last executing test programs:

4m44.00006894s ago: executing program 32 (id=16):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]})
write$char_usb(r2, &(0x7f0000000540)='a', 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0)

4m22.301302328s ago: executing program 33 (id=389):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
fcntl$addseals(r1, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000380)={r1, 0x1, 0x2000, 0x10000}) (fail_nth: 4)

4m19.4715144s ago: executing program 34 (id=412):
socket(0x2, 0xa, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000ffffffffffffdd8600000001"], 0xfdef)

4m19.08766915s ago: executing program 35 (id=415):
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/218, 0xda}], 0x1, 0x6, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
setns(0xc9, 0x0)
r8 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff0000", @ANYRES16=r5, @ANYBLOB="230a29bd7000fbdbdf253100000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084)

4m18.516057703s ago: executing program 36 (id=422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010009000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)

4m17.790748794s ago: executing program 37 (id=429):
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, '\x00', 0x0, 0x1}) (async)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x75fd, 0x8000, 0x2, 0x16}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2695, 0x8, 0x1, 0x228}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x494b, 0x20000, 0x2, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4855, 0x400, 0x2, 0x3c0}, <r1=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc170, 0x60110, 0x2, 0x76}}], 0x4, &(0x7f0000001540)={0x2e, 0x17, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7f}, 0x0, 0x0, '\x00', {0x3, 0xc8e, 0x0, &(0x7f0000000540)=@buf_1k="f0a0fd3b677d0b3715587c30d1d9d66ae06f271f1315d1b69ad18225bbd4c7ef88fbe95ac0b54f3fa8a985b164ba8f23ff9a1eff24b250c873e097682523b6d9f66c03cb3ec17db1b3323c5c9d81a0958b56546eb96dc99faad0c7186a1b317ede83d3c6f1a2ba004e709257211e7298fba554388eb801ba655e25d1fad9a1fe3f06c9188b347c12c0054503e74b723bb386ea8fc3f38543591114014d7759f14db53c36418ef2756cac5f40a080ffc8c50f1272f55499fdd5215bf3a7addf17025c068888981fe47786bc0aa47907bd32ab249acbcf791f6a601e65daa33be4fb51cefebdc4014448febb63429cdd60f5322651d13a6b6d900de88447404b287fef83bfdc67e32d5dc12409e166540a698dff45282cdc85b9d270bb99e19e78468d08d0ce8462a6ac1d9d5490b0abb69eb832c3e6fce92b31adf5e2e626183dfff3358d2efadf0dd2b06d1ceda736d0be781010b955af049ff76b2ad64d0015d07416af5f544f1c1443d81ef564978dead9c12bc339c9c3c047e396a38e4adf6ad4330123f6d6d697964e6e5b111900dffdcb5a233ca812a3be21202f7cfe6d7c3ed31dbc7a5f2f57b09ba5bb068d33ec1e94f1aaec9b1b04c0e77ebe61e2ca6a887906f8278f79ddbc9381b8038b6a2a381d3c46f8eefa92f0fba7dc345bb5d30a20d14298cd30213f12577593ce749851d805cf7bdb351fa9d6ff13420ba9ca77608e2eecc1f403f60658ac9983cf210a223faf7b46d04790fb13229c9611792fbab370e8affe97f9e80619d9d8c05fcd2e3870f5d8a2d1ca3e179f406bff0d38b8dfa4578d1e751b86a0c71a0e99b181e1e2fb4308ab90cac5fab9bf412771bbb4778dc48dc45c1c273d03acb8e085f8942ac5310ae9ed976894f2bc541f89d33381e01279726d46f8485032b2497988d357b474bf49b72ffe739212eb106ce2c80a1ca0ed5b45df1abfa2cf118ac4d1ac8c8b861909001fc806c1ec856cb7bfe4869465ecea8b9618089c31fade6fbec007bef9e1f4d7028d8d5b5a01cb71f450a970c20aae00d7f3e2f24f700e3bbe99e3c4c7db2642354160cfce841c2ad4881a94c1f047e27fe9777f120bd0b8ddea56e2c8e997165feaae058bb1862b2893aad8cf5fbd56039a9f8c295ac8bd9dca8583e907195eb65ec2aa54bdd3112dccebfc713921a08c2d81b47ca06132348a8a1a10c51d2b5e9fcee112428e883440bd49de70656db4d4a6610ec9abb47001dca46a4a4696ccd7c11ea224fe6e8dc863af27d8b7078aecf9449e73f2d8bb971a7eca3eab1f6229de6e6970b23dae160152938192f9244beb1bc8e3aa887cf28260cba58c52b109f00ca3e5e2fedb800ce1daa22e4cd93dbd6a597a6f4578eaa7bf5d29ad326f2cbb97e61064b2a3c0e4fd94d0798a2571e99f745ae1c83d4e74e518d4ad6c22f8235ef1bcec"}}, &(0x7f00000015c0)) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000001600)={0x0, 0x0, <r2=>0xffffffffffffffff}) (rerun: 32)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000001640)={0x9, r2, 0x1a, {0xce1, 0x5a}, 0x9}, 0x1)

4m9.045205518s ago: executing program 7 (id=521):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c", 0x21)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000003200007e0100003801000001")

4m8.937485794s ago: executing program 7 (id=524):
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x69f1227ab38ce363}, &(0x7f0000000080)={&(0x7f0000000100)=""/15})
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30)

4m8.863617409s ago: executing program 7 (id=527):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0)
read(r0, &(0x7f0000000400)=""/258, 0xcd)
r1 = socket(0x10, 0x80002, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
r2 = inotify_init1(0x800)
inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960)
inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000922)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)

4m8.856845447s ago: executing program 7 (id=530):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) (async)
chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01)
mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x884, &(0x7f0000000200)={[{@favordynmods}, {@xattr}, {@name={'name', 0x3d, '):\xe6*:-[#'}}, {@noprefix}, {@clone_children}], [{@obj_type={'obj_type', 0x3d, 'upperdir'}}, {@uid_gt={'uid>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@subj_user={'subj_user', 0x3d, 'upperdir'}}, {@appraise_type}]}) (async)
mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x884, &(0x7f0000000200)={[{@favordynmods}, {@xattr}, {@name={'name', 0x3d, '):\xe6*:-[#'}}, {@noprefix}, {@clone_children}], [{@obj_type={'obj_type', 0x3d, 'upperdir'}}, {@uid_gt={'uid>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@subj_user={'subj_user', 0x3d, 'upperdir'}}, {@appraise_type}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

4m8.70266418s ago: executing program 7 (id=534):
socket(0x2, 0xa, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000eb22000000000000000001"], 0xfdef)

4m8.518385003s ago: executing program 7 (id=539):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x2, 0x0, [0x3, 0x6, 0x8, 0x3, 0x1, 0x6, 0x9, 0xa8]}) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0}) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

4m8.404628568s ago: executing program 38 (id=539):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x2, 0x0, [0x3, 0x6, 0x8, 0x3, 0x1, 0x6, 0x9, 0xa8]}) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0}) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

4m4.2686263s ago: executing program 8 (id=616):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x34, r2, 0xa5c59466aaff822d, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x64040)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r4 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0x0, r4)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '^(\\{*'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x28000)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310)

4m4.182342368s ago: executing program 8 (id=617):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0x5016, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, 0x0, 0x2100, 0x280000000})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000))

4m4.098173119s ago: executing program 8 (id=618):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
pipe(&(0x7f0000000140))
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801000001")

4m4.097928783s ago: executing program 8 (id=619):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadgetfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadgetfs\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadgetfs/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)="000000000902190001010080010904000001ffffff000705810240000012011001000000402505a0a4000000000001", 0x2f)
read(r1, &(0x7f0000000500), 0x10)
read(r1, 0x0, 0x0)
read(r1, 0x0, 0x0)
read(r1, &(0x7f0000000500), 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadgetfs/ep1in-bulk\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000580)={0x2c, 0x1f, 0x15, 0x8000000, 0xffffffff, "", [@generic="89", @nested={0x4, 0xb9}, @typed={0x14, 0x13a, 0x0, 0x0, @ipv6=@local}]}, 0x2c}], 0x1}, 0x8000)
r4 = syz_clone(0x20000000, &(0x7f0000000200)="51b5667b399f15dc3773c1cf81394ec8684c353695a120c84b9c7ab821ea1f3cd52e2c4190d965920970f75a7a2c766389ad5296db4d259a0fa1a46e8a97c143a5c4cd71d945eba63d132228d5b2ee1570a054809c09b0bf9087a69d1f4d3796fa3916c029f171a7ff427089e3716e23035246628e6da65907036055dad5", 0x7e, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="93629002007f139dd73bde456cec954b10e7cea852642386ebc5338fe1dff16ef0651f121a1f2eda06fd32271dc235c009da5f3de9094b50f3914fbbb0bc6eb7519cc428b9f07f7e211cd7bd702a116b83c8a4544431fe5ac9cefb7818aa853258638511b8f5d2170414a551bd08354d22a6ef1a4252dddb68869c00aa92e310d62c73415f361b89d8fad74fe406d59b03e2f76fce057eaabe309da0d335a4d26fe7d7bf04ee256e5ab0c19409f7aa33016f6b06a29166593f64665a98b23a9bc7")
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x77, 0xfffffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439})
syz_open_procfs(r4, &(0x7f0000000400)='attr/current\x00')
socket$netlink(0x10, 0x3, 0x7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m3.552265443s ago: executing program 8 (id=620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0)

4m3.18984622s ago: executing program 9 (id=626):
socket(0x2, 0xa, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000be88000000000000000001"], 0xfdef)

4m2.976400802s ago: executing program 9 (id=627):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000c1401f326bd7000fddbdf25080001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40400c0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r3, 0x9}, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000e, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fchdir(r4)
prctl$PR_SET_IO_FLUSHER(0x50, 0x0)
timerfd_create(0xffffffffffffffff, 0x800)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x8)
creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae)
timer_settime(0x0, 0x0, &(0x7f00000001c0), 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

4m2.761717456s ago: executing program 8 (id=628):
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%\xf4\xd8\xd5\xb5!\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0eb\xe7\x00'/53, 0x6)
ftruncate(r1, 0x2000000)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1f, 0x0, 0x1000000})

4m2.718218711s ago: executing program 39 (id=628):
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%\xf4\xd8\xd5\xb5!\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0eb\xe7\x00'/53, 0x6)
ftruncate(r1, 0x2000000)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1f, 0x0, 0x1000000})

4m2.057126771s ago: executing program 9 (id=634):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}, 0x1, 0x4000}, 0xc0)

4m2.05686091s ago: executing program 9 (id=635):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadgetfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadgetfs\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadgetfs/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)="000000000902190001010080010904000001ffffff000705810240000012011001000000402505a0a4000000000001", 0x2f)
read(r1, &(0x7f0000000500), 0x10)
read(r1, 0x0, 0x0)
read(r1, 0x0, 0x0)
read(r1, &(0x7f0000000500), 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadgetfs/ep1in-bulk\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000580)={0x2c, 0x1f, 0x15, 0x8000000, 0xffffffff, "", [@generic="89", @nested={0x4, 0xb9}, @typed={0x14, 0x13a, 0x0, 0x0, @ipv6=@local}]}, 0x2c}], 0x1}, 0x8000)
r4 = syz_clone(0x20000000, &(0x7f0000000200)="51b5667b399f15dc3773c1cf81394ec8684c353695a120c84b9c7ab821ea1f3cd52e2c4190d965920970f75a7a2c766389ad5296db4d259a0fa1a46e8a97c143a5c4cd71d945eba63d132228d5b2ee1570a054809c09b0bf9087a69d1f4d3796fa3916c029f171a7ff427089e3716e23035246628e6da65907036055dad5", 0x7e, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="93629002007f139dd73bde456cec954b10e7cea852642386ebc5338fe1dff16ef0651f121a1f2eda06fd32271dc235c009da5f3de9094b50f3914fbbb0bc6eb7519cc428b9f07f7e211cd7bd702a116b83c8a4544431fe5ac9cefb7818aa853258638511b8f5d2170414a551bd08354d22a6ef1a4252dddb68869c00aa92e310d62c73415f361b89d8fad74fe406d59b03e2f76fce057eaabe309da0d335a4d26fe7d7bf04ee256e5ab0c19409f7aa33016f6b06a29166593f64665a98b23a9bc7")
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x77, 0xfffffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439})
syz_open_procfs(r4, &(0x7f0000000400)='attr/current\x00')
socket$netlink(0x10, 0x3, 0x7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m1.548164597s ago: executing program 9 (id=636):
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0142, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x7f, 0x4, 0xa7, 0x8, 0x16, "1dde084be3322f29"})
getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
syz_clone3(&(0x7f0000000300)={0x38000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0, {0x7}, &(0x7f00000001c0)=""/64, 0x40, &(0x7f0000000200)=""/174, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
r3 = syz_clone(0x0, &(0x7f0000000380)="5a2c57451983d67229ba5934f4b2a617bccb2a9268d71573f3515b80cd9edccc7c976f0d1c510ae69be73502ed600e72876b085db16aecad92b2fb13984f896940a230b1937b26692161a79fd81be032435bf92b8e2b53f431d9dd2d38057c36a3e16f208f41cb876be9bd346d95c41a07d02532b7ba2904b1f7f39e7559b960c187de4e41cdaa5dd070573f099cdf502fbe6230e04f57d646b68d0a426bfd0e773c3f9a3809c36fd89a874555175abf1742e68b1b2083e69eeef2aaa4e2085ff1036be161856c62d9ec575d269bc530ed1cd736eff9a95462d67dc7", 0xdc, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="2b143daf")
r4 = syz_open_dev$mouse(&(0x7f0000000540), 0xb62, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r1, 0x25, 0x6, @val=@iter={&(0x7f0000000580)=@task={r2, r3, r4}, 0x10}}, 0x20)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa)
r5 = userfaultfd(0xe8dca94fee92ac4a)
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000600)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
write$char_usb(r0, &(0x7f0000000640)="8ebf8e219e43378ffc6b90d0975e3a8b11815e518bb81048ef48ab2f3efc75795b63b33cb044702aeec053fc10ccfa52bee4cf81de7b210512f2860806a3dcf9001063d694127ad34e2ca0b5538d3b7aeda7ee9ae274da57732f706841", 0x5d)
ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f00000006c0)={0x26, 0x0, 0xc6})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000780))
inotify_add_watch(r4, &(0x7f00000007c0)='./file0\x00', 0x4000000)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0)
r8 = syz_open_pts(r7, 0x40300)
write$binfmt_aout(r0, &(0x7f0000000840)={{0x108, 0x40, 0x9, 0x36a, 0x19, 0x6, 0xf1, 0x6}, "93e2ba51e673ce988bb96c9e10e4b9e86f7f5d9cae73b966e3579ae127fee2caa2243c5dd656b941a4eecc8a522437c2866e8ef2d9dd4892c2cb01208bc516083b14e0e716792b48015dc1cec342a52dcf61c4f03fbdce", ['\x00', '\x00', '\x00']}, 0x377)
ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000bc0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1})
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c00), 0x40300, 0x0)
bind$inet(r9, &(0x7f0000000c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x1d0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000f40)=0xd0)
recvfrom$packet(r9, &(0x7f0000000f80)=""/181, 0xb5, 0x41, &(0x7f0000001040)={0x11, 0x9, r1, 0x1, 0x1}, 0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000010c0)=0x24)
sendto$packet(r9, &(0x7f0000001100)="0a5a2ddb443ef4973c945488", 0xc, 0x48001, &(0x7f0000001140)={0x11, 0xf5, r1, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001180), &(0x7f00000011c0)=0x4)
r10 = syz_open_dev$hiddev(&(0x7f0000001200), 0xd, 0x200)
dup2(r10, r8)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002240)={0x0, 0x9})

4m0.719848888s ago: executing program 9 (id=644):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
close(0x3)
r6 = socket$inet(0x2, 0x80001, 0x84)
listen(r6, 0x3)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0x40000000}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x0}, 0x94)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1, 0x2}, 0x6)
write(r0, &(0x7f0000000080)="2800247f000000", 0x7)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0)
ioctl$COMEDI_CANCEL(r7, 0x6407)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x7, &(0x7f0000000000)=[0xff, 0x80, 0xb800000000, 0x8, 0xe, 0x0, 0x8], 0x9547, 0x8, 0x1})

4m0.635349705s ago: executing program 40 (id=644):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
close(0x3)
r6 = socket$inet(0x2, 0x80001, 0x84)
listen(r6, 0x3)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0x40000000}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x0}, 0x94)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1, 0x2}, 0x6)
write(r0, &(0x7f0000000080)="2800247f000000", 0x7)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0)
ioctl$COMEDI_CANCEL(r7, 0x6407)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x7, &(0x7f0000000000)=[0xff, 0x80, 0xb800000000, 0x8, 0xe, 0x0, 0x8], 0x9547, 0x8, 0x1})

4m0.421033315s ago: executing program 0 (id=648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}, 0x1, 0x1000000}, 0xc0)

4m0.420869836s ago: executing program 0 (id=649):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000000001000000090001f573797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)

4m0.335566412s ago: executing program 0 (id=650):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410)
r0 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xb782, 0x400, 0x0, 0x212}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = fanotify_init(0x1a, 0x800)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r4, 0x441, 0x4800001a, r5, 0x0)
fanotify_mark(r4, 0x1, 0x20, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, <r12=>r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x4}}}, &(0x7f0000000300))
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000480)=@ublk_get_dev_info_sqe={0x2e, 0x40, 0x0, r12, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, r13, '\x00', {r11, 0xffff, 0x40, &(0x7f0000000280)=@ublk_ctrl_dev_info_existing}})
io_uring_enter(r0, 0x20, 0xd9db, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)={'team0\x00', <r15=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x10104, 0xa21}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}}, 0x0)

4m0.214842706s ago: executing program 0 (id=652):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadgetfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadgetfs\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadgetfs/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)="000000000902190001010080010904000001ffffff000705810240000012011001000000402505a0a4000000000001", 0x2f)
read(r1, &(0x7f0000000500), 0x10)
read(r1, 0x0, 0x0)
read(r1, 0x0, 0x0)
read(r1, &(0x7f0000000500), 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadgetfs/ep1in-bulk\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000580)={0x2c, 0x1f, 0x15, 0x8000000, 0xffffffff, "", [@generic="89", @nested={0x4, 0xb9}, @typed={0x14, 0x13a, 0x0, 0x0, @ipv6=@local}]}, 0x2c}], 0x1}, 0x8000)
r4 = syz_clone(0x20000000, &(0x7f0000000200)="51b5667b399f15dc3773c1cf81394ec8684c353695a120c84b9c7ab821ea1f3cd52e2c4190d965920970f75a7a2c766389ad5296db4d259a0fa1a46e8a97c143a5c4cd71d945eba63d132228d5b2ee1570a054809c09b0bf9087a69d1f4d3796fa3916c029f171a7ff427089e3716e23035246628e6da65907036055dad5", 0x7e, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="93629002007f139dd73bde456cec954b10e7cea852642386ebc5338fe1dff16ef0651f121a1f2eda06fd32271dc235c009da5f3de9094b50f3914fbbb0bc6eb7519cc428b9f07f7e211cd7bd702a116b83c8a4544431fe5ac9cefb7818aa853258638511b8f5d2170414a551bd08354d22a6ef1a4252dddb68869c00aa92e310d62c73415f361b89d8fad74fe406d59b03e2f76fce057eaabe309da0d335a4d26fe7d7bf04ee256e5ab0c19409f7aa33016f6b06a29166593f64665a98b23a9bc7")
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x77, 0xfffffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439})
syz_open_procfs(r4, &(0x7f0000000400)='attr/current\x00')
socket$netlink(0x10, 0x3, 0x7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m59.739158392s ago: executing program 0 (id=658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r2}, 0x14) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x19, 0x11, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async)
mq_open(&(0x7f0000000000)='\x00', 0x0, 0x20, &(0x7f0000000180)={0x5, 0x8, 0x6, 0x9})

3m59.085963818s ago: executing program 6 (id=662):
syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000003c0))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r3=>r2, r1, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r4=>0x0, 0x0, <r5=>0x0], &(0x7f0000000300), 0x3, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r4], &(0x7f00000003c0), 0x0, 0x2})

3m58.937054095s ago: executing program 6 (id=663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a301f00000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)

3m58.936650175s ago: executing program 6 (id=664):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r7 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0xa, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}})

3m58.719329682s ago: executing program 6 (id=665):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadgetfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadgetfs\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadgetfs/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="000000000902190001010080010904000001ffffff000705810240000012011001000000402505a0a4000000000001", 0x2f)
read(r0, &(0x7f0000000500), 0x10)
read(r0, 0x0, 0x0)
read(r0, 0x0, 0x0)
read(r0, &(0x7f0000000500), 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadgetfs/ep1in-bulk\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000580)={0x2c, 0x1f, 0x15, 0x8000000, 0xffffffff, "", [@generic="89", @nested={0x4, 0xb9}, @typed={0x14, 0x13a, 0x0, 0x0, @ipv6=@local}]}, 0x2c}], 0x1}, 0x8000)
syz_clone(0x20000000, &(0x7f0000000200)="51b5667b399f15dc3773c1cf81394ec8684c353695a120c84b9c7ab821ea1f3cd52e2c4190d965920970f75a7a2c766389ad5296db4d259a0fa1a46e8a97c143a5c4cd71d945eba63d132228d5b2ee1570a054809c09b0bf9087a69d1f4d3796fa3916c029f171a7ff427089e3716e23035246628e6da65907036055dad5", 0x7e, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="93629002007f139dd73bde456cec954b10e7cea852642386ebc5338fe1dff16ef0651f121a1f2eda06fd32271dc235c009da5f3de9094b50f3914fbbb0bc6eb7519cc428b9f07f7e211cd7bd702a116b83c8a4544431fe5ac9cefb7818aa853258638511b8f5d2170414a551bd08354d22a6ef1a4252dddb68869c00aa92e310d62c73415f361b89d8fad74fe406d59b03e2f76fce057eaabe309da0d335a4d26fe7d7bf04ee256e5ab0c19409f7aa33016f6b06a29166593f64665a98b23a9bc7")
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x77, 0xfffffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439})

3m58.718782919s ago: executing program 0 (id=666):
r0 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f0000000100)='\x00', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(r0, &(0x7f0000000140)='environ\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000080)=0x2)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

3m58.66443704s ago: executing program 41 (id=666):
r0 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f0000000100)='\x00', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(r0, &(0x7f0000000140)='environ\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000080)=0x2)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

3m58.276923992s ago: executing program 6 (id=668):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
pipe(0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801000001")

3m57.365624482s ago: executing program 6 (id=671):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x0, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x0, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000884)

3m57.251682597s ago: executing program 42 (id=671):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x0, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x0, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000884)

28.722971359s ago: executing program 2 (id=3289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250300000008000500ac1414bb08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="08000200010000000800040064010102"], 0x3c}, 0x1, 0x0, 0x0, 0x440d}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250300000008000500ac1414bb08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="08000200010000000800040064010102"], 0x3c}, 0x1, 0x0, 0x0, 0x440d}, 0x0) (async)

28.615849514s ago: executing program 2 (id=3290):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64)
clock_nanosleep(0xfffffff2, 0xca9a3b, 0x0, 0xfffffffffffffffe) (async, rerun: 64)
r2 = socket(0x1e, 0x1, 0x0)
recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x30, 0x1)
landlock_restrict_self(r3, 0xe)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0)
read$FUSE(r4, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)

24.773783901s ago: executing program 2 (id=3294):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x48, r3, 0x1, 0x70bd2d, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400018008000100000001000500060002000000"], 0x2c}}, 0x0) (async)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1000, 0x4, &(0x7f0000000980))

24.71477327s ago: executing program 2 (id=3348):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) (async)
mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) (async)
mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) (async)
r1 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)="14df879c", 0x4) (async)
write(r1, &(0x7f0000000140)="14df879c", 0x4)
r2 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x8000, 0x0, 0x10000000}, &(0x7f0000000280), &(0x7f0000000180), 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) (async)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x10000400, &(0x7f0000001940)="de0c6caa13323adbc05734e7fbeefacc44a9be2b0f435dd0b2ba5499e78233a99f164add7b1a9a144db245670ba898782d1729317cdf133594b277c61419844c0efd085002b54ddb3a543edda0374cf8470209792ba8c5a877714ad7b9dc9437de62503670483275abad8d90997880feefda2544a0263759a2bef2582e8837bd0c984c0e4fd980b89fec4f7900352126531b9ff7c8b880939c00b917289f163581351df5c15e073a95126f311c29cedd01054653da7121d6f59d39370e9e1e4dfe1075a521743837c24a7d1642bec977c3b0ababa23a041c6b0f91aceabdc15df60e44d1e1985995b245baf7d87b6a3c04fb194133fd45f4f8cf862605e45f62a680be37ab92348169bbcc268fcfd5f450e072f25b4a05f5874f1ede07c0cabc42c41906725955bfa42bf2d66893c338d2e0df21f40363603700fa3caba1fe4311a938e3aa3377e48cb6ea3d73cd529c26dac28e4c0d70ff02fa951e4548171cb7198d7a126cb1f016bfe1a7fce3efca960f0e91b49464ad12e37c548898565e0a1332a57f12496c6e435e45b942c67271dd8a83b7cef044af185116f72786587c230275cdee87af7691d0b9be2bf9229699da653d57a1bb8c956fe74d69f517b33ef461d1343f75325ad5629605ca443c903d5b474005839ea537cd4ae0e6d347c1723e1321d9091df8b5ef9d2e58810a72ddb1ed1579a757e5e3f7a41798be7710ce38be42171a65a98194752808130946a57a316d948382296720f09ddd51f7a71b4b3ed4a162e4b1512e81b1c3f0bf86fe0511817f98db397988ffdd6f13350a92148164c13568b03954b36ec6d2bfaf59fd63631f0d16077ed078898931a99385d5c186e9305736e2900c40145bc675449cbe6f3d63ab6b58d929308c8fe1e0ec89ab4fa9b15f574b88fc201183763445af939247dd1fe609725e3e8fd56f7a2e8c3905a92b99edf6f14d4320ce5a869c2e1e9297fe21c16989965263d785e6cf4aad70cd4d681a260960ce68e5f2d9829487098de23425b204ebcdc3d7dc889f8c35c7f9a470ee1f37026c0739efe7b83bf693b57609d710de8eb363d9b627679f0ff5500eb9c717ff2073f59ac4bd64a8a9e0190db89ee08f33937606237febc6ee6aa557ceff40aadfb915a102a253be8642f00d71755e3cec420ebaff0458e09e6b1732de963152036a1a740f4f4cc512c659b905eed73f3912d16c537de6049098e489c9e22e0db04d7dd9111b86e020c67b70807515e950d7fc571fe07cb7f6132fe18f9e41c06ded685f6fc102e08d0fb0e0b25a94f72afb64232cae17efe20b76d39409247d3fb0dbb6af31097a9aa905ab262e0c3c396460d7e8e800af9acf83aebd1268666d851df9e6937884de121ddf31e56eafa2b62d73f8248d02a6d075fc25926b6b46b14034b4670c565b260ca8bdc105160889c4835cf15c86297d432b08d991ce0988d6fa73908ca5f7b1b0dca329af6469168aa9d9b81f35dde8554c678d007795fdd8b29760da3307f4ee44fc05cd8a8ac58d5d6275e066df604b0e062664fb6a44c4182cddb645f517126e17c18dd5699c289185dd870a082ae1be6387834c684142dbb3f8f71872241c67b231031eab8d9f74802d67c4b5c2285f21d2a4969a14c7bcdd1ee68d3976ac0b1b0826419edd009e6a02d683454e451890ecae4766f1cd23d286ac7a5302188cdb13da9c06c8e1844934196398116a2b9264bf187c4ec0274d2c85be1fd7332f1916ec9296fa15fed9d31c23d387c47c377c6e6ad0b339a3a73ed32194edae94e32e04c9aad587afafe3f4455b0451a596b4b3535a7f571f09f9207b18c17c65ec716327216c5f5be042db3a15c4fe19f6ca320f32d2fb7c825c4ca63e6aca89711a91eb4558d4b43b36ed0ffa00985e321b3dcff792fe7c441bb0d7fa94d654e61604f3afce1e7b40947dc63a4525cc362fc1ad495f37ed4fe98530ea2137995c4417b6dfde47495a9fbee683187bea67f3dbe3d8c12fa117d3ebed06a5cf9ad57f0e90d9a9cec7c135ff84f850a88ba14c5a2aabb9510fedb6c7e84a9e084a07672be75a375e21a1b98b3c12378be26f09218be983a2f39fcf1528907df35ad1f7f110f079a5e007c9e47bd24eb9c2cd5bd65a7ffe5a84c0dbb3aa33836876d6cc73986534d66652be2eb62c0bc1429e07ac447a858c36e1b85e8eef60b077d3a2f0edb8bb563f070aa8ba4a9c6f3a7855d7d1ad3e6546ef58c6b94c33a42fff6479d4c65f45f4a10f5ef376b467f01bdc86d89d858d891c488d483606a9562037329c59bc155b6ea1a1da553ec0de2d77e50e7b85c8910ccd3a7477eb22c9f5e5932bc4d30810a56e1e6319406d9e275dbbacb4b791dfaa35d2c6db715c78ef347e66a8651f9116f83aca4d51b3d6c13a7b78d49ec1fba4777bf49c0abfbf4c2e22c4c6d44ad6ec74c1cf122b5d6bd28ab493298013111999d1fd612e9f3e147328cd1988f822200693caeab8dd152d758e8c24b83583ffed561df17e59d4caf49d7537809cc487965ff8f8789cf9628514d98a3358a9ecfe3881b845979c5679a3b20d5c0ad56be8825f11c9bd928093bb6c3b78e2a36c89c8c7927ecb895064e76dcbc23c3f190c7c9a4110b0dbac6dcf4988ff03ec337531f2e125484a1f20a630ad24343d6d108de84d87ab3f0ad38a8d1bb0dc1f548f1cba9bd1a3ac50919e077bdbe0a9d3e70750387604199427f4c6fdc0508a6cf2155dcde4c9dfb8b8490005896ccd159745cdc774d08e942d0475f8a7e263adc6cf345f24a599edc52d2a47f2190190213db63ac2d7f5ee0edc6b23fdc19ac072a5acf14ac5baafe941937271ca6db1d87f5415dd190631ef56008e482a10f60bf49970ba52b3953b056835f37ff7b8fe724f6e9a0afb21251e482e898f8a694e7fa99700c3a4618e6d6f11e854fa62773b4bb9442807a677048d36af4fa9a4811012dd05248e8a71a3abe6e059ea6d50089a164b4099e527be676c2547fd1bcdb6b01ea98787a81f06357e5f6655aa612b5dfda367e751cb6420b63a5b15f5cb9e7c49fdff7fe2fac0434871f0e32afc4967560b0c1b0227624b45e122d0019aa05483dca6047e0dfcba2642b4f29acbe68b1135d4e5bc3e90e78593138815a3e07bd370caf0c6c7c95d310e0351054ea025721f02d311d3d4a9af0f8426ceca95b5a15d8bccda823aa03f2c0d6609ded5bfec5ee8ec176a96f54b045075a2839e5ac67155093aaf56ff65aeda400830c641eb239013ed10b4da06f7ee236f34f30e5a2d59572a43eae41d795f7cfe3c1e92d4f46b952f152196f024fa6d9334759c7a58823c7ace441d162fd26fb0384cfbcbba1a520318fec8631b6358d8c36dfa1970200b8d829cf5e809eace937ac6ae28baa3e90cbcf99069d7085353e3e2e4a2953fbd60f57e727cc00fc7fe782bb04607907f139d67fcbb2b155c70f2c4dbe522945c7fea952d0d82203cdc7e34e26533b852714d5784ba292fe767cbbdc7b15a80f306626f3e0bbad18099a38c2d037fb0d4c45154e40e0d2e57e021093cf716cc5364b0da4f8490b8580dd61ace2ba67620f4cf48376190b77a591e3ca3a3b63da1a5616a9c7eb7d2660de85065ce9600ea363f254fa747118706d865356690bd7dd91b3bfbcd20f97e45acea2ed13122486506af0ee1de131fefa4e90fdc9aae1a7e70a99407ba92ab4613888b7993d8c4a105195c9d773fc87aa4d2bcb51e6db08d098033bbe2131c574a12db94246b4131abcbca7e7793661c13235dafeb5f0577792c0b79bed16bcb8e2f9b28ca9de5356582b421cb69b4480f8a08b56b951af1b6494ddc151582ac798dda2726bb7a843e520153549f3b09922e538cecbb60727783d5e4217ed9489229bb6a1841d2be6b82257867cfc64c3720d52b02ff93cf84949d56fef1585429895f470331ce7ac7fc1f31a760baf2ae2b9dabd1aaf42df08a6f7a158251453faa4dd9779bf9e03548f02f9240e709ed6324d69987c7b2ff9d575eaa9817d6a7fdd8546964ce50aec5eb0b5146c848db628b8b5dfdfdcb9fa7ef3aef451dfec463d56dc586c6851466f499572f352ee46e4ffdcf9c996382d13381408048f950e6bde046325bc041e3872aa90682504b596d09ee7b95851b90e943def492a33aa5f8521b808e1a99101c30732c649f402ba9f4aa0718b47a8399e3f33b1aec950a56c3cfbd9932ef7eac69406eee461a74a74a473148fc20343a0a3e2313b6d041570e2fd6c71d6c08ecadec74d1bd2b77cc50aad6a2c73dddffe5882ece3e77e767dcbb821230368150c86c5a624b18056e81db60b1b80ff509a151e33d39279091d163241b4285754498a9fde91d03065ba8596ba15b507454aa0012d98b951b67a3866d4b1806e3ab658c027839dfe3f5ee21bcc97f2bfe497bc3a9539e62aa8d31017df1cc14d7087ff16a9e3b3a68078bab672c27efb0e5ac6bbe3c1d7f4a3de5febad2d988d2787b93c887205f864c4d9ec40b76fc3db0a723284c2e3b792a9e2c37e09c342a72c857fee3368c4a82920136ffffc42e17d6c21e727728cca43d535e33e9824de9d923bcb5bebe52c07431804ba2b3223a8f7c5dc53859f608cbb58963f3c8ebb3b19da43f26d92df0426d344e41497881aa7e583f60ecc79f97ed900c074af1fecb4f3c77ddc9809cd372d673c97a845e65deef07dbd8f32d943c56e4ef0a11485e218d6e531c91d0a242ca9693c55b59651682467c46be7174e92b2a0cde75edbb7ac75e11ab6b4769a3193cd0ada33aa956e457a2c23e2bf81fef36907b4a2ff0dc7e9b02ca00555fdcf6aae25683511e0243b0dde588417f27a448626fdfe077ec53c72a81a321d66cc56cd276df302314aa9e2e1e37dbb5b26d15ba3ce74802edeb702891c604879c290280432464610d74fda79a61b74719c7bb1465b8c76f06f84d57e577c974daedc2b5bab6cf29596bb506a57b3206a68c418d853a4de496feae1092c6fff7464b0e7f84b22f92a62f487accd2800bc3fb4fe85166a8f4d6e3f8808b96bb4a9e0544868ae3d5f20669290de71f436c910b08624827ed9ed3cc352250803d75c685520524441b87813443bc10be884c5454e2039cb20846dae84072f3120f1b4a8bf367eadd5b75ea4806d6f9124803ecb54a7351fd6ca604b93070a830c00759d0a8468585ec81d41ab7c3925bd1b884f8382f579b1bfa1cec60b3e441309beac80098d6c38ae189c6de5c46e847a844b7dd73b62145bc258ce47d121326fc717bec40b885630bab418ad3d21ff805048df616574ca456ccacaf3810a2ed62ae45eeabc44a64332d4315cda2225dc72eadc64b88323163f2e18c148df1c9d1cab2033dca36e1700ce22de989bd642c2e27e743a9f67a86918966d4c44e658142c3fa1317693d6b13495a204c30d30ea8d1efc7d373bdf8aebb28e85fa79474eddcadbc8582b66afc98058f19584cf3fe2a791bf1d7f6b99e1a482c3993a9fdac57923e59e9a8aab26225cf5796e6bad95f7fc5f8af624b960c950863d5c5fd5d3ec0b357cee40d0ec1e91f3eafd95e7d1b8cfe8ab001327d6369a77255b51ac615d5df0ec47f04a9e8d88ac88d52ebc281878b17f0cb9ba17c2fa6bc3d0c46eca80b678ae776408a474454d4277ed4fcaf704d9aa96ba6997c8a95c152211407f7a75e8ba5c15186f46e9770c3f8c98d9b7f3d2bb855450e9010aa4c68a77c3edf6d3f241238cf5c7d0abeb08e44005531a82b680e5888fb8e31d8d77d45661694ee90ec76684b5a410ad6b0a5df03cc34dfc7e8b6a488b48310f053749e474aa2504acf1d5b483ed59549b6fbcb34bcee2d82279d7068fbdfbd7cd1488b99460e1a95f663ea0ff063801d5738f8d6a86514eccc727e", 0x104c, &(0x7f0000001900), &(0x7f0000000080), &(0x7f00000005c0)="48fdd760ccded8436361a0409816a4adfc6b87aa7da39d176364c2cd6492ad3b012e6933f6d2664d68aaa998561950923f0da9fdcd206a9ce9743b27f06b0dc5f2d08ce79223123469969add1d222edbae14dc6f0def9b0377c6e2c2c5ece54e3618cc2ee589a14a8c82b043e4f873556659527efaddc7d2f20e22be726518f72a1f25c5881ee411e750dcdda893498e4b48ff780c642434abc741a323de44c437a89caa30120587792e4262f5ded35bc2b70fdcae068ff8ef794fbf2e6378ee046b336ad843722f96943355ba457fba265152f348a7fb254f49007555ec00000000000000")
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010)
close_range(r4, 0xffffffffffffffff, 0x0)
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1fb) (async)
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1fb)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x10000) (async)
sendfile(r6, r7, 0x0, 0x10000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000000c0)={0x3, r2, 0x36, {0x5, 0x3}, 0x7}, 0x1)

24.534747255s ago: executing program 2 (id=3351):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 8)

22.642495541s ago: executing program 2 (id=3376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
capset(0x0, 0x0)
r1 = syz_io_uring_setup(0x1c8d, &(0x7f0000000180)={0x0, 0x1775, 0x40, 0x2, 0x27}, &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r8 = socket$netlink(0x10, 0x3, 0x15)
writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
socket$phonet_pipe(0x23, 0x5, 0x2)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r9, &(0x7f0000000140)={0x27, r7, 0x1, 0x1, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906e96754059e65c39c5759b069d6e6d9589e5f2348878c00", 0x24}, 0x60)
close(r6)

22.550576915s ago: executing program 43 (id=3376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
capset(0x0, 0x0)
r1 = syz_io_uring_setup(0x1c8d, &(0x7f0000000180)={0x0, 0x1775, 0x40, 0x2, 0x27}, &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r8 = socket$netlink(0x10, 0x3, 0x15)
writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
socket$phonet_pipe(0x23, 0x5, 0x2)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r9, &(0x7f0000000140)={0x27, r7, 0x1, 0x1, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906e96754059e65c39c5759b069d6e6d9589e5f2348878c00", 0x24}, 0x60)
close(r6)

14.788494744s ago: executing program 5 (id=3493):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x80200000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x40022}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4040080}, 0x0)

14.785730808s ago: executing program 5 (id=3494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0x01', 0x4)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

14.731891667s ago: executing program 5 (id=3496):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000700000800000000175d556b085b35052f29a2f83c3cdeae96ab590000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x267)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"})
close(r2)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xbfb3)
r5 = syz_open_pts(r4, 0x101000)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600a7"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='btrfs\x00', 0x8080, &(0x7f00000001c0)='discard')
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = dup3(r5, r4, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17)

14.649210205s ago: executing program 5 (id=3498):
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
syz_open_procfs(r0, &(0x7f0000000240)='net/ip6_tables_targets\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00')
r1 = syz_ublk_setup_io_uring(0x39e0, &(0x7f0000000040)={0x0, 0xbf1e, 0x8000, 0x1, 0x254}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
io_uring_enter(r1, 0x24b7, 0x44b1, 0x98, &(0x7f0000000180)={[0x8]}, 0x8)

14.244223259s ago: executing program 5 (id=3500):
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100))
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01082abd7000fbdbdf2504000000000001800600010005020000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r4, 0x0)
syz_clone(0x11, 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000d54000/0x12000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00009bc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006cb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041)
io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb})
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
ioctl(r5, 0xc138fd02, &(0x7f0000000000)="0400000000000000000000003801")
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000007, 0x200000005c832, 0xffffffffffffffff, 0xcd11f000)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000080)='*\x00', 0x2)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x57, 0x2000, 0x0, {0xe, 0xa}, {0x1, 0x9}, @const={0x0, {0xfbff, 0x8, 0x1, 0x81}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5e08000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=r0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0)

14.146295962s ago: executing program 5 (id=3501):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x4)
write$dsp(r0, &(0x7f0000000100)="05a752a58f031ae310c8a6d08f949e12974c6050ee31e3b73da2c219217e2942145aad4f986f43fed267df9a8b3ab5d7932e692317450ac804dc9b5a638b77b6", 0x40)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x40002)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
fchown(r1, r2, r3)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000040)=@x86={0x7b, 0x3e, 0x27, 0x0, 0xa, 0x5, 0x2, 0x8, 0x8, 0x9, 0x2, 0x7, 0x0, 0xffff, 0x8, 0x8, 0x27, 0x4, 0x3, '\x00', 0x49, 0x5})
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x37)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000000180))
r10 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r11 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCVHANGUP(r11, 0x5437, 0x0)
ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000040)={0x9, 0x8, 0x9e5c, 0x38000, 0x1b, "1039db8d79bea18fa3015ae9ae6901313cf366"})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x4, 0x0, [{0x871, 0x0, 0x2a17}, {0x3fe, 0x0, 0xffffffff}, {0x885, 0x0, 0x1000}, {0x847, 0x0, 0x2}]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x406, 0x1, 0x1, 0xff}]})
close_range(r10, r5, 0x2)

3.193353291s ago: executing program 1 (id=3628):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0x01', 0x4)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

3.128908725s ago: executing program 1 (id=3629):
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x80000000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000040))
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.011549234s ago: executing program 1 (id=3630):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f7031203132382030", 0x45)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e01ff8c3801000001")

3.011242726s ago: executing program 1 (id=3631):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x3c, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x4, @mcast1, 0x39}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x4}}}, 0x108)
sendfile(r0, r0, 0x0, 0x40000457)
socket$packet(0x11, 0x3, 0x300)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x2000, 0x1002000})
r3 = socket(0x1e, 0x4, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x4000c0, &(0x7f00000001c0)='discard')
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
unshare(0x36040800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1)
recvmmsg$unix(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x400000000000074, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

2.13605635s ago: executing program 4 (id=3641):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x788cb8b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_procfs(r2, &(0x7f0000000080)='net/rt_cache\x00')
syz_clone(0x9089800, &(0x7f0000000040)="29e6a88faced241756d4fe0b42e343227b0bbabd5faac233a8542c4583b588", 0x1f, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="94158d77ff5d2d7e33dd095cfe658f0be313df811ad453a2b113560e935308cd9b73ddcc644941118366d0e8a1bbf19fa125d98ddcf75dfdb1a58becf9273cbe0a2bc715de0b6578d0b8df7c39f83e6d08acbfc0fb1788c52ae6ec8fffd91f36fb124300aa5d7cdcb20e05eac59565989a92ada2e9c428aece5a4611798cee2a72ab00581f243176a4f30787c2f1371baa0166af1fedc72789be3a8d26018eb7a8601b72bce979034efe1dd2fa8e95614332f01f9a")

2.027062348s ago: executing program 1 (id=3642):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00'])
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)

1.738225448s ago: executing program 1 (id=3643):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0)

1.593216541s ago: executing program 44 (id=3643):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0)

1.356603812s ago: executing program 4 (id=3648):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_CACHEINFO={0x14}]}, 0x30}}, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.093497441s ago: executing program 4 (id=3654):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet6(r0, &(0x7f0000000540)="60000004001433400000040000000000000000000028000000000200a52af834dc6f89743324ebd1b8e4b2", 0x2b, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, 0x1c)

1.004400013s ago: executing program 4 (id=3655):
socket(0x2, 0xa, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000000086dd00000000000001"], 0xfdef)

842.162289ms ago: executing program 4 (id=3657):
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x803, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x201000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket(0x1, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

778.095907ms ago: executing program 3 (id=3658):
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async)
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={@msf={0x1, 0x71, 0x7d}, 0x0, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="110900000000fcdbdf253630810008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000180)=0x9) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x2b}})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ed000000000000020100000001000000ecdcb4060af3056bfdac7061e00923bf8eebc7d18f4973f8f1a6904a3b6d28fd49c5ec285c5ec4af571ccea18776173b78e369cdeb73e6cd1f123e94a9e03a6702180bf0d85b5a4a0efa9d40414d0cd965ec61387c2c4de02398a29299794f597ff346885e9a089ba8d4318dda6e67ce32cb3f0f7a85fa8d329f3bc9959b3a00b188c90f0640d007", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20008880}}], 0x2, 0x4c054) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0xbd, <r12=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000540)="f0822217660fc5cc400f09f30f01f20f30b835010f00d0df6d0b660f38807c00640fc7a90090660f3a0fb69c6200", 0x2e}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
r13 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
pread64(r13, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) (async)
setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000380)={0x0, @multicast2, 0x4e24, 0x2, 'rr\x00', 0x30, 0x9, 0x4a}, 0x2c) (async)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) (async)
fsopen(&(0x7f0000000240)='ext2\x00', 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

639.009275ms ago: executing program 4 (id=3659):
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
r1 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1})
pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000c2c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xec4, 0xfffffffd, 0x14e, {0x0, 0x4, 0xfffffffffffffffe, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x2000, 0x0, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1001a}}, 0x50)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r11, 0xc048aec8, &(0x7f0000000240)={0x4, 0x0, @ioapic={0xf000, 0x1, 0x7, 0x8001, 0x0, [{0x0, 0x7f, 0xa, '\x00', 0x4}, {0x5, 0x1, 0xf6, '\x00', 0x2}, {0x75, 0x4, 0x3, '\x00', 0x76}, {0xc, 0x1, 0x4, '\x00', 0x96}, {0x1, 0x4, 0x4, '\x00', 0x77}, {0x4, 0x3, 0x6, '\x00', 0xf}, {0x2, 0x9, 0xe1, '\x00', 0x4}, {0x3, 0x3, 0xff, '\x00', 0x38}, {0x9, 0x6, 0x40, '\x00', 0x2}, {0xf, 0xf, 0xb, '\x00', 0xfb}, {0xff, 0x3, 0xa1, '\x00', 0x52}, {0x4, 0x1, 0x4, '\x00', 0x1}, {0x1, 0x0, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x7f, '\x00', 0x8}, {0x9f, 0x8, 0x7}, {0x40, 0xb, 0xa, '\x00', 0xb2}, {0x5, 0x80, 0x70, '\x00', 0x9}, {0x6, 0xff, 0x7, '\x00', 0x9}, {0x8, 0x8, 0xa, '\x00', 0x5}, {0x1, 0x9, 0x80, '\x00', 0x4a}, {0x6, 0x4, 0xff, '\x00', 0x6a}, {0x1, 0x7f, 0x8, '\x00', 0x80}, {0x42, 0x56, 0x4, '\x00', 0x6}, {0x7d, 0x5, 0x4, '\x00', 0x58}]}})
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB, @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r12, &(0x7f0000008340)={0x2020, 0x0, 0x0, <r13=>0x0, <r14=>0x0}, 0x2020)
syz_fuse_handle_req(r12, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, r13, r14, 0x8000, '\x00', 0x6, 0x181, 0x1, 0xffffffffffffffff, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}})
write$FUSE_ATTR(r0, &(0x7f0000000040)={0x78, 0x0, r4, {0x0, 0x4, 0x0, {0x3, 0x3, 0x7, 0x4, 0x1, 0x722, 0x4, 0x2, 0x3, 0x4000, 0xfffffffc, r8, r14, 0x8, 0x55}}}, 0x78)
write(r2, &(0x7f0000000800)='1', 0x1)
writev(r0, &(0x7f0000001d80)=[{&(0x7f0000000000)="0300", 0x2}], 0x1)
write$P9_RREADDIR(r0, &(0x7f0000000140)={0x4f, 0x29, 0x2, {0x23, [{{0x40, 0x3, 0x5}, 0x8, 0xc0, 0x2c, './my_sys/bus/pci/devices/0000:00:01.0/remove'}]}}, 0x4f)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0)

490.976179ms ago: executing program 3 (id=3660):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
read(r0, &(0x7f0000001600)=""/233, 0xe9)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x40000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x562)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

401.741763ms ago: executing program 3 (id=3661):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

113.798096ms ago: executing program 3 (id=3662):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x01', 0x4)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

97.208837ms ago: executing program 3 (id=3663):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0x01', 0x4)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

0s ago: executing program 3 (id=3664):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f7031203132382030", 0x45)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e0100323801000001")

kernel console output (not intermixed with test programs):

0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.081559][T16063] hsr_slave_0: entered promiscuous mode
[  280.085474][T16063] hsr_slave_1: entered promiscuous mode
[  280.090423][T16063] debugfs: 'hsr0' already exists in 'hsr'
[  280.093293][T16063] Cannot create hsr debugfs directory
[  280.165713][T16125] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2988'.
[  280.278877][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  280.290406][T16134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=16134 comm=syz.2.2993
[  280.367853][T16063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.372736][T16063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.426115][   T42] audit: type=1400 audit(2054367485.343:33977): avc:  denied  { ioctl } for  pid=16143 comm="syz.5.2997" path="socket:[68693]" dev="sockfs" ino=68693 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  280.475123][T16063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.479122][T16063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.576459][T16063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.580581][T16063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.716704][T16063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.720318][T16063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.981844][T16063] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  281.000519][T16063] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  281.005665][T16063] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  281.011377][T16063] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  281.016217][T16063] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  281.028150][T16063] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  281.035577][T16063] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  281.044091][T16063] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  281.049425][T16176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3000'.
[  281.054842][T16176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3000'.
[  281.065565][T16149] cgroup: fork rejected by pids controller in /syz5
[  281.100820][T16063] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.114351][T16063] 8021q: adding VLAN 0 to HW filter on device team0
[  281.119574][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.121806][ T7598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.135752][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.137938][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.258105][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  281.325411][ T5741] Bluetooth: hci3: command tx timeout
[  281.340658][T16211] loop6: detected capacity change from 0 to 128
[  281.689835][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.694750][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.707304][T16063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.734402][   T42] audit: type=1400 audit(2054367486.569:33978): avc:  denied  { map } for  pid=16263 comm="syz.5.3010" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  281.746110][   T42] audit: type=1400 audit(2054367486.569:33979): avc:  denied  { listen } for  pid=16263 comm="syz.5.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  281.753153][ T7600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.754266][T16265] fuse: Invalid rootmode
[  281.762244][T12489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.784707][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  281.937905][T16273] romfs: Unknown parameter 'addr'
[  281.944224][ T8490] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  281.952638][   T42] audit: type=1400 audit(2054367486.774:33980): avc:  denied  { listen } for  pid=16276 comm="syz.2.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  281.963740][   T42] audit: type=1400 audit(2054367486.774:33981): avc:  denied  { unmount } for  pid=8292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  281.967055][T16279] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[  281.983161][T16063] veth0_vlan: entered promiscuous mode
[  281.992573][T16063] veth1_vlan: entered promiscuous mode
[  282.030864][T16063] veth0_macvtap: entered promiscuous mode
[  282.033731][T16287] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  282.038240][T16063] veth1_macvtap: entered promiscuous mode
[  282.065611][T16063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.072864][T16063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.091706][   T42] audit: type=1400 audit(2054367486.896:33982): avc:  denied  { setattr } for  pid=16289 comm="syz.3.3018" name="NETLINK" dev="sockfs" ino=69866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  282.124449][T16290] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3017'.
[  282.174750][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  282.519263][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3023'.
[  282.726026][T16314] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  283.550160][ T5741] Bluetooth: hci3: command tx timeout
[  283.816531][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.882857][   T42] audit: type=1400 audit(2054367489.507:33983): avc:  denied  { shutdown } for  pid=16315 comm="syz.3.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  284.894520][ T7592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.900686][ T7592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.932591][T16319] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  284.934004][ T7595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.940490][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.942046][T16320] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4278190080.246), cmd(9)
[  284.943843][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.952650][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.955587][ T7595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.992241][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.061470][T16331] ufs: You didn't specify the type of your ufs filesystem
[  285.061470][T16331] 
[  285.061470][T16331] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  285.061470][T16331] 
[  285.061470][T16331] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  285.077235][T16331] ufs: failed to set blocksize
[  285.089196][T16332] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  285.107054][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.134684][T16335] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  285.240834][T16337] binder: 16336:16337 ioctl c0306201 2000000001c0 returned -14
[  285.244053][T16337] binder: 16336:16337 ioctl c0306201 200000000180 returned -14
[  285.247593][   T42] audit: type=1400 audit(2054367489.863:33984): avc:  denied  { accept } for  pid=16336 comm="syz.2.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  285.288092][T16344] xt_hashlimit: size too large, truncated to 1048576
[  285.289887][   T40] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  285.313488][T16348] bond0: (slave sit0): refused to change device type
[  285.352043][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'.
[  285.356756][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'.
[  285.451731][   T40] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  285.456136][   T40] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.462585][   T40] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.463329][T16356] IPVS: length: 120 != 24
[  285.467095][   T40] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  285.473705][   T40] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  285.475972][   T42] audit: type=1400 audit(2054367490.068:33985): avc:  denied  { setopt } for  pid=16354 comm="syz.3.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  285.479768][   T40] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  285.491192][   T40] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  285.494543][   T40] usb 9-1: Product: syz
[  285.496305][   T40] usb 9-1: Manufacturer: syz
[  285.503138][   T40] cdc_wdm 9-1:1.0: skipping garbage
[  285.507978][   T40] cdc_wdm 9-1:1.0: skipping garbage
[  285.514742][   T40] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  285.517701][   T40] cdc_wdm 9-1:1.0: Unknown control protocol
[  285.615680][T16360] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2348810240.255), cmd(9)
[  285.770102][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'.
[  285.770789][ T5741] Bluetooth: hci3: command tx timeout
[  285.857874][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.023220][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  286.191217][T16404] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3053'.
[  286.206405][T16404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16404 comm=syz.3.3053
[  286.212227][T16404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16404 comm=syz.3.3053
[  286.221669][   T40] usb 9-1: USB disconnect, device number 27
[  286.255436][T16407] Bluetooth: hci0: invalid len left 7, exp >= 114
[  287.497841][T16431] 9pnet_virtio: no channels available for device syz
[  287.908455][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.004207][ T5741] Bluetooth: hci3: command tx timeout
[  288.715610][T16441] CIFS: Attempting to mount //::1/share
[  289.377912][T16399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  289.494679][T16441] CIFS: VFS: cifs_mount failed w/return code = -512
[  289.548671][T16455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=16455 comm=syz.2.3069
[  289.652119][T16459] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3071'.
[  289.668934][T16461] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4278190080.9240575), cmd(9)
[  289.676982][T16459] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3071'.
[  289.696732][T16464] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  289.763166][   T42] audit: type=1400 audit(2054367494.083:33986): avc:  denied  { getopt } for  pid=16465 comm="syz.3.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  289.780945][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'.
[  289.787537][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'.
[  289.794730][T16471] Illegal XDP return value 4225847296 on prog  (id 192) dev N/A, expect packet loss!
[  289.801006][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'.
[  289.804723][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'.
[  289.815110][T16468] Invalid argument reading file caps for ./file0
[  289.874811][T16482] overlayfs: conflicting options: nfs_export=on,index=off
[  289.907300][T16482] lo speed is unknown, defaulting to 1000
[  289.966140][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.017150][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.025587][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.035467][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.102880][T16490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.105582][T16490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.109531][T16490] 9pnet_virtio: no channels available for device syz
[  290.405262][T16496] sctp: [Deprecated]: syz.5.3081 (pid 16496) Use of int in max_burst socket option deprecated.
[  290.405262][T16496] Use struct sctp_assoc_value instead
[  290.887108][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.895221][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.137401][T16500] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4278190080.16187391), cmd(9)
[  291.199594][T16503] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  292.967342][T16470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.068506][T16514] rdma_rxe: rxe_newlink: failed to add syz_tun
[  293.072528][T16514] rdma_rxe: rxe_newlink: failed to add syz_tun
[  293.099853][T16521] __nla_validate_parse: 2 callbacks suppressed
[  293.099867][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'.
[  293.167673][   T42] audit: type=1400 audit(2054367497.274:33987): avc:  denied  { lock } for  pid=16526 comm="syz.2.3092" path="socket:[70875]" dev="sockfs" ino=70875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  293.180682][ T5741] Bluetooth: Unknown BR/EDR signaling command 0x10
[  293.186053][ T5741] Bluetooth: Wrong link type (-22)
[  293.225841][   T42] audit: type=1400 audit(2054367497.321:33988): avc:  denied  { write } for  pid=16532 comm="syz.5.3095" name="configs" dev="configfs" ino=18457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  293.233977][   T42] audit: type=1400 audit(2054367497.321:33989): avc:  denied  { write } for  pid=16532 comm="syz.5.3095" name="functions" dev="configfs" ino=18456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  293.460750][T16549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3100'.
[  293.504498][T16549] KVM: debugfs: duplicate directory 16549-8
[  293.515968][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3100'.
[  293.622969][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.630435][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.639116][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.643027][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.649774][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.900559][   T42] audit: type=1400 audit(2054367497.948:33990): avc:  denied  { create } for  pid=16565 comm="syz.2.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  293.907767][   T42] audit: type=1400 audit(2054367497.948:33991): avc:  denied  { write } for  pid=16565 comm="syz.2.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  294.217824][ T7390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.223617][ T7390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.231581][T16581] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3109'.
[  294.242116][T16553] lo speed is unknown, defaulting to 1000
[  294.325445][   T42] audit: type=1400 audit(2054367498.350:33992): avc:  denied  { write } for  pid=16582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.344847][T16586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=16586 comm=syz.4.3110
[  294.419170][   T42] audit: type=1400 audit(2054367498.444:33993): avc:  denied  { write } for  pid=16589 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.429874][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'.
[  294.436144][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'.
[  294.443070][T16592] netlink: 'syz.4.3111': attribute type 6 has an invalid length.
[  294.555757][ T7390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.558899][ T7390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.661347][   T42] audit: type=1400 audit(2054367498.659:33994): avc:  denied  { write } for  pid=16596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.721942][T16600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3112'.
[  294.729339][   T42] audit: type=1400 audit(2054367498.734:33995): avc:  denied  { write } for  pid=16602 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.781263][T16601] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3112'.
[  294.805028][   T42] audit: type=1400 audit(2054367498.799:33996): avc:  denied  { write } for  pid=16604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.818679][ T7390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.822149][ T7390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.956583][ T7390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.959964][ T7390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.025355][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.029177][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.058180][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.076314][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.101864][T16627] max out of range
[  295.155498][T16627] program syz.2.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.236312][T16620] bond0: Error: CAN devices cannot be enslaved
[  295.361814][T16553] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.367500][T16553] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.370207][T16553] bridge_slave_0: entered allmulticast mode
[  295.374156][T16553] bridge_slave_0: entered promiscuous mode
[  295.429134][T16553] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.435515][T16553] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.438617][T16553] bridge_slave_1: entered allmulticast mode
[  295.442941][T16553] bridge_slave_1: entered promiscuous mode
[  295.446830][T16651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=16651 comm=syz.2.3118
[  295.494441][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'.
[  295.501131][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3119'.
[  295.585332][T16661] 9p: Bad value for 'rfdno'
[  295.706176][ T7390] bond0 (unregistering): Released all slaves
[  295.713451][ T7390] bond1 (unregistering): Released all slaves
[  295.721683][ T7390] bond2 (unregistering): (slave bond3): Releasing backup interface
[  295.724976][ T7390] bond2 (unregistering): Released all slaves
[  295.734889][ T7390] bond3 (unregistering): Released all slaves
[  295.773948][T16553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.781379][T16553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.808341][T16553] team0: Port device team_slave_0 added
[  295.813090][T16553] team0: Port device team_slave_1 added
[  295.858731][ T5741] Bluetooth: hci1: command tx timeout
[  295.929236][T16553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.932244][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.944485][T16553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.950495][T16553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.953375][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.964597][T16553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.976414][ T5818] netdevsim netdevsim3 eth28: set [1, 0] type 2 family 0 port 6081 - 0
[  295.981064][ T5818] netdevsim netdevsim3 eth26: set [1, 0] type 2 family 0 port 6081 - 0
[  296.045198][T16553] hsr_slave_0: entered promiscuous mode
[  296.048246][T16553] hsr_slave_1: entered promiscuous mode
[  296.051524][T16553] debugfs: 'hsr0' already exists in 'hsr'
[  296.053771][T16553] Cannot create hsr debugfs directory
[  296.094498][T16669] vcan0: tx address claim with dest, not broadcast
[  296.100191][T16678] veth0: entered promiscuous mode
[  296.115368][ T7592] net_ratelimit: 9 callbacks suppressed
[  296.115384][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.157851][ T5791] netdevsim netdevsim3 eth29: set [1, 0] type 2 family 0 port 6081 - 0
[  296.193979][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  296.283058][T16553] netdevsim netdevsim3 eth29 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.417337][T16691] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  296.440338][T16698] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  296.447907][ T5451] 8021q: adding VLAN 0 to HW filter on device eth26
[  296.452041][ T5818] netdevsim netdevsim3 eth27: set [1, 0] type 2 family 0 port 6081 - 0
[  296.599491][T16553] netdevsim netdevsim3 eth28 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.687180][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.693217][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.722549][ T7390] hsr_slave_0: left promiscuous mode
[  296.726353][ T7390] hsr_slave_1: left promiscuous mode
[  296.733456][ T7390] veth1_macvtap: left promiscuous mode
[  296.738598][ T7390] veth0_macvtap: left promiscuous mode
[  296.740755][ T7390] veth1_vlan: left promiscuous mode
[  296.742738][ T7390] veth0_vlan: left promiscuous mode
[  296.990472][T16721] e1000e 0000:00:02.0 eth1: S0ix is not supported on this device
[  296.997935][ T5451] 8021q: adding VLAN 0 to HW filter on device eth27
[  297.048210][T16553] netdevsim netdevsim3 eth27 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.050087][T16735] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[  297.090611][ T7595] Bluetooth: hci0: Frame reassembly failed (-84)
[  297.165240][T16553] netdevsim netdevsim3 eth26 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.250331][T16742] input: syz1 as /devices/virtual/input/input42
[  297.375443][T16749] io-wq is not configured for unbound workers
[  297.455768][T16553] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  297.473109][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  297.483769][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.487253][T16553] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  297.488080][ T7390] IPVS: stop unused estimator thread 0...
[  297.497808][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  297.504743][T16553] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  297.526870][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  297.535327][T16553] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  297.547779][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.605367][T16553] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.614367][T16553] 8021q: adding VLAN 0 to HW filter on device team0
[  297.624662][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.627783][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.646621][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.648928][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.744983][ T5754] Bluetooth: Unknown BR/EDR signaling command 0x10
[  297.747149][ T5754] Bluetooth: Wrong link type (-22)
[  297.914690][T16553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.936102][T16553] veth0_vlan: entered promiscuous mode
[  297.941498][T16553] veth1_vlan: entered promiscuous mode
[  297.956669][T16553] veth0_macvtap: entered promiscuous mode
[  297.960629][T16553] veth1_macvtap: entered promiscuous mode
[  297.989332][T16553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.995111][T16553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.029150][ T7390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.052998][ T7390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.081328][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.093149][ T5754] Bluetooth: hci1: command tx timeout
[  298.099785][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.105148][   T40] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  298.138039][ T7580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.142667][ T7580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.168910][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.173653][ T7592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.177981][ T7592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.259029][T16793] overlayfs: failed to resolve './file0': -2
[  298.273972][   T40] usb 10-1: Using ep0 maxpacket: 32
[  298.277281][   T40] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  298.283085][   T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.290182][   T40] usb 10-1: config 0 descriptor??
[  298.299211][   T40] as10x_usb: device has been detected
[  298.307162][   T40] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  298.334102][   T40] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  298.342794][   T40] as10x_usb: error during firmware upload part1
[  298.353982][   T40] Registered device nBox DVB-T Dongle
[  298.432369][T16800] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  298.523559][ T1352] usb 10-1: USB disconnect, device number 9
[  298.538173][ T1352] Unregistered device nBox DVB-T Dongle
[  298.540424][ T1352] as10x_usb: device has been disconnected
[  298.572466][T16806] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  298.896441][T16809] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  298.930589][   T42] kauditd_printk_skb: 23 callbacks suppressed
[  298.930602][   T42] audit: type=1400 audit(2054367502.664:34020): avc:  denied  { mounton } for  pid=16810 comm="syz.3.3155" path="/dev/virtual_nci" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  299.008695][T16820] 9pnet_virtio: no channels available for device syz
[  299.013910][T16820] __nla_validate_parse: 4 callbacks suppressed
[  299.013921][T16820] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3156'.
[  299.019763][T16820] 9pnet_virtio: no channels available for device syz
[  299.067873][T16822] overlayfs: missing 'lowerdir'
[  299.141598][T16824] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[  299.147258][   T42] audit: type=1400 audit(2054367502.861:34021): avc:  denied  { relabelto } for  pid=16823 comm="syz.3.3158" name="7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.157822][   T42] audit: type=1400 audit(2054367502.861:34022): avc:  denied  { associate } for  pid=16823 comm="syz.3.3158" name="7" dev="tmpfs" ino=59 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.173462][   T42] audit: type=1400 audit(2054367502.889:34023): avc:  denied  { write } for  pid=16553 comm="syz-executor" name="7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.183860][   T42] audit: type=1400 audit(2054367502.889:34024): avc:  denied  { remove_name } for  pid=16553 comm="syz-executor" name="binderfs" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.197062][   T42] audit: type=1400 audit(2054367502.889:34025): avc:  denied  { write } for  pid=16553 comm="syz-executor" name="7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.206492][ T5741] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  299.208340][   T42] audit: type=1400 audit(2054367502.889:34026): avc:  denied  { write } for  pid=16553 comm="syz-executor" name="7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.219029][   T42] audit: type=1400 audit(2054367502.889:34027): avc:  denied  { write } for  pid=16553 comm="syz-executor" name="7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.228878][   T42] audit: type=1400 audit(2054367502.889:34028): avc:  denied  { rmdir } for  pid=16553 comm="syz-executor" name="7" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  299.340945][T16833] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock
[  299.388100][   T42] audit: type=1400 audit(2054367503.095:34029): avc:  granted  { setsecparam } for  pid=16834 comm="syz.4.3162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  299.454255][T16846] netlink: 'syz.5.3167': attribute type 1 has an invalid length.
[  299.482675][T16846] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.543059][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.606092][T16857] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  299.674659][T16862] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  299.678843][T16862] device-mapper: ioctl: error adding target to table
[  299.940590][  T847] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  300.111457][  T847] usb 7-1: Using ep0 maxpacket: 32
[  300.115657][  T847] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  300.119542][  T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.126344][  T847] usb 7-1: config 0 descriptor??
[  300.132052][  T847] as10x_usb: device has been detected
[  300.134807][  T847] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  300.146715][  T847] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  300.154344][  T847] as10x_usb: error during firmware upload part1
[  300.156662][  T847] Registered device nBox DVB-T Dongle
[  300.306115][ T5741] Bluetooth: hci1: command tx timeout
[  300.355484][  T847] usb 7-1: USB disconnect, device number 21
[  300.371845][  T847] Unregistered device nBox DVB-T Dongle
[  300.374396][  T847] as10x_usb: device has been disconnected
[  300.692273][T16888] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  300.695600][T16888] device-mapper: ioctl: error adding target to table
[  301.516068][T16931] tmpfs: Bad value for 'mpol'
[  301.530711][T16929] overlayfs: statfs failed on './file0'
[  301.585949][T16940] loop2: detected capacity change from 0 to 7
[  301.604204][T16940] Dev loop2: unable to read RDB block 7
[  301.606567][T16940]  loop2: AHDI p1 p2 p3
[  301.608559][T16940] loop2: partition table partially beyond EOD, truncated
[  301.611715][T16940] loop2: p1 start 1601398130 is beyond EOD, truncated
[  301.614649][T16940] loop2: p2 start 1702059890 is beyond EOD, truncated
[  301.685332][T16951] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  301.688580][T16951] device-mapper: ioctl: error adding target to table
[  301.885582][   T40] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  302.067479][   T40] usb 10-1: Using ep0 maxpacket: 32
[  302.071544][   T40] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  302.075508][   T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.082604][   T40] usb 10-1: config 0 descriptor??
[  302.092553][   T40] as10x_usb: device has been detected
[  302.095476][   T40] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  302.104509][   T40] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  302.112871][   T40] as10x_usb: error during firmware upload part1
[  302.115935][   T40] Registered device nBox DVB-T Dongle
[  302.270778][ T1352] net_ratelimit: 3 callbacks suppressed
[  302.270791][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.277095][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.316644][ T1352] usb 10-1: USB disconnect, device number 10
[  302.334898][ T1352] Unregistered device nBox DVB-T Dongle
[  302.335666][ T1352] as10x_usb: device has been disconnected
[  302.531608][T16996] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  302.537171][ T5741] Bluetooth: hci1: command tx timeout
[  302.727251][T17004] binder: 17003:17004 ioctl c018620c 2000000005c0 returned -1
[  302.732199][T17004] netlink: 'syz.3.3219': attribute type 12 has an invalid length.
[  302.835166][T17013] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  302.839226][T17013] device-mapper: ioctl: error adding target to table
[  302.874086][   T40] IPVS: starting estimator thread 0...
[  302.880899][T17017] xfrm1: entered allmulticast mode
[  302.966455][T17018] IPVS: using max 35 ests per chain, 84000 per kthread
[  303.142056][T17036] 9pnet_virtio: no channels available for device syz
[  303.153704][T17036] devpts: Bad value for 'max'
[  303.161492][T17037] 9pnet_virtio: no channels available for device syz
[  303.255456][T17045] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  303.258939][T17045] device-mapper: ioctl: error adding target to table
[  303.545051][T17056] nbd3: detected capacity change from 0 to 63
[  303.565417][T17058] block nbd3: NBD_DISCONNECT
[  303.584114][T17058] block nbd3: Disconnected due to user request.
[  303.600462][T17058] block nbd3: shutting down sockets
[  303.609662][ T5111] blk_print_req_error: 25 callbacks suppressed
[  303.609675][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.616948][ T5111] buffer_io_error: 25 callbacks suppressed
[  303.616962][ T5111] Buffer I/O error on dev nbd3, logical block 0, async page read
[  303.622983][ T5111] Buffer I/O error on dev nbd3, logical block 1, async page read
[  303.625500][ T5111] Buffer I/O error on dev nbd3, logical block 2, async page read
[  303.634841][ T5111] Buffer I/O error on dev nbd3, logical block 3, async page read
[  303.641586][ T1306] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.646522][ T1306] Buffer I/O error on dev nbd3, logical block 0, async page read
[  303.651535][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.654263][ T1306] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  303.657107][ T1306] Buffer I/O error on dev nbd3, logical block 1, async page read
[  303.659702][ T1306] Buffer I/O error on dev nbd3, logical block 2, async page read
[  303.663075][ T1306] Buffer I/O error on dev nbd3, logical block 3, async page read
[  303.668384][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.671716][ T5111] Buffer I/O error on dev nbd3, logical block 0, async page read
[  303.674609][ T5111] Buffer I/O error on dev nbd3, logical block 1, async page read
[  303.682262][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.684627][T17073] netlink: 'syz.3.3240': attribute type 83 has an invalid length.
[  303.688939][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.693108][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.697037][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.700459][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  303.704026][ T6357] ldm_validate_partition_table(): Disk read failed.
[  303.707288][ T5111] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  303.717546][ T6357] Dev nbd3: unable to read RDB block 0
[  303.720800][ T6357]  nbd3: unable to read partition table
[  303.730635][T17076] FAULT_INJECTION: forcing a failure.
[  303.730635][T17076] name failslab, interval 1, probability 0, space 0, times 0
[  303.730946][ T6357] ldm_validate_partition_table(): Disk read failed.
[  303.738660][ T6357] Dev nbd3: unable to read RDB block 0
[  303.741843][ T6357]  nbd3: unable to read partition table
[  303.744709][T17076] CPU: 3 UID: 0 PID: 17076 Comm: syz.2.3237 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.744738][T17076] Tainted: [L]=SOFTLOCKUP
[  303.744745][T17076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  303.744754][T17076] Call Trace:
[  303.744778][T17076]  <TASK>
[  303.744785][T17076]  dump_stack_lvl+0x100/0x190
[  303.744862][T17076]  should_fail_ex.cold+0x5/0xa
[  303.744905][T17076]  should_failslab+0xc2/0x120
[  303.744952][T17076]  __kmalloc_flags_noprof+0x122/0x8b0
[  303.744993][T17076]  ? alloc_slab_obj_exts+0x5a/0x160
[  303.745020][T17076]  alloc_slab_obj_exts+0x5a/0x160
[  303.745038][T17076]  __memcg_slab_post_alloc_hook+0x3d4/0x1160
[  303.745080][T17076]  ? kasan_save_track+0x14/0x30
[  303.745104][T17076]  kmem_cache_alloc_noprof+0x587/0x6a0
[  303.745125][T17076]  ? alloc_buffer_head+0x21/0x140
[  303.745170][T17076]  alloc_buffer_head+0x21/0x140
[  303.745190][T17076]  folio_alloc_buffers+0x194/0x8e0
[  303.745219][T17076]  create_empty_buffers+0x3a/0x660
[  303.745246][T17076]  ? find_held_lock+0x2b/0x80
[  303.745288][T17076]  folio_create_buffers+0x13b/0x1a0
[  303.745317][T17076]  __block_write_full_folio+0xed/0xfb0
[  303.745345][T17076]  ? __pfx_blkdev_get_block+0x10/0x10
[  303.745410][T17076]  block_write_full_folio+0x3b5/0x4e0
[  303.745429][T17076]  ? __pfx_blkdev_get_block+0x10/0x10
[  303.745456][T17076]  blkdev_writepages+0xc7/0x150
[  303.745483][T17076]  ? __pfx_blkdev_writepages+0x10/0x10
[  303.745507][T17076]  ? __lock_acquire+0x49f/0x1a40
[  303.745538][T17076]  ? __pfx_blkdev_writepages+0x10/0x10
[  303.745565][T17076]  do_writepages+0x278/0x600
[  303.745601][T17076]  ? __pfx_do_writepages+0x10/0x10
[  303.745621][T17076]  ? do_raw_spin_unlock+0x145/0x1e0
[  303.745646][T17076]  ? _raw_spin_unlock+0x28/0x50
[  303.745674][T17076]  filemap_writeback+0x22d/0x2e0
[  303.745707][T17076]  ? __pfx_filemap_writeback+0x10/0x10
[  303.745754][T17076]  ? find_held_lock+0x2b/0x80
[  303.745769][T17076]  ? ksys_write+0x190/0x250
[  303.745805][T17076]  ? ksys_write+0x190/0x250
[  303.745827][T17076]  generic_fadvise+0x595/0x760
[  303.745856][T17076]  ? __pfx_generic_fadvise+0x10/0x10
[  303.745878][T17076]  ? __fget_files+0x215/0x3d0
[  303.745910][T17076]  ? __fget_files+0x21f/0x3d0
[  303.745935][T17076]  ksys_fadvise64_64+0xf4/0x130
[  303.745961][T17076]  __x64_sys_fadvise64+0x96/0x100
[  303.745985][T17076]  ? lockdep_hardirqs_on+0x78/0x100
[  303.746003][T17076]  do_syscall_64+0x115/0x870
[  303.746028][T17076]  ? clear_bhb_loop+0x40/0x90
[  303.746050][T17076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.746066][T17076] RIP: 0033:0x7fce47d9e0d9
[  303.746080][T17076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.746095][T17076] RSP: 002b:00007fce48c60028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  303.746124][T17076] RAX: ffffffffffffffda RBX: 00007fce48026180 RCX: 00007fce47d9e0d9
[  303.746134][T17076] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000005
[  303.746144][T17076] RBP: 00007fce48c60090 R08: 0000000000000000 R09: 0000000000000000
[  303.746154][T17076] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  303.746165][T17076] R13: 00007fce48026218 R14: 00007fce48026180 R15: 00007fff71cb9b48
[  303.746189][T17076]  </TASK>
[  303.799359][T17078] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  303.872556][T17078] device-mapper: ioctl: error adding target to table
[  303.981050][T17086] befs: (md0): unable to read superblock
[  304.049805][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  304.107157][T17101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.110610][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.154612][T17106] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  304.333090][T10091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.376603][T17111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17111 comm=syz.3.3253
[  304.415355][T17112] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  304.418657][T17112] device-mapper: ioctl: error adding target to table
[  304.504963][T17117] netlink: 'syz.4.3250': attribute type 7 has an invalid length.
[  304.538356][T17117] erofs (device loop4): cannot find valid erofs superblock
[  304.783450][T12489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.788122][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.796805][T12489] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  305.002424][T17144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17144 comm=syz.3.3262
[  305.017803][   T40] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  305.079302][T12489] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  305.176848][   T40] usb 10-1: Using ep0 maxpacket: 32
[  305.182229][   T40] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  305.185055][   T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.190628][   T40] usb 10-1: config 0 descriptor??
[  305.199954][   T40] as10x_usb: device has been detected
[  305.201997][   T40] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  305.212323][T17150] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  305.215289][T17150] device-mapper: ioctl: error adding target to table
[  305.224197][   T40] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  305.235063][   T40] as10x_usb: error during firmware upload part1
[  305.237236][   T40] Registered device nBox DVB-T Dongle
[  305.423085][   T40] usb 10-1: USB disconnect, device number 11
[  305.441058][   T40] Unregistered device nBox DVB-T Dongle
[  305.442443][   T40] as10x_usb: device has been disconnected
[  305.458124][T17156] FAULT_INJECTION: forcing a failure.
[  305.458124][T17156] name failslab, interval 1, probability 0, space 0, times 0
[  305.463179][T17156] CPU: 2 UID: 0 PID: 17156 Comm: syz.3.3267 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  305.463208][T17156] Tainted: [L]=SOFTLOCKUP
[  305.463215][T17156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  305.463224][T17156] Call Trace:
[  305.463231][T17156]  <TASK>
[  305.463237][T17156]  dump_stack_lvl+0x100/0x190
[  305.463269][T17156]  should_fail_ex.cold+0x5/0xa
[  305.463290][T17156]  should_failslab+0xc2/0x120
[  305.463317][T17156]  __kmalloc_flags_noprof+0x122/0x8b0
[  305.463347][T17156]  ? alloc_slab_obj_exts+0x5a/0x160
[  305.463372][T17156]  alloc_slab_obj_exts+0x5a/0x160
[  305.463394][T17156]  __memcg_slab_post_alloc_hook+0x3d4/0x1160
[  305.463428][T17156]  ? kasan_save_track+0x14/0x30
[  305.463449][T17156]  kmem_cache_alloc_noprof+0x587/0x6a0
[  305.463468][T17156]  ? alloc_buffer_head+0x21/0x140
[  305.463494][T17156]  alloc_buffer_head+0x21/0x140
[  305.463518][T17156]  folio_alloc_buffers+0x194/0x8e0
[  305.463550][T17156]  create_empty_buffers+0x3a/0x660
[  305.463578][T17156]  ? find_held_lock+0x2b/0x80
[  305.463600][T17156]  folio_create_buffers+0x13b/0x1a0
[  305.463627][T17156]  __block_write_full_folio+0xed/0xfb0
[  305.463655][T17156]  ? __pfx_blkdev_get_block+0x10/0x10
[  305.463687][T17156]  block_write_full_folio+0x3b5/0x4e0
[  305.463707][T17156]  ? __pfx_blkdev_get_block+0x10/0x10
[  305.463735][T17156]  blkdev_writepages+0xc7/0x150
[  305.463760][T17156]  ? __pfx_blkdev_writepages+0x10/0x10
[  305.463782][T17156]  ? __lock_acquire+0x49f/0x1a40
[  305.463811][T17156]  ? __pfx_blkdev_writepages+0x10/0x10
[  305.463836][T17156]  do_writepages+0x278/0x600
[  305.463857][T17156]  ? __pfx_do_writepages+0x10/0x10
[  305.463878][T17156]  ? do_raw_spin_unlock+0x145/0x1e0
[  305.463904][T17156]  ? _raw_spin_unlock+0x28/0x50
[  305.463925][T17156]  filemap_writeback+0x22d/0x2e0
[  305.463951][T17156]  ? __pfx_filemap_writeback+0x10/0x10
[  305.464003][T17156]  ? find_held_lock+0x2b/0x80
[  305.464018][T17156]  ? ksys_write+0x190/0x250
[  305.464033][T17156]  ? ksys_write+0x190/0x250
[  305.464051][T17156]  generic_fadvise+0x595/0x760
[  305.464077][T17156]  ? __pfx_generic_fadvise+0x10/0x10
[  305.464112][T17156]  ? __fget_files+0x215/0x3d0
[  305.464130][T17156]  ? __fget_files+0x21f/0x3d0
[  305.464150][T17156]  ksys_fadvise64_64+0xf4/0x130
[  305.464181][T17156]  __x64_sys_fadvise64+0x96/0x100
[  305.464209][T17156]  ? lockdep_hardirqs_on+0x78/0x100
[  305.464230][T17156]  do_syscall_64+0x115/0x870
[  305.464251][T17156]  ? clear_bhb_loop+0x40/0x90
[  305.464272][T17156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.464289][T17156] RIP: 0033:0x7fc9da59e0d9
[  305.464306][T17156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.464320][T17156] RSP: 002b:00007fc9db4a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  305.464336][T17156] RAX: ffffffffffffffda RBX: 00007fc9da826090 RCX: 00007fc9da59e0d9
[  305.464346][T17156] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000005
[  305.464358][T17156] RBP: 00007fc9db4a2090 R08: 0000000000000000 R09: 0000000000000000
[  305.464370][T17156] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  305.464379][T17156] R13: 00007fc9da826128 R14: 00007fc9da826090 R15: 00007ffc03fc5c08
[  305.464402][T17156]  </TASK>
[  305.635433][T12489] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  305.862125][T17132] ceph: No mds server is up or the cluster is laggy
[  306.001672][T17173] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  306.083106][T17182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17182 comm=syz.4.3276
[  306.131343][T17184] netlink: 'syz.4.3277': attribute type 1 has an invalid length.
[  306.138525][T17184] erspan1: entered allmulticast mode
[  306.338458][T17194] FAULT_INJECTION: forcing a failure.
[  306.338458][T17194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.345359][T17194] CPU: 1 UID: 0 PID: 17194 Comm: syz.5.3281 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  306.345379][T17194] Tainted: [L]=SOFTLOCKUP
[  306.345383][T17194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  306.345408][T17194] Call Trace:
[  306.345414][T17194]  <TASK>
[  306.345419][T17194]  dump_stack_lvl+0x100/0x190
[  306.345440][T17194]  should_fail_ex.cold+0x5/0xa
[  306.345457][T17194]  _copy_from_user+0x2e/0xd0
[  306.345485][T17194]  copy_msghdr_from_user+0x9f/0x4c0
[  306.345504][T17194]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  306.345531][T17194]  ___sys_sendmsg+0x106/0x1e0
[  306.345549][T17194]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.345566][T17194]  ? __lock_acquire+0x49f/0x1a40
[  306.345590][T17194]  ? get_pid_task+0x106/0x250
[  306.345646][T17194]  __sys_sendmsg+0x160/0x210
[  306.345672][T17194]  ? __pfx___sys_sendmsg+0x10/0x10
[  306.345697][T17194]  do_syscall_64+0x115/0x870
[  306.345712][T17194]  ? clear_bhb_loop+0x40/0x90
[  306.345727][T17194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.345739][T17194] RIP: 0033:0x7f5ed619e0d9
[  306.345750][T17194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.345762][T17194] RSP: 002b:00007f5ed7140028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.345774][T17194] RAX: ffffffffffffffda RBX: 00007f5ed6425fa0 RCX: 00007f5ed619e0d9
[  306.345782][T17194] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  306.345789][T17194] RBP: 00007f5ed7140090 R08: 0000000000000000 R09: 0000000000000000
[  306.345796][T17194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.345803][T17194] R13: 00007f5ed6426038 R14: 00007f5ed6425fa0 R15: 00007ffe62f91a38
[  306.345817][T17194]  </TASK>
[  306.450560][   T42] kauditd_printk_skb: 11 callbacks suppressed
[  306.450578][   T42] audit: type=1400 audit(2054367509.701:34041): avc:  denied  { listen } for  pid=17195 comm="syz.3.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  306.462090][T17196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3283'.
[  306.583206][   T42] audit: type=1400 audit(2054367509.823:34042): avc:  denied  { write } for  pid=17204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  306.597576][T17209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17209 comm=syz.5.3285
[  306.647252][   T42] audit: type=1400 audit(2054367509.879:34043): avc:  denied  { write } for  pid=17213 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  306.747199][   T42] audit: type=1400 audit(2054367509.973:34044): avc:  denied  { write } for  pid=17222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  306.801761][T17231] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  306.810141][T17231] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  306.813377][T17231] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  306.815811][   T42] audit: type=1400 audit(2054367510.038:34045): avc:  denied  { write } for  pid=17239 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  306.826781][T17231] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  306.831239][T17231] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  306.834723][T17231] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  306.842342][T17231] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  306.849482][T17231] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  306.851993][T17231] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  306.863560][T17231] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  306.906575][T17244] FAULT_INJECTION: forcing a failure.
[  306.906575][T17244] name failslab, interval 1, probability 0, space 0, times 0
[  306.917039][ T8472] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  306.920395][T17244] CPU: 3 UID: 0 PID: 17244 Comm: syz.3.3293 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  306.920421][T17244] Tainted: [L]=SOFTLOCKUP
[  306.920427][T17244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  306.920437][T17244] Call Trace:
[  306.920444][T17244]  <TASK>
[  306.920451][T17244]  dump_stack_lvl+0x100/0x190
[  306.920497][T17244]  should_fail_ex.cold+0x5/0xa
[  306.920519][T17244]  should_failslab+0xc2/0x120
[  306.920541][T17244]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  306.920561][T17244]  ? __alloc_skb+0x5b7/0x710
[  306.920580][T17244]  ? __alloc_skb+0x140/0x710
[  306.920602][T17244]  __alloc_skb+0x140/0x710
[  306.920619][T17244]  ? __alloc_skb+0x5b7/0x710
[  306.920637][T17244]  ? __pfx___alloc_skb+0x10/0x10
[  306.920661][T17244]  netlink_alloc_large_skb+0x69/0x150
[  306.920682][T17244]  netlink_sendmsg+0x680/0xda0
[  306.920702][T17244]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.920722][T17244]  ? selinux_socket_sendmsg+0x198/0x2f0
[  306.920763][T17244]  ____sys_sendmsg+0xa4d/0xbe0
[  306.920786][T17244]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.920804][T17244]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.920838][T17244]  ___sys_sendmsg+0x190/0x1e0
[  306.920855][T17244]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.920870][T17244]  ? __lock_acquire+0x49f/0x1a40
[  306.920891][T17244]  ? get_pid_task+0x106/0x250
[  306.920928][T17244]  __sys_sendmsg+0x160/0x210
[  306.920949][T17244]  ? __pfx___sys_sendmsg+0x10/0x10
[  306.920985][T17244]  do_syscall_64+0x115/0x870
[  306.921005][T17244]  ? clear_bhb_loop+0x40/0x90
[  306.921025][T17244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.921042][T17244] RIP: 0033:0x7fc9da59e0d9
[  306.921056][T17244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.921071][T17244] RSP: 002b:00007fc9db4c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.921088][T17244] RAX: ffffffffffffffda RBX: 00007fc9da825fa0 RCX: 00007fc9da59e0d9
[  306.921099][T17244] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  306.921109][T17244] RBP: 00007fc9db4c3090 R08: 0000000000000000 R09: 0000000000000000
[  306.921118][T17244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.921128][T17244] R13: 00007fc9da826038 R14: 00007fc9da825fa0 R15: 00007ffc03fc5c08
[  306.921148][T17244]  </TASK>
[  307.005600][   T42] audit: type=1400 audit(2054367510.216:34046): avc:  denied  { write } for  pid=17242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  307.028724][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.035849][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.041364][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.044431][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.049219][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.093547][   T42] audit: type=1400 audit(2054367510.300:34047): avc:  denied  { write } for  pid=17253 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  307.100352][ T8472] usb 10-1: Using ep0 maxpacket: 32
[  307.104301][ T8472] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  307.112032][ T8472] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.118136][ T8472] usb 10-1: config 0 descriptor??
[  307.137762][ T8472] as10x_usb: device has been detected
[  307.139909][ T8472] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  307.162689][ T8472] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  307.180896][ T8472] as10x_usb: error during firmware upload part1
[  307.219075][ T8472] Registered device nBox DVB-T Dongle
[  307.242813][T17262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17262 comm=syz.4.3296
[  307.345647][T17215] tmpfs: Bad value for 'mpol'
[  307.360856][ T8490] usb 10-1: USB disconnect, device number 12
[  307.376445][ T8490] Unregistered device nBox DVB-T Dongle
[  307.377784][ T8490] as10x_usb: device has been disconnected
[  307.432164][T17247] lo speed is unknown, defaulting to 1000
[  307.575152][T17273] netlink: 'syz.4.3300': attribute type 2 has an invalid length.
[  307.619134][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  307.669810][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  307.717485][T17281] net_ratelimit: 7 callbacks suppressed
[  307.717499][T17281] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  307.936721][T17293] IPv6: NLM_F_CREATE should be specified when creating new route
[  307.939381][T17293] netlink: 'syz.3.3307': attribute type 1 has an invalid length.
[  307.967346][T17298] FAULT_INJECTION: forcing a failure.
[  307.967346][T17298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.971678][T17298] CPU: 0 UID: 0 PID: 17298 Comm: syz.3.3308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  307.971697][T17298] Tainted: [L]=SOFTLOCKUP
[  307.971701][T17298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  307.971708][T17298] Call Trace:
[  307.971713][T17298]  <TASK>
[  307.971718][T17298]  dump_stack_lvl+0x100/0x190
[  307.971738][T17298]  should_fail_ex.cold+0x5/0xa
[  307.971753][T17298]  _copy_from_iter+0x1f4/0x1690
[  307.971772][T17298]  ? __asan_memset+0x23/0x50
[  307.971786][T17298]  ? __pfx__copy_from_iter+0x10/0x10
[  307.971801][T17298]  ? __pfx___alloc_skb+0x10/0x10
[  307.971820][T17298]  netlink_sendmsg+0x808/0xda0
[  307.971835][T17298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.971848][T17298]  ? selinux_socket_sendmsg+0x198/0x2f0
[  307.971867][T17298]  ____sys_sendmsg+0xa4d/0xbe0
[  307.971884][T17298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.971897][T17298]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.971919][T17298]  ___sys_sendmsg+0x190/0x1e0
[  307.971932][T17298]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.971942][T17298]  ? __lock_acquire+0x49f/0x1a40
[  307.971958][T17298]  ? get_pid_task+0x106/0x250
[  307.971996][T17298]  __sys_sendmsg+0x160/0x210
[  307.972019][T17298]  ? __pfx___sys_sendmsg+0x10/0x10
[  307.972045][T17298]  do_syscall_64+0x115/0x870
[  307.972062][T17298]  ? clear_bhb_loop+0x40/0x90
[  307.972076][T17298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.972087][T17298] RIP: 0033:0x7fc9da59e0d9
[  307.972098][T17298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.972109][T17298] RSP: 002b:00007fc9db4c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.972121][T17298] RAX: ffffffffffffffda RBX: 00007fc9da825fa0 RCX: 00007fc9da59e0d9
[  307.972128][T17298] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  307.972134][T17298] RBP: 00007fc9db4c3090 R08: 0000000000000000 R09: 0000000000000000
[  307.972141][T17298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.972147][T17298] R13: 00007fc9da826038 R14: 00007fc9da825fa0 R15: 00007ffc03fc5c08
[  307.972160][T17298]  </TASK>
[  307.980762][T17247] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.041173][T17247] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.044232][T17247] bridge_slave_0: entered allmulticast mode
[  308.047993][T17247] bridge_slave_0: entered promiscuous mode
[  308.055184][T17247] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.055382][T17302] CUSE: info not properly terminated
[  308.057492][T17247] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.060773][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  308.061983][T17247] bridge_slave_1: entered allmulticast mode
[  308.067502][T17247] bridge_slave_1: entered promiscuous mode
[  308.100452][T17247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.121829][T17307] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode
[  308.128557][T17311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17311 comm=syz.4.3313
[  308.132887][T17247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.201302][T17247] team0: Port device team_slave_0 added
[  308.205003][T17247] team0: Port device team_slave_1 added
[  308.224296][T17247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.226568][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.236815][T17247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.264009][T17317] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3316'.
[  308.276613][T17247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.281363][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.290178][T17247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.316765][T17319] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  308.320412][T17319] device-mapper: ioctl: error adding target to table
[  308.350832][T17247] hsr_slave_0: entered promiscuous mode
[  308.354634][T17247] hsr_slave_1: entered promiscuous mode
[  308.357703][T17247] debugfs: 'hsr0' already exists in 'hsr'
[  308.359909][T17247] Cannot create hsr debugfs directory
[  308.421559][T17326] syzkaller1: entered promiscuous mode
[  308.423449][T17326] syzkaller1: entered allmulticast mode
[  308.426561][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.728761][   T42] audit: type=1400 audit(2054367511.826:34048): avc:  denied  { read } for  pid=17331 comm="syz.3.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  308.757922][T17247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.797152][   T42] audit: type=1400 audit(2054367511.891:34049): avc:  denied  { getopt } for  pid=17331 comm="syz.3.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  308.797427][T17332] binder: 17331:17332 ioctl c0306201 2000000001c0 returned -14
[  308.855720][T17340] Bluetooth: MGMT ver 1.23
[  308.947501][T17247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.008931][T17345] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  309.023900][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[  309.023944][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout
[  309.026525][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  309.064025][T17347] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  309.068983][T17347] device-mapper: ioctl: error adding target to table
[  309.122895][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.154302][T12489] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  309.155881][T17247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.280133][   T64] Bluetooth: hci0: command tx timeout
[  309.289982][T17247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.312125][T12489] usb 8-1: Using ep0 maxpacket: 32
[  309.321082][T12489] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  309.325068][T12489] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.329376][T12489] usb 8-1: config 0 descriptor??
[  309.335379][T12489] as10x_usb: device has been detected
[  309.337734][T12489] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  309.355507][T12489] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  309.362089][T12489] as10x_usb: error during firmware upload part1
[  309.364667][T12489] Registered device nBox DVB-T Dongle
[  309.393314][   T42] audit: type=1804 audit(2054367512.443:34050): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3330" name="/newroot/78/cgroup.controllers" dev="tmpfs" ino=442 res=1 errno=0
[  309.497311][T17247] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  309.501594][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  309.504587][T17247] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  309.508582][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  309.508923][T17369] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  309.511489][T17247] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  309.522803][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  309.525881][T17247] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  309.530219][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  309.552502][T17342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3324'.
[  309.568285][T17377] FAULT_INJECTION: forcing a failure.
[  309.568285][T17377] name failslab, interval 1, probability 0, space 0, times 0
[  309.574524][T17377] CPU: 1 UID: 0 PID: 17377 Comm: syz.5.3334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.574543][T17377] Tainted: [L]=SOFTLOCKUP
[  309.574547][T17377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  309.574554][T17377] Call Trace:
[  309.574559][T17377]  <TASK>
[  309.574564][T17377]  dump_stack_lvl+0x100/0x190
[  309.574583][T17377]  should_fail_ex.cold+0x5/0xa
[  309.574598][T17377]  should_failslab+0xc2/0x120
[  309.574615][T17377]  __kmalloc_noprof+0xfc/0x820
[  309.574629][T17377]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  309.574648][T17377]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  309.574665][T17377]  genl_family_rcv_msg_doit+0xc7/0x300
[  309.574680][T17377]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  309.574698][T17377]  ? bpf_lsm_capable+0x9/0x10
[  309.574711][T17377]  ? security_capable+0x80/0x260
[  309.574739][T17377]  ? ns_capable+0xd2/0xf0
[  309.574778][T17377]  genl_rcv_msg+0x560/0x800
[  309.574793][T17377]  ? __pfx_genl_rcv_msg+0x10/0x10
[  309.574807][T17377]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  309.574821][T17377]  ? __pfx_nl80211_update_mesh_config+0x10/0x10
[  309.574836][T17377]  ? __pfx_nl80211_post_doit+0x10/0x10
[  309.574855][T17377]  netlink_rcv_skb+0x159/0x420
[  309.574867][T17377]  ? __pfx_genl_rcv_msg+0x10/0x10
[  309.574881][T17377]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  309.574902][T17377]  ? netlink_deliver_tap+0x1ae/0xcc0
[  309.574915][T17377]  genl_rcv+0x28/0x40
[  309.574927][T17377]  netlink_unicast+0x585/0x850
[  309.574941][T17377]  ? __pfx_netlink_unicast+0x10/0x10
[  309.574956][T17377]  netlink_sendmsg+0x8b0/0xda0
[  309.574970][T17377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.574984][T17377]  ? selinux_socket_sendmsg+0x198/0x2f0
[  309.575003][T17377]  ____sys_sendmsg+0xa4d/0xbe0
[  309.575020][T17377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.575033][T17377]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.575056][T17377]  ___sys_sendmsg+0x190/0x1e0
[  309.575068][T17377]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.575078][T17377]  ? __lock_acquire+0x49f/0x1a40
[  309.575095][T17377]  ? get_pid_task+0x106/0x250
[  309.575133][T17377]  __sys_sendmsg+0x160/0x210
[  309.575155][T17377]  ? __pfx___sys_sendmsg+0x10/0x10
[  309.575187][T17377]  do_syscall_64+0x115/0x870
[  309.575206][T17377]  ? clear_bhb_loop+0x40/0x90
[  309.575222][T17377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.575233][T17377] RIP: 0033:0x7f5ed619e0d9
[  309.575243][T17377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.575254][T17377] RSP: 002b:00007f5ed7140028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.575266][T17377] RAX: ffffffffffffffda RBX: 00007f5ed6425fa0 RCX: 00007f5ed619e0d9
[  309.575273][T17377] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  309.575280][T17377] RBP: 00007f5ed7140090 R08: 0000000000000000 R09: 0000000000000000
[  309.575286][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.575293][T17377] R13: 00007f5ed6426038 R14: 00007f5ed6425fa0 R15: 00007ffe62f91a38
[  309.575306][T17377]  </TASK>
[  309.581642][ T1352] usb 8-1: USB disconnect, device number 27
[  309.583088][T17247] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.614572][ T1352] Unregistered device nBox DVB-T Dongle
[  309.636685][T17247] 8021q: adding VLAN 0 to HW filter on device team0
[  309.638583][T17379] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  309.643072][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.646276][ T1352] as10x_usb: device has been disconnected
[  309.647308][T17379] device-mapper: ioctl: error adding target to table
[  309.647665][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.729291][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.732203][ T7595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.115172][T17247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.145455][T17247] veth0_vlan: entered promiscuous mode
[  310.151762][T17247] veth1_vlan: entered promiscuous mode
[  310.179911][T17247] veth0_macvtap: entered promiscuous mode
[  310.184505][T17247] veth1_macvtap: entered promiscuous mode
[  310.198551][T17247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.203955][T17247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.214745][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.220502][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.245330][T17406] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3341'.
[  310.276066][ T7390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.294471][ T7390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.319871][  T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.327799][  T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.356249][T17410] FAULT_INJECTION: forcing a failure.
[  310.356249][T17410] name failslab, interval 1, probability 0, space 0, times 0
[  310.362424][T17410] CPU: 2 UID: 0 PID: 17410 Comm: syz.5.3342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  310.362454][T17410] Tainted: [L]=SOFTLOCKUP
[  310.362461][T17410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  310.362472][T17410] Call Trace:
[  310.362479][T17410]  <TASK>
[  310.362493][T17410]  dump_stack_lvl+0x100/0x190
[  310.362521][T17410]  should_fail_ex.cold+0x5/0xa
[  310.362546][T17410]  should_failslab+0xc2/0x120
[  310.362570][T17410]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  310.362594][T17410]  ? __alloc_skb+0x140/0x710
[  310.362620][T17410]  __alloc_skb+0x140/0x710
[  310.362655][T17410]  ? __alloc_skb+0x5b7/0x710
[  310.362676][T17410]  ? __pfx___alloc_skb+0x10/0x10
[  310.362696][T17410]  ? genl_rcv_msg+0x4be/0x800
[  310.362723][T17410]  netlink_ack+0x117/0xb80
[  310.362749][T17410]  netlink_rcv_skb+0x333/0x420
[  310.362766][T17410]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.362787][T17410]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  310.362815][T17410]  ? netlink_deliver_tap+0x1ae/0xcc0
[  310.362836][T17410]  genl_rcv+0x28/0x40
[  310.362855][T17410]  netlink_unicast+0x585/0x850
[  310.362876][T17410]  ? __pfx_netlink_unicast+0x10/0x10
[  310.362900][T17410]  netlink_sendmsg+0x8b0/0xda0
[  310.362923][T17410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.362944][T17410]  ? selinux_socket_sendmsg+0x198/0x2f0
[  310.362975][T17410]  ____sys_sendmsg+0xa4d/0xbe0
[  310.363000][T17410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.363019][T17410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  310.363057][T17410]  ___sys_sendmsg+0x190/0x1e0
[  310.363076][T17410]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.363092][T17410]  ? __lock_acquire+0x49f/0x1a40
[  310.363114][T17410]  ? get_pid_task+0x106/0x250
[  310.363155][T17410]  __sys_sendmsg+0x160/0x210
[  310.363179][T17410]  ? __pfx___sys_sendmsg+0x10/0x10
[  310.363214][T17410]  do_syscall_64+0x115/0x870
[  310.363234][T17410]  ? clear_bhb_loop+0x40/0x90
[  310.363256][T17410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.363273][T17410] RIP: 0033:0x7f5ed619e0d9
[  310.363289][T17410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.363305][T17410] RSP: 002b:00007f5ed7140028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.363324][T17410] RAX: ffffffffffffffda RBX: 00007f5ed6425fa0 RCX: 00007f5ed619e0d9
[  310.363336][T17410] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  310.363347][T17410] RBP: 00007f5ed7140090 R08: 0000000000000000 R09: 0000000000000000
[  310.363359][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.363369][T17410] R13: 00007f5ed6426038 R14: 00007f5ed6425fa0 R15: 00007ffe62f91a38
[  310.363391][T17410]  </TASK>
[  310.478547][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.507544][ T7598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.511235][ T7598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.612625][T17428] netlink: 'syz.3.3347': attribute type 13 has an invalid length.
[  310.616044][T17428] lo: entered promiscuous mode
[  310.617862][T17428] lo: entered allmulticast mode
[  310.620476][T17428] tunl0: entered promiscuous mode
[  310.622356][T17428] tunl0: entered allmulticast mode
[  310.625715][T17428] gre0: entered promiscuous mode
[  310.627945][T17428] gre0: entered allmulticast mode
[  310.630884][T17428] gretap0: entered promiscuous mode
[  310.639775][T17428] gretap0: entered allmulticast mode
[  310.647601][T17428] gretap0: refused to change device tx_queue_len
[  310.661172][T17428] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  310.711291][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'.
[  310.734807][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'.
[  310.741039][T17434] MTD: Couldn't look up './dev/mtdblock0': -2
[  311.247982][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  311.248059][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout
[  311.250661][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout
[  311.429135][ T7413] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  311.521417][T17458] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3356'.
[  311.528930][T17458] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3356'.
[  311.588354][ T7413] usb 10-1: Using ep0 maxpacket: 32
[  311.593357][ T7413] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  311.600458][ T7413] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.615325][ T7413] usb 10-1: config 0 descriptor??
[  311.620768][ T7413] as10x_usb: device has been detected
[  311.622929][ T7413] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  311.632105][ T7413] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  311.636864][ T7413] as10x_usb: error during firmware upload part1
[  311.639309][ T7413] Registered device nBox DVB-T Dongle
[  311.751789][T17466] jffs2: notice: (17466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  311.763397][   T64] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  311.852106][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.872165][ T5890] usb 10-1: USB disconnect, device number 13
[  311.886291][ T5890] Unregistered device nBox DVB-T Dongle
[  311.887127][ T5890] as10x_usb: device has been disconnected
[  311.990747][T17477] WARNING! power/level is deprecated; use power/control instead
[  312.047005][   T42] kauditd_printk_skb: 209 callbacks suppressed
[  312.047023][   T42] audit: type=1400 audit(2054367514.933:34260): avc:  denied  { setattr } for  pid=17476 comm="syz.3.3363" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.059517][   T42] audit: type=1400 audit(2054367514.942:34261): avc:  denied  { setattr } for  pid=17476 comm="syz.3.3363" name="radio0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  312.161298][T17482] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3365'.
[  312.445161][T17495] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  312.448634][T17495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11584 sclass=netlink_route_socket pid=17495 comm=syz.3.3369
[  312.481988][T17497] Unsupported ieee802154 address type: 0
[  312.530757][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.555214][   T64] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  312.793828][ T5791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.991607][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  312.996418][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.004608][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.008530][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.012536][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.220043][T17520] lo speed is unknown, defaulting to 1000
[  313.441057][T17546] Bluetooth: MGMT ver 1.23
[  313.446096][T17546] Bluetooth: hci0: invalid len left 7, exp >= 114
[  313.459205][T17548] netlink: 'syz.4.3387': attribute type 1 has an invalid length.
[  313.462466][T17549] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  313.469176][ T5754] Bluetooth: hci4: command 0x0c1a tx timeout
[  313.469212][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  313.469521][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout
[  313.503034][T17551] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3388'.
[  313.509834][T17551] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3388'.
[  313.538661][T17548] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.563578][T17556] Invalid argument reading file caps for ./file0
[  313.607027][T17560] net_ratelimit: 3 callbacks suppressed
[  313.607039][T17560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  313.627267][   T42] audit: type=1400 audit(2054367516.411:34262): avc:  denied  { bind } for  pid=17561 comm="syz.4.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  313.640074][   T42] audit: type=1400 audit(2054367516.411:34263): avc:  denied  { map } for  pid=17561 comm="syz.4.3392" path="socket:[78474]" dev="sockfs" ino=78474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  313.729582][T17575] 9p: Could not find request transport: xen
[  313.915525][T17520] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.917947][T17520] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.920477][T17520] bridge_slave_0: entered allmulticast mode
[  313.923351][T17520] bridge_slave_0: entered promiscuous mode
[  313.926656][T17520] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.931391][T17520] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.934368][T17520] bridge_slave_1: entered allmulticast mode
[  313.937264][T17520] bridge_slave_1: entered promiscuous mode
[  313.954922][T17520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.959767][T17520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.975781][T17520] team0: Port device team_slave_0 added
[  313.979065][T17520] team0: Port device team_slave_1 added
[  314.017215][T17520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.031059][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  314.040548][T17590] 9pnet_fd: p9_fd_create_tcp (17590): problem connecting socket to 127.0.0.1
[  314.042673][T17520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.052645][T17520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.055782][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  314.066890][T17520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.113659][T17520] hsr_slave_0: entered promiscuous mode
[  314.119615][T17520] hsr_slave_1: entered promiscuous mode
[  314.123087][T17520] debugfs: 'hsr0' already exists in 'hsr'
[  314.128343][T17520] Cannot create hsr debugfs directory
[  314.211050][T17596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3400'.
[  314.247544][T17596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=17596 comm=syz.3.3400
[  314.319101][   T42] audit: type=1400 audit(2054367517.066:34264): avc:  denied  { accept } for  pid=17598 comm="syz.4.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  314.327905][T17601] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  314.344296][ T5791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.458110][   T42] audit: type=1400 audit(2054367517.188:34265): avc:  denied  { write } for  pid=17605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.488818][T17520] netdevsim netdevsim1 eth25 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.512071][   T42] audit: type=1400 audit(2054367517.244:34266): avc:  denied  { write } for  pid=17611 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.592127][ T7600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.596833][ T7600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.602469][ T5791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.689246][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3405'.
[  314.692309][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3405'.
[  314.742774][T17520] netdevsim netdevsim1 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.750787][   T42] audit: type=1400 audit(2054367517.459:34267): avc:  denied  { write } for  pid=17618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.793889][   T42] audit: type=1400 audit(2054367517.497:34268): avc:  denied  { write } for  pid=17621 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.843454][ T5791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.886838][T17625] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  314.906947][   T42] audit: type=1400 audit(2054367517.609:34269): avc:  denied  { write } for  pid=17623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.961620][T17520] netdevsim netdevsim1 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.981477][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3408'.
[  314.989497][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3408'.
[  314.998883][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3408'.
[  315.155763][T17520] netdevsim netdevsim1 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.178929][   T64] Bluetooth: hci0: command tx timeout
[  315.227302][ T5791] bridge_slave_1: left allmulticast mode
[  315.229524][ T5791] bridge_slave_1: left promiscuous mode
[  315.231798][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.238018][ T5791] bridge_slave_0: left allmulticast mode
[  315.240237][ T5791] bridge_slave_0: left promiscuous mode
[  315.242257][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.288093][T17652] tmpfs: Bad value for 'mpol'
[  315.296368][ T7413] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  315.361539][ T5791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.368344][ T5791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.378460][ T5791] bond0 (unregistering): Released all slaves
[  315.414700][   T12] netdevsim netdevsim2 eth23: set [1, 0] type 2 family 0 port 6081 - 0
[  315.418013][   T12] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0
[  315.421392][   T12] netdevsim netdevsim2 eth22: set [1, 0] type 2 family 0 port 6081 - 0
[  315.427191][   T12] netdevsim netdevsim2 eth25: set [1, 0] type 2 family 0 port 6081 - 0
[  315.443430][   T64] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  315.467407][ T7413] usb 8-1: Using ep0 maxpacket: 32
[  315.471405][ T7413] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  315.475520][ T7413] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.487504][ T7413] usb 8-1: config 0 descriptor??
[  315.500641][ T7413] as10x_usb: device has been detected
[  315.507266][ T7413] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  315.538268][ T7413] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  315.550287][ T7413] as10x_usb: error during firmware upload part1
[  315.554742][ T7413] Registered device nBox DVB-T Dongle
[  315.622132][T17673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17673 comm=syz.4.3414
[  315.631918][T17673] netlink: 'syz.4.3414': attribute type 1 has an invalid length.
[  315.667388][T17673] 8021q: adding VLAN 0 to HW filter on device bond3
[  315.675758][T17673] bond2: (slave bond3): making interface the new active one
[  315.684998][T17673] bond2: (slave bond3): Enslaving as an active interface with an up link
[  315.744410][ T1352] usb 8-1: USB disconnect, device number 28
[  315.766723][ T1352] Unregistered device nBox DVB-T Dongle
[  315.769849][ T1352] as10x_usb: device has been disconnected
[  315.781660][   T64] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  315.886982][T17690] openvswitch: netlink: Actions may not be safe on all matching packets
[  315.896147][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3418'.
[  315.900007][T17690] netlink: 'syz.5.3418': attribute type 6 has an invalid length.
[  315.969267][T17695] xt_CT: You must specify a L4 protocol and not use inversions on it
[  315.980319][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.983318][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.986256][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.989209][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.100519][T17699] netlink: 'syz.5.3419': attribute type 11 has an invalid length.
[  316.154348][   T64] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  316.213500][T17710] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  316.222001][ T5791] hsr_slave_0: left promiscuous mode
[  316.225117][ T5791] hsr_slave_1: left promiscuous mode
[  316.238813][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.241954][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.245830][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.249465][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.267410][T17712] netlink: 'syz.4.3423': attribute type 64 has an invalid length.
[  316.277334][ T5791] veth1_macvtap: left promiscuous mode
[  316.284449][ T5791] veth0_macvtap: left promiscuous mode
[  316.286963][ T5791] veth1_vlan: left promiscuous mode
[  316.289178][ T5791] veth0_vlan: left promiscuous mode
[  316.454681][ T5791] team0 (unregistering): Port device team_slave_1 removed
[  316.468533][ T5791] team0 (unregistering): Port device team_slave_0 removed
[  316.678924][   T64] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  316.827252][   T64] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  316.842109][ T5451] 8021q: adding VLAN 0 to HW filter on device eth23
[  317.040631][ T5928] kernel read not supported for file [fscontext] (pid: 5928 comm: kworker/3:5)
[  317.069662][   T64] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  317.111606][T17763] netlink: 'syz.4.3435': attribute type 1 has an invalid length.
[  317.129067][T17520] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  317.132218][T17766] 9pnet_virtio: no channels available for device syz
[  317.133768][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  317.139142][ T5839] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  317.157313][T17520] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  317.161466][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  317.164828][T17520] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  317.173177][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  317.176493][T17520] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  317.184067][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  317.233603][T17520] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.247275][T17520] 8021q: adding VLAN 0 to HW filter on device team0
[  317.255787][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.258111][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.266306][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.268611][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.279416][T17766] SELinux: security_context_str_to_sid (4m�se�vS�:"-����X�F@
) failed with errno=-22
[  317.297817][ T5839] usb 10-1: Using ep0 maxpacket: 32
[  317.304114][ T5839] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  317.312666][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.335263][ T5839] usb 10-1: config 0 descriptor??
[  317.344333][ T5839] as10x_usb: device has been detected
[  317.347207][ T5839] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  317.357042][ T5839] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  317.367434][ T5839] as10x_usb: error during firmware upload part1
[  317.373037][ T5839] Registered device nBox DVB-T Dongle
[  317.412591][   T64] Bluetooth: hci0: command tx timeout
[  317.419596][   T42] kauditd_printk_skb: 26 callbacks suppressed
[  317.419606][   T42] audit: type=1400 audit(2054367519.958:34296): avc:  denied  { write } for  pid=17789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.430569][T17795] syz_tun: entered allmulticast mode
[  317.445692][T17794] syz_tun: left allmulticast mode
[  317.473528][   T42] audit: type=1400 audit(2054367520.014:34297): avc:  denied  { write } for  pid=17798 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.517701][ T5451] 8021q: adding VLAN 0 to HW filter on device eth22
[  317.566276][ T1352] usb 10-1: USB disconnect, device number 14
[  317.579964][ T1352] Unregistered device nBox DVB-T Dongle
[  317.581167][ T1352] as10x_usb: device has been disconnected
[  317.600255][   T42] audit: type=1400 audit(2054367520.126:34298): avc:  denied  { write } for  pid=17810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.678793][T17520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.693779][   T42] audit: type=1400 audit(2054367520.220:34299): avc:  denied  { write } for  pid=17821 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.722134][T17520] veth0_vlan: entered promiscuous mode
[  317.734919][T17520] veth1_vlan: entered promiscuous mode
[  317.749701][ T5451] 8021q: adding VLAN 0 to HW filter on device eth24
[  317.801713][T17520] veth0_macvtap: entered promiscuous mode
[  317.814472][T17520] veth1_macvtap: entered promiscuous mode
[  317.830410][T17520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.837751][T17520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.865405][   T42] audit: type=1400 audit(2054367520.379:34300): avc:  denied  { write } for  pid=17838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.924268][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.936990][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.947115][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.951531][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17846 comm=syz.3.3450
[  317.969031][   T42] audit: type=1400 audit(2054367520.482:34301): avc:  denied  { write } for  pid=17845 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.989962][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.001691][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.005225][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.011121][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.015095][ T7413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.015983][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.025868][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.041404][ T5451] 8021q: adding VLAN 0 to HW filter on device eth25
[  318.076080][ T7592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.081957][ T7592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.244573][   T64] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  318.417921][T17864] __nla_validate_parse: 4 callbacks suppressed
[  318.417933][T17864] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3455'.
[  318.427520][T17864] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3455'.
[  318.649363][T17875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17875 comm=syz.5.3458
[  318.746061][   T64] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  318.752358][   T42] audit: type=1400 audit(2054367521.212:34302): avc:  denied  { setopt } for  pid=17880 comm="syz.3.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  318.752778][T17882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3460'.
[  318.764831][T17882] nbd: illegal input index 67111936
[  318.765987][T17877] zswap: compressor z not available
[  318.833203][T17882] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  318.836365][T17882] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  318.849630][T17882] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  318.856125][T17882] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  318.863217][T17882] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  318.864603][T17887] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[  318.865297][T17882] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  318.868514][T17887] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  318.885356][T17882] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  318.887658][T17882] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  319.015991][T17894] net_ratelimit: 2 callbacks suppressed
[  319.016010][T17894] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  319.068573][  T847] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  319.228888][  T847] usb 10-1: Using ep0 maxpacket: 32
[  319.234294][  T847] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  319.238212][  T847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.247817][  T847] usb 10-1: config 0 descriptor??
[  319.276666][  T847] as10x_usb: device has been detected
[  319.282002][  T847] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  319.296668][  T847] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  319.313098][  T847] as10x_usb: error during firmware upload part1
[  319.315755][  T847] Registered device nBox DVB-T Dongle
[  319.480032][  T847] usb 10-1: USB disconnect, device number 15
[  319.496643][  T847] Unregistered device nBox DVB-T Dongle
[  319.498851][  T847] as10x_usb: device has been disconnected
[  319.674348][T17922] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  319.677476][T17922] device-mapper: ioctl: error adding target to table
[  319.725803][T17926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17926 comm=syz.1.3475
[  319.804620][   T42] audit: type=1400 audit(2054367522.194:34303): avc:  denied  { kexec_image_load } for  pid=17929 comm="syz.3.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  319.857071][T17931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  319.863171][T17933] Invalid argument reading file caps for ./file0
[  320.132478][   T42] audit: type=1400 audit(2054367522.503:34304): avc:  denied  { getopt } for  pid=17941 comm="syz.4.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  320.136908][T17942] bpf: Bad value for 'uid'
[  320.184208][T17948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17948 comm=syz.4.3484
[  320.184227][   T42] audit: type=1400 audit(2054367522.550:34305): avc:  denied  { map } for  pid=17945 comm="syz.3.3485" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  320.258800][T17950] netlink: 'syz.4.3486': attribute type 1 has an invalid length.
[  320.290895][T17950] bond4: entered promiscuous mode
[  320.293712][T17950] 8021q: adding VLAN 0 to HW filter on device bond4
[  320.376631][T17957] tipc: Started in network mode
[  320.378272][T17957] tipc: Node identity 4, cluster identity 4711
[  320.380205][T17957] tipc: Node number set to 4
[  320.408535][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3487'.
[  320.412371][T17954] IPv6: NLM_F_CREATE should be specified when creating new route
[  320.415050][T17954] netlink: 'syz.4.3487': attribute type 1 has an invalid length.
[  320.435532][T17959] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  320.608520][T17971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17971 comm=syz.5.3494
[  320.739461][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.742548][T10091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.917331][ T1352] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  321.077648][ T1352] usb 8-1: Using ep0 maxpacket: 32
[  321.084328][ T1352] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  321.090033][ T1352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.098678][ T1352] usb 8-1: config 0 descriptor??
[  321.107094][ T1352] as10x_usb: device has been detected
[  321.110053][ T1352] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  321.123037][ T1352] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  321.134811][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3500'.
[  321.136010][ T1352] as10x_usb: error during firmware upload part1
[  321.145878][ T1352] Registered device nBox DVB-T Dongle
[  321.166235][T17987] xt_l2tp: invalid flags combination: 8
[  321.331013][ T5890] usb 8-1: USB disconnect, device number 29
[  321.349311][ T5890] Unregistered device nBox DVB-T Dongle
[  321.353595][ T5890] as10x_usb: device has been disconnected
[  321.723464][T17992] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3503'.
[  321.781592][T17996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=17996 comm=syz.1.3504
[  322.375629][T18029] openvswitch: netlink: IP tunnel dst address not specified
[  322.488901][T18029] xt_l2tp: missing protocol rule (udp|l2tpip)
[  322.554999][T18034] qrtr: Invalid version 48
[  322.940204][T18049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3523'.
[  322.953352][T18049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3523'.
[  323.026881][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3524'.
[  323.030868][T18056] nbd: illegal input index 67111936
[  323.160476][T18068] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  323.182744][ T1352] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  323.354436][ T1352] usb 8-1: Using ep0 maxpacket: 32
[  323.357613][ T1352] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  323.360681][ T1352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.375237][ T1352] usb 8-1: config 0 descriptor??
[  323.421776][ T1352] as10x_usb: device has been detected
[  323.423950][T18073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18073 comm=syz.4.3529
[  323.431487][ T1352] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  323.458066][ T1352] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  323.470526][ T1352] as10x_usb: error during firmware upload part1
[  323.474754][ T1352] Registered device nBox DVB-T Dongle
[  323.482199][ T7598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.502776][ T9307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.514563][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.616116][ T1352] usb 8-1: USB disconnect, device number 30
[  323.657591][ T1352] Unregistered device nBox DVB-T Dongle
[  323.678417][ T1352] as10x_usb: device has been disconnected
[  323.686261][T18083] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3533'.
[  323.756381][   T42] kauditd_printk_skb: 7 callbacks suppressed
[  323.756400][   T42] audit: type=1400 audit(2054367525.891:34313): avc:  denied  { create } for  pid=18085 comm="syz.1.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  323.768901][   T42] audit: type=1400 audit(2054367525.891:34314): avc:  denied  { sys_admin } for  pid=18085 comm="syz.1.3534" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  323.932179][T18092] __nla_validate_parse: 1 callbacks suppressed
[  323.932192][T18092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'.
[  323.937360][T18092] nbd: illegal input index 67111936
[  323.963746][   T42] audit: type=1400 audit(2054367526.078:34315): avc:  denied  { write } for  pid=18094 comm="syz.4.3537" name="configs" dev="configfs" ino=18457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  324.047516][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'.
[  324.049836][T18099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18099 comm=syz.1.3538
[  324.155564][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.175341][   T42] audit: type=1326 audit(2054367526.284:34316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18101 comm="syz.1.3540" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcba5b9e0d9 code=0x7fbf0000
[  324.337689][T18107] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3542'.
[  324.344502][T18107] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3542'.
[  324.435710][T18109] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  324.568000][T18113] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3545'.
[  324.591451][T18111] e1000e 0000:00:02.0 eth1: removed PHC
[  324.643784][T18113] bond5: option downdelay: invalid value (18446744073709551615)
[  324.646278][T18113] bond5: option downdelay: allowed values 0 - 2147483647
[  324.754245][T18113] bond5 (unregistering): Released all slaves
[  324.873678][   T42] audit: type=1400 audit(2054367526.939:34317): avc:  denied  { write } for  pid=18116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  324.964659][T18111] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  324.986144][   T42] audit: type=1400 audit(2054367527.042:34318): avc:  denied  { write } for  pid=18119 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  325.195659][   T42] audit: type=1400 audit(2054367527.238:34319): avc:  denied  { write } for  pid=18130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  325.246313][   T42] audit: type=1400 audit(2054367527.295:34320): avc:  denied  { write } for  pid=18135 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  325.351103][   T42] audit: type=1400 audit(2054367527.388:34321): avc:  denied  { write } for  pid=18138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  325.351153][T18140] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  325.363292][T18140] device-mapper: ioctl: error adding target to table
[  325.454470][   T42] audit: type=1400 audit(2054367527.472:34322): avc:  denied  { setattr } for  pid=18147 comm="syz.3.3549" name="PHONET" dev="sockfs" ino=80527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  325.621026][T18148] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3549'.
[  325.745371][T18170] netlink: 'syz.4.3552': attribute type 18 has an invalid length.
[  325.751412][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'.
[  325.755125][T18170] netlink: 'syz.4.3552': attribute type 18 has an invalid length.
[  325.757659][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'.
[  326.090269][T18198] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  326.093330][T18198] device-mapper: ioctl: error adding target to table
[  326.133460][  T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.194638][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'.
[  326.217912][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.235198][T18205] 8021q: adding VLAN 0 to HW filter on device bond5
[  326.259595][T18205] ipvlan2: entered promiscuous mode
[  326.264022][T18205] ipvlan2: entered allmulticast mode
[  326.268212][T18205] bond5: entered allmulticast mode
[  326.274747][T18205] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  326.283747][T18205] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  326.290305][T18205] bond5: (slave ipvlan2): Error -95 calling set_mac_address
[  326.371003][T18161] nvme_tcp: queue 0: failed to receive icresp, error -104
[  326.452274][T18217] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  327.015688][T18237] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY)
[  327.019854][T18237] device-mapper: ioctl: error adding target to table
[  327.029295][T18240] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3568'.
[  327.140032][T18244] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  327.311270][T18250] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  327.450740][T18257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18257 comm=syz.4.3576
[  327.618409][ T5890] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  327.781480][T18263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  327.788329][ T5890] usb 8-1: Using ep0 maxpacket: 32
[  327.793912][ T5890] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  327.799181][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.819892][ T5890] usb 8-1: config 0 descriptor??
[  327.827833][ T5890] as10x_usb: device has been detected
[  327.838327][ T5890] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  327.857897][T18267] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  327.918650][ T5890] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  327.938586][ T5890] as10x_usb: error during firmware upload part1
[  327.945679][ T5890] Registered device nBox DVB-T Dongle
[  327.983850][T18274] orangefs_devreq_open: device cannot be opened in blocking mode
[  328.064335][   T55] usb 8-1: USB disconnect, device number 31
[  328.095571][   T55] Unregistered device nBox DVB-T Dongle
[  328.099891][   T55] as10x_usb: device has been disconnected
[  329.059270][T18294] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  329.101329][T18296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18296 comm=syz.3.3590
[  329.384931][   T42] kauditd_printk_skb: 17 callbacks suppressed
[  329.384943][   T42] audit: type=1400 audit(2054367531.159:34340): avc:  denied  { bind } for  pid=18308 comm="syz.1.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  329.393788][T18309] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  329.529087][T18315] netlink: 'syz.1.3597': attribute type 1 has an invalid length.
[  329.551254][T18315] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.563375][T18315] __nla_validate_parse: 3 callbacks suppressed
[  329.563385][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3597'.
[  329.597113][T18318] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  329.681787][   T42] audit: type=1400 audit(2054367531.440:34341): avc:  denied  { write } for  pid=18319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.701297][  T847] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  329.759403][   T42] audit: type=1400 audit(2054367531.506:34342): avc:  denied  { write } for  pid=18326 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.845631][   T42] audit: type=1400 audit(2054367531.590:34343): avc:  denied  { write } for  pid=18329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.861560][  T847] usb 8-1: Using ep0 maxpacket: 32
[  329.868018][T18333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18333 comm=syz.1.3601
[  329.870620][  T847] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  329.875780][  T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.887254][  T847] usb 8-1: config 0 descriptor??
[  329.928559][  T847] as10x_usb: device has been detected
[  329.936583][  T847] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  329.949770][  T847] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  329.955865][   T42] audit: type=1400 audit(2054367531.693:34344): avc:  denied  { write } for  pid=18335 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  329.962544][  T847] as10x_usb: error during firmware upload part1
[  329.976187][  T847] Registered device nBox DVB-T Dongle
[  330.106518][  T847] usb 8-1: USB disconnect, device number 32
[  330.145339][  T847] Unregistered device nBox DVB-T Dongle
[  330.153973][  T847] as10x_usb: device has been disconnected
[  330.282081][T18346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3605'.
[  330.316010][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.330624][T18348] xt_hashlimit: size too large, truncated to 1048576
[  330.388088][T18352] xt_hashlimit: size too large, truncated to 1048576
[  330.469550][   T42] audit: type=1400 audit(2054367532.170:34345): avc:  denied  { write } for  pid=18350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  330.527858][   T42] audit: type=1400 audit(2054367532.226:34346): avc:  denied  { write } for  pid=18357 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  330.538576][T18359] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  330.583599][T18362] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  330.644873][   T42] audit: type=1400 audit(2054367532.329:34347): avc:  denied  { write } for  pid=18364 comm="syz.1.3609" name="functions" dev="configfs" ino=18456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  330.662695][   T42] audit: type=1800 audit(2054367532.348:34348): pid=18365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3609" name="midi1_first_group" dev="configfs" ino=84306 res=0 errno=0
[  330.909805][T18368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18368 comm=syz.3.3610
[  330.999622][T18371] sock: sock_set_timeout: `syz.3.3611' (pid 18371) tries to set negative timeout
[  331.015608][   T42] audit: type=1400 audit(2054367532.685:34349): avc:  denied  { write } for  pid=18370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  331.053255][T18374] openvswitch: netlink: IPv6 tunnel dst address is zero
[  331.141146][T18385] syzkaller0: entered promiscuous mode
[  331.142986][T18385] syzkaller0: entered allmulticast mode
[  331.344056][T18393] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  331.389458][T18395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3617'.
[  331.401458][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3617'.
[  331.404428][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3617'.
[  331.483410][T18399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3618'.
[  331.486150][T18400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18400 comm=syz.1.3619
[  331.555602][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'.
[  331.556542][T18399] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18399 comm=syz.3.3618
[  331.572605][T18404] netlink: 'syz.1.3620': attribute type 10 has an invalid length.
[  331.582443][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'.
[  331.794840][T18414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  331.830201][ T5888] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  331.958418][T18424] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  331.988060][ T5888] usb 8-1: Using ep0 maxpacket: 32
[  331.991522][ T5888] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  331.997595][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.003436][ T5888] usb 8-1: config 0 descriptor??
[  332.014362][ T5888] as10x_usb: device has been detected
[  332.020315][ T5888] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  332.035961][ T5888] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  332.055214][ T5888] as10x_usb: error during firmware upload part1
[  332.061595][ T5888] Registered device nBox DVB-T Dongle
[  332.178057][T18429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18429 comm=syz.1.3628
[  332.226068][T12489] usb 8-1: USB disconnect, device number 33
[  332.245897][T12489] Unregistered device nBox DVB-T Dongle
[  332.246910][T12489] as10x_usb: device has been disconnected
[  332.355671][T18434] device-mapper: ioctl: Invalid data size in the ioctl structure: 2365522302
[  332.363073][T10091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.368377][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.441994][T18437] /dev/nullb0: Can't open blockdev
[  332.916773][T18448] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3636'.
[  332.920998][T18448] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3636'.
[  332.957523][T18450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18450 comm=syz.4.3637
[  333.056842][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[  333.058924][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[  333.746782][ T5818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.902177][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.915739][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.920561][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.927605][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.946047][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  333.947139][ T5818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.974808][   T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.982130][   T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.991579][   T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.999131][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  334.006375][   T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.115955][ T5818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.239914][ T5818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.269095][T18493] netlink: 'syz.3.3652': attribute type 2 has an invalid length.
[  334.337863][T18465] lo speed is unknown, defaulting to 1000
[  334.488511][   T13] netdevsim netdevsim1 eth27: set [1, 0] type 2 family 0 port 6081 - 0
[  334.498181][ T5818] bridge_slave_1: left allmulticast mode
[  334.501967][ T5818] bridge_slave_1: left promiscuous mode
[  334.505386][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.513754][ T5818] bridge_slave_0: left allmulticast mode
[  334.516012][ T5818] bridge_slave_0: left promiscuous mode
[  334.521085][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.598602][T18506] Bluetooth: MGMT ver 1.23
[  334.689743][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.703769][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.713023][ T5818] bond0 (unregistering): Released all slaves
[  334.729237][ T5818] bond1 (unregistering): Released all slaves
[  334.777560][ T5817] netdevsim netdevsim1 eth26: set [1, 0] type 2 family 0 port 6081 - 0
[  334.787526][ T5817] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.792184][ T5817] netdevsim netdevsim1 eth28: set [1, 0] type 2 family 0 port 6081 - 0
[  334.886884][T18521] netlink: 'syz.3.3660': attribute type 2 has an invalid length.
[  334.901788][   T42] kauditd_printk_skb: 7 callbacks suppressed
[  334.901802][   T42] audit: type=1400 audit(2054367536.316:34357): avc:  denied  { write } for  pid=18518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.986229][   T42] audit: type=1400 audit(2054367536.400:34358): avc:  denied  { write } for  pid=18526 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  335.207908][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1
[  335.244058][   T42] audit: type=1400 audit(2054367536.643:34359): avc:  denied  { write } for  pid=18531 comm="syz.3.3662" name="configs" dev="configfs" ino=18457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  335.313683][T18535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11553 sclass=netlink_route_socket pid=18535 comm=syz.3.3663
[  335.372211][   T42] audit: type=1400 audit(2054367536.765:34360): avc:  denied  { write } for  pid=18537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  335.431756][   T42] audit: type=1400 audit(2054367536.821:34361): avc:  denied  { write } for  pid=18543 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  335.476174][ T5451] 8021q: adding VLAN 0 to HW filter on device eth26
[  335.601116][T18517] =============================================================================
[  335.604247][T18517] 
[  335.604254][T18517] ======================================================
[  335.604270][T18517] WARNING: possible circular locking dependency detected
[  335.604278][T18517] syzkaller #0 Tainted: G             L     
[  335.604285][T18517] ------------------------------------------------------
[  335.604289][T18517] syz.4.3659/18517 is trying to acquire lock:
[  335.604295][T18517] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[  335.604377][T18517] 
[  335.604377][T18517] but task is already holding lock:
[  335.604380][T18517] ffff888027833618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330
[  335.604422][T18517] 
[  335.604422][T18517] which lock already depends on the new lock.
[  335.604422][T18517] 
[  335.604425][T18517] 
[  335.604425][T18517] the existing dependency chain (in reverse order) is:
[  335.604430][T18517] 
[  335.604430][T18517] -> #3 (&n->list_lock){-.-.}-{3:3}:
[  335.604445][T18517]        lock_acquire+0x1b9/0x370
[  335.604459][T18517]        _raw_spin_lock_irqsave+0x3a/0x60
[  335.604474][T18517]        __refill_objects_node+0x120/0xaa0
[  335.604483][T18517]        refill_objects+0x58/0x410
[  335.604493][T18517]        __pcs_replace_empty_main+0x376/0x680
[  335.604509][T18517]        __kmalloc_noprof+0x66d/0x820
[  335.604520][T18517]        tty_buffer_alloc+0x29f/0x320
[  335.604559][T18517]        __tty_buffer_request_room+0x129/0x2c0
[  335.604571][T18517]        __tty_insert_flip_string_flags+0xdb/0x3f0
[  335.604584][T18517]        tty_insert_flip_string_and_push_buffer+0x9c/0x230
[  335.604599][T18517]        pty_write+0xd2/0x100
[  335.604609][T18517]        n_tty_write+0xa9e/0x1160
[  335.604631][T18517]        file_tty_write.isra.0+0x4d2/0x890
[  335.604644][T18517]        iter_file_splice_write+0x830/0x10b0
[  335.604664][T18517]        do_splice+0x109c/0x1f90
[  335.604676][T18517]        __do_splice+0x33b/0x370
[  335.604687][T18517]        __x64_sys_splice+0x187/0x250
[  335.604700][T18517]        do_syscall_64+0x115/0x870
[  335.604712][T18517]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.604735][T18517] 
[  335.604735][T18517] -> #2 (&port->lock#2){-.-.}-{3:3}:
[  335.604751][T18517]        lock_acquire+0x1b9/0x370
[  335.604762][T18517]        _raw_spin_lock_irqsave+0x3a/0x60
[  335.604773][T18517]        tty_port_tty_get+0x21/0x100
[  335.604786][T18517]        tty_port_default_wakeup+0x15/0x60
[  335.604799][T18517]        serial8250_tx_chars+0x68f/0x860
[  335.604814][T18517]        serial8250_handle_irq_locked+0x770/0x9a0
[  335.604829][T18517]        serial8250_handle_irq.part.0+0xb4/0x530
[  335.604845][T18517]        serial8250_default_handle_irq+0xc2/0x280
[  335.604860][T18517]        serial8250_interrupt+0xf8/0x1b0
[  335.604875][T18517]        __handle_irq_event_percpu+0x232/0x880
[  335.604891][T18517]        handle_irq_event+0xab/0x1e0
[  335.604906][T18517]        handle_edge_irq+0x34c/0x950
[  335.604925][T18517]        __common_interrupt+0xd8/0x2f0
[  335.604950][T18517]        common_interrupt+0xb9/0xe0
[  335.604964][T18517]        asm_common_interrupt+0x26/0x40
[  335.604974][T18517]        _raw_spin_unlock_irq+0x29/0x50
[  335.604984][T18517]        rpm_resume+0xb86/0x1320
[  335.605013][T18517]        rpm_resume+0x721/0x1320
[  335.605025][T18517]        pm_runtime_work+0x10c/0x150
[  335.605039][T18517]        process_one_work+0xa23/0x1940
[  335.605056][T18517]        worker_thread+0x5ef/0xe50
[  335.605067][T18517]        kthread+0x370/0x450
[  335.605082][T18517]        ret_from_fork+0x72b/0xd50
[  335.605098][T18517]        ret_from_fork_asm+0x1a/0x30
[  335.605120][T18517] 
[  335.605120][T18517] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  335.605134][T18517]        lock_acquire+0x1b9/0x370
[  335.605146][T18517]        _raw_spin_lock_irqsave+0x3a/0x60
[  335.605156][T18517]        serial8250_console_write+0x177/0x1a50
[  335.605171][T18517]        console_flush_one_record+0x790/0xe50
[  335.605187][T18517]        console_unlock+0x103/0x260
[  335.605201][T18517]        vprintk_emit+0x407/0x6b0
[  335.605216][T18517]        _printk+0xcf/0x110
[  335.605226][T18517]        register_console.cold+0xc0/0x248
[  335.605238][T18517]        univ8250_console_init+0x6f/0x80
[  335.605257][T18517]        console_init+0x3d5/0x5b0
[  335.605273][T18517]        start_kernel+0x314/0x490
[  335.605287][T18517]        x86_64_start_reservations+0x24/0x30
[  335.605304][T18517]        x86_64_start_kernel+0x12b/0x130
[  335.605320][T18517]        common_startup_64+0x13e/0x158
[  335.605339][T18517] 
[  335.605339][T18517] -> #0 (console_owner){-.-.}-{0:0}:
[  335.605354][T18517]        check_prev_add+0xeb/0xe60
[  335.605366][T18517]        __lock_acquire+0x136c/0x1a40
[  335.605382][T18517]        lock_acquire+0x1b9/0x370
[  335.605394][T18517]        console_lock_spinning_enable+0x72/0x80
[  335.605410][T18517]        console_flush_one_record+0x739/0xe50
[  335.605427][T18517]        console_unlock+0x103/0x260
[  335.605442][T18517]        vprintk_emit+0x407/0x6b0
[  335.605458][T18517]        _printk+0xcf/0x110
[  335.605467][T18517]        __slab_bug+0x4f/0xb0
[  335.605483][T18517]        slab_bug+0x5d/0x80
[  335.605492][T18517]        __kmem_cache_shutdown.cold+0x39/0x177
[  335.605504][T18517]        kmem_cache_destroy+0x73/0x190
[  335.605529][T18517]        virtio_gpu_free_vbufs+0x38/0x80
[  335.605548][T18517]        virtio_gpu_release+0x5c/0x1c0
[  335.605563][T18517]        drm_dev_put.part.0+0xbd/0x140
[  335.605583][T18517]        drm_dev_put+0x1f/0x30
[  335.605596][T18517]        virtio_dev_remove+0xb8/0x170
[  335.605610][T18517]        device_remove+0xcb/0x180
[  335.605622][T18517]        device_release_driver_internal+0x44e/0x620
[  335.605636][T18517]        bus_remove_device+0x2bc/0x560
[  335.605647][T18517]        device_del+0x376/0x9b0
[  335.605659][T18517]        device_unregister+0x1d/0xe0
[  335.605674][T18517]        unregister_virtio_device+0x39/0x60
[  335.605692][T18517]        virtio_pci_remove+0x7c/0x110
[  335.605705][T18517]        pci_device_remove+0xb2/0x1d0
[  335.605752][T18517]        device_remove+0xcb/0x180
[  335.605771][T18517]        device_release_driver_internal+0x44e/0x620
[  335.605789][T18517]        pci_stop_bus_device+0x120/0x160
[  335.605802][T18517]        pci_stop_and_remove_bus_device+0x58/0xa0
[  335.605815][T18517]        pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  335.605828][T18517]        remove_store+0x123/0x140
[  335.605841][T18517]        dev_attr_store+0x58/0x80
[  335.605855][T18517]        sysfs_kf_write+0xf2/0x150
[  335.605878][T18517]        kernfs_fop_write_iter+0x3e0/0x5f0
[  335.605891][T18517]        vfs_write+0x6ac/0x1050
[  335.605914][T18517]        ksys_write+0x12a/0x250
[  335.605922][T18517]        do_syscall_64+0x115/0x870
[  335.605935][T18517]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.605945][T18517] 
[  335.605945][T18517] other info that might help us debug this:
[  335.605945][T18517] 
[  335.605949][T18517] Chain exists of:
[  335.605949][T18517]   console_owner --> &port->lock#2 --> &n->list_lock
[  335.605949][T18517] 
[  335.605969][T18517]  Possible unsafe locking scenario:
[  335.605969][T18517] 
[  335.605972][T18517]        CPU0                    CPU1
[  335.605975][T18517]        ----                    ----
[  335.605978][T18517]   lock(&n->list_lock);
[  335.605985][T18517]                                lock(&port->lock#2);
[  335.605994][T18517]                                lock(&n->list_lock);
[  335.606001][T18517]   lock(console_owner);
[  335.606008][T18517] 
[  335.606008][T18517]  *** DEADLOCK ***
[  335.606008][T18517] 
[  335.606011][T18517] 11 locks held by syz.4.3659/18517:
[  335.606017][T18517]  #0: ffff88803b20c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  335.606043][T18517]  #1: ffff888025cae450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  335.606090][T18517]  #2: ffff888058e7ec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  335.606121][T18517]  #3: ffffffff8f86c8a0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20
[  335.606150][T18517]  #4: ffff888022e021f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[  335.606181][T18517]  #5: ffff88802516c1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[  335.606210][T18517]  #6: ffffffff8ea7a230 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190
[  335.606240][T18517]  #7: ffffffff8ed88280 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190
[  335.606270][T18517]  #8: ffff888027833618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330
[  335.606296][T18517]  #9: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[  335.606319][T18517]  #10: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50
[  335.606348][T18517] 
[  335.606348][T18517] stack backtrace:
[  335.606356][T18517] CPU: 3 UID: 0 PID: 18517 Comm: syz.4.3659 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.606371][T18517] Tainted: [L]=SOFTLOCKUP
[  335.606380][T18517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  335.606387][T18517] Call Trace:
[  335.606401][T18517]  <TASK>
[  335.606406][T18517]  dump_stack_lvl+0x100/0x190
[  335.606421][T18517]  print_circular_bug.cold+0x178/0x1c7
[  335.606440][T18517]  check_noncircular+0x146/0x160
[  335.606455][T18517]  check_prev_add+0xeb/0xe60
[  335.606470][T18517]  __lock_acquire+0x136c/0x1a40
[  335.606486][T18517]  lock_acquire+0x1b9/0x370
[  335.606499][T18517]  ? console_lock_spinning_enable+0x61/0x80
[  335.606517][T18517]  ? console_lock_spinning_enable+0x4a/0x80
[  335.606534][T18517]  console_lock_spinning_enable+0x72/0x80
[  335.606549][T18517]  ? console_lock_spinning_enable+0x61/0x80
[  335.606564][T18517]  console_flush_one_record+0x739/0xe50
[  335.606582][T18517]  ? __pfx_console_flush_one_record+0x10/0x10
[  335.606599][T18517]  ? is_printk_cpu_sync_owner+0x32/0x40
[  335.606611][T18517]  console_unlock+0x103/0x260
[  335.606627][T18517]  ? __pfx_console_unlock+0x10/0x10
[  335.606643][T18517]  ? do_raw_spin_unlock+0x145/0x1e0
[  335.606658][T18517]  ? _printk+0xcf/0x110
[  335.606669][T18517]  vprintk_emit+0x407/0x6b0
[  335.606685][T18517]  ? __pfx_vprintk_emit+0x10/0x10
[  335.606702][T18517]  _printk+0xcf/0x110
[  335.606712][T18517]  ? __pfx__printk+0x10/0x10
[  335.606724][T18517]  __slab_bug+0x4f/0xb0
[  335.606735][T18517]  slab_bug+0x5d/0x80
[  335.606747][T18517]  __kmem_cache_shutdown.cold+0x39/0x177
[  335.606762][T18517]  kmem_cache_destroy+0x73/0x190
[  335.606778][T18517]  virtio_gpu_free_vbufs+0x38/0x80
[  335.606789][T18517]  ? __pfx_virtio_gpu_release+0x10/0x10
[  335.606802][T18517]  virtio_gpu_release+0x5c/0x1c0
[  335.606816][T18517]  ? __pfx_virtio_gpu_release+0x10/0x10
[  335.606832][T18517]  drm_dev_put.part.0+0xbd/0x140
[  335.606845][T18517]  drm_dev_put+0x1f/0x30
[  335.606857][T18517]  virtio_dev_remove+0xb8/0x170
[  335.606870][T18517]  ? __pfx_virtio_dev_remove+0x10/0x10
[  335.606884][T18517]  device_remove+0xcb/0x180
[  335.606896][T18517]  device_release_driver_internal+0x44e/0x620
[  335.606912][T18517]  bus_remove_device+0x2bc/0x560
[  335.606924][T18517]  ? __pfx_bus_remove_device+0x10/0x10
[  335.606935][T18517]  ? __pfx_device_remove_attrs+0x10/0x10
[  335.606949][T18517]  device_del+0x376/0x9b0
[  335.606962][T18517]  ? __pfx_device_del+0x10/0x10
[  335.606975][T18517]  ? __pfx___might_resched+0x10/0x10
[  335.606988][T18517]  ? __pfx_pci_device_is_present+0x10/0x10
[  335.607004][T18517]  device_unregister+0x1d/0xe0
[  335.607017][T18517]  unregister_virtio_device+0x39/0x60
[  335.607032][T18517]  virtio_pci_remove+0x7c/0x110
[  335.607044][T18517]  pci_device_remove+0xb2/0x1d0
[  335.607054][T18517]  ? __pfx_pci_device_remove+0x10/0x10
[  335.607065][T18517]  device_remove+0xcb/0x180
[  335.607077][T18517]  device_release_driver_internal+0x44e/0x620
[  335.607093][T18517]  pci_stop_bus_device+0x120/0x160
[  335.607105][T18517]  pci_stop_and_remove_bus_device+0x58/0xa0
[  335.607119][T18517]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  335.607132][T18517]  remove_store+0x123/0x140
[  335.607146][T18517]  ? __pfx_remove_store+0x10/0x10
[  335.607159][T18517]  ? find_held_lock+0x2b/0x80
[  335.607168][T18517]  ? sysfs_file_kobj+0xe4/0x290
[  335.607183][T18517]  ? sysfs_file_kobj+0xe4/0x290
[  335.607198][T18517]  ? __pfx_remove_store+0x10/0x10
[  335.607212][T18517]  dev_attr_store+0x58/0x80
[  335.607226][T18517]  ? __pfx_dev_attr_store+0x10/0x10
[  335.607240][T18517]  sysfs_kf_write+0xf2/0x150
[  335.607256][T18517]  kernfs_fop_write_iter+0x3e0/0x5f0
[  335.607270][T18517]  ? __pfx_sysfs_kf_write+0x10/0x10
[  335.607292][T18517]  vfs_write+0x6ac/0x1050
[  335.607314][T18517]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  335.607334][T18517]  ? __pfx_vfs_write+0x10/0x10
[  335.607363][T18517]  ksys_write+0x12a/0x250
[  335.607383][T18517]  ? __pfx_ksys_write+0x10/0x10
[  335.607400][T18517]  do_syscall_64+0x115/0x870
[  335.607421][T18517]  ? clear_bhb_loop+0x40/0x90
[  335.607439][T18517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.607450][T18517] RIP: 0033:0x7fd360b9e0d9
[  335.607460][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.607471][T18517] RSP: 002b:00007fd361988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  335.607491][T18517] RAX: ffffffffffffffda RBX: 00007fd360e26090 RCX: 00007fd360b9e0d9
[  335.607498][T18517] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004
[  335.607504][T18517] RBP: 00007fd360c35024 R08: 0000000000000000 R09: 0000000000000000
[  335.607511][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.607517][T18517] R13: 00007fd360e26128 R14: 00007fd360e26090 R15: 00007ffdb37b3c18
[  335.607527][T18517]  </TASK>
[  335.640727][   T42] audit: type=1400 audit(2054367537.008:34362): avc:  denied  { write } for  pid=18548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  335.641792][T18517] BUG virtio-gpu-vbufs (Tainted: G             L     ): Objects remaining on __kmem_cache_shutdown()
[  335.687668][   T42] audit: type=1400 audit(2054367537.064:34363): avc:  denied  { write } for  pid=18552 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  335.689496][T18517] -----------------------------------------------------------------------------
[  335.689496][T18517] 
[  335.715923][ T5451] 8021q: adding VLAN 0 to HW filter on device eth27
[  335.716287][T18517] Object 0xffff888037740000 @offset=0
[  335.782125][ T7580] net_ratelimit: 5 callbacks suppressed
[  335.782137][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.783617][T18517] Object 0xffff888037740118 @offset=280
[  336.055185][T18517] Object 0xffff888037740230 @offset=560
[  336.056967][T18517] Slab 0xffffea0000ddd000 objects=29 used=3 fp=0xffff888037740348 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  336.061504][T18517] ------------[ cut here ]------------
[  336.063243][T18517] 1
[  336.063250][T18517] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#3: syz.4.3659/18517
[  336.066859][T18517] Modules linked in:
[  336.068176][T18517] CPU: 3 UID: 0 PID: 18517 Comm: syz.4.3659 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  336.071626][T18517] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  336.073436][T18517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  336.076682][T18517] RIP: 0010:__slab_err+0x15/0x20
[  336.078336][T18517] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
[  336.084441][T18517] RSP: 0018:ffffc9000369f738 EFLAGS: 00010046
[  336.086408][T18517] RAX: 0000000000080000 RBX: ffffc9000369f788 RCX: ffffc9002ab49000
[  336.089005][T18517] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88802ab4ca80
[  336.091563][T18517] RBP: ffff888027833618 R08: 0000000000000007 R09: 0000000000000000
[  336.094098][T18517] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0
[  336.096632][T18517] R13: ffff888037741fb8 R14: ffff888027833600 R15: ffffea0000ddd000
[  336.099183][T18517] FS:  00007fd3619886c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000
[  336.102092][T18517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.104160][T18517] CR2: 00007ffc7a422848 CR3: 000000003737b000 CR4: 0000000000352ef0
[  336.106602][T18517] Call Trace:
[  336.107549][T18517]  <TASK>
[  336.108437][T18517]  __kmem_cache_shutdown.cold+0x16e/0x177
[  336.110340][T18517]  kmem_cache_destroy+0x73/0x190
[  336.112095][T18517]  virtio_gpu_free_vbufs+0x38/0x80
[  336.113738][T18517]  ? __pfx_virtio_gpu_release+0x10/0x10
[  336.115491][T18517]  virtio_gpu_release+0x5c/0x1c0
[  336.117051][T18517]  ? __pfx_virtio_gpu_release+0x10/0x10
[  336.118800][T18517]  drm_dev_put.part.0+0xbd/0x140
[  336.120402][T18517]  drm_dev_put+0x1f/0x30
[  336.121945][T18517]  virtio_dev_remove+0xb8/0x170
[  336.123500][T18517]  ? __pfx_virtio_dev_remove+0x10/0x10
[  336.125229][T18517]  device_remove+0xcb/0x180
[  336.126689][T18517]  device_release_driver_internal+0x44e/0x620
[  336.128609][T18517]  bus_remove_device+0x2bc/0x560
[  336.130228][T18517]  ? __pfx_bus_remove_device+0x10/0x10
[  336.131968][T18517]  ? __pfx_device_remove_attrs+0x10/0x10
[  336.133744][T18517]  device_del+0x376/0x9b0
[  336.135060][T18517]  ? __pfx_device_del+0x10/0x10
[  336.136563][T18517]  ? __pfx___might_resched+0x10/0x10
[  336.138216][T18517]  ? __pfx_pci_device_is_present+0x10/0x10
[  336.140037][T18517]  device_unregister+0x1d/0xe0
[  336.141574][T18517]  unregister_virtio_device+0x39/0x60
[  336.143310][T18517]  virtio_pci_remove+0x7c/0x110
[  336.144894][T18517]  pci_device_remove+0xb2/0x1d0
[  336.146438][T18517]  ? __pfx_pci_device_remove+0x10/0x10
[  336.148135][T18517]  device_remove+0xcb/0x180
[  336.149580][T18517]  device_release_driver_internal+0x44e/0x620
[  336.151480][T18517]  pci_stop_bus_device+0x120/0x160
[  336.153195][T18517]  pci_stop_and_remove_bus_device+0x58/0xa0
[  336.155091][T18517]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  336.157113][T18517]  remove_store+0x123/0x140
[  336.158558][T18517]  ? __pfx_remove_store+0x10/0x10
[  336.160144][T18517]  ? find_held_lock+0x2b/0x80
[  336.161629][T18517]  ? sysfs_file_kobj+0xe4/0x290
[  336.163201][T18517]  ? sysfs_file_kobj+0xe4/0x290
[  336.164812][T18517]  ? __pfx_remove_store+0x10/0x10
[  336.166430][T18517]  dev_attr_store+0x58/0x80
[  336.167895][T18517]  ? __pfx_dev_attr_store+0x10/0x10
[  336.169523][T18517]  sysfs_kf_write+0xf2/0x150
[  336.170991][T18517]  kernfs_fop_write_iter+0x3e0/0x5f0
[  336.172645][T18517]  ? __pfx_sysfs_kf_write+0x10/0x10
[  336.174390][T18517]  vfs_write+0x6ac/0x1050
[  336.175941][T18517]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  336.177800][T18517]  ? __pfx_vfs_write+0x10/0x10
[  336.179317][T18517]  ksys_write+0x12a/0x250
[  336.180687][T18517]  ? __pfx_ksys_write+0x10/0x10
[  336.182291][T18517]  do_syscall_64+0x115/0x870
[  336.183783][T18517]  ? clear_bhb_loop+0x40/0x90
[  336.185368][T18517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.187248][T18517] RIP: 0033:0x7fd360b9e0d9
[  336.188673][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.194619][T18517] RSP: 002b:00007fd361988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  336.197259][T18517] RAX: ffffffffffffffda RBX: 00007fd360e26090 RCX: 00007fd360b9e0d9
[  336.199764][T18517] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004
[  336.202241][T18517] RBP: 00007fd360c35024 R08: 0000000000000000 R09: 0000000000000000
[  336.204735][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.207210][T18517] R13: 00007fd360e26128 R14: 00007fd360e26090 R15: 00007ffdb37b3c18
[  336.209707][T18517]  </TASK>
[  336.210703][T18517] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  336.212974][T18517] CPU: 3 UID: 0 PID: 18517 Comm: syz.4.3659 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[  336.216362][T18517] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  336.218120][T18517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  336.221251][T18517] Call Trace:
[  336.222370][T18517]  <TASK>
[  336.223324][T18517]  dump_stack_lvl+0x100/0x190
[  336.224861][T18517]  vpanic+0x552/0x970
[  336.226138][T18517]  ? __pfx_vpanic+0x10/0x10
[  336.227605][T18517]  ? lock_release+0x24d/0x310
[  336.229103][T18517]  panic+0xd1/0xe0
[  336.230327][T18517]  ? __pfx_panic+0x10/0x10
[  336.231746][T18517]  check_panic_on_warn.cold+0x19/0x34
[  336.233430][T18517]  ? __slab_err+0x15/0x20
[  336.234868][T18517]  __warn.cold+0x191/0x318
[  336.236283][T18517]  __report_bug+0x30f/0x440
[  336.237741][T18517]  ? __slab_err+0x15/0x20
[  336.239134][T18517]  ? __pfx___report_bug+0x10/0x10
[  336.240716][T18517]  ? irq_work_queue+0xce/0x100
[  336.242248][T18517]  ? __wake_up_klogd+0xe2/0x140
[  336.243735][T18517]  ? vprintk_emit+0x1c9/0x6b0
[  336.245158][T18517]  ? __pfx_vprintk_emit+0x10/0x10
[  336.246691][T18517]  ? __slab_err+0x15/0x20
[  336.247984][T18517]  report_bug+0xb2/0x220
[  336.249235][T18517]  ? __slab_err+0x15/0x20
[  336.250604][T18517]  handle_bug+0x16a/0x2a0
[  336.251973][T18517]  exc_invalid_op+0x17/0x50
[  336.253411][T18517]  asm_exc_invalid_op+0x1a/0x20
[  336.254950][T18517] RIP: 0010:__slab_err+0x15/0x20
[  336.256524][T18517] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90
[  336.262462][T18517] RSP: 0018:ffffc9000369f738 EFLAGS: 00010046
[  336.264379][T18517] RAX: 0000000000080000 RBX: ffffc9000369f788 RCX: ffffc9002ab49000
[  336.266823][T18517] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88802ab4ca80
[  336.269307][T18517] RBP: ffff888027833618 R08: 0000000000000007 R09: 0000000000000000
[  336.271810][T18517] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0
[  336.274289][T18517] R13: ffff888037741fb8 R14: ffff888027833600 R15: ffffea0000ddd000
[  336.276761][T18517]  ? add_taint+0x6d/0xb0
[  336.278126][T18517]  ? __slab_err+0x14/0x20
[  336.279490][T18517]  __kmem_cache_shutdown.cold+0x16e/0x177
[  336.281292][T18517]  kmem_cache_destroy+0x73/0x190
[  336.282874][T18517]  virtio_gpu_free_vbufs+0x38/0x80
[  336.284519][T18517]  ? __pfx_virtio_gpu_release+0x10/0x10
[  336.286254][T18517]  virtio_gpu_release+0x5c/0x1c0
[  336.287829][T18517]  ? __pfx_virtio_gpu_release+0x10/0x10
[  336.289587][T18517]  drm_dev_put.part.0+0xbd/0x140
[  336.291160][T18517]  drm_dev_put+0x1f/0x30
[  336.292543][T18517]  virtio_dev_remove+0xb8/0x170
[  336.294099][T18517]  ? __pfx_virtio_dev_remove+0x10/0x10
[  336.295821][T18517]  device_remove+0xcb/0x180
[  336.297265][T18517]  device_release_driver_internal+0x44e/0x620
[  336.299224][T18517]  bus_remove_device+0x2bc/0x560
[  336.300721][T18517]  ? __pfx_bus_remove_device+0x10/0x10
[  336.302347][T18517]  ? __pfx_device_remove_attrs+0x10/0x10
[  336.304133][T18517]  device_del+0x376/0x9b0
[  336.305503][T18517]  ? __pfx_device_del+0x10/0x10
[  336.306924][T18517]  ? __pfx___might_resched+0x10/0x10
[  336.308387][T18517]  ? __pfx_pci_device_is_present+0x10/0x10
[  336.310221][T18517]  device_unregister+0x1d/0xe0
[  336.311751][T18517]  unregister_virtio_device+0x39/0x60
[  336.313446][T18517]  virtio_pci_remove+0x7c/0x110
[  336.314955][T18517]  pci_device_remove+0xb2/0x1d0
[  336.316491][T18517]  ? __pfx_pci_device_remove+0x10/0x10
[  336.318220][T18517]  device_remove+0xcb/0x180
[  336.319661][T18517]  device_release_driver_internal+0x44e/0x620
[  336.321606][T18517]  pci_stop_bus_device+0x120/0x160
[  336.323225][T18517]  pci_stop_and_remove_bus_device+0x58/0xa0
[  336.325124][T18517]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  336.327160][T18517]  remove_store+0x123/0x140
[  336.328629][T18517]  ? __pfx_remove_store+0x10/0x10
[  336.330218][T18517]  ? find_held_lock+0x2b/0x80
[  336.331710][T18517]  ? sysfs_file_kobj+0xe4/0x290
[  336.333275][T18517]  ? sysfs_file_kobj+0xe4/0x290
[  336.334838][T18517]  ? __pfx_remove_store+0x10/0x10
[  336.336415][T18517]  dev_attr_store+0x58/0x80
[  336.337822][T18517]  ? __pfx_dev_attr_store+0x10/0x10
[  336.339434][T18517]  sysfs_kf_write+0xf2/0x150
[  336.340841][T18517]  kernfs_fop_write_iter+0x3e0/0x5f0
[  336.342510][T18517]  ? __pfx_sysfs_kf_write+0x10/0x10
[  336.344091][T18517]  vfs_write+0x6ac/0x1050
[  336.345464][T18517]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  336.347307][T18517]  ? __pfx_vfs_write+0x10/0x10
[  336.348840][T18517]  ksys_write+0x12a/0x250
[  336.350224][T18517]  ? __pfx_ksys_write+0x10/0x10
[  336.351767][T18517]  do_syscall_64+0x115/0x870
[  336.353225][T18517]  ? clear_bhb_loop+0x40/0x90
[  336.354759][T18517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.356610][T18517] RIP: 0033:0x7fd360b9e0d9
[  336.358030][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.364004][T18517] RSP: 002b:00007fd361988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  336.366626][T18517] RAX: ffffffffffffffda RBX: 00007fd360e26090 RCX: 00007fd360b9e0d9
[  336.369104][T18517] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004
[  336.371568][T18517] RBP: 00007fd360c35024 R08: 0000000000000000 R09: 0000000000000000
[  336.374006][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.376482][T18517] R13: 00007fd360e26128 R14: 00007fd360e26090 R15: 00007ffdb37b3c18
[  336.378974][T18517]  </TASK>
[  336.380719][T18517] Kernel Offset: disabled
[  336.382095][T18517] Rebooting in 86400 seconds..