0x4, r7, 0x28, r8}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0x61}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="30000000110001000000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000", 0x30}], 0x1}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket$inet(0x2, 0x2, 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') (async)
pread64(r8, &(0x7f0000001300)=""/102399, 0x18fff, 0xb5) (async)
bind$xdp(r2, &(0x7f000001a300)={0x2c, 0x4, r7, 0x28, r8}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0x61}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) (async)

1.230345037s ago: executing program 5 (id=372):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x1d8, 0xfffffffffffffffe) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0}) (async)
connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e20, 0x8, @private2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x80000, 0x0)
close(r5) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c40)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d80)=@newqdisc={0x1c8, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0xfff, 0x2a2, 0x2, 0x7, 0x3e0, 0x4}}, {0xc, 0x2, [0x4, 0x40, 0xfffc, 0x0]}}, {{0x1c, 0x1, {0x42, 0x1, 0x7, 0x5, 0x3, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x2, 0xed, 0x8, 0x9, 0x65]}}, {{0x1c, 0x1, {0x37, 0x3, 0x9, 0x5, 0x1, 0x4, 0x0, 0x5}}, {0xe, 0x2, [0xff, 0x9, 0x5, 0x101, 0x80a4]}}, {{0x1c, 0x1, {0x18, 0x1, 0x4, 0x5, 0x3, 0x6c, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0x8001, 0x6, 0x881, 0x6, 0x2]}}, {{0x1c, 0x1, {0x3, 0x8e, 0x0, 0x1, 0x0, 0x3, 0x8001, 0x8}}, {0x14, 0x2, [0x9, 0x400, 0x401, 0xc4, 0x1, 0x6, 0x3ff, 0x5]}}, {{0x1c, 0x1, {0x59, 0xa8, 0x800, 0x9, 0x1, 0xf632, 0x7, 0x6}}, {0x10, 0x2, [0x3, 0xec, 0x8d, 0x7, 0x169, 0xfd]}}, {{0x1c, 0x1, {0x9, 0x10, 0xfffe, 0x2, 0x0, 0xe, 0x36, 0x5}}, {0xe, 0x2, [0x3, 0xa, 0x2, 0x7, 0x0]}}, {{0x1c, 0x1, {0x8, 0x7f, 0xf, 0x4, 0x0, 0x80, 0x0, 0x5}}, {0xe, 0x2, [0x101, 0x2, 0xa, 0x3, 0x4]}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000d40)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setns(0xc9, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r13=>0x0}) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r13, @ANYBLOB="10005e80040001000800020001000000"], 0x2c}}, 0x4004080) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r12, 0xf0229000)

1.019987557s ago: executing program 5 (id=376):
r0 = syz_open_dev$radio(0x0, 0x1, 0x2)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

1.019564547s ago: executing program 5 (id=377):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000740)=""/4060, &(0x7f0000001740)=0xfdc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00'})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x28102, 0xd)
preadv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/33, 0x21}], 0x1, 0x10001, 0xc9)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x777)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write(r4, &(0x7f00000006c0), 0x0)

939.166922ms ago: executing program 5 (id=379):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000009c0)={&(0x7f0000000340)=0x4, 0x7, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], &(0x7f0000000980)})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x440080d6)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xc, &(0x7f0000000cc0)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x14, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x18, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000a00)={0x6, @local, 0x4e20, 0x0, 'lblc\x00', 0x1, 0x12c, 0xffffffff}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000a40)={{0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0xffffffff}, {@remote, 0x4e20, 0x0, 0x1}}, 0x44)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)

850.764111ms ago: executing program 1 (id=381):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='2', 0x1}], 0x1}}], 0x1, 0x20000014)

835.26213ms ago: executing program 5 (id=382):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="70008978aaaaaaaaaaaaaaaaaaaaaabb86dd6f9758faec13060001200100000000000000000000000000014e204e2400"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5102000190"], 0x4e)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000580)={0xb, 0x7, 0x1, 0x0, 0x5, 0x4, 0x0, &(0x7f0000000540)=[{0x6, 0x1ff, 0x5c2}, {0x1c, 0xfe, 0x80}, {0x1b, 0x101, 0x7}, {0x13, 0x101, 0x9}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'pim6reg\x00', 0x6bf1c2d5adba8c32})
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000007c0)={0x1, 0x1, 0x40}, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0], 0x9})
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/net/ipv4/neigh/lo/unres_qlen\x00', 0x1, 0x0)
pwritev(r6, &(0x7f00000006c0)=[{&(0x7f0000000700)="fe", 0x1}], 0x1, 0xd1, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000200)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0], 0x1, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, r7, r8, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write(r4, &(0x7f0000000500)='0', 0x1f)
r9 = getpgrp(0x0)
kcmp(r9, r9, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4}, 0x10)
write(r10, &(0x7f0000000400)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)
getsockopt$sock_buf(r10, 0x1, 0x1f, &(0x7f0000000440)=""/59, &(0x7f0000000480)=0x3b)

589.118589ms ago: executing program 1 (id=383):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x65dfdc00, {0x0, 0x0, 0x0, r6, {0xf49c1a6d801e715d, 0xfff7}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
utime(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc\x00', 0xf9)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000400)='zonefs\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = fsopen(&(0x7f0000000640)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000680)='utf8', &(0x7f00000006c0)='\x00V\x13\xdb\xbc', 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3021c0b93130000000020101020000000000000000020010070c00198008000200a80600001000020400008f2c02"], 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x93806d6c40d63a3e)
r9 = signalfd(0xffffffffffffffff, &(0x7f0000000540)={[0x7]}, 0x8)
r10 = openat(r9, &(0x7f00000004c0)='./proc\x00', 0x4000, 0x10c)
write(r10, &(0x7f0000000500)="5c7830313032303330342001", 0xc)
lsm_get_self_attr(0x66, 0x0, &(0x7f0000000ac0)=0xfa, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setns(0xc9, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@setneightbl={0x2c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH1={0x8}]}, 0x2c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x148, 0xc8, 0x8, 0x0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x148, 0x0, {0x0, 0x2000000000000}, [@common=@dst={{0x48}, {0x4, 0x0, 0x0, [0x4, 0x6, 0x38, 0x0, 0x2, 0x6, 0x0, 0x101, 0x5, 0x5, 0xd, 0x8000, 0x4, 0x7, 0x7fff, 0xffff], 0xa}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x4}, {0x2, 0x2, 0x3}, 0x0, 0x8}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffd, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
r13 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
r14 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x40000000, 0x213}, &(0x7f0000000bc0)=<r15=>0x0, &(0x7f0000000c00)=<r16=>0x0, &(0x7f0000000c40)=<r17=>0x0)
syz_io_uring_submit$UBLK(r15, r16, r17, &(0x7f0000000c80)=@ublk_get_params_sqe={0x2e, 0x40, 0x0, r13, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000d00)={0x70}}})
io_uring_enter(r14, 0x1, 0x1, 0x1, 0x0, 0x0)

455.151992ms ago: executing program 3 (id=384):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x20206, 0xbc)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xfffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x8000000000000001, 0x1f, 0xfffffffffffffffe}, {0x20040, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(gcm-aes-ce)\x00'}, 0x0, 0xe0}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40001}, 0x844)
sendfile(r0, r0, 0x0, 0x68)

381.411122ms ago: executing program 3 (id=385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$pid(0x2, 0x0, 0x6000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x20206, 0xac)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x15961, 0x400, 0x0, 0x14b}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xd8000004}], 0x1, 0x0, 0x1, {0x0, r7}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r8 = socket$kcm(0x29, 0x5, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r8], 0x84}}, 0x20008040)
sendfile(r1, r1, 0x0, 0x68)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000717b00000008000300", @ANYRES32=r11], 0x24}}, 0x0)

318.007676ms ago: executing program 3 (id=386):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1, 0x5fac, 0x5)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='2', 0x1}], 0x1}}], 0x1, 0x20000014)

229.18009ms ago: executing program 3 (id=387):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000740)=""/4060, &(0x7f0000001740)=0xfdc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00'})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x28102, 0xd)
preadv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/33, 0x21}], 0x1, 0x10001, 0xc9)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x777)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write(r4, &(0x7f00000006c0), 0x0)

160.843835ms ago: executing program 1 (id=388):
r0 = syz_open_dev$radio(&(0x7f0000002500), 0x1, 0x2)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (fail_nth: 1)

160.694045ms ago: executing program 3 (id=389):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_b, @initial, {0x0, 0xfd}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x32e}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

91.547543ms ago: executing program 1 (id=390):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

91.416744ms ago: executing program 3 (id=391):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='2', 0x1}], 0x1}}], 0x1, 0x20000014)

313.563µs ago: executing program 1 (id=392):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x6, 0x125001)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x2, [[0x101, 0x7fff, 0x5, 0x2, 0x81, 0x3, 0x1, 0xe335acff], [0x2, 0xb, 0xff, 0x49d, 0x0, 0x2, 0x94, 0x3], [0x7, 0x3, 0x8, 0x4, 0x5, 0x7, 0xee, 0x5]], '\x00', [{0x1ff, 0x0, 0x1}, {0xfffffff9, 0x8, 0x0, 0x0, 0x1}, {0x4, 0x4, 0x1, 0x1, 0x1}, {0x7, 0x2513, 0x0, 0x0, 0x0, 0x1}, {0x80000000, 0x98, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x1c4a, 0x100, 0x1, 0x1}, {0x1, 0x8c9, 0x0, 0x1, 0x0, 0x1}, {0x7ff, 0x800, 0x0, 0x0, 0x1}, {0x9, 0x8, 0x1, 0x1}, {0x9, 0xb0, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x80000001})
ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f00000002c0))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='cubic', 0x5)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x51, 0x80000)
mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r2, 0x83000000)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380))
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000003c0)=@svm={0x0, 0x1, 0x1080, {0x10000, 0x3}, {"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"}})
r4 = syz_open_dev$sndpcmc(&(0x7f0000001440), 0x5, 0x4000)
mmap$snddsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x30, r4, 0x5000)
clock_gettime(0x0, &(0x7f0000002840)={<r5=>0x0, <r6=>0x0})
recvmmsg(r1, &(0x7f0000002800)=[{{&(0x7f0000001480)=@ieee802154, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001500)=""/131, 0x83}, {&(0x7f00000015c0)=""/24, 0x18}, {&(0x7f0000001600)=""/3, 0x3}, {&(0x7f0000001640)=""/101, 0x65}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002740)=""/154, 0x9a}, 0x6}], 0x1, 0x40000002, &(0x7f0000002880)={r5, r6+10000000})
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000028c0)=0x2)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000002940)={0x7, 0xa2, 0x1})
r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002980), 0x42000, 0x0)
ioctl(r8, 0x0, &(0x7f00000029c0)="e11d669aa296ff17133634b65f77d510c7d9838f3f2f1cbb225c")
set_mempolicy_home_node(&(0x7f00009fb000/0x1000)=nil, 0x1000, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002a00)={0x9, 0x6, 0x6, 0x1, 0x3, 0x0, 0x3, 0x8, 0x10, 0x7, 0x40, 0x2, 0x8, 0x5}, 0xe)
shutdown(r1, 0x1)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000002a40))
getsockname$packet(r8, &(0x7f0000002a80)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002ac0)=0x14)
bind$xdp(r8, &(0x7f0000002b00)={0x2c, 0xb, r9, 0x3f, r8}, 0x10)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0)
fcntl$addseals(r10, 0x409, 0x7)
openat(r8, &(0x7f0000002b80)='./file0\x00', 0x400000, 0x2b)
getsockname$inet(r8, &(0x7f0000002bc0)={0x2, 0x0, @remote}, &(0x7f0000002c00)=0x10)
fcntl$setownex(r1, 0xf, &(0x7f0000002c80)={0x1})

0s ago: executing program 1 (id=393):
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x30, &(0x7f0000000300)={0x0, 0x800000}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ubi_ctrl\x00', 0x101002, 0x0)
ioctl(r0, 0x8, &(0x7f0000000040)="24ffb09c778dace5") (async)
creat(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10) (async)
sendmmsg(r1, &(0x7f0000000400), 0x800001d, 0x1c) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) (async)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="240000001a005f0400f9f407000904018010200000000009000000000800010000000000", 0x24) (async)
add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) (async)
r3 = mq_open(0x0, 0x40, 0x60, 0x0)
mq_getsetattr(r3, 0x0, 0x0) (async)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000780)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000e00))

0s ago: executing program 1 (id=394):
r0 = fsopen(&(0x7f0000000800)='ramfs\x00', 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x7b0c, 0x40000)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x20, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x0, @uvalue=0x8000}, {0x3, @svalue=0x2}, {0x1, @svalue=0x8000000000000a}]}}, {0x30, '\x00', @st={0x4, [{0x1, @svalue=0x9e}, {0x2, @svalue=0x7}, {0x1, @svalue}, {0x2, @svalue=0xfffffffffffffff6}]}, 0x387d}, {0x25, '\x00', @buffer={"fa6a4853c3f1768f932438e5ce80be3693f47208edd4c0ef2f099bfe6a64a74b", 0x20}, 0x800007}, {0x17, '\x00', @st={0x4, [{0x0, @uvalue=0xb}, {0x0, @uvalue=0x2}, {0x2, @uvalue=0xfffffffffffffdff}, {0x1, @svalue=0x6}]}, 0x6}, {0x3, '\x00', @data=0x1, 0xbf}, {0x13, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x2}, {0x1, @svalue=0x3}, {0x3, @uvalue=0x4}]}, 0x363}, {0x45, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x1, @uvalue=0x4}, {0x1, @svalue=0x1}, {0x0, @uvalue=0xd}]}, 0x40001b}, {0x24, '\x00', @buffer={"2d3b72640ff1a921f82e921d0955dd513cf300a7e921de16671c3f2b4572f958", 0x20}, 0x7}, {0x3b, '\x00', @data=0xffffffff, 0x4}]})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000040)={'bond0\x00', @random="00009e0c1100"})
r3 = fsmount(r0, 0x1, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000002480)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r4, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0x1000, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r5, &(0x7f0000000600)=[{0xc, 0x8, 0x1, 0x6, @time={0x0, 0x200}, {0x2, 0xd}, {0x5, 0x8}, @control={0x4, 0x9, 0xffffffff}}, {0x9, 0x5, 0x0, 0x1, @time={0x4, 0xff88}, {0x7, 0x9}, {}, @queue={0xa, {0x3, 0x1}}}], 0x38)
renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
fsopen(&(0x7f0000000800)='ramfs\x00', 0x0) (async)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x7b0c, 0x40000) (async)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x20, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x0, @uvalue=0x8000}, {0x3, @svalue=0x2}, {0x1, @svalue=0x8000000000000a}]}}, {0x30, '\x00', @st={0x4, [{0x1, @svalue=0x9e}, {0x2, @svalue=0x7}, {0x1, @svalue}, {0x2, @svalue=0xfffffffffffffff6}]}, 0x387d}, {0x25, '\x00', @buffer={"fa6a4853c3f1768f932438e5ce80be3693f47208edd4c0ef2f099bfe6a64a74b", 0x20}, 0x800007}, {0x17, '\x00', @st={0x4, [{0x0, @uvalue=0xb}, {0x0, @uvalue=0x2}, {0x2, @uvalue=0xfffffffffffffdff}, {0x1, @svalue=0x6}]}, 0x6}, {0x3, '\x00', @data=0x1, 0xbf}, {0x13, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x2}, {0x1, @svalue=0x3}, {0x3, @uvalue=0x4}]}, 0x363}, {0x45, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x1, @uvalue=0x4}, {0x1, @svalue=0x1}, {0x0, @uvalue=0xd}]}, 0x40001b}, {0x24, '\x00', @buffer={"2d3b72640ff1a921f82e921d0955dd513cf300a7e921de16671c3f2b4572f958", 0x20}, 0x7}, {0x3b, '\x00', @data=0xffffffff, 0x4}]}) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000040)={'bond0\x00', @random="00009e0c1100"}) (async)
fsmount(r0, 0x1, 0x0) (async)
openat$cgroup_ro(r3, &(0x7f0000002480)='cgroup.freeze\x00', 0x275a, 0x0) (async)
ftruncate(r4, 0x8008976) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) (async)
symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0x1000, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x8002) (async)
fcntl$dupfd(r5, 0x0, r5) (async)
write$sndseq(r6, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) (async)
write$sndseq(r5, &(0x7f0000000600)=[{0xc, 0x8, 0x1, 0x6, @time={0x0, 0x200}, {0x2, 0xd}, {0x5, 0x8}, @control={0x4, 0x9, 0xffffffff}}, {0x9, 0x5, 0x0, 0x1, @time={0x4, 0xff88}, {0x7, 0x9}, {}, @queue={0xa, {0x3, 0x1}}}], 0x38) (async)
renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async)

kernel console output (not intermixed with test programs):

h: hci0: unexpected cc 0x1001 length: 249 > 9
[   48.909338][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   48.912769][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   48.913091][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   48.913425][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   48.914262][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   48.914600][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   48.915285][ T5733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   48.916424][ T5733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   48.921484][   T42] audit: type=1400 audit(1792462972.109:159): avc:  denied  { read } for  pid=5726 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   48.922772][   T42] audit: type=1400 audit(1792462972.109:160): avc:  denied  { open } for  pid=5726 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   48.926057][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   48.927183][   T42] audit: type=1400 audit(1792462972.119:161): avc:  denied  { mounton } for  pid=5726 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   48.927426][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   48.927691][ T5733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   48.928565][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   48.928766][ T5733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   48.929744][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   48.930934][   T42] audit: type=1400 audit(1792462972.119:162): avc:  denied  { module_request } for  pid=5726 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   48.931077][ T5733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   48.931884][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   48.932797][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   48.938912][   T42] audit: type=1400 audit(1792462972.129:163): avc:  denied  { mounton } for  pid=5727 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   49.144007][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.144437][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.151651][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.178390][ T5727] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   49.216701][ T5726] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   49.219740][ T5735] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   49.286740][ T5731] infiniband rxe0: set active
[   49.287420][  T998] rxe_eth0 speed is unknown, defaulting to 1000
[   49.287871][ T5731] infiniband rxe0: added rxe_eth0
[   49.299714][ T5731] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   49.299744][ T5731] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   49.299777][ T5731] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   49.319203][ T5731] RDS/IB: rxe0: added
[   49.322650][ T5731] smc: adding ib device rxe0 with port count 1
[   49.322689][ T5731] smc:    ib device rxe0 port 1 has no pnetid
[   49.340468][  T852] rxe_eth0 speed is unknown, defaulting to 1000
[   49.357675][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.508866][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.547480][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.547552][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.547641][ T5727] bridge_slave_0: entered allmulticast mode
[   49.548926][ T5727] bridge_slave_0: entered promiscuous mode
[   49.567992][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.568038][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.568094][ T5727] bridge_slave_1: entered allmulticast mode
[   49.568876][ T5727] bridge_slave_1: entered promiscuous mode
[   49.616295][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.636804][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.648068][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.648146][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.648235][ T5735] bridge_slave_0: entered allmulticast mode
[   49.649801][ T5735] bridge_slave_0: entered promiscuous mode
[   49.652740][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.652841][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.653141][ T5735] bridge_slave_1: entered allmulticast mode
[   49.655575][ T5735] bridge_slave_1: entered promiscuous mode
[   49.656387][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.700167][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.700225][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.700304][ T5726] bridge_slave_0: entered allmulticast mode
[   49.701690][ T5726] bridge_slave_0: entered promiscuous mode
[   49.705305][ T5727] team0: Port device team_slave_0 added
[   49.706877][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.708962][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.709046][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.709084][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.709136][ T5726] bridge_slave_1: entered allmulticast mode
[   49.709832][ T5726] bridge_slave_1: entered promiscuous mode
[   49.718593][ T5727] team0: Port device team_slave_1 added
[   49.758558][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.784026][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.796382][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.796397][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.796416][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.798385][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.798397][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.798437][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.805282][ T5735] team0: Port device team_slave_0 added
[   49.806937][ T5735] team0: Port device team_slave_1 added
[   49.821322][ T5726] team0: Port device team_slave_0 added
[   49.850025][ T5726] team0: Port device team_slave_1 added
[   49.869177][ T5731] rxe_eth0 speed is unknown, defaulting to 1000
[   49.870330][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.870343][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.870363][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.886548][ T5727] hsr_slave_0: entered promiscuous mode
[   49.887228][ T5727] hsr_slave_1: entered promiscuous mode
[   49.888425][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.888435][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.888454][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.914191][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.914203][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.914215][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.915455][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.915463][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.915479][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.976163][ T5735] hsr_slave_0: entered promiscuous mode
[   49.976881][ T5735] hsr_slave_1: entered promiscuous mode
[   49.977657][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[   49.977783][ T5735] Cannot create hsr debugfs directory
[   50.076986][ T5726] hsr_slave_0: entered promiscuous mode
[   50.077413][ T5726] hsr_slave_1: entered promiscuous mode
[   50.077734][ T5726] debugfs: 'hsr0' already exists in 'hsr'
[   50.077746][ T5726] Cannot create hsr debugfs directory
[   50.304073][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   50.310565][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.328250][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   50.340042][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.341062][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   50.344843][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.361031][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   50.364542][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.454232][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.459662][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.460343][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.463851][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.480802][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.481040][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.481286][ T5731] bridge_slave_0: entered allmulticast mode
[   50.482754][ T5731] bridge_slave_0: entered promiscuous mode
[   50.487461][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.487599][ T5727] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.488080][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.488169][ T5727] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.492084][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.496641][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.497357][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.501867][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.505723][  T205] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.507055][  T205] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.526549][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.526627][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.526721][ T5731] bridge_slave_1: entered allmulticast mode
[   50.528088][ T5731] bridge_slave_1: entered promiscuous mode
[   50.568228][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.580181][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.603701][ T5731] team0: Port device team_slave_0 added
[   50.614865][ T5731] team0: Port device team_slave_1 added
[   50.644488][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.644500][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.644513][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.654360][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.654371][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.654384][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.664412][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.673868][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.678646][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.681228][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.681578][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.685144][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.704637][ T5731] hsr_slave_0: entered promiscuous mode
[   50.705513][ T5731] hsr_slave_1: entered promiscuous mode
[   50.706144][ T5731] debugfs: 'hsr0' already exists in 'hsr'
[   50.706160][ T5731] Cannot create hsr debugfs directory
[   50.706352][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.710318][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.849033][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.896519][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.905688][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.906608][ T5727] 8021q: adding VLAN 0 to HW filter on device team0
[   50.922257][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.924697][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.925812][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.929418][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.930575][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.936812][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.940090][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.940141][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.942947][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   50.946336][ T5729] Bluetooth: hci0: command tx timeout
[   50.946824][ T5733] Bluetooth: hci2: command tx timeout
[   50.947021][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.947096][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.952347][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.957416][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.961530][   T92] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.961673][   T92] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.975975][ T5726] 8021q: adding VLAN 0 to HW filter on device team0
[   50.989046][   T92] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.989125][   T92] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.991745][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.991822][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.010038][   T92] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.010095][   T92] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.015427][ T5733] Bluetooth: hci3: command tx timeout
[   51.025946][ T5733] Bluetooth: hci1: command tx timeout
[   51.121849][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.136733][ T5731] 8021q: adding VLAN 0 to HW filter on device team0
[   51.150841][  T205] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.150891][  T205] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.151683][  T205] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.151753][  T205] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.335675][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.344493][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.356436][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.381864][ T5726] veth0_vlan: entered promiscuous mode
[   51.410748][ T5726] veth1_vlan: entered promiscuous mode
[   51.423021][ T5735] veth0_vlan: entered promiscuous mode
[   51.434615][ T5727] veth0_vlan: entered promiscuous mode
[   51.439401][ T5735] veth1_vlan: entered promiscuous mode
[   51.448082][ T5727] veth1_vlan: entered promiscuous mode
[   51.467339][ T5726] veth0_macvtap: entered promiscuous mode
[   51.473676][ T5726] veth1_macvtap: entered promiscuous mode
[   51.484373][ T5735] veth0_macvtap: entered promiscuous mode
[   51.489760][ T5735] veth1_macvtap: entered promiscuous mode
[   51.500734][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.501158][ T5727] veth0_macvtap: entered promiscuous mode
[   51.506374][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.520708][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.523520][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.523843][ T5727] veth1_macvtap: entered promiscuous mode
[   51.544864][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.579138][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.595618][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.595812][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.595844][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.595874][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.599049][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.618191][ T5731] veth0_vlan: entered promiscuous mode
[   51.642907][ T5731] veth1_vlan: entered promiscuous mode
[   51.679039][  T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.679059][  T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.700894][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.700913][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.739385][  T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.739400][  T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.740242][ T5731] veth0_macvtap: entered promiscuous mode
[   51.762897][   T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.762918][   T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.764394][ T5731] veth1_macvtap: entered promiscuous mode
[   51.767603][  T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.767618][  T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.775486][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.775894][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.776251][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.803814][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.810535][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.826883][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.828910][   T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.828927][   T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.923352][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.923370][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.952107][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.952128][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.968492][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968542][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968573][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968606][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968636][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968667][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968698][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.968725][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.976950][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.001617][ T5888] netlink: NAT attribute has 8 unknown bytes
[   52.001645][ T5888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.005299][ T5888] qnx6: unable to read the first superblock
[   52.006038][ T5888] qnx6: unable to read the first superblock
[   52.006047][ T5888] qnx6: unable to read the first superblock
[   52.015308][ T5888] netlink: 'syz.2.3': attribute type 30 has an invalid length.
[   52.024415][ T5887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   52.024429][ T5887] IPv6: NLM_F_CREATE should be set when creating new route
[   52.027839][ T5887] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   52.039962][ T5888] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   52.047710][ T5888] bond1 (unregistering): Released all slaves
[   52.077186][ T5887] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.250435][ T1173] IPVS: starting estimator thread 0...
[   52.256373][ T5733] Bluetooth: hci2: unexpected subevent 0x1a length: 12 > 6
[   52.335477][ T5901] IPVS: using max 43 ests per chain, 103200 per kthread
[   52.669882][ T5905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7'.
[   53.015723][ T5733] Bluetooth: hci2: command tx timeout
[   53.025526][ T5733] Bluetooth: hci0: command tx timeout
[   53.096864][ T5733] Bluetooth: hci1: command tx timeout
[   53.096893][ T5733] Bluetooth: hci3: command tx timeout
[   53.249636][ T5932] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   53.313146][ T5940] vivid-002: =================  START STATUS  =================
[   53.313245][ T5940] vivid-002: RDS Tx I/O Mode: Controls
[   53.313259][ T5940] vivid-002: RDS Program ID: 32904
[   53.313271][ T5940] vivid-002: RDS Program Type: 3
[   53.313281][ T5940] vivid-002: RDS PS Name: VIVID-TX
[   53.313293][ T5940] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[   53.313307][ T5940] vivid-002: RDS Stereo: true
[   53.313318][ T5940] vivid-002: RDS Artificial Head: false
[   53.313328][ T5940] vivid-002: RDS Compressed: false
[   53.313339][ T5940] vivid-002: RDS Dynamic PTY: false
[   53.313350][ T5940] vivid-002: RDS Traffic Announcement: false
[   53.313361][ T5940] vivid-002: RDS Traffic Program: true
[   53.313371][ T5940] vivid-002: RDS Music: true
[   53.313382][ T5940] vivid-002: ==================  END STATUS  ==================
[   53.353767][ T5944] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14'.
[   53.417552][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[   53.419567][ T5956] jffs2: notice: (5956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   53.533629][ T5964] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[   53.607949][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   53.607970][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'.
[   53.608173][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   53.608185][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'.
[   53.608273][ T5967] Zero length message leads to an empty skb
[   53.624838][ T5970] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   53.724964][ T5979] netlink: 14 bytes leftover after parsing attributes in process `syz.3.28'.
[   53.813238][ T5984] Unknown options in mask 6
[   53.814552][   T42] kauditd_printk_skb: 80 callbacks suppressed
[   53.814564][   T42] audit: type=1400 audit(1792462976.999:244): avc:  denied  { write } for  pid=5983 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   53.882619][   T42] audit: type=1400 audit(1792462977.069:245): avc:  denied  { mount } for  pid=5986 comm="syz.0.31" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   53.982428][   T42] audit: type=1400 audit(1792462977.169:246): avc:  denied  { unmount } for  pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   54.151035][ T5997] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   54.217811][   T42] audit: type=1400 audit(1792462977.409:247): avc:  denied  { create } for  pid=5999 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   54.313493][   T42] audit: type=1400 audit(1792462977.499:248): avc:  denied  { create } for  pid=6007 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.319000][   T42] audit: type=1400 audit(1792462977.509:249): avc:  denied  { bind } for  pid=6007 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.319184][   T42] audit: type=1400 audit(1792462977.509:250): avc:  denied  { node_bind } for  pid=6007 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   54.319568][   T42] audit: type=1400 audit(1792462977.509:251): avc:  denied  { connect } for  pid=6007 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.321920][   T42] audit: type=1400 audit(1792462977.509:252): avc:  denied  { ioctl } for  pid=6007 comm="syz.0.37" path="socket:[9939]" dev="sockfs" ino=9939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.330684][   T42] audit: type=1400 audit(1792462977.519:253): avc:  denied  { setopt } for  pid=6007 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.339151][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   54.398369][ T6012] capability: warning: `syz.0.39' uses deprecated v2 capabilities in a way that may be insecure
[   54.532315][ T6024] =======================================================
[   54.532315][ T6024] WARNING: The mand mount option has been deprecated and
[   54.532315][ T6024]          and is ignored by this kernel. Remove the mand
[   54.532315][ T6024]          option from the mount to silence this warning.
[   54.532315][ T6024] =======================================================
[   54.680020][ T6036] process 'syz.3.47' launched './file1' with NULL argv: empty string added
[   54.681364][ T6034] FAULT_INJECTION: forcing a failure.
[   54.681364][ T6034] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   54.681394][ T6034] CPU: 2 UID: 0 PID: 6034 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) 
[   54.681407][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   54.681421][ T6034] Call Trace:
[   54.681425][ T6034]  <TASK>
[   54.681429][ T6034]  dump_stack_lvl+0x100/0x190
[   54.681462][ T6034]  should_fail_ex.cold+0x5/0xa
[   54.681477][ T6034]  ? prepare_alloc_pages+0x16d/0x5b0
[   54.681495][ T6034]  should_fail_alloc_page+0xeb/0x140
[   54.681513][ T6034]  prepare_alloc_pages+0x1f0/0x5b0
[   54.681528][ T6034]  ? __memcg_kmem_charge_page+0x373/0x4d0
[   54.681542][ T6034]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   54.681558][ T6034]  ? stack_trace_save+0x8e/0xc0
[   54.681569][ T6034]  ? __pfx_stack_trace_save+0x10/0x10
[   54.681581][ T6034]  ? stack_depot_save_flags+0x27/0x9f0
[   54.681597][ T6034]  ? kasan_save_stack+0x3f/0x50
[   54.681611][ T6034]  ? kasan_save_stack+0x30/0x50
[   54.681624][ T6034]  ? kasan_save_track+0x14/0x30
[   54.681638][ T6034]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   54.681651][ T6034]  ? mmu_topup_memory_caches+0xbc/0x170
[   54.681663][ T6034]  ? vcpu_run+0x419f/0x61a0
[   54.681676][ T6034]  ? kvm_vcpu_ioctl+0x730/0x1700
[   54.681691][ T6034]  ? __x64_sys_ioctl+0x18e/0x210
[   54.681703][ T6034]  ? do_syscall_64+0x123/0x790
[   54.681737][ T6034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.681761][ T6034]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   54.681776][ T6034]  ? policy_nodemask+0xed/0x4f0
[   54.681794][ T6034]  alloc_pages_mpol+0x201/0x550
[   54.681811][ T6034]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   54.681827][ T6034]  ? __kvmalloc_node_noprof+0x377/0x9b0
[   54.681845][ T6034]  alloc_pages_noprof+0x1a/0x160
[   54.681857][ T6034]  get_free_pages_noprof+0x10/0xb0
[   54.681871][ T6034]  __kvm_mmu_topup_memory_cache+0x278/0x5f0
[   54.681892][ T6034]  mmu_topup_memory_caches+0xbc/0x170
[   54.681906][ T6034]  kvm_mmu_load+0xe8/0x2580
[   54.681919][ T6034]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   54.681936][ T6034]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   54.681954][ T6034]  ? __pfx_kvm_mmu_load+0x10/0x10
[   54.681966][ T6034]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   54.681979][ T6034]  ? kvm_check_and_inject_events+0x896/0x1050
[   54.681994][ T6034]  vcpu_run+0x419f/0x61a0
[   54.682007][ T6034]  ? vmx_vcpu_load_vmcs+0x21d/0x760
[   54.682028][ T6034]  ? __pfx_vcpu_run+0x10/0x10
[   54.682043][ T6034]  ? lock_acquire+0x1d1/0x380
[   54.682056][ T6034]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[   54.682071][ T6034]  ? fpu_swap_kvm_fpstate+0x217/0x460
[   54.682087][ T6034]  ? __local_bh_enable_ip+0xa5/0x120
[   54.682101][ T6034]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   54.682137][ T6034]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   54.682155][ T6034]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   54.682168][ T6034]  ? lock_acquire+0x1d1/0x380
[   54.682180][ T6034]  ? do_raw_write_lock+0x11e/0x260
[   54.682195][ T6034]  ? find_held_lock+0x2b/0x80
[   54.682211][ T6034]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   54.682225][ T6034]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   54.682244][ T6034]  kvm_vcpu_ioctl+0x730/0x1700
[   54.682260][ T6034]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   54.682276][ T6034]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   54.682291][ T6034]  ? do_vfs_ioctl+0x226/0x13e0
[   54.682304][ T6034]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   54.682316][ T6034]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   54.682335][ T6034]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   54.682353][ T6034]  ? __fget_files+0x34/0x3d0
[   54.682376][ T6034]  ? selinux_file_ioctl+0x13b/0x290
[   54.682410][ T6034]  ? selinux_file_ioctl+0xb6/0x290
[   54.682427][ T6034]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   54.682443][ T6034]  __x64_sys_ioctl+0x18e/0x210
[   54.682458][ T6034]  do_syscall_64+0x123/0x790
[   54.682475][ T6034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.682486][ T6034] RIP: 0033:0x7ffae859e559
[   54.682496][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.682506][ T6034] RSP: 002b:00007ffae9424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   54.682525][ T6034] RAX: ffffffffffffffda RBX: 00007ffae8825fa0 RCX: 00007ffae859e559
[   54.682532][ T6034] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   54.682538][ T6034] RBP: 00007ffae9424090 R08: 0000000000000000 R09: 0000000000000000
[   54.682544][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   54.682550][ T6034] R13: 00007ffae8826038 R14: 00007ffae8825fa0 R15: 00007ffc8e82bec8
[   54.682565][ T6034]  </TASK>
[   54.743633][ T6039] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.852879][ T6051] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   54.920260][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'.
[   55.052472][ T5442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.057314][ T6069] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[   55.096322][ T5729] Bluetooth: hci0: command tx timeout
[   55.096344][ T5729] Bluetooth: hci2: command tx timeout
[   55.102781][ T6084] FAULT_INJECTION: forcing a failure.
[   55.102781][ T6084] name failslab, interval 1, probability 0, space 0, times 1
[   55.102802][ T6084] CPU: 1 UID: 0 PID: 6084 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT(full) 
[   55.102814][ T6084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   55.102821][ T6084] Call Trace:
[   55.102826][ T6084]  <TASK>
[   55.102830][ T6084]  dump_stack_lvl+0x100/0x190
[   55.102866][ T6084]  should_fail_ex.cold+0x5/0xa
[   55.102883][ T6084]  should_failslab+0xc2/0x120
[   55.102900][ T6084]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   55.102915][ T6084]  ? __d_alloc+0x35/0xa50
[   55.102928][ T6084]  __d_alloc+0x35/0xa50
[   55.102941][ T6084]  d_alloc_pseudo+0x1c/0xc0
[   55.102956][ T6084]  alloc_file_pseudo+0x118/0x290
[   55.102968][ T6084]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   55.102979][ T6084]  ? alloc_fd+0x471/0x7a0
[   55.102999][ T6084]  sock_alloc_file+0x50/0x210
[   55.103023][ T6084]  __sys_socket+0x1c0/0x260
[   55.103039][ T6084]  ? __pfx___sys_socket+0x10/0x10
[   55.103061][ T6084]  __x64_sys_socket+0x72/0xb0
[   55.103083][ T6084]  do_syscall_64+0x123/0x790
[   55.103125][ T6084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.103138][ T6084] RIP: 0033:0x7fb73a39e559
[   55.103149][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.103161][ T6084] RSP: 002b:00007fb73b1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   55.103180][ T6084] RAX: ffffffffffffffda RBX: 00007fb73a626090 RCX: 00007fb73a39e559
[   55.103187][ T6084] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000400000000010
[   55.103194][ T6084] RBP: 00007fb73a435b20 R08: 0000000000000000 R09: 0000000000000000
[   55.103201][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.103207][ T6084] R13: 00007fb73a626128 R14: 00007fb73a626090 R15: 00007ffc639a2318
[   55.103222][ T6084]  </TASK>
[   55.154051][ T6088] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   55.175759][ T5733] Bluetooth: hci1: command tx timeout
[   55.291376][ T5733] Bluetooth: hci0: unexpected subevent 0x1a length: 12 > 6
[   55.325318][   T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   55.455698][ T5766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.496336][   T50] usb 5-1: Using ep0 maxpacket: 8
[   55.508079][   T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   55.511929][   T50] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32
[   55.511954][   T50] usb 5-1: config 1 interface 0 has no altsetting 0
[   55.514794][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.514813][   T50] usb 5-1: Product: ю
[   55.514823][   T50] usb 5-1: Manufacturer: ᥯꟧焌䣕얆양훤ᘧꪻﹻ࣪痂袩磯ᾏ르䠵娬ﯹ䣢䌻爭᭺삤작츜뀲頃榀셾ី蔯똰晫䉣마䝛畁ꁖ⺾흎䞥軌淬罷䞠ꥴ꽳ꀩ褥実软뽄ﻡ쌽㛭ⱚ⩓䧣ᙲꖛ㐚榑逋ࢥ紵
[   55.514845][   T50] usb 5-1: SerialNumber: ᷛ惃敀勫ꁋ伖耿蚓⺪秾ⳁㄽ눔䆯睯贻㓍ᣒ潭仏骥㟊ኣ꓁縁瓑ꢱꁄ䮼
[   55.532031][ T6105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=6105 comm=syz.3.70
[   55.538164][ T6107] xt_hashlimit: size too large, truncated to 1048576
[   55.560024][ T5766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.563293][ T6055] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   55.621704][ T5729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   55.623845][ T5729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   55.624306][ T5729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   55.625035][ T5729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   55.626751][ T5729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   55.660905][ T5766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.742346][ T5766] bridge_slave_1: left allmulticast mode
[   55.742406][ T5766] bridge_slave_1: left promiscuous mode
[   55.742973][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.757716][ T5766] bridge_slave_0: left allmulticast mode
[   55.757732][ T5766] bridge_slave_0: left promiscuous mode
[   55.758265][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.785955][   T50] usb 5-1: USB disconnect, device number 2
[   55.867901][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.874136][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.884104][ T5766] bond0 (unregistering): Released all slaves
[   56.050146][ T6110] rxe_eth0 speed is unknown, defaulting to 1000
[   56.106027][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2
[   56.371507][ T5766] hsr_slave_0: left promiscuous mode
[   56.372373][ T5766] hsr_slave_1: left promiscuous mode
[   56.373001][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.373119][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.374313][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.374329][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.390228][ T5766] veth1_macvtap: left promiscuous mode
[   56.390273][ T5766] veth0_macvtap: left promiscuous mode
[   56.390401][ T5766] veth1_vlan: left promiscuous mode
[   56.390446][ T5766] veth0_vlan: left promiscuous mode
[   56.601827][ T5766] team0 (unregistering): Port device team_slave_1 removed
[   56.611606][ T5766] team0 (unregistering): Port device team_slave_0 removed
[   56.711872][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4
[   56.877116][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.877243][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.877327][ T6110] bridge_slave_0: entered allmulticast mode
[   56.878645][ T6110] bridge_slave_0: entered promiscuous mode
[   56.880470][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.880539][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.880597][ T6110] bridge_slave_1: entered allmulticast mode
[   56.881620][ T6110] bridge_slave_1: entered promiscuous mode
[   56.908942][ T6110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.911350][ T6110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.912530][ T6176] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   56.930368][ T6110] team0: Port device team_slave_0 added
[   56.932329][ T6110] team0: Port device team_slave_1 added
[   56.960460][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3
[   56.974733][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.974745][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.974757][ T6110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.978404][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.978413][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.978425][ T6110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.020399][ T6110] hsr_slave_0: entered promiscuous mode
[   57.021231][ T6110] hsr_slave_1: entered promiscuous mode
[   57.021668][ T6110] debugfs: 'hsr0' already exists in 'hsr'
[   57.021679][ T6110] Cannot create hsr debugfs directory
[   57.094426][ T5733] Bluetooth: hci1: unexpected subevent 0x1a length: 12 > 6
[   57.168518][ T6110] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   57.175863][ T5733] Bluetooth: hci0: command tx timeout
[   57.178019][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   57.181134][ T6110] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   57.186881][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   57.190787][ T6110] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   57.200803][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   57.201427][ T6110] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   57.204151][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   57.246750][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.246842][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.247080][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.247167][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.265261][ T5733] Bluetooth: hci1: command tx timeout
[   57.266509][ T6205] Invalid source name
[   57.266523][ T6205] UBIFS error (pid: 6205): cannot open "/dev/sr0", error -22
[   57.269253][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5
[   57.324861][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.336636][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.338222][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.352035][ T6110] 8021q: adding VLAN 0 to HW filter on device team0
[   57.358899][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.358946][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.362585][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.362630][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.382935][ T6213] FAULT_INJECTION: forcing a failure.
[   57.382935][ T6213] name failslab, interval 1, probability 0, space 0, times 0
[   57.382967][ T6213] CPU: 0 UID: 0 PID: 6213 Comm: syz.1.86 Not tainted syzkaller #0 PREEMPT(full) 
[   57.382985][ T6213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.382995][ T6213] Call Trace:
[   57.383001][ T6213]  <TASK>
[   57.383008][ T6213]  dump_stack_lvl+0x100/0x190
[   57.383057][ T6213]  should_fail_ex.cold+0x5/0xa
[   57.383081][ T6213]  should_failslab+0xc2/0x120
[   57.383105][ T6213]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[   57.383135][ T6213]  ? nfs_get_tree+0x7dd/0x1450
[   57.383158][ T6213]  kmemdup_nul+0x49/0xd0
[   57.383177][ T6213]  nfs_get_tree+0x7dd/0x1450
[   57.383199][ T6213]  vfs_get_tree+0x92/0x320
[   57.383217][ T6213]  vfs_cmd_create+0xd7/0x2a0
[   57.383238][ T6213]  __do_sys_fsconfig+0x55a/0xcb0
[   57.383259][ T6213]  ? __pfx___do_sys_fsconfig+0x10/0x10
[   57.383291][ T6213]  do_syscall_64+0x123/0x790
[   57.383345][ T6213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.383361][ T6213] RIP: 0033:0x7fc896f9e559
[   57.383375][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.383390][ T6213] RSP: 002b:00007fc897f36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   57.383415][ T6213] RAX: ffffffffffffffda RBX: 00007fc897225fa0 RCX: 00007fc896f9e559
[   57.383426][ T6213] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[   57.383435][ T6213] RBP: 00007fc897035b20 R08: 0000000000000000 R09: 0000000000000000
[   57.383445][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.383455][ T6213] R13: 00007fc897226038 R14: 00007fc897225fa0 R15: 00007ffd573d78d8
[   57.383477][ T6213]  </TASK>
[   57.593277][ T6234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6234 comm=syz.0.89
[   57.656033][ T5733] Bluetooth: hci3: command tx timeout
[   57.664706][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.857748][ T6110] veth0_vlan: entered promiscuous mode
[   57.873920][ T6110] veth1_vlan: entered promiscuous mode
[   57.891495][ T6110] veth0_macvtap: entered promiscuous mode
[   57.898684][ T6110] veth1_macvtap: entered promiscuous mode
[   57.908172][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.914042][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.975684][ T5798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.976031][ T5798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.976060][ T5798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.004660][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.004680][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.015543][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.030401][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.030420][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.206607][ T6275] __nla_validate_parse: 7 callbacks suppressed
[   58.206638][ T6275] netlink: 14 bytes leftover after parsing attributes in process `syz.4.99'.
[   59.163108][ T5733] Bluetooth: hci0: unexpected subevent 0x1a length: 12 > 6
[   59.201711][ T6313] cgroup: Invalid name
[   59.290786][ T6317] FAULT_INJECTION: forcing a failure.
[   59.290786][ T6317] name failslab, interval 1, probability 0, space 0, times 0
[   59.290816][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) 
[   59.290835][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.290855][ T6317] Call Trace:
[   59.290861][ T6317]  <TASK>
[   59.290868][ T6317]  dump_stack_lvl+0x100/0x190
[   59.290908][ T6317]  should_fail_ex.cold+0x5/0xa
[   59.290943][ T6317]  should_failslab+0xc2/0x120
[   59.290981][ T6317]  kmem_cache_alloc_noprof+0x92/0x6a0
[   59.291004][ T6317]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   59.291035][ T6317]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   59.291067][ T6317]  mmu_topup_memory_caches+0x11a/0x170
[   59.291088][ T6317]  kvm_mmu_load+0xe8/0x2580
[   59.291110][ T6317]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   59.291135][ T6317]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   59.291163][ T6317]  ? __pfx_kvm_mmu_load+0x10/0x10
[   59.291183][ T6317]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   59.291202][ T6317]  ? kvm_check_and_inject_events+0x896/0x1050
[   59.291226][ T6317]  vcpu_run+0x419f/0x61a0
[   59.291246][ T6317]  ? vmx_vcpu_load_vmcs+0x21d/0x760
[   59.291280][ T6317]  ? __pfx_vcpu_run+0x10/0x10
[   59.291304][ T6317]  ? lock_acquire+0x1d1/0x380
[   59.291323][ T6317]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[   59.291347][ T6317]  ? fpu_swap_kvm_fpstate+0x217/0x460
[   59.291371][ T6317]  ? __local_bh_enable_ip+0xa5/0x120
[   59.291394][ T6317]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   59.291414][ T6317]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   59.291442][ T6317]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   59.291462][ T6317]  ? lock_acquire+0x1d1/0x380
[   59.291481][ T6317]  ? do_raw_write_lock+0x11e/0x260
[   59.291503][ T6317]  ? find_held_lock+0x2b/0x80
[   59.291527][ T6317]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   59.291549][ T6317]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   59.291577][ T6317]  kvm_vcpu_ioctl+0x730/0x1700
[   59.291602][ T6317]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   59.291626][ T6317]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   59.291649][ T6317]  ? do_vfs_ioctl+0x226/0x13e0
[   59.291670][ T6317]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   59.291688][ T6317]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   59.291716][ T6317]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   59.291744][ T6317]  ? __fget_files+0x34/0x3d0
[   59.291778][ T6317]  ? selinux_file_ioctl+0x13b/0x290
[   59.291800][ T6317]  ? selinux_file_ioctl+0xb6/0x290
[   59.291825][ T6317]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   59.291849][ T6317]  __x64_sys_ioctl+0x18e/0x210
[   59.291871][ T6317]  do_syscall_64+0x123/0x790
[   59.291906][ T6317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.291923][ T6317] RIP: 0033:0x7ffae859e559
[   59.291947][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.291989][ T6317] RSP: 002b:00007ffae9424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   59.292008][ T6317] RAX: ffffffffffffffda RBX: 00007ffae8825fa0 RCX: 00007ffae859e559
[   59.292019][ T6317] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   59.292029][ T6317] RBP: 00007ffae9424090 R08: 0000000000000000 R09: 0000000000000000
[   59.292039][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   59.292049][ T6317] R13: 00007ffae8826038 R14: 00007ffae8825fa0 R15: 00007ffc8e82bec8
[   59.292073][ T6317]  </TASK>
[   59.429601][   T42] kauditd_printk_skb: 94 callbacks suppressed
[   59.429620][   T42] audit: type=1400 audit(1792462982.619:348): avc:  denied  { read write } for  pid=6319 comm="syz.0.112" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   59.429645][   T42] audit: type=1400 audit(1792462982.619:349): avc:  denied  { open } for  pid=6319 comm="syz.0.112" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   59.492543][   T42] audit: type=1400 audit(1792462982.679:350): avc:  denied  { nlmsg_read } for  pid=6319 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   59.514333][   T42] audit: type=1400 audit(1792462982.699:351): avc:  denied  { unmount } for  pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   59.597857][ T6325] tmpfs: Unknown parameter 'ue�quota_block_hardlimit'
[   59.647575][   T42] audit: type=1400 audit(1792462982.839:352): avc:  denied  { create } for  pid=6326 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   59.677821][   T42] audit: type=1400 audit(1792462982.869:353): avc:  denied  { read write } for  pid=6326 comm="syz.0.115" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   59.678143][   T42] audit: type=1400 audit(1792462982.869:354): avc:  denied  { open } for  pid=6326 comm="syz.0.115" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   59.679189][   T42] audit: type=1400 audit(1792462982.869:355): avc:  denied  { ioctl } for  pid=6326 comm="syz.0.115" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   59.682863][   T42] audit: type=1400 audit(1792462982.869:356): avc:  denied  { ioctl } for  pid=6326 comm="syz.0.115" path="socket:[9160]" dev="sockfs" ino=9160 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   59.737057][ T5733] Bluetooth: hci3: command tx timeout
[   59.805312][   T42] audit: type=1400 audit(1792462982.989:357): avc:  denied  { accept } for  pid=6333 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   59.898037][ T6344] FAULT_INJECTION: forcing a failure.
[   59.898037][ T6344] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   59.898072][ T6344] CPU: 3 UID: 0 PID: 6344 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT(full) 
[   59.898084][ T6344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.898097][ T6344] Call Trace:
[   59.898102][ T6344]  <TASK>
[   59.898107][ T6344]  dump_stack_lvl+0x100/0x190
[   59.898135][ T6344]  should_fail_ex.cold+0x5/0xa
[   59.898148][ T6344]  ? prepare_alloc_pages+0x16d/0x5b0
[   59.898169][ T6344]  should_fail_alloc_page+0xeb/0x140
[   59.898188][ T6344]  prepare_alloc_pages+0x1f0/0x5b0
[   59.898204][ T6344]  ? __memcg_kmem_charge_page+0x373/0x4d0
[   59.898218][ T6344]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   59.898233][ T6344]  ? stack_trace_save+0x8e/0xc0
[   59.898244][ T6344]  ? __pfx_stack_trace_save+0x10/0x10
[   59.898256][ T6344]  ? stack_depot_save_flags+0x27/0x9f0
[   59.898269][ T6344]  ? stack_depot_save_flags+0x27/0x9f0
[   59.898282][ T6344]  ? kasan_save_stack+0x3f/0x50
[   59.898296][ T6344]  ? kasan_save_stack+0x30/0x50
[   59.898309][ T6344]  ? kasan_save_track+0x14/0x30
[   59.898323][ T6344]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   59.898336][ T6344]  ? mmu_topup_memory_caches+0xbc/0x170
[   59.898348][ T6344]  ? vcpu_run+0x419f/0x61a0
[   59.898390][ T6344]  ? kvm_vcpu_ioctl+0x730/0x1700
[   59.898412][ T6344]  ? __x64_sys_ioctl+0x18e/0x210
[   59.898431][ T6344]  ? do_syscall_64+0x123/0x790
[   59.898472][ T6344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.898497][ T6344]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   59.898512][ T6344]  ? policy_nodemask+0xed/0x4f0
[   59.898530][ T6344]  alloc_pages_mpol+0x201/0x550
[   59.898548][ T6344]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   59.898564][ T6344]  ? __kvmalloc_node_noprof+0x377/0x9b0
[   59.898582][ T6344]  alloc_pages_noprof+0x1a/0x160
[   59.898594][ T6344]  get_free_pages_noprof+0x10/0xb0
[   59.898608][ T6344]  __kvm_mmu_topup_memory_cache+0x278/0x5f0
[   59.898629][ T6344]  mmu_topup_memory_caches+0xbc/0x170
[   59.898642][ T6344]  kvm_mmu_load+0xe8/0x2580
[   59.898656][ T6344]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   59.898672][ T6344]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   59.898691][ T6344]  ? __pfx_kvm_mmu_load+0x10/0x10
[   59.898703][ T6344]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   59.898715][ T6344]  ? kvm_check_and_inject_events+0x896/0x1050
[   59.898730][ T6344]  vcpu_run+0x419f/0x61a0
[   59.898743][ T6344]  ? mark_held_locks+0x40/0x70
[   59.898762][ T6344]  ? __pfx_vcpu_run+0x10/0x10
[   59.898777][ T6344]  ? lock_acquire+0x1d1/0x380
[   59.898789][ T6344]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[   59.898805][ T6344]  ? fpu_swap_kvm_fpstate+0x217/0x460
[   59.898820][ T6344]  ? __local_bh_enable_ip+0xa5/0x120
[   59.898835][ T6344]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   59.898849][ T6344]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   59.898866][ T6344]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   59.898880][ T6344]  ? lock_acquire+0x1d1/0x380
[   59.898892][ T6344]  ? do_raw_write_lock+0x11e/0x260
[   59.898907][ T6344]  ? find_held_lock+0x2b/0x80
[   59.898923][ T6344]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   59.898937][ T6344]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   59.898955][ T6344]  kvm_vcpu_ioctl+0x730/0x1700
[   59.898975][ T6344]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   59.898990][ T6344]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   59.899005][ T6344]  ? do_vfs_ioctl+0x226/0x13e0
[   59.899018][ T6344]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   59.899031][ T6344]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   59.899050][ T6344]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   59.899068][ T6344]  ? __fget_files+0x34/0x3d0
[   59.899091][ T6344]  ? selinux_file_ioctl+0x13b/0x290
[   59.899106][ T6344]  ? selinux_file_ioctl+0xb6/0x290
[   59.899124][ T6344]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   59.899140][ T6344]  __x64_sys_ioctl+0x18e/0x210
[   59.899154][ T6344]  do_syscall_64+0x123/0x790
[   59.899171][ T6344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.899183][ T6344] RIP: 0033:0x7ffae859e559
[   59.899201][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.899211][ T6344] RSP: 002b:00007ffae9424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   59.899223][ T6344] RAX: ffffffffffffffda RBX: 00007ffae8825fa0 RCX: 00007ffae859e559
[   59.899229][ T6344] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   59.899236][ T6344] RBP: 00007ffae9424090 R08: 0000000000000000 R09: 0000000000000000
[   59.899242][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[   59.899248][ T6344] R13: 00007ffae8826038 R14: 00007ffae8825fa0 R15: 00007ffc8e82bec8
[   59.899264][ T6344]  </TASK>
[   59.985227][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'.
[   60.266481][ T6362] FAULT_INJECTION: forcing a failure.
[   60.266481][ T6362] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   60.266514][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT(full) 
[   60.266536][ T6362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.266547][ T6362] Call Trace:
[   60.266554][ T6362]  <TASK>
[   60.266562][ T6362]  dump_stack_lvl+0x100/0x190
[   60.266592][ T6362]  should_fail_ex.cold+0x5/0xa
[   60.266613][ T6362]  ? prepare_alloc_pages+0x16d/0x5b0
[   60.266642][ T6362]  should_fail_alloc_page+0xeb/0x140
[   60.266670][ T6362]  prepare_alloc_pages+0x1f0/0x5b0
[   60.266700][ T6362]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   60.266730][ T6362]  ? rcu_is_watching+0x13/0xc0
[   60.266759][ T6362]  ? __lock_acquire+0x5c0/0x1f40
[   60.266783][ T6362]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   60.266809][ T6362]  ? __css_rstat_updated+0x1ce/0x590
[   60.266835][ T6362]  ? lock_acquire+0x1d1/0x380
[   60.266857][ T6362]  ? do_raw_spin_lock+0x128/0x260
[   60.266899][ T6362]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   60.266924][ T6362]  ? find_held_lock+0x2b/0x80
[   60.266955][ T6362]  ? __lock_acquire+0x5c0/0x1f40
[   60.266975][ T6362]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   60.266997][ T6362]  ? policy_nodemask+0xed/0x4f0
[   60.267030][ T6362]  alloc_pages_mpol+0x201/0x550
[   60.267058][ T6362]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   60.267091][ T6362]  folio_alloc_mpol_noprof+0x36/0x260
[   60.267111][ T6362]  shmem_alloc_folio+0x135/0x160
[   60.267137][ T6362]  shmem_alloc_and_add_folio+0x371/0xd40
[   60.267160][ T6362]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   60.267181][ T6362]  ? shmem_allowable_huge_orders+0x1d7/0x470
[   60.267204][ T6362]  shmem_get_folio_gfp+0x75b/0x1980
[   60.267229][ T6362]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   60.267250][ T6362]  ? filemap_map_pages+0x1155/0x2060
[   60.267279][ T6362]  shmem_fault+0x1fb/0xa30
[   60.267298][ T6362]  ? __pfx_shmem_fault+0x10/0x10
[   60.267320][ T6362]  ? __pfx_filemap_map_pages+0x10/0x10
[   60.267348][ T6362]  ? find_held_lock+0x2b/0x80
[   60.267374][ T6362]  ? __pfx_filemap_map_pages+0x10/0x10
[   60.267398][ T6362]  __do_fault+0x10b/0x440
[   60.267420][ T6362]  do_fault+0xb3f/0x1830
[   60.267443][ T6362]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[   60.267464][ T6362]  ? __pfx_do_fault+0x10/0x10
[   60.267487][ T6362]  ? rcu_read_unlock+0x2d/0xb0
[   60.267504][ T6362]  ? rcu_read_unlock+0x2d/0xb0
[   60.267522][ T6362]  ? __pte_offset_map+0x179/0x310
[   60.267548][ T6362]  __handle_mm_fault+0x150b/0x2f60
[   60.267572][ T6362]  ? __pfx___handle_mm_fault+0x10/0x10
[   60.267589][ T6362]  ? pte_offset_map_lock+0x174/0x320
[   60.267612][ T6362]  ? find_held_lock+0x2b/0x80
[   60.267637][ T6362]  ? find_held_lock+0x2b/0x80
[   60.267661][ T6362]  ? follow_page_pte+0x536/0x1050
[   60.267698][ T6362]  handle_mm_fault+0x363/0xa20
[   60.267720][ T6362]  __get_user_pages+0x8ae/0x2c30
[   60.267751][ T6362]  ? __pfx_mt_find+0x10/0x10
[   60.267770][ T6362]  ? __pfx___get_user_pages+0x10/0x10
[   60.267803][ T6362]  populate_vma_page_range+0x267/0x3f0
[   60.267828][ T6362]  ? __pfx_populate_vma_page_range+0x10/0x10
[   60.267850][ T6362]  ? __pfx_find_vma_intersection+0x10/0x10
[   60.267880][ T6362]  __mm_populate+0x107/0x3a0
[   60.267904][ T6362]  ? __pfx___mm_populate+0x10/0x10
[   60.267930][ T6362]  ? up_write+0x2dc/0x5b0
[   60.267955][ T6362]  vm_mmap_pgoff+0x441/0x470
[   60.267979][ T6362]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   60.268005][ T6362]  ? __pfx_do_futex+0x10/0x10
[   60.268043][ T6362]  ksys_mmap_pgoff+0xe4/0x610
[   60.268068][ T6362]  ? __x64_sys_futex+0x358/0x4d0
[   60.268094][ T6362]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[   60.268117][ T6362]  ? fput+0x7c/0x100
[   60.268141][ T6362]  ? __pfx___x64_sys_futex+0x10/0x10
[   60.268164][ T6362]  ? ksys_write+0x1ac/0x250
[   60.268184][ T6362]  ? __pfx_ksys_write+0x10/0x10
[   60.268208][ T6362]  __x64_sys_mmap+0x125/0x190
[   60.268233][ T6362]  do_syscall_64+0x123/0x790
[   60.268277][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.268297][ T6362] RIP: 0033:0x7ffae859e559
[   60.268313][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.268330][ T6362] RSP: 002b:00007ffae9424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   60.268348][ T6362] RAX: ffffffffffffffda RBX: 00007ffae8825fa0 RCX: 00007ffae859e559
[   60.268361][ T6362] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000
[   60.268372][ T6362] RBP: 00007ffae8635b20 R08: ffffffffffffffff R09: 00000000c369d000
[   60.268384][ T6362] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[   60.268395][ T6362] R13: 00007ffae8826038 R14: 00007ffae8825fa0 R15: 00007ffc8e82bec8
[   60.268421][ T6362]  </TASK>
[   60.475801][ T6370] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   60.662986][ T6394] bridge_slave_0: left allmulticast mode
[   60.663012][ T6394] bridge_slave_0: left promiscuous mode
[   60.663812][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.678482][ T6394] bridge_slave_1: left allmulticast mode
[   60.678506][ T6394] bridge_slave_1: left promiscuous mode
[   60.678729][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.689594][ T6394] bond0: (slave bond_slave_0): Releasing backup interface
[   60.699782][ T6394] bond0: (slave bond_slave_1): Releasing backup interface
[   60.708754][ T6394] team0: Port device team_slave_0 removed
[   60.717813][ T6394] team0: Port device team_slave_1 removed
[   60.718559][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.718578][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.720284][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.720302][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.720336][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'.
[   60.722990][ T6394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   60.861513][ T6416] fuse: Bad value for 'fd'
[   60.909971][ T6426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.147'.
[   60.945600][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'.
[   60.946973][ T6428] netlink: 'syz.3.148': attribute type 16 has an invalid length.
[   60.946991][ T6428] netlink: 'syz.3.148': attribute type 17 has an invalid length.
[   60.949868][ T6423] xfrm1: entered promiscuous mode
[   60.949884][ T6423] xfrm1: entered allmulticast mode
[   60.962681][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.149'.
[   61.302052][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.341859][   T50] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   61.341883][   T50] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   61.353464][   T64] wlan1: 08:02:11:00:00:00 denied authentication (status 24576)
[   61.353868][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.406250][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.745583][ T5832] rxe_eth0 speed is unknown, defaulting to 1000
[   61.815407][ T5733] Bluetooth: hci3: command tx timeout
[   61.858135][ T6468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.159'.
[   61.958402][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'.
[   62.052558][ T6477] 9pnet_virtio: no channels available for device syz
[   62.124395][ T5733] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[   62.124611][ T6485] bond1: entered allmulticast mode
[   62.125019][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.128055][ T6485] ceph: No source
[   62.136026][ T6485] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.137259][ T6485] macvlan2: entered allmulticast mode
[   62.137272][ T6485] bond0: entered allmulticast mode
[   62.137282][ T6485] bond_slave_0: entered allmulticast mode
[   62.137294][ T6485] bond_slave_1: entered allmulticast mode
[   62.137384][ T6485] bond_slave_0: entered promiscuous mode
[   62.137418][ T6485] bond_slave_1: entered promiscuous mode
[   62.138129][ T6485] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   62.191629][ T6492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.166'.
[   62.192054][ T6492] bond_slave_0: left promiscuous mode
[   62.192070][ T6492] bond_slave_1: left promiscuous mode
[   62.193019][ T6493] netlink: 14 bytes leftover after parsing attributes in process `syz.0.166'.
[   62.202695][ T6492] bond0 (unregistering): left allmulticast mode
[   62.202710][ T6492] bond_slave_0: left allmulticast mode
[   62.202722][ T6492] bond_slave_1: left allmulticast mode
[   62.225004][ T6492] bond1: (slave macvlan2): Releasing backup interface
[   62.238917][ T6492] macvlan2 (unregistering): left allmulticast mode
[   62.249734][ T6495] overlayfs: failed to resolve './file0': -2
[   62.260385][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.287519][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.292218][ T6492] bond0 (unregistering): Released all slaves
[   62.354038][ T5766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.443699][ T6500] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   62.478848][ T5766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.538442][ T5766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.629524][ T5766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.808673][ T5729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.813042][ T5729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.813953][ T5729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.814869][ T5729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.819347][ T5729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.869784][ T6507] tun0: tun_chr_ioctl cmd 1074025675
[   62.869819][ T6507] tun0: persist enabled
[   62.869927][ T6507] tun0: tun_chr_ioctl cmd 1074025675
[   62.869935][ T6507] tun0: persist disabled
[   62.892062][ T5766] bridge_slave_1: left allmulticast mode
[   62.892096][ T5766] bridge_slave_1: left promiscuous mode
[   62.892415][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.910546][ T5766] bridge_slave_0: left allmulticast mode
[   62.910557][ T5766] bridge_slave_0: left promiscuous mode
[   62.910780][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.231915][ T5766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.241315][ T5766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.243795][ T5766] bond0 (unregistering): Released all slaves
[   63.262894][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6
[   63.502172][ T6542] capability: warning: `syz.1.180' uses 32-bit capabilities (legacy support in use)
[   63.603441][ T6511] rxe_eth0 speed is unknown, defaulting to 1000
[   63.692297][ T5733] Bluetooth: hci1: unexpected subevent 0x1a length: 12 > 6
[   63.724381][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7
[   64.174893][ T5766] hsr_slave_0: left promiscuous mode
[   64.180798][ T5766] hsr_slave_1: left promiscuous mode
[   64.182186][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.182228][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.183967][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.184008][ T5766] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.193578][ T5766] veth1_macvtap: left promiscuous mode
[   64.193608][ T5766] veth0_macvtap: left promiscuous mode
[   64.193705][ T5766] veth1_vlan: left promiscuous mode
[   64.193760][ T5766] veth0_vlan: left promiscuous mode
[   64.239578][ T6539] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   64.241716][ T6539] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   64.259120][ T6539] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   64.268887][ T6539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   64.269084][ T6539] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   64.274189][ T6539] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   64.277124][ T6539] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   64.277274][ T6539] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   64.281036][ T6539] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   64.286085][ T6539] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   64.286142][ T6539] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   64.293159][ T6539] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   64.372869][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it
[   64.379421][ T1173] IPVS: starting estimator thread 0...
[   64.442362][   T42] kauditd_printk_skb: 57 callbacks suppressed
[   64.442373][   T42] audit: type=1400 audit(1792462987.629:415): avc:  denied  { read write } for  pid=6563 comm="syz.1.184" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   64.444564][   T42] audit: type=1400 audit(1792462987.629:416): avc:  denied  { open } for  pid=6563 comm="syz.1.184" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   64.466490][ T6565] IPVS: using max 43 ests per chain, 103200 per kthread
[   64.509231][ T5766] team0 (unregistering): Port device team_slave_1 removed
[   64.522583][ T5766] team0 (unregistering): Port device team_slave_0 removed
[   64.682987][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8
[   64.923531][   T42] audit: type=1400 audit(1792462988.109:417): avc:  denied  { unmount } for  pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   64.957559][   T42] audit: type=1400 audit(1792462988.149:418): avc:  denied  { write } for  pid=6575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.007163][   T42] audit: type=1400 audit(1792462988.199:419): avc:  denied  { write } for  pid=6581 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.047258][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.047339][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.047424][ T6511] bridge_slave_0: entered allmulticast mode
[   65.048329][ T6511] bridge_slave_0: entered promiscuous mode
[   65.049740][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.049780][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.049849][ T6511] bridge_slave_1: entered allmulticast mode
[   65.050781][ T6511] bridge_slave_1: entered promiscuous mode
[   65.088612][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9
[   65.091590][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.093801][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.124003][ T6511] team0: Port device team_slave_0 added
[   65.125878][ T6511] team0: Port device team_slave_1 added
[   65.151889][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.151896][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.151908][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.152790][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.152796][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.152809][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.214422][ T6511] hsr_slave_0: entered promiscuous mode
[   65.214944][ T6511] hsr_slave_1: entered promiscuous mode
[   65.215454][ T6511] debugfs: 'hsr0' already exists in 'hsr'
[   65.215465][ T6511] Cannot create hsr debugfs directory
[   65.387217][ T5733] Bluetooth: hci0: unexpected subevent 0x1a length: 12 > 6
[   65.418532][ T6511] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   65.423075][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.423655][ T6511] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   65.428291][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.428806][ T6511] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   65.436271][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.439895][ T6511] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   65.442841][   T42] audit: type=1400 audit(1792462988.629:420): avc:  denied  { read } for  pid=6601 comm="syz.0.191" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   65.450079][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.465073][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.465114][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.465323][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.465367][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.488247][ T6604] 0x000000000003-0x000000010001 : ""
[   65.505408][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout
[   65.519608][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.531683][ T6604] ftl_cs: FTL header corrupt!
[   65.538595][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.542082][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.563025][ T6511] 8021q: adding VLAN 0 to HW filter on device team0
[   65.574028][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.574113][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.585016][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.585087][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.672938][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'.
[   65.849002][ T6633] ipt_rpfilter: unknown options
[   65.889621][ T6633] cdrom: dropping to single frame dma
[   65.907879][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.987013][   T42] audit: type=1400 audit(1792462989.179:421): avc:  denied  { create } for  pid=6640 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   65.987747][   T42] audit: type=1400 audit(1792462989.179:422): avc:  denied  { setopt } for  pid=6640 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.988092][   T42] audit: type=1400 audit(1792462989.179:423): avc:  denied  { ioctl } for  pid=6640 comm="syz.0.197" path="socket:[14228]" dev="sockfs" ino=14228 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   65.988354][   T42] audit: type=1400 audit(1792462989.179:424): avc:  denied  { read append } for  pid=6640 comm="syz.0.197" name="mouse1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   66.128093][ T6511] veth0_vlan: entered promiscuous mode
[   66.133628][ T6511] veth1_vlan: entered promiscuous mode
[   66.145241][    C1] net_ratelimit: 633 callbacks suppressed
[   66.159317][ T6511] veth0_macvtap: entered promiscuous mode
[   66.162261][ T6511] veth1_macvtap: entered promiscuous mode
[   66.174098][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.184621][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.264006][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.264014][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.266535][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.266570][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.266601][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.266630][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.305477][ T5733] Bluetooth: hci3: command 0x041b tx timeout
[   66.305691][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout
[   66.305728][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout
[   66.318473][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.318486][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.449409][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.201'.
[   66.488431][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[   66.488827][ T6665] ieee802154 phy0 wpan0: encryption failed: -22
[   66.679386][ T6680] netlink: 'syz.0.209': attribute type 6 has an invalid length.
[   66.743415][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'.
[   66.753433][ T6686] evm: overlay not supported
[   66.919930][ T6706] netlink: 80 bytes leftover after parsing attributes in process `syz.1.218'.
[   66.924349][ T6706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6706 comm=syz.1.218
[   66.953639][ T6709] overlayfs: missing 'lowerdir'
[   66.983234][ T5733] Bluetooth: hci1: unexpected subevent 0x1a length: 12 > 6
[   67.203460][ T6725] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   67.575279][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.605369][ T6740] netlink: 'syz.0.227': attribute type 10 has an invalid length.
[   67.608210][ T6740] syz_tun: entered promiscuous mode
[   67.677600][ T6747] overlayfs: missing 'lowerdir'
[   67.773498][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[   67.803395][ T5733] Bluetooth: hci3: unexpected event for opcode 0x2010
[   67.809784][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'.
[   67.893897][ T5733] Bluetooth: hci0: unexpected subevent 0x1a length: 12 > 6
[   68.375721][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout
[   68.375763][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout
[   68.654290][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'.
[   68.714873][ T6808] overlayfs: missing 'lowerdir'
[   68.781993][ T6819] netlink: 'syz.3.247': attribute type 10 has an invalid length.
[   68.782012][ T6819] netlink: 55 bytes leftover after parsing attributes in process `syz.3.247'.
[   68.873858][ T6817] rxe_eth0 speed is unknown, defaulting to 1000
[   68.955833][   T50] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   69.109677][   T50] usb 10-1: Using ep0 maxpacket: 32
[   69.111241][   T50] usb 10-1: New USB device found, idVendor=1058, idProduct=0704, bcdDevice=1b.d0
[   69.112229][   T50] usb 10-1: config 5 has an invalid interface number: 226 but max is 3
[   69.112249][   T50] usb 10-1: config 5 has an invalid interface number: 49 but max is 3
[   69.112265][   T50] usb 10-1: config 5 has an invalid interface number: 232 but max is 3
[   69.112281][   T50] usb 10-1: config 5 has an invalid interface number: 83 but max is 3
[   69.112296][   T50] usb 10-1: config 5 has an invalid interface number: 205 but max is 3
[   69.112311][   T50] usb 10-1: config 5 has 5 interfaces, different from the descriptor's value: 4
[   69.112327][   T50] usb 10-1: config 5 has no interface number 0
[   69.112340][   T50] usb 10-1: config 5 has no interface number 1
[   69.112352][   T50] usb 10-1: config 5 has no interface number 2
[   69.112364][   T50] usb 10-1: config 5 has no interface number 3
[   69.112376][   T50] usb 10-1: config 5 has no interface number 4
[   69.112449][   T50] usb 10-1: config 5 interface 49 altsetting 167 has an invalid descriptor for endpoint zero, skipping
[   69.112466][   T50] usb 10-1: config 5 interface 49 altsetting 167 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   69.112501][   T50] usb 10-1: config 5 interface 49 altsetting 167 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   69.112549][   T50] usb 10-1: config 5 interface 49 altsetting 167 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   69.112591][   T50] usb 10-1: config 5 interface 232 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   69.112625][   T50] usb 10-1: config 5 interface 232 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[   69.112660][   T50] usb 10-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   69.112676][   T50] usb 10-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   69.112692][   T50] usb 10-1: config 5 interface 232 altsetting 0 endpoint 0x6 has invalid maxpacket 1288, setting to 64
[   69.112726][   T50] usb 10-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   69.112758][   T50] usb 10-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[   69.112775][   T50] usb 10-1: config 5 interface 232 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7
[   69.112794][   T50] usb 10-1: config 5 interface 232 altsetting 0 endpoint 0x7 has invalid maxpacket 13155, setting to 64
[   69.112814][   T50] usb 10-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[   69.112832][   T50] usb 10-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[   69.112848][   T50] usb 10-1: config 5 interface 232 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14
[   69.112886][   T50] usb 10-1: config 5 interface 83 altsetting 160 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   69.112921][   T50] usb 10-1: config 5 interface 83 altsetting 160 has a duplicate endpoint with address 0x1, skipping
[   69.112937][   T50] usb 10-1: config 5 interface 83 altsetting 160 has an invalid descriptor for endpoint zero, skipping
[   69.112953][   T50] usb 10-1: config 5 interface 83 altsetting 160 has 3 endpoint descriptors, different from the interface descriptor's value: 20
[   69.112995][   T50] usb 10-1: config 5 interface 205 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[   69.113012][   T50] usb 10-1: config 5 interface 205 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[   69.113029][   T50] usb 10-1: config 5 interface 226 has no altsetting 0
[   69.113042][   T50] usb 10-1: config 5 interface 49 has no altsetting 0
[   69.113057][   T50] usb 10-1: config 5 interface 83 has no altsetting 0
[   69.113071][   T50] usb 10-1: config 5 interface 205 has no altsetting 0
[   69.220046][   T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.220062][   T50] usb 10-1: Product: 헃ፊ왌⓷ᵄ킰䦆ᶍ횶鱨燐㳽踙蠫ぬย䇫ꈏꊴ돱㿾뎾ꭈᖒᵨ圻盰魱徻뵐叩푳㇓狮᯦갶﫬㒜둞肘邼䴹錫ޛ㹒
[   69.220082][   T50] usb 10-1: Manufacturer: 㸁흩Ꮥ倦泲띚纳뽮
[   69.220096][   T50] usb 10-1: SerialNumber: 《
[   69.229480][ T6830] usb 1-1: USB disconnect, device number 2
[   69.315272][ T5729] Bluetooth: hci1: unexpected event for opcode 0x0c22
[   69.359444][ T6842] overlayfs: missing 'lowerdir'
[   69.456754][ T6830] hub 1-0:1.0: USB hub found
[   69.456963][ T6830] hub 1-0:1.0: 6 ports detected
[   69.547629][ T6846] geneve2: entered promiscuous mode
[   69.619761][   T42] kauditd_printk_skb: 29 callbacks suppressed
[   69.619774][   T42] audit: type=1400 audit(1792462992.809:454): avc:  denied  { ioctl } for  pid=6859 comm="syz.0.258" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16023 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   69.635550][   T10] usb 1-1: new high-speed USB device number 3 using ehci-pci
[   69.655605][ T5729] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.701589][ T5729] Bluetooth: hci0: unexpected subevent 0x1a length: 12 > 6
[   69.815981][   T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[   69.836831][   T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[   69.836850][   T10] usb 1-1: Product: QEMU USB Tablet
[   69.836864][   T10] usb 1-1: Manufacturer: QEMU
[   69.836879][   T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[   69.904047][   T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input5
[   69.974062][   T42] audit: type=1400 audit(1792462993.159:455): avc:  denied  { getopt } for  pid=6859 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   69.974493][   T10] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[   70.206934][ T6879] xt_hashlimit: size too large, truncated to 1048576
[   70.364154][   T42] audit: type=1400 audit(1792462993.549:456): avc:  denied  { kexec_image_load } for  pid=6887 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   70.455316][ T5729] Bluetooth: hci2: command 0x0c1a tx timeout
[   70.482105][   T42] audit: type=1400 audit(1792462993.669:457): avc:  denied  { read } for  pid=6891 comm="syz.3.268" path="socket:[15242]" dev="sockfs" ino=15242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.563916][   T42] audit: type=1400 audit(1792462993.749:458): avc:  denied  { setopt } for  pid=6893 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   70.564491][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'.
[   70.742992][   T42] audit: type=1400 audit(1792462993.929:459): avc:  denied  { create } for  pid=6899 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   70.744245][   T42] audit: type=1400 audit(1792462993.929:460): avc:  denied  { connect } for  pid=6899 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   70.744878][   T42] audit: type=1400 audit(1792462993.929:461): avc:  denied  { ioctl } for  pid=6899 comm="syz.0.271" path="socket:[16598]" dev="sockfs" ino=16598 ioctlcmd=0x1638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   70.746375][   T42] audit: type=1400 audit(1792462993.939:462): avc:  denied  { open } for  pid=6899 comm="syz.0.271" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   70.996630][ T6910] jffs2: notice: (6910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   71.137609][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   71.141004][ T6915] nftables ruleset with unbound set
[   71.180412][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[   71.180467][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[   71.182781][   T29] cfg80211: failed to load regulatory.db
[   71.214896][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.215114][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.219696][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.219957][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.220129][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.220347][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.220637][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.220836][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.221028][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.221260][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.224661][ T6922] net_ratelimit: 2043 callbacks suppressed
[   71.325886][   T42] audit: type=1400 audit(1792462994.519:463): avc:  denied  { read } for  pid=6928 comm="syz.1.278" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   71.329620][ T6929] binder: 6928:6929 ioctl c0306201 0 returned -14
[   71.619696][ T6948] TCP: TCP_TX_DELAY enabled
[   71.706760][ T5729] Bluetooth: hci1: unexpected subevent 0x1a length: 12 > 6
[   71.737741][   T50] usb-storage 10-1:5.226: USB Mass Storage device detected
[   71.748787][   T50] usb-storage 10-1:5.226: Quirks match for vid 1058 pid 0704: 8000
[   71.822521][   T50] usb-storage 10-1:5.49: USB Mass Storage device detected
[   71.826713][   T50] usb-storage 10-1:5.49: Quirks match for vid 1058 pid 0704: 8000
[   71.845509][   T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   71.881979][   T50] usb-storage 10-1:5.232: USB Mass Storage device detected
[   71.884477][   T50] usb-storage 10-1:5.232: Quirks match for vid 1058 pid 0704: 8000
[   71.939531][   T50] usb-storage 10-1:5.83: USB Mass Storage device detected
[   71.942796][   T50] usb-storage 10-1:5.83: Quirks match for vid 1058 pid 0704: 8000
[   72.011816][   T50] usb-storage 10-1:5.205: USB Mass Storage device detected
[   72.015071][   T50] usb-storage 10-1:5.205: Quirks match for vid 1058 pid 0704: 8000
[   72.015328][   T29] usb 6-1: Using ep0 maxpacket: 8
[   72.016153][   T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   72.017360][   T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   72.017420][   T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   72.017441][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   72.017463][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   72.017483][   T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   72.017536][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.060568][   T50] usb 10-1: USB disconnect, device number 2
[   72.226970][   T29] usb 6-1: GET_CAPABILITIES returned 0
[   72.227005][   T29] usbtmc 6-1:16.0: can't read capabilities
[   72.433736][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.434604][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.434689][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.434770][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.434852][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.434933][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435012][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435301][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435381][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435473][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435557][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435647][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435910][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.435990][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.436067][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.436145][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   72.875528][ T6990] overlayfs: failed to clone upperpath
[   72.904203][ T6994] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   72.904236][ T6994] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   72.907596][ T6994] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[   72.954691][ T6999] overlayfs: upper fs does not support file handles, falling back to index=off.
[   72.954701][ T6999] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   73.042964][ T7003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.042974][ T7003] IPv6: NLM_F_CREATE should be set when creating new route
[   74.496312][ T2321] usb 6-1: USB disconnect, device number 2
[   74.662147][   T42] kauditd_printk_skb: 38 callbacks suppressed
[   74.662163][   T42] audit: type=1400 audit(1792462997.849:502): avc:  denied  { getopt } for  pid=7066 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.807483][ T7071] vivid-000: =================  START STATUS  =================
[   74.807523][ T7071] vivid-000: RDS Tx I/O Mode: Controls
[   74.807555][ T7071] vivid-000: RDS Program ID: 32904
[   74.807575][ T7071] vivid-000: RDS Program Type: 3
[   74.807593][ T7071] vivid-000: RDS PS Name: VIVID-TX
[   74.807613][ T7071] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[   74.807635][ T7071] vivid-000: RDS Stereo: true
[   74.807654][ T7071] vivid-000: RDS Artificial Head: false
[   74.807672][ T7071] vivid-000: RDS Compressed: false
[   74.807689][ T7071] vivid-000: RDS Dynamic PTY: false
[   74.807706][ T7071] vivid-000: RDS Traffic Announcement: false
[   74.807724][ T7071] vivid-000: RDS Traffic Program: true
[   74.807741][ T7071] vivid-000: RDS Music: true
[   74.807759][ T7071] vivid-000: ==================  END STATUS  ==================
[   74.831984][   T42] audit: type=1400 audit(1792462998.019:503): avc:  denied  { create } for  pid=7072 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   75.390166][   T42] audit: type=1400 audit(1792462998.579:504): avc:  denied  { getattr } for  pid=7084 comm="syz.1.322" name="[kvm-gmem]" dev="guest_memfd" ino=16978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   75.522089][   T42] audit: type=1400 audit(1792462998.709:505): avc:  denied  { mount } for  pid=7099 comm="syz.1.327" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   75.528415][ T7100] sd 0:0:0:0: PR command failed: 1026
[   75.528450][ T7100] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   75.528484][ T7100] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   75.534136][   T42] audit: type=1400 audit(1792462998.719:506): avc:  denied  { execute } for  pid=7099 comm="syz.1.327" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   75.563606][   T42] audit: type=1400 audit(1792462998.749:507): avc:  denied  { unmount } for  pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   75.601946][   T42] audit: type=1400 audit(1792462998.789:508): avc:  denied  { read write } for  pid=7106 comm="syz.1.330" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   75.602192][   T42] audit: type=1400 audit(1792462998.789:509): avc:  denied  { open } for  pid=7106 comm="syz.1.330" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   75.616141][   T42] audit: type=1400 audit(1792462998.799:510): avc:  denied  { write } for  pid=7103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.644019][ T7112] netlink: 'syz.0.331': attribute type 2 has an invalid length.
[   75.653736][ T7108] overlay: ./file0 is not a directory
[   75.677324][   T42] audit: type=1400 audit(1792462998.869:511): avc:  denied  { write } for  pid=7113 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.701796][ T7112] ucma_write: process 287 (syz.0.331) changed security contexts after opening file descriptor, this is not allowed.
[   75.866019][ T7122] erspan0: entered promiscuous mode
[   75.969268][ T5832] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   75.978477][ T5832] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   76.001911][ T7120] fuse: fd is not a fuse device
[   76.255834][ T5832] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   76.266268][ T7142] net_ratelimit: 591 callbacks suppressed
[   76.339588][ T7150] netlink: 'syz.3.343': attribute type 2 has an invalid length.
[   76.621904][ T7119] ceph: No mds server is up or the cluster is laggy
[   76.678498][  T205] IPVS: starting estimator thread 0...
[   76.758395][ T7165] dvmrp6: entered allmulticast mode
[   76.765894][ T7165] dvmrp6: left allmulticast mode
[   76.775541][ T7161] IPVS: using max 24 ests per chain, 57600 per kthread
[   77.368215][ T7214] __nla_validate_parse: 57 callbacks suppressed
[   77.368231][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'.
[   77.368246][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.361'.
[   77.368261][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'.
[   77.392354][ T7216] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   77.482273][ T7227] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-�%#!$([)^)}
[   77.482956][ T7227] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-�%#!$([)^)}
[   77.759203][ T7254] tipc: Started in network mode
[   77.759240][ T7254] tipc: Node identity 7ed693fc09d, cluster identity 4711
[   77.759743][ T7254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.760326][ T7254] syzkaller0: entered promiscuous mode
[   77.760341][ T7254] syzkaller0: entered allmulticast mode
[   77.781646][ T7255] tipc: Resetting bearer <eth:syzkaller0>
[   77.828140][ T7252] tipc: Resetting bearer <eth:syzkaller0>
[   77.841794][ T7252] tipc: Disabling bearer <eth:syzkaller0>
[   78.109999][ T1173] IPVS: starting estimator thread 0...
[   78.216330][ T7293] IPVS: using max 32 ests per chain, 76800 per kthread
[   78.381076][ T7301] Cannot find add_set index 0 as target
[   78.495469][   T58] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   78.578623][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[   78.600995][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[   78.675390][   T58] usb 10-1: Using ep0 maxpacket: 32
[   78.675858][   T58] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   78.676313][   T58] usb 10-1: config 0 has no interfaces?
[   78.680027][   T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.680037][   T58] usb 10-1: Product: syz
[   78.680045][   T58] usb 10-1: Manufacturer: syz
[   78.680052][   T58] usb 10-1: SerialNumber: syz
[   78.696225][   T58] usb 10-1: config 0 descriptor??
[   78.809438][ T7315] FAULT_INJECTION: forcing a failure.
[   78.809438][ T7315] name failslab, interval 1, probability 0, space 0, times 0
[   78.809468][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.1.388 Not tainted syzkaller #0 PREEMPT(full) 
[   78.809490][ T7315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.809520][ T7315] Call Trace:
[   78.809529][ T7315]  <TASK>
[   78.809537][ T7315]  dump_stack_lvl+0x100/0x190
[   78.809572][ T7315]  should_fail_ex.cold+0x5/0xa
[   78.809601][ T7315]  should_failslab+0xc2/0x120
[   78.809638][ T7315]  __kmalloc_noprof+0xfc/0x840
[   78.809663][ T7315]  ? rcu_is_watching+0x13/0xc0
[   78.809692][ T7315]  ? tomoyo_realpath_from_path+0xb6/0x690
[   78.809719][ T7315]  tomoyo_realpath_from_path+0xb6/0x690
[   78.809745][ T7315]  tomoyo_path_number_perm+0x23c/0x580
[   78.809769][ T7315]  ? tomoyo_path_number_perm+0x22e/0x580
[   78.809798][ T7315]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
** 147 printk messages dropped **
** 129 printk messages dropped **
** 143 printk messages dropped **
** 198 printk messages dropped **
** 179 printk messages dropped **
** 140 printk messages dropped **
** 122 printk messages dropped **
** 108 printk messages dropped **
** 122 printk messages dropped **
** 86 printk messages dropped **
** 109 printk messages dropped **
** 104 printk messages dropped **
** 89 printk messages dropped **
** 106 printk messages dropped **
** 53 printk messages dropped **
[   78.907293][ T7319] vivid-002: =================  START STATUS  =================
[   78.907308][ T7319] vivid-002: RDS Tx I/O Mode: Controls
[   78.907330][ T7319] vivid-002: RDS Program ID: 32904
[   78.907351][ T7319] vivid-002: RDS Program Type: 3
[   78.907372][ T7319] vivid-002: RDS PS Name: VIVID-TX
[   78.907392][ T7319] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[   78.907415][ T7319] vivid-002: RDS Stereo: true
[   78.907432][ T7319] vivid-002: RDS Artificial Head: false
[   78.907450][ T7319] vivid-002: RDS Compressed: false
[   78.907468][ T7319] vivid-002: RDS Dynamic PTY: false
[   78.907534][ T7319] vivid-002: RDS Traffic Announcement: false
[   78.907554][ T7319] vivid-002: RDS Traffic Program: true
[   78.907573][ T7319] vivid-002: RDS Music: true
[   78.907592][ T7319] vivid-002: ==================  END STATUS  ==================
** 285 printk messages dropped **
** 197 printk messages dropped **
** 167 printk messages dropped **
** 208 printk messages dropped **
** 181 printk messages dropped **
** 180 printk messages dropped **
** 192 printk messages dropped **
** 189 printk messages dropped **
** 203 printk messages dropped **
** 184 printk messages dropped **
** 151 printk messages dropped **
** 166 printk messages dropped **
** 187 printk messages dropped **
** 112 printk messages dropped **
** 108 printk messages dropped **
** 95 printk messages dropped **
** 91 printk messages dropped **
** 93 printk messages dropped **
** 77 printk messages dropped **
** 117 printk messages dropped **
** 135 printk messages dropped **
** 120 printk messages dropped **
** 126 printk messages dropped **
** 123 printk messages dropped **
** 120 printk messages dropped **
** 117 printk messages dropped **
** 122 printk messages dropped **
** 86 printk messages dropped **
** 113 printk messages dropped **
** 133 printk messages dropped **
** 137 printk messages dropped **
** 121 printk messages dropped **
** 123 printk messages dropped **
** 83 printk messages dropped **
** 2 printk messages dropped **
** 89 printk messages dropped **
** 97 printk messages dropped **
** 115 printk messages dropped **
** 116 printk messages dropped **
** 114 printk messages dropped **
** 156 printk messages dropped **
** 144 printk messages dropped **
** 152 printk messages dropped **
** 145 printk messages dropped **
** 150 printk messages dropped **
** 139 printk messages dropped **
** 186 printk messages dropped **
** 139 printk messages dropped **
** 117 printk messages dropped **
** 129 printk messages dropped **
** 123 printk messages dropped **
** 146 printk messages dropped **
** 157 printk messages dropped **
** 145 printk messages dropped **
** 133 printk messages dropped **
** 149 printk messages dropped **
** 156 printk messages dropped **
** 306 printk messages dropped **
** 176 printk messages dropped **
** 182 printk messages dropped **
** 159 printk messages dropped **
** 145 printk messages dropped **
** 113 printk messages dropped **
** 154 printk messages dropped **
** 169 printk messages dropped **
** 161 printk messages dropped **
** 158 printk messages dropped **
** 220 printk messages dropped **
** 116 printk messages dropped **
** 168 printk messages dropped **
** 150 printk messages dropped **
** 131 printk messages dropped **
** 148 printk messages dropped **
** 143 printk messages dropped **
** 139 printk messages dropped **
** 107 printk messages dropped **
** 114 printk messages dropped **
** 95 printk messages 
** 166 printk messages dropped **
** 137 printk messages dropped **
** 99 printk messages dropped **
** 109 printk messages dropped **
** 113 printk messages dropped **
** 143 printk messages dropped **
** 138 printk messages dropped **
** 102 printk messages dropped **
** 87 printk messages dropped **
** 98 printk messages dropped **
** 89 printk messages dropped **
** 96 printk messages dropped **
** 127 printk messages dropped **
** 117 printk messages dropped **
** 98 printk messages dropped **
** 93 printk messages dropped **
** 108 printk messages dropped **
** 100 printk messages dropped **
** 113 printk messages dropped **
** 106 printk messages dropped **
** 82 printk messages dropped **
** 90 printk messages dropped **
** 97 printk messages dropped **
** 90 printk messages dropped **
** 95 printk messages dropped **
** 92 printk messages dropped **
** 131 printk messages dropped **
** 134 printk messages dropped **
** 88 printk messages dropped **
** 96 printk messages dropped **
** 93 printk messages dropped **
** 96 printk messages dropped **
** 89 printk messages dropped **
** 106 printk messages dropped **
** 115 printk messages dropped **
** 116 printk messages dropped **
** 116 printk messages dropped **
** 55 printk messages dropped **
** 93 printk messages dropped **
** 113 printk messages dropped **
** 119 printk messages dropped **
** 115 printk messages dropped **
** 103 printk messages dropped **
** 113 printk messages dropped **
** 116 printk messages dropped **
** 191 printk messages dropped **
** 191 printk messages dropped **
** 205 printk messages dropped **
** 214 printk messages dropped **
** 176 printk messages dropped **
** 186 printk messages dropped **
** 164 printk messages dropped **
** 188 printk messages dropped **
** 179 printk messages dropped **
** 179 printk messages dropped **
** 182 printk messages dropped **
** 180 printk messages dropped **
** 172 printk messages dropped **
** 197 printk messages dropped **
** 177 printk messages dropped **
** 191 printk messages dropped **
** 201 printk messages dropped **
** 167 printk messages dropped **
** 165 printk messages dropped **
** 174 printk messages dropped **
** 180 printk messages dropped **
** 136 printk messages dropped **
** 164 printk messages dropped **
** 174 printk messages dropped **
** 153 printk messages dropped **
** 119 printk messages dropped **
** 121 printk messages dropped **
** 116 printk messages dropped **
** 147 printk messages dropped **
** 161 printk messages dropped **
** 159 printk messages dropped **
** 134 printk messages dropped **
** 167 printk messages dropped **
** 178 printk messages dropped **
** 161 printk messages dropped **
** 174 printk messages dropped **
** 159 printk messages dropped **
** 97 printk messages dropped **
** 157 printk messages dropped **
** 164 printk messages dropped **
** 171 printk messages dropped **
** 139 printk messages dropped **
** 149 printk messages dropped **
** 131 printk messages dropped **
** 96 printk messages dropped **
** 24 printk messages dropped **
** 75 printk messages dropped **
** 91 printk messages dropped **
** 89 printk messages dropped **
** 92 printk messages dropped **
** 93 printk messages dropped **
** 92 printk messages dropped **
** 91 printk messages dropped **
** 91 printk messages dropped **
** 80 printk messages dropped **
** 91 printk messages dropped **
** 91 printk messages dropped **
** 89 printk messages dropped **
** 91 printk messages dropped **
** 98 printk messages dropped **
** 103 printk messages dropped **
** 101 printk messages dropped **
** 114 printk messages dropped **
** 143 printk messages dropped **
** 196 printk messages dropped **
** 167 printk messages dropped **
** 208 printk messages dropped **
** 194 printk messages dropped **
** 164 printk messages dropped **
** 132 printk messages dropped **
** 97 printk messages dropped **
** 120 printk messages dropped **
** 161 printk messages dropped **
** 161 printk messages dropped **
** 148 printk messages dropped **
** 120 printk messages dropped **
** 125 printk messages dropped **
** 123 printk messages dropped **
** 130 printk messages dropped **
** 174 printk messages dropped **
** 149 printk messages dropped **
** 167 printk messages dropped **
** 170 printk messages dropped **
** 166 printk messages dropped **
** 177 printk messages dropped **
** 102 printk messages dropped **
** 100 printk messages dropped **
** 110 printk messages dropped **
** 117 printk messages dropped **
** 155 printk messages dropped **
** 172 printk messages dropped **
** 174 printk messages dropped **
** 199 printk messages dropped **
** 174 printk messages dropped **
** 189 printk messages dropped **
** 184 printk messages dropped **
** 188 printk messages dropped **
** 177 printk messages dropped **
** 169 printk messages dropped **
** 162 printk messages dropped **
** 173 printk messages dropped **
** 171 printk messages dropped **
** 167 printk messages dropped **
** 164 printk messages dropped **
** 149 printk messages dropped **
** 173 printk messages dropped **
** 168 printk messages dropped **
** 140 printk messages dropped **
** 206 printk messages dropped **
** 204 printk messages dropped **
** 163 printk messages dropped **
** 176 printk messages dropped **
** 149 printk messages dropped **
** 157 printk messages dropped **
** 172 printk messages dropped **
** 170 printk messages dropped **
** 204 printk messages dropped **
** 198 printk messages dropped **
** 156 printk messages dropped **
** 209 printk messages dropped **
** 131 printk messages dropped **
** 105 printk messages dropped **
** 152 printk messages dropped **
** 164 printk messages dropped **
** 183 printk messages dropped **
** 146 printk messages dropped **
** 172 printk messages dropped **
** 160 printk messages dropped **
** 98 printk messages dropped **
** 94 printk messages dropped **
** 105 printk messages dropped **
** 110 printk messages dropped **
** 87 printk messages dropped **
** 55 printk messages dropped **
** 75 printk messages dropped **
** 81 printk messages dropped **
** 86 printk messages dropped **
** 83 printk messages dropped **
** 87 printk messages dropped **
** 87 printk messages dropped **
** 85 printk messages dropped **
** 88 printk messages dropped **
** 79 printk messages dropped **
** 64 printk messages dropped **
** 65 printk messages dropped **
** 87 printk messages dropped **
** 141 printk messages dropped **
** 152 printk messages dropped **
** 153 printk messages dropped **
** 135 printk messages dropped **
** 153 printk messages dropped **
** 111 printk messages dropped **
** 155 printk messages dropped **
** 154 printk messages dropped **
** 167 printk messages dropped **
** 166 printk messages dropped **
** 178 printk messages dropped **
** 158 printk messages dropped **
** 157 printk messages dropped **
** 174 printk messages dropped **
** 144 printk messages dropped **
** 161 printk messages dropped **
** 106 printk messages dropped **
** 121 printk messages dropped **
** 90 printk messages dropped **
** 108 printk messages dropped **
** 138 printk messages dropped **
** 156 printk messages dropped **
** 170 printk messages dropped **
** 187 printk messages dropped **
** 162 printk messages dropped **
** 156 printk messages dropped **
** 155 printk messages dropped **
** 156 printk messages dropped **
** 148 printk messages dropped **
** 153 printk messages dropped **
** 157 printk messages dropped **
** 138 printk messages dropped **
** 125 printk messages dropped **
** 111 printk messages dropped **
** 145 printk messages dropped **
** 146 printk messages dropped **
** 144 printk messages dropped **
** 132 printk messages dropped **
** 112 printk messages dropped **
** 81 printk messages dropped **
** 92 printk messages dropped **
** 108 printk messages dropped **
** 134 printk messages dropped **
** 155 printk messages dropped **
** 153 printk messages dropped **
** 147 printk messages dropped **
** 144 printk messages dropped **
** 104 printk messages dropped **
** 108 printk messages dropped **
** 134 printk messages dropped **
** 167 printk messages dropped **
** 191 printk messages dropped **
** 187 printk messages dropped **
** 180 printk messages dropped **
** 170 printk messages dropped **
** 151 printk messages dropped **
** 141 printk messages dropped **
** 186 printk messages dropped **
** 199 printk messages dropped **
** 197 printk messages dropped **
** 200 printk messages dropped **
** 196 printk messages dropped **
** 179 printk messages dropped **
** 194 printk messages dropped **
** 199 printk messages dropped **
** 173 printk messages dropped **
** 124 printk messages dropped **
** 93 printk messages dropped **
** 70 printk messages dropped **
** 103 printk messages dropped **
** 114 printk messages dropped **
** 115 printk messages dropped **
** 126 printk messages dropped **
** 119 printk messages dropped **
** 115 printk messages dropped **
** 127 printk messages dropped **
** 119 printk messages dropped **
** 192 printk messages dropped **
** 172 printk messages dropped **
** 124 printk messages dropped **
** 119 printk messages dropped **
** 125 printk messages dropped **
** 127 printk messages dropped **
** 130 printk messages dropped **
** 118 printk messages dropped **
** 130 printk messages dropped **
** 143 printk messages dropped **
** 118 printk messages dropped **
** 123 printk messages dropped **
** 121 printk messages dropped **
** 124 printk messages dropped **
** 142 printk messages dropped **
** 210 printk messages dropped **
** 170 printk messages dropped **
** 118 printk messages dropped **
** 117 printk messages dropped **
** 115 printk messages dropped **
** 115 printk messages dropped **
** 118 printk messages dropped **
** 121 printk messages dropped **
** 130 printk messages dropped **
** 159 printk messages dropped **
** 123 printk messages dropped **
** 108 printk messages dropped **
** 96 printk messages dropped **
** 81 printk messages dropped **
** 119 printk messages dropped **
** 188 printk messages dropped **
** 194 printk messages dropped **
** 205 printk messages dropped **
** 186 printk messages dropped **
** 199 printk messages dropped **
** 200 printk messages dropped **
** 188 printk messages dropped **
** 207 printk messages dropped **
** 202 printk messages dropped **
** 126 printk messages dropped **
** 99 printk messages dropped **
** 110 printk messages dropped **
** 116 printk messages dropped **
** 117 printk messages dropped **
** 128 printk messages dropped **
** 89 printk messages dropped **
** 85 printk messages dropped **
** 84 printk messages dropped **
** 77 printk messages dropped **
** 77 printk messages dropped **
** 80 printk messages dropped **
** 81 printk messages dropped **
** 96 printk messages dropped **
** 92 printk messages dropped **
** 93 printk messages dropped **
** 100 printk messages dropped **
** 105 printk messages dropped **
** 106 printk messages dropped **
** 100 printk messages dropped **
** 102 printk messages dropped **
** 104 printk messages dropped **
** 106 printk messages dropped **
** 106 printk messages dropped **
** 94 printk messages dropped **
** 76 printk messages dropped **
** 97 printk messages dropped **
** 90 printk messages dropped **
** 81 printk messages dropped **
** 75 printk messages dropped **
** 77 printk messages dropped **
** 74 printk messages dropped **
** 71 printk messages dropped **
** 76 printk messages dropped **
** 76 printk messages dropped **
** 75 printk messages dropped **
** 68 printk messages dropped **
** 68 printk messages dropped **
** 77 printk messages dropped **
** 69 printk messages dropped **
** 74 printk messages dropped **
** 71 printk messages dropped **
** 64 printk messages dropped **
** 72 printk messages dropped **
** 92 printk messages dropped **
** 99 printk messages dropped **
** 89 printk messages dropped **
** 95 printk messages dropped **
** 99 printk messages dropped **
** 78 printk messages dropped **
** 73 printk messages dropped **
** 79 printk messages dropped **
** 83 printk messages dropped **
** 76 printk messages dropped **
** 78 printk messages dropped **
** 72 printk messages dropped **
** 79 printk messages dropped **
** 77 printk messages dropped **
** 75 printk messages dropped **
** 78 printk messages dropped **
** 76 printk messages dropped **
** 79 printk messages dropped **
** 78 printk messages dropped **
** 76 printk messages dropped **
** 80 printk messages dropped **
** 71 printk messages dropped **
** 101 printk messages dropped **
** 98 printk messages dropped **
** 105 printk messages dropped **
** 91 printk messages dropped **
** 94 printk messages dropped **
** 96 printk messages dropped **
** 96 printk messages dropped **
** 72 printk messages dropped **
** 77 printk messages dropped **
** 102 printk messages dropped **
** 102 printk messages dropped **
** 99 printk messages dropped **
** 91 printk messages dropped **
** 102 printk messages dropped **
** 106 printk messages dropped **
** 91 printk messages dropped **
** 95 printk messages dropped **
** 106 printk messages dropped **
** 103 printk messages dropped **
** 107 printk messages dropped **
** 104 printk messages dropped **
** 99 printk messages dropped **
** 94 printk messages dropped **
** 101 printk messages dropped **
** 99 printk messages dropped **
[   79.590423][ T7331] Modules linked in:
[   79.592239][ T7331] 
[   79.593401][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) 
[   79.597616][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   79.602284][ T7331] RIP: 0010:vsnprintf+0x106e/0x1300
[   79.604756][ T7331] Code: 74 08 48 89 df e8 e2 ed ae f6 44 89 74 24 4c 44 0f b6 2b 49 89 de e9 f6 f3 ff ff e8 ec ab 3a f6 48 8d 3d 15 20 86 06 44 89 ee <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03
[   79.612759][ T7331] RSP: 0018:ffffc900035d6f20 EFLAGS: 00010093
[   79.615523][ T7331] RAX: 0000000000000000 RBX: ffffffff8ceb82a2 RCX: 0000000000000000
[   79.618990][ T7331] RDX: ffff88802740a580 RSI: 0000000080000000 RDI: ffffffff9257cc20
[   79.622657][ T7331] RBP: ffffc900035d7010 R08: 0000000000000004 R09: 0000000080000000
[   79.626201][ T7331] R10: 00000000ff800001 R11: 0000000000000000 R12: 0000000000000002
[   79.629220][ T7331] R13: 0000000080000000 R14: 0000000000000030 R15: 00000000ff800001
[   79.632613][ T7331] FS:  00007fc897f366c0(0000) GS:ffff8880d4946000(0000) knlGS:0000000000000000
[   79.635925][ T7331] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   79.638799][ T7331] CR2: 00007fc896f87b80 CR3: 0000000021a55000 CR4: 0000000000352ef0
[   79.642440][ T7331] Call Trace:
[   79.644015][ T7331]  <TASK>
[   79.645275][ T7331]  ? __pfx_vsnprintf+0x10/0x10
[   79.647470][ T7331]  ? desc_read+0x2e2/0x380
[   79.649638][ T7331]  va_format+0x14e/0x4b0
[   79.651684][ T7331]  ? __pfx_va_format+0x10/0x10
[   79.653990][ T7331]  ? desc_read_finalized_seq+0x131/0x1d0
[   79.656617][ T7331]  pointer+0x929/0xe50
[   79.658511][ T7331]  ? fwnode_string+0x26f/0x500
[   79.660812][ T7331]  ? __pfx_pointer+0x10/0x10
[   79.663034][ T7331]  ? __pfx__prb_read_valid+0x10/0x10
[   79.665412][ T7331]  vsnprintf+0x649/0x1300
[   79.667409][ T7331]  ? __pfx_vsnprintf+0x10/0x10
[   79.669109][ T7331]  ? vprintk_store+0x6e8/0xbe0
[   79.671065][ T7331]  vprintk_store+0x3b3/0xbe0
[   79.673165][ T7331]  ? __lock_acquire+0x5c0/0x1f40
[   79.675306][ T7331]  ? __pfx_vprintk_store+0x10/0x10
[   79.677333][ T7331]  ? vsnprintf+0x4c5/0x1300
[   79.679078][ T7331]  ? __pfx_vsnprintf+0x10/0x10
[   79.681195][ T7331]  ? printk_percpu_data_ready+0x9/0x20
[   79.683665][ T7331]  ? nbcon_get_cpu_emergency_nesting+0x3b/0x50
[   79.686345][ T7331]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   79.688892][ T7331]  vprintk_emit+0x139/0x6b0
[   79.690509][ T7331]  ? __pfx_vprintk_emit+0x10/0x10
[   79.692915][ T7331]  ? is_bpf_text_address+0x94/0x1a0
[   79.695028][ T7331]  ? __kernel_text_address+0xd/0x30
[   79.697460][ T7331]  dev_vprintk_emit+0x391/0x3e0
[   79.699885][ T7331]  ? __pfx_dev_vprintk_emit+0x10/0x10
[   79.702396][ T7331]  ? lockdep_hardirqs_on+0x7d/0x110
[   79.704937][ T7331]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   79.707677][ T7331]  ? stack_depot_save_flags+0x49a/0x9f0
[   79.710154][ T7331]  dev_printk_emit+0xd2/0x10d
[   79.712402][ T7331]  ? __pfx_dev_printk_emit+0x10/0x10
[   79.714954][ T7331]  ? kasan_save_stack+0x30/0x50
[   79.717238][ T7331]  ? memdup_user+0x2a/0xe0
[   79.719406][ T7331]  ? dvb_get_property.isra.0+0x162/0x690
[   79.721977][ T7331]  ? dvb_frontend_handle_ioctl+0x138c/0x2f00
[   79.724477][ T7331]  ? dvb_frontend_do_ioctl+0x1ce/0x320
[   79.726585][ T7331]  ? dvb_usercopy+0x167/0x340
[   79.728839][ T7331]  ? dvb_frontend_ioctl+0x50/0x80
[   79.730648][ T7331]  ? __x64_sys_ioctl+0x18e/0x210
[   79.732609][ T7331]  ? do_syscall_64+0x123/0x790
[   79.734322][ T7331]  __dynamic_dev_dbg+0x252/0x310
[   79.736035][ T7331]  ? __pfx___dynamic_dev_dbg+0x10/0x10
[   79.738127][ T7331]  ? __might_fault+0xc5/0x140
[   79.740169][ T7331]  ? find_held_lock+0x2b/0x80
[   79.741931][ T7331]  ? __might_fault+0xc5/0x140
[   79.743642][ T7331]  dtv_property_process_get.isra.0+0xf40/0x3690
[   79.746306][ T7331]  ? _copy_from_user+0x59/0xd0
[   79.748302][ T7331]  dvb_get_property.isra.0+0x273/0x690
[   79.750685][ T7331]  ? __pfx_dvb_get_property.isra.0+0x10/0x10
[   79.752782][ T7331]  dvb_frontend_handle_ioctl+0x138c/0x2f00
[   79.754757][ T7331]  ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10
[   79.757068][ T7331]  ? do_raw_spin_lock+0x128/0x260
[   79.759474][ T7331]  ? find_held_lock+0x2b/0x80
[   79.761688][ T7331]  ? down_interruptible+0x66/0xa0
[   79.764021][ T7331]  ? rcu_is_watching+0x13/0xc0
[   79.766220][ T7331]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   79.768915][ T7331]  ? lockdep_hardirqs_on+0x7d/0x110
[   79.771336][ T7331]  dvb_frontend_do_ioctl+0x1ce/0x320
[   79.774032][ T7331]  dvb_usercopy+0x167/0x340
[   79.776289][ T7331]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[   79.779634][ T7331]  ? __pfx_dvb_usercopy+0x10/0x10
[   79.782130][ T7331]  ? __fget_files+0x34/0x3d0
[   79.784362][ T7331]  ? selinux_file_ioctl+0x13b/0x290
[   79.786612][ T7331]  ? selinux_file_ioctl+0xb6/0x290
[   79.788941][ T7331]  dvb_frontend_ioctl+0x50/0x80
[   79.791130][ T7331]  ? __pfx_dvb_frontend_ioctl+0x10/0x10
[   79.793607][ T7331]  __x64_sys_ioctl+0x18e/0x210
[   79.795753][ T7331]  do_syscall_64+0x123/0x790
[   79.797865][ T7331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.800526][ T7331] RIP: 0033:0x7fc896f9e559
[   79.802562][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.810558][ T7331] RSP: 002b:00007fc897f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   79.813783][ T7331] RAX: ffffffffffffffda RBX: 00007fc897225fa0 RCX: 00007fc896f9e559
[   79.817132][ T7331] RDX: 00002000000000c0 RSI: 0000000080106f53 RDI: 0000000000000004
[   79.820622][ T7331] RBP: 00007fc897035b20 R08: 0000000000000000 R09: 0000000000000000
[   79.824448][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.827259][ T7331] R13: 00007fc897226038 R14: 00007fc897225fa0 R15: 00007ffd573d78d8
[   79.830215][ T7331]  </TASK>
[   79.831656][ T7295] 842_compress: op 40
[   79.831667][ T7331] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   79.835967][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) 
[   79.839595][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   79.843427][ T7331] Call Trace:
[   79.844730][ T7331]  <TASK>
[   79.845881][ T7331]  dump_stack_lvl+0x100/0x190
[   79.847730][ T7331]  vpanic+0x553/0x970
[   79.849267][ T7331]  ? __pfx_vpanic+0x10/0x10
[   79.850954][ T7331]  panic+0xd1/0xe0
[   79.852414][ T7331]  ? __pfx_panic+0x10/0x10
SYZFAIL: failed to recv rpc
[   79.854142][ T7331]  check_panic_on_warn.cold+0x19/0x34
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   79.856374][ T7331]  ? vsnprintf+0x106b/0x1300
[   79.858301][ T7331]  __warn.cold+0x191/0x318
[   79.859887][ T7331]  __report_bug+0x30f/0x440
[   79.861499][ T7331]  ? vsnprintf+0x106b/0x1300
[   79.863124][ T7331]  ? __pfx___report_bug+0x10/0x10
[   79.865082][ T7331]  ? put_dec_full8+0x1d/0x2c0
[   79.866924][ T7331]  ? put_dec+0x2e/0xc0
[   79.868515][ T7331]  ? put_dec_trunc8+0x28b/0x370
[   79.870411][ T7331]  report_bug_entry+0xe2/0x290
[   79.872270][ T7331]  ? vsnprintf+0x106e/0x1300
[   79.874074][ T7331]  handle_bug+0x1cd/0x2a0
[   79.875748][ T7331]  exc_invalid_op+0x17/0x50
[   79.877458][ T7331]  asm_exc_invalid_op+0x1a/0x20
[   79.879321][ T7331] RIP: 0010:vsnprintf+0x106e/0x1300
[   79.881254][ T7331] Code: 74 08 48 89 df e8 e2 ed ae f6 44 89 74 24 4c 44 0f b6 2b 49 89 de e9 f6 f3 ff ff e8 ec ab 3a f6 48 8d 3d 15 20 86 06 44 89 ee <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03
[   79.888648][ T7331] RSP: 0018:ffffc900035d6f20 EFLAGS: 00010093
[   79.890792][ T7331] RAX: 0000000000000000 RBX: ffffffff8ceb82a2 RCX: 0000000000000000
[   79.893211][ T7331] RDX: ffff88802740a580 RSI: 0000000080000000 RDI: ffffffff9257cc20
[   79.895696][ T7331] RBP: ffffc900035d7010 R08: 0000000000000004 R09: 0000000080000000
[   79.898178][ T7331] R10: 00000000ff800001 R11: 0000000000000000 R12: 0000000000000002
[   79.900658][ T7331] R13: 0000000080000000 R14: 0000000000000030 R15: 00000000ff800001
[   79.903112][ T7331]  ? __pfx_vsnprintf+0x10/0x10
[   79.904630][ T7331]  ? desc_read+0x2e2/0x380
[   79.906046][ T7331]  va_format+0x14e/0x4b0
[   79.907407][ T7331]  ? __pfx_va_format+0x10/0x10
[   79.908923][ T7331]  ? desc_read_finalized_seq+0x131/0x1d0
[   79.910693][ T7331]  pointer+0x929/0xe50
[   79.911994][ T7331]  ? fwnode_string+0x26f/0x500
[   79.913515][ T7331]  ? __pfx_pointer+0x10/0x10
[   79.914978][ T7331]  ? __pfx__prb_read_valid+0x10/0x10
[   79.916895][ T7331]  vsnprintf+0x649/0x1300
[   79.918598][ T7331]  ? __pfx_vsnprintf+0x10/0x10
[   79.920432][ T7331]  ? vprintk_store+0x6e8/0xbe0
[   79.921974][ T7331]  vprintk_store+0x3b3/0xbe0
[   79.923467][ T7331]  ? __lock_acquire+0x5c0/0x1f40
[   79.925075][ T7331]  ? __pfx_vprintk_store+0x10/0x10
[   79.926704][ T7331]  ? vsnprintf+0x4c5/0x1300
[   79.928256][ T7331]  ? __pfx_vsnprintf+0x10/0x10
[   79.930066][ T7331]  ? printk_percpu_data_ready+0x9/0x20
[   79.931898][ T7331]  ? nbcon_get_cpu_emergency_nesting+0x3b/0x50
[   79.933820][ T7331]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   79.935685][ T7331]  vprintk_emit+0x139/0x6b0
[   79.937261][ T7331]  ? __pfx_vprintk_emit+0x10/0x10
[   79.938856][ T7331]  ? is_bpf_text_address+0x94/0x1a0
[   79.940472][ T7331]  ? __kernel_text_address+0xd/0x30
[   79.942060][ T7331]  dev_vprintk_emit+0x391/0x3e0
[   79.943604][ T7331]  ? __pfx_dev_vprintk_emit+0x10/0x10
[   79.945458][ T7331]  ? lockdep_hardirqs_on+0x7d/0x110
[   79.947238][ T7331]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   79.949697][ T7331]  ? stack_depot_save_flags+0x49a/0x9f0
[   79.952009][ T7331]  dev_printk_emit+0xd2/0x10d
[   79.954051][ T7331]  ? __pfx_dev_printk_emit+0x10/0x10
[   79.956242][ T7331]  ? kasan_save_stack+0x30/0x50
[   79.958291][ T7331]  ? memdup_user+0x2a/0xe0
[   79.960175][ T7331]  ? dvb_get_property.isra.0+0x162/0x690
[   79.962577][ T7331]  ? dvb_frontend_handle_ioctl+0x138c/0x2f00
[   79.965104][ T7331]  ? dvb_frontend_do_ioctl+0x1ce/0x320
[   79.967438][ T7331]  ? dvb_usercopy+0x167/0x340
[   79.969424][ T7331]  ? dvb_frontend_ioctl+0x50/0x80
[   79.971479][ T7331]  ? __x64_sys_ioctl+0x18e/0x210
[   79.973526][ T7331]  ? do_syscall_64+0x123/0x790
[   79.975537][ T7331]  __dynamic_dev_dbg+0x252/0x310
[   79.977557][ T7331]  ? __pfx___dynamic_dev_dbg+0x10/0x10
[   79.979895][ T7331]  ? __might_fault+0xc5/0x140
[   79.981836][ T7331]  ? find_held_lock+0x2b/0x80
[   79.983837][ T7331]  ? __might_fault+0xc5/0x140
[   79.985834][ T7331]  dtv_property_process_get.isra.0+0xf40/0x3690
[   79.988543][ T7331]  ? _copy_from_user+0x59/0xd0
[   79.990627][ T7331]  dvb_get_property.isra.0+0x273/0x690
[   79.992889][ T7331]  ? __pfx_dvb_get_property.isra.0+0x10/0x10
[   79.995457][ T7331]  dvb_frontend_handle_ioctl+0x138c/0x2f00
[   79.997807][ T7331]  ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10
[   80.000358][ T7331]  ? do_raw_spin_lock+0x128/0x260
[   80.002365][ T7331]  ? find_held_lock+0x2b/0x80
[   80.004197][ T7331]  ? down_interruptible+0x66/0xa0
[   80.006166][ T7331]  ? rcu_is_watching+0x13/0xc0
[   80.007963][ T7331]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   80.010102][ T7331]  ? lockdep_hardirqs_on+0x7d/0x110
[   80.012145][ T7331]  dvb_frontend_do_ioctl+0x1ce/0x320
[   80.014125][ T7331]  dvb_usercopy+0x167/0x340
[   80.015973][ T7331]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[   80.018199][ T7331]  ? __pfx_dvb_usercopy+0x10/0x10
[   80.020131][ T7331]  ? __fget_files+0x34/0x3d0
[   80.021868][ T7331]  ? selinux_file_ioctl+0x13b/0x290
[   80.023811][ T7331]  ? selinux_file_ioctl+0xb6/0x290
[   80.025744][ T7331]  dvb_frontend_ioctl+0x50/0x80
[   80.027559][ T7331]  ? __pfx_dvb_frontend_ioctl+0x10/0x10
[   80.029640][ T7331]  __x64_sys_ioctl+0x18e/0x210
[   80.031475][ T7331]  do_syscall_64+0x123/0x790
[   80.033221][ T7331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.035427][ T7331] RIP: 0033:0x7fc896f9e559
[   80.037104][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.044121][ T7331] RSP: 002b:00007fc897f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.047316][ T7331] RAX: ffffffffffffffda RBX: 00007fc897225fa0 RCX: 00007fc896f9e559
[   80.050206][ T7331] RDX: 00002000000000c0 RSI: 0000000080106f53 RDI: 0000000000000004
[   80.053094][ T7331] RBP: 00007fc897035b20 R08: 0000000000000000 R09: 0000000000000000
[   80.056017][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.058962][ T7331] R13: 00007fc897226038 R14: 00007fc897225fa0 R15: 00007ffd573d78d8
[   80.061858][ T7331]  </TASK>
[   80.063727][ T7331] Kernel Offset: disabled
[   80.065337][ T7331] Rebooting in 86400 seconds..