last executing test programs:

35.644552265s ago: executing program 1 (id=465):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000240), 0xd) (async)
write$binfmt_misc(r3, &(0x7f0000000240), 0xd)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000280)={{r3}, "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"})
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000001280)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000012c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000001340)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000001340)={0x28, 0x1, r8, r7, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000001380)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x46, &(0x7f00000013c0)})
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000001400)={0x8, r9}) (async)
ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000001400)={0x8, r9})
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7010040000000300000006000100050000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7010040000000300000006000100050000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0)
r12 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[@code={0xa, 0x30, {"b80000c0fec4e1f92b4202c7401020000000c70011000000c74010000000ff"}}], 0x30})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

35.266323974s ago: executing program 1 (id=471):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_io_uring_setup(0xf08, &(0x7f0000000080)={0x0, 0xfffffffe, 0x400, 0x3, 0x800000c3}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x58, 0x2, r1, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x7}})
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

35.146621886s ago: executing program 1 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x4ae60)
r2 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000002c0)='proc\x00', 0x100c803, 0x0)
syz_open_procfs(r2, &(0x7f0000000300)='pagemap\x00')
syz_usb_disconnect(0xffffffffffffffff)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0x82)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newnexthop={0x28, 0x68, 0x20, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x38, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x38}}, 0x0)

34.221655517s ago: executing program 1 (id=483):
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4leasetime\x00', 0x401, 0x0)
write(r0, &(0x7f0000000100)='p:', 0x2)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000003c0), 0x7, 0x180862)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/mem_sleep', 0x280802, 0x1cd)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000001000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}})
pwrite64(r3, &(0x7f0000000200)="d7da07f1f66f4215f4fe5bf99b1a7aba0d912ec0e91bececcbaa92a52d60e2a3ffe2da77a0663d094a6aa804ee0fc75b09a5333b9c1e65e4cffdd29afaf6cfe84d82729f6fca86feaab43bd9065c5362a937a951773a69e28b2d0e7290d9e09fb48257db4ce47235450549ae820ae4c01dc6b7", 0x73, 0x91)
io_setup(0x400, &(0x7f0000000580)=<r4=>0x0)
io_submit(r4, 0x16, &(0x7f00000005c0)=[&(0x7f0000000600)={0x4000000, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000640)='a', 0x1, 0x5}])
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4leasetime\x00', 0x401, 0x0) (async)
write(r0, &(0x7f0000000100)='p:', 0x2) (async)
userfaultfd(0x801) (async)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$loop(&(0x7f00000003c0), 0x7, 0x180862) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/mem_sleep', 0x280802, 0x1cd) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000001000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) (async)
pwrite64(r3, &(0x7f0000000200)="d7da07f1f66f4215f4fe5bf99b1a7aba0d912ec0e91bececcbaa92a52d60e2a3ffe2da77a0663d094a6aa804ee0fc75b09a5333b9c1e65e4cffdd29afaf6cfe84d82729f6fca86feaab43bd9065c5362a937a951773a69e28b2d0e7290d9e09fb48257db4ce47235450549ae820ae4c01dc6b7", 0x73, 0x91) (async)
io_setup(0x400, &(0x7f0000000580)) (async)
io_submit(r4, 0x16, &(0x7f00000005c0)=[&(0x7f0000000600)={0x4000000, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000640)='a', 0x1, 0x5}]) (async)

33.940093493s ago: executing program 1 (id=486):
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000001200)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x1c, &(0x7f0000001580)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a5000000bf000000b70000000000000095"], &(0x7f0000001680)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

33.240402278s ago: executing program 1 (id=491):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$dsp(r0, &(0x7f0000000040)="2c644e0775a85a7802c01209e0c1ac1dadf18a13f3d145bc37a1a8700d9944d7d09139ef44af687db50954b18faded80088a", 0x32) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r0, 0x879ff000)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x100080)
r3 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) (async)
ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000180)={0x9, 0x4, 0xffffffffffffffff, 0x40, 0x1}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x114, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x64928c4a4466c4f6}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b689d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669478ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x663968d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7215b77b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44613186}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fdcbc7a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d870b69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd38c627}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790d61f0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65658479}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24c193f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40012}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r4) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000004c0)=0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000880) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000600)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000680)=r7)
mkdirat(r1, &(0x7f00000006c0)='./file0\x00', 0x1) (async)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) (async)
write$6lowpan_enable(r6, &(0x7f0000000700)='1', 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x10000, 0x6)
read$hiddev(r1, &(0x7f0000000780)=""/255, 0xff) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000980)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x8, 0x1, 0x5, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000a00)={0x0, 0x0, <r10=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000a80)={0x0, 0x0, <r11=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f00000009c0)=[r9], 0x1, r10, r11, 0x800, 0xa, 0x2, 0x7, {0x9, 0x7, 0x9, 0x7fe0, 0xc22, 0x1, 0x2, 0x9, 0x10, 0x2, 0x3, 0x6, 0xc, 0x5, "0df3dfff2950cafa44f66dc81d1a1bac6688b200d338bb34baebc714e4cc3001"}}) (async)
fcntl$getflags(r3, 0xb) (async)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000b40)=0x1, 0x4) (async)
utime(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x9, 0x8}) (async)
connect$802154_dgram(r6, &(0x7f0000000c00)={0x24, @long}, 0x14)

33.074947056s ago: executing program 32 (id=491):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$dsp(r0, &(0x7f0000000040)="2c644e0775a85a7802c01209e0c1ac1dadf18a13f3d145bc37a1a8700d9944d7d09139ef44af687db50954b18faded80088a", 0x32) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r0, 0x879ff000)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x100080)
r3 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) (async)
ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000180)={0x9, 0x4, 0xffffffffffffffff, 0x40, 0x1}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x114, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x64928c4a4466c4f6}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b689d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669478ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x663968d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7215b77b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44613186}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fdcbc7a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d870b69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd38c627}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790d61f0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65658479}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24c193f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40012}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r4) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000004c0)=0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000880) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000600)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000680)=r7)
mkdirat(r1, &(0x7f00000006c0)='./file0\x00', 0x1) (async)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) (async)
write$6lowpan_enable(r6, &(0x7f0000000700)='1', 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x10000, 0x6)
read$hiddev(r1, &(0x7f0000000780)=""/255, 0xff) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000980)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x8, 0x1, 0x5, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000a00)={0x0, 0x0, <r10=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000a80)={0x0, 0x0, <r11=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f00000009c0)=[r9], 0x1, r10, r11, 0x800, 0xa, 0x2, 0x7, {0x9, 0x7, 0x9, 0x7fe0, 0xc22, 0x1, 0x2, 0x9, 0x10, 0x2, 0x3, 0x6, 0xc, 0x5, "0df3dfff2950cafa44f66dc81d1a1bac6688b200d338bb34baebc714e4cc3001"}}) (async)
fcntl$getflags(r3, 0xb) (async)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000b40)=0x1, 0x4) (async)
utime(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x9, 0x8}) (async)
connect$802154_dgram(r6, &(0x7f0000000c00)={0x24, @long}, 0x14)

5.476619565s ago: executing program 2 (id=726):
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002540)=[@wr_drn={0x68, 0x0, {0x6, 0x9}}, @nested_load_syzos={0x136, 0x0, {0x3, 0x9, [@nested_amd_vmcb_write_mask={0x17c, 0x0, {0x0, @control_area=0x69, 0x6, 0x80000000, 0x8}}, @cpuid={0x64, 0x0, {0x4, 0x9}}, @wr_crn={0x67, 0x0, {0x2, 0x4}}, @nested_set_state_pages={0x140, 0x0, {0x0, 0x13, @gpa=0x80a0000}}, @nested_set_state_pages={0x140, 0x0, {0x2, 0x0, @arbitrary=0x8000000000000001}}]}}, @nested_amd_set_intercept={0x181, 0x0, {0x0, 0xec5a, 0x4, 0x1}}, @nested_amd_stgi, @out_dx={0x6a, 0x0, {0xef60, 0x1, 0x8}}, @enable_nested, @nested_amd_clgi, @cpuid={0x64, 0x0, {0x1ff, 0x10}}, @rdmsr={0x66, 0x0, {0x3a9}}, @nested_amd_invlpga={0x17d, 0x0, {0xeeee0000, 0x9882}}, @nested_amd_invlpga={0x17d, 0x0, {0xf000, 0xc691}}, @out_dx={0x6a, 0x0, {0x5f0d, 0x6, 0x7}}, @uexit={0x0, 0x0, 0xfff}, @code={0xa, 0x0, {"0f20e035020000000f22e064430f358fc868870a83420f01cbc483115ecfefb903090000b800000000ba000001000f302e0f0139c74424003f9a0000c7442402750d0000c7442406000000000f01142466baf80cb8da702f8def66bafc0cb000ee66b816018ec8"}}, @uexit={0x0, 0x0, 0x5}, @nested_amd_invlpga={0x17d, 0x0, {0xffff1000, 0x1d2a}}, @nested_load_syzos={0x136, 0x0, {0x0, 0x5, [@nested_amd_vmload={0x182, 0x0, 0x1}, @nested_set_state_pages={0x140, 0x0, {0x0, 0x1e, @arbitrary=0x2}}, @wr_crn={0x67, 0x0, {0x8, 0x9}}, @uexit={0x0, 0x0, 0x7}, @code={0xa, 0x0, {"0f20c035200000000f22c066baf80cb80fdbec81ef66bafc0cecb993090000b8d7075562ba000000000f30440f01c53e460fc79a863d6de864400fafc566bad104ecc461f9283a66ba4100edf045815d01fd00c0fe"}}, @nested_amd_clgi]}}, @uexit={0x0, 0x0, 0xb785}, @nested_vmresume], 0xfffffffffffffd8e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000d82000/0x18000)=nil, &(0x7f0000002500)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000000)=@vmx={0xe, 0x0, 0x2080, {0x4000, 0xc000, {0x1}, 0x0, 0x80000000}, {"55e11ca04af2a801b9d1690deb11475f9bcabd0741a588edb7738383b8043fc0c9b6c57add2fc8e42a299df8f684afcf44d3641cc2ea816844c70158a49edb4d212ba948d5af90d47b574068206b650e038b6bed8b74c1ffbe5e43cb83f422f097518e161c24f930be1694acbb0527a7361188007af7ac61a4f09d48e601d5f1c4360d38026debb3474bbc5262aa6c215ab1fa5887352257d412a70b4f1d833067dd50d8631989a371c4c099c32d3f42c5520212bc294bbbac8aeaaf0a4bb4dccf73d026eaff540c8f305ee9810d5ed5aa83bb71f5916c14545e14e2db9993c98bd9f33b5a558016a6d951892c71676e800793185604ae1916c2c5304eefee80474820aa8d9148d51c25045b810903698587996a12475b6937590fa8454b5ce5343e569ea92e0714214b4165eef79ce1dcfce3784efc6988ccddfe05eb1b3235d40cffffc7c26234b2e85c5ecafb542f971ee2b8d4caf64e2834788686a3d237c57a41d31542bc77cdf8faf60ab60ee402f919941b58a918621b6c52e017f68fc2addae82a058e0d59191fd7d90a7a08dfac9810d726cf6d5bf421c47af2dea2131ef3999729471469f499773d95c0d290ad94436346df04c6abadeb608607a37230463011ccfb14fb3a07e85ab0b4b0d684655995f3b894a25317a86db577f73244e276e15ce1982910bb16b42382a2d30bfe9b4bee3284f4efdb7c9b25f7a8445ea3556630f3e38008e507df28b12aa2a984bc14c468ac724258815f74942f7a31715fc086e67f0f16e01ed7b5593018d438b5bc99cf777c4ebdb3ee0019726869ad9a14bc309a9c3acec5ad540ac61c35ec05b7d75b8a8c3797bb924b03a910b4be2daa7cccb02091416498cd036e02828282799e2f74ea517bb3fa4976d79ac874f6c3e43dd442ff1363d790e63a6226c99cd2ac6ed3d55a72c476b4589b3388f56ebf67fb4ac59b5d422fe000e22e7e0b7f0e58290572adbf1d6c5f8558241ec3b0685d779d1a5b5869f0872d3db5fb30c027be2d9f059882eeea2fa179e7e4bc68c681a700e05fa57a53d9d6d1a92c9d6aac03b3b5aad01c0b343753ea7f23e361b4d591a448b4899ea9da68bcfb46715f7eb2eba06d6bb7f0539404819d73cf6fbb68d0f8dcd02cda8fbe4a3fb236a367f12d9a3bdd24f9bcb86b7fe40a0b0f920a3cb07650ced7ea25566f9a79fc82049fc2d6465d626a1db59bd5510f3cdf7a96ffad78b0919318c596b48930aa1ed07506e6030a2f3987aff5b337ac58212cb080b251c02bb769aa962b52d47d40c2f32c6c09b14005ff7e09c5bb476226915e34e020bb32b83cc0cae4f0b91640c938b6b6237f3d22e3e60217c65c6f5121c1cbd0f6fd6ca3c9d37a4388513db3df081175d9b987ad3880e717efea8fe35bc5b5cc86b924705cf86437812580f4948e96ee03f402241f6c327ce9f09cc63493f3171da9444859a1f40ae498146747a893d9584ff59fe925b07edaec4176822b7ac6e6da755312a00845da0503cc646374fd734bf479998f06b57c8395ac84c3d2c5c34c993aaddf3b0d52ef08a75b803cc0a5662b4a73101cfeb3f91d51e83492a5564f426a4a4567c578fa93f8f43fffac20bb0912f28d5ac52ebaa20adf565b85f51aeb4e113d0925cb0be40eddc580f72fa07edfa569c40994bc8118547f24c709437f06b25488d0e1f03467dd69babf6d5852ee4b87c373f4a47743eb460467d6b4c0a1bbb0e9711948def1cbbff140ba4779209e134952de50c63476c346e6b7d9cdea84c867217916b42cb5073488a1e12be8e61151006b091beeb3fc89e0b39e514454ff6d14aa68fb1cd48cbdf98acb6861b4b9264c2e035cc4cfa41f31f4b3a75f907152ee33d61d019e41591acb7f5d633e4142812dbec16b93e50a75ddd3f06ecc7366d85ea920ff58877787709468a56ee533258c75d36a5b3012e00959efcaf44d78d9fafa6a7cd09b203213c10732bddf49e863ebca02b45c0ff788f0e7e3a2b1d79978645d09fb0cf196631a13a7067cbced30d71b77181976f648fd776805fbd95f82903e85b717556a256cae9dbb4e29dadf1ed0aefedd16326ffeeb6bb3e13c4ca49fc348b8f12d087106ee4851b064201d72690aa24b724300e6fee2cb353e9c265b918928a3304f97f8dfcd698e8d2269dc3c458beae85444d49a68a8b1f541ba814ae42769b2ad5ff1c1342a5717337019ba1ddd9f5cb3f7f66e32352ffdae9e6cb63bcde01af9eb7b61e0df778842d8c3b978c7530edfd3f0f0b95ca279c3a7adb256fa29d40e69dff710dbfef050c8fb7055934c9f9531b5dcc24663f017bda1dc1b12ef0a6a30fff9d9efa5cc53c63b71eda84b61060d881519d2c62524ed66b72e65285983437c6a8173a866541d0e11e1cccdd2b5e3fd54c18742890edd387e76f755da1b5c7448eb7822fa8c58a0e227ba4abcacba67d6f9e22214a1d57217c4edfd8936ee7911def80da76b0746a9a29e137722235d54ff855ad62f2c028046d02242a1e47ec6a44c8f3ed258a873e5084c6b3a9217fe9121f25e6f139e431aae45aa55ad97c2e5f06c24eae632c4352b2cd0896120927ce514c8307c4e0b85ddcfe017fb70170c457f81dbff65a02dff13c6d2d2b866e6a8469902588cef6f7ffbdcb0c1ffd9d6caada3e4ccc29c6652840987acbb244c1048129bb9c41744e2504529609a17917b6db01e1b1a65abbf3221fe1dd85e8a4a4293ff29e33d0f2f01652d866aeb545b144752e2afd24a14709d365733eb36f5da81c4fe3e0d6a69435542494ba2c3a7ba671683b1a3daa70a36e3754c3e3c38f1fbf587c31db3c2da7ccf6dc19994d82b0b778d9f75cb20fdf51227d55cb38fd0a720d0644fa4af90aada3d36045b7b42480607477a996046198b9f5ce7cba025efc163972e2bfd5db790a641b4bae04bcc3e8de34d41f8c5781a53990275c72cb8c989a97a7c275835428f4f68e42d4934e5a3e659add04f13e0fefa53e241841ca83790eec8d02f625ecbb185cf74366803df95d27a5a685021845b678287bfee5d6516a7c3cf043169786ef04fa3277b82b574e1f5e43f043c20cecd4cc0781c4f8bd255338cd92b0c7a7fb83d02d3846cc2e35c05633de1381e762347f6d4d7ef009506cc73e87e07164e44c635e52b49bf6e93a1b608d887f7260de92797d225b760ccb6cab17467e26f252ee10544c231f8b0c5fe24e18a5883db6c5afd4ff9de44cddaf47a81388f9157d05cf624c52ee1461c7281458dd791f78b9d0550253f86be72ee3a6275ffe7475fee9bb2476146bee875ba0971f77c3a96ddf4eda2b1a4a83b3f82fc66936578fb836e98bf0f334c19909e7b589fe34eee3f037961e8242d29d013f1f75fc49fa0727f567551aa76f6143b6af575ca43a7c1d3a57ba122b081c004bdfeb9464158eeaca9d48f2a4cd3f0a08e92890bead6636b58f8d1c0f9bfc5c45600ad37da12cc41541cb42bff544653acfec5e06561839cd6ddf9b253dc0140eda238f74deef49ab9a4b29cfc58507d6f2bc33b9b540e4881e50ed7b276f1fc3138210eb78957d8b6ed3f1d0c8be8ebb0923f41f9707074046ea66f08dfc7635167f443d73680a25032a9b08fe14a92b1d86c7ac84cabddba22033b4caf60c7c48ed97a559f46051bd4d7e261657c241ed7c23d238050ea90390a7ef980c2f18a7733911013c2e86c7a412670c9383594243cf01807cb2b8e68245fd7fba93b79b88ea43fca30870a81a962bd8d70e99e9153468f3fc66140ba0c7fd67454cccc10372a8424f28e12335fef64a847381e1197bcbc0885a776337e09a6732c25e31de2f2f017209851fbde2b6eca0ed8a554fa001a1c96e8ea8bada3f4cf84a9b277b04aafd997eca0b573cb2cad44516271fea079d5ade3f71fba5960cc5d82e7e899b48a3e7b8aca3659f0cc97b5f6395207ef5b7702742841bf9550986513f82a11f87ffc44f4e0c75102746c1ca89c6fdd188bce0b589150c8af7d03cac99ac827b041fe32d7267a9197dc03b8384ebcb5e6647d36182bd334a3982b17f08b0146e76b058595acc132bb43f7a4a37ce2fb0efe6b1112e14abe0f016443ba6e24b593c074fdf0f0bc4a6b7c497deec8514a8630dcd081ad490867d5abc8d25f9e789aa67edb78a9a200ca674b2e5d3dc48c71c16118e030c3d8072aa42b439fb2760fb740761d678566ca223712a77d830131e12f1b9af9391f0b543fde00d0041999a08c9bed5d3b362399080bee9f2841f4f271ad3c6842d8234dedb2024f1bb840f8688157b88649062d516ceb1470f4838aeea9d3829cf653af915c0cf6e689e20127b95690dd6cbeea97ec1112bd0b765a02981ad2d979a4df75ac0a4bd4672b068068c5fc44edc407ce803af45d03c2045046b3bc3451430dceffea7170cb6c70bc55ec056bf1402f8117c782cb423f58db79890352303a9b0a5bf60b7026d3457f0e62448afb4ef14cf7f492da9f7ee06c51b813f3f8961bdc11417da1cca02576e2ec55842c69cd51d0e6a921db9c1bf7686bb2b420f94a2a3db8d571569d85844a845a72ea48d063d9bf67dba28e17836b05858ce53ec5cc728c600c2740fb11b6251ba39cdc99c4287d91234aa9d966eddca869bb0c97edd4d8ffd652c518e4ffbf70c8313ccc9425d113e7d774487d10f78b368ff07a59765008f763e49bab86facf61c7651dbd6a0160f1e7a3fe980fa4e23d80608e6f419e89c208ba50f1ef38d045a5a65223c60e7b4a75e100b46360e4b79e4e90645067238d128e0080da11e915251edbc2c4393c785f27e472307d2ec50141d995950ff293c4c13b9cd05a505555a5a7b8b3f866e989b1a251d79fb20d3a7951bb1591bcba8be07c12437833a48ad599d31460fe3288311d5b8f0ebf8a28c594e5415ce7ef0947a1a08c142de56f64f1efceb99ad080540996962ccf1981ebad141d48e41d6e620315735bc2cff7618842ba3bddaa92581dcc92636e240b71886197881b09bef127b4df967ea8332257c54b129c8b48142730c5308248cf5be1f8d8c48389f78eb4bf9b777df100b2278d01f4d30a284413b6458034ee6d1ca4fcbd3a057a8b88309a866ddf186119699a5ee0c6cab6fa2cfd2e587aa869f29304251629338a6d49820c1be62ebecb9ffd4f65d817119d7caa545dade069d4af37cebb20c65a614e9dc9c15b9a83ebd9c5a7a7cdfd0a1ec4d4b7a234caf9351a53c2ffcdcd148f320b16d4e4a0d24147d2f509efc07d9030c2c6ffad85e898a399be86d1c99ff9ed73489479b0cb5746acadc428292f62231b2990675e200a6f4de5d92ac1a4c5d317f8dbb6cb677337a408b023839c4fce54ce864fba66133d998437dcaa4bb8cf00b8e8e89a8dd8c3594840aaf7a6d9e88f20924b9fa27e4c947e2183f229cd9871b51fa26d90a0bebbb83fa025180f1220c420046330c57e9a196100fb4b2456c9db6123d1cb06e1cd794f5e502364ef1e762ed69a24f9073e725db71990cedf2cbc9e20abe53687b9d639fe01a8d2eb5a7a9751761e3924164d585c3cfcad4802a423bf7546879219382fac076a59fa5e42abfedbfb125b1a64306ad5b85a0fb40d88e8d9704c59e1623d4942ae1444956bfa8c82ef63a6973a1897024e7d100bd3af15d2a3c35a68d2fafe31f0836c1ef1765a7af2a5eddbbb9f57eceb6bfff4767ae5bd03c7c222454bc2b3724616aab7abe8f044b82e4d36c56aae64186112cd012bda90ffe652fa826a65db68145e0e7873105f22be04b62f30b43f487a74a34e77ba03", "4e18f2034633642e9d843824583eb4db039c5d0e881c24857b86f0fbc4b80839d5f70c935368f0e92d4a852e435468785695591c414a19ceb5f5d70abd7cbf53500ee9ff2db7ffa45c3fe6ef07c72e5f7e59c3f58f5c9286d1f788512846c6250a216384810f638e83d9122c91eb834f533ea9378f9af380cb21c460f565acb9fb2afa20cfe4573d0c883152cc04517ff88c71d3b0f89650b151294a4d8e60f5fc1330a99fcb28656881907ea652fa2923f2c159923f2135df4c11dd66cb6b9483889c620baf40b697aa45dff21e1a85211219d643a4512d7f9b4cba328b8b24572685e73f94db27117a8613723498a5d8cb4b095fc8db5df387293f68a62f52aae32991bfa564a4040bac97c572e153f478d996c9194a5c09544fa09790e3bd8c261ff95e5770f30cca41560e02528c71b2a1574b2369a8d215e4130706aeb0b9008cfff62ad93a6000957a880a113d74d40113cdc529b4c3feac7790c582e69e1e7edc04a17c56a7d65bb817a7e0df870a1caea8d7d93ff0a6abde3373b8fd9fb18fcc9c7eb96aafa2bce959fca31f16b2448aefaf1013dc2c33178853bd27b8f68d19a69b5210e703c7478372a4ae4e594f2c56e8cecd8828f6d605386c3358d0f92bb28d9e63e1de270df0c1e6cfc4ed5e55bc1a634d3f7f84b62b4cff7dc26b54c8eb873abc280b1d3b1dd822c53def28d465509fafd7274c29d6cd9c6a9fd7fc3c8dcbe7ccd34d021be555818a0a20cb44cb1557da1eeac8b05e8895279eb62b4cdce0c40108f2459359c6de1982f7d58312bf693ef437a5d156f5544c0edb187cbf5f82772146264435c50b65e0eab5cc48709e7d88d8ba980ff5255f5666d7484631f4c738fc2305b544a18582fc2d07f82927f8dd98d21f711fe1b6d6939d701798c0078975d5ee339bec0e92f8ced117b64d6e6087ac7a651850f42e00b27142ee536d53c21c3bdeb7b23b807beb1d76382224087055f08e4998aecfb1ddd13cb97651a69b5488c18988bf72020889c6a60d6985a53e1c729c7ae1fabf0e2d3a135870d570d250ba7ccbf809343f04c082d8ec0d51556bca7ece1fd86d98c79f8eb5083068a6f37cd1f6c05c61318f7bae01c619e52b69e751e90513a782d6f40cccee8464c9bbce790db739b88d6ef12e0d449d55ad781ee4ea354008de1418ede77bb87b4a1705ee9a2c175ae477459bbc76ff4a868eea0430d443394acb2fac14a3883570800bf14819d730fda161908efd1b889cba9598012daca2f58b5e691c33c31fefe121c3ac526877eae8938041921d6e88dcf5e24ca50f1ff8c5fbf1f0ae6ef50134847755c5c82f1380366ba2176cff39ac00609d515aff57f0bef28fcafb63296c986f291fb9eb5f86a815f966f7517987fc7a86277101cfa4087f10bd0c428f971916bc91943e49fddc4a27349c09875aa478a383ee964de6a01392bfefd599d9de6f2d1d79289aeeaf6e5b3d30273eab2ce8054f90568de31c1912e2a540f21b2ace20aef371fc3ff158590b6e091af508cef6d0228e8078f62cea354fbb90cb5041aa282468dc4464b89dbfa205a421e4a2593a04139672422c6890c302666be46c8e3af40f7e16e18686338e51e5ce08a118e7cf037cd981269297f0611cf68073b283248126074ac7a7106b68f145d6760fba2d80f4aa4816f863d843b3bea100472c90c4eb40369a6e7986298d102aaad6ab2ba07759b12a32db138f04eef0a2e6204d87064f19e6eb6d62cd839a8c792500b3565c761f691c83dccd40ad23e889181f40d2e65b55ee7044b9bcf4b06a0aea9147b08beb30b87af7b844651157b424ffdab3c31fc3389b3044c62823771efcce57f9d6a726bf01d885b00034b4a8775298df548929839888e35d64b8a5af1b6d019f365249c82e7b405ad471d3c60004629241facf18f887a5275b4a1f618395bc2f7cd219c0cd2748f821f3db62b69c35a3122143f38176ef6b4ebccd72a2e277e57222ad750b97570db3481658529f5c726e088e6a30ec9ed93bda6ba9f28c03963ff532425f8bb67ff63371a3271412f83945058cf7ad5ed29ec2d2d48b65da901aec4b3ef7aef7a9990273c3aedb2942d9ea40284e64b0499a87f2cf92c3431265b9351aae8c51aea55d38cb8e779e3feff760fc3af265a9358f6f8e99381806ced74c045c6545ee416b052fd319a4c7e7f78d47247a316545c6afa80e2457ca72b6ae8d33ff59b15e974c97d7e82edda2eba18db753520dad7bbbdc1a79213de7d49ae790da177b767b7436445ab7fe7c817a7e6437039bfe4d1557b496514833558d8f07cd207e05ca773cdaab30abdfea2e57f1f566f42409f82af30c2919bf2c332698c1680b951cdd7c6514dfb6d6cb7cb9e414b24d15813fe67be020d5689af2c4b9eb7c692a7c8593ce5a6848fbf792f1e56530d764998daca73aab843a66ae9650fa14cab60a510dc99ae4f171a1727fcc4993c5b23a1a5b93b15802c3ff7dd719b080a7c90e3976f414e94b5c2c604685177d97851b6df3f90f6b488705efc3d57da5234b35d69b1e5d23583d6846c58b85f35618eb42b15a7491fe79122a695bb37f1f56e7accff6952ba7e459a21cf00182f43ed7bd4c4a2d45a5fc0b0824698493ff319504d4fc5a4c08983dc20a2b49970c2ce0855fc88b0b43e9ad39f5761d7c68ad56013a578f4a1567f78e28bf4c9348a27d94b2edfd965041c5aa2f3077a66629d9b1707c8cec7ea2e9b0ccaf7c1fcdc43bccf9e966b416092093aa34256e86bfe9483feade7361cf38b3eb4b5f12d7b44ade08298b8ae51b15b860182d5e51ca40fc4348dcddbea67e592f0c3f656387847cf3ef408056141f177e172457470ec8936dfbf023c70b526aadc3b789bb8234b72b02f7ab28408f6ec0d23c9774cbf6bf94080b07a58e8d91e771344f43e51d0a6101f9ed3e4488a63e74822e8c598caff08d83b66ae8b93b78cd0cfc19a748b63f9239a79060197350a842af285176a34bc4e96c349d5d074316ce2dc88ea0239d0c14611ae0e5411e707137d978321059786c52f23a77f45d6fa782c12f5cff105eae59bdcc1684c22819fef2e0ef14bf5d3a0f48f2f4936182828553e2e4b5cbea9ec9d4523dd040a6c7f8964839711054a1643197849ff8e238c16dd4d440fcd63c26a7b65dc7bbb96cde18a22b86b9b459366ad0496daa567e22825bc36af04f72f59debdaa5f2f1744bfb7f6400e108cef7572290d8fc92c9716dc84dae0e4d1bc58c62fd1624984021b43807c786866b40a620d38054250313fb0e58a366cfb390420b3d23e2e186fe064e362ad3fce5ea5fe0b70773870748e0c674e742a1e6867a6a659154284db3c627e0bfaa547c8404bcc060f96726d93443bf6a9c5b3031f43a8c20dcc0bbf179fe653c41fb306c9e8326abcda363c750c5bae36ace096acb0464e05011eec7d9a8db2bf5a68a563d166e3275c3aa0d3cc99d3c5feda2df0b53fb18fce61682b6e8e6b9b22636a662121448fb8a3ed32477ce98399b5fe44eded17916165ea16ec3d60f978b21528d9e458686074db480958aa092eb5a5f89707a789d21fce54c5c0d34e77c3cf098869ba6546f10420f374b5dea48bce50177b53a0d2101503056108d99ecc17d95c415e96183ab18d5fe160ff01110515bbcd83499828354de3b0a9bec43ad7236c1656c2f2147e9858aca2a1a147c3cfe7ef7361f97df4f56a959e1e332c5ad92ccd412540cb20835fbdf0cc1a2ffa4c5942b803235ff9aa42b035372a862d6c082cc74921010ffd79608c73e3be96fb1272a641f4fd2f020dc74ab71ee857452843fddae5d0d086e215e1bbe2f4e1ab7578abfdab872d25fb36de900485ad77c685b3e2ecb14df11560c84c5c6885186485332b86cc1174b57872811a6ed511fc5d32fe9bd991fd0cac3e66e46e5de1ea42307ae9f053f956faa4afdccfaa2527d03dbfb20a64fc73112d81e86461042d656dc4d1c68a68a49a85bb28bacee7c8517ae1d45e36f2405960d64d5136834f38bd0a2ce61c4ba0185d0c34a477a21a429828a18a406b0a2a6faeb5e394a5d1166585da46d4368ea8bac33e90cd35e8f56f3c8e8094c17a457682ffff8521090e2f9ab952e66403dc265922de2a6c499147fa63549faa9fdcf69222639a5e1fda6ae56180f164d0ec1dcc42325484f692e9dec2797b3b694c4b64c5775ffdeb8169406fb10d42f4fe1096f3ab453d778b783270192a7161e1d0944317a4f11098938ffeabd8ddd77934e7ff53326d4adf321d61c3411dc063bf2f61a11b95684a62440d78472c7acf6b98df89d23f58dd698ca59ad420932ac0937a0ac06f64d9500c112a35c38aeeac4ff542da923561e51668bef8d1d59e1e2f71170facc4efe2dc47be65133fa142e998528a106797912d8ef82e25945a217bb1ea9d1ea9b1dc6a486fef062bdd68e76274fd2d0f8b7bbc76ee77c7ab44875f4efce0d4b14ca6315ca3839a22832f055f07c8e162579447d57ae0465574cb376a27e3d629dcdae01298a2836b398bbadcf987066476ad5d09e0194a11838dbf0406024c7479f4d35cb76ed5c1076a7e9120507cbb3cb6ba1b80446cf0e5ba3ab6fdf7ae703f9eab9269c37d3197190b2a7073ad1de7d1c480fe99423e63ed1896965e44dfe121270a90c55ee51b1ace07b8f643e966254814ee0f39426c7b4e8db13547a7f4cb1503c2c0cf5761cac519277296f518cc4cbd6f1b4b34432af8a88a6b3f17789d7be27a33be4a481f289e4638fc0a07de7eb5d9bb61cf6e183757f644645298028b2de2f1852048f9fe3b6c0fc4eee7719e74ad5c5217596f514bd3892a827d504d72f1572c62310fa01a1de4b9263c2e7a8f9395d3f393696c66858b181a2f61b12de1b6905ea2710fdbe1da0e28b1f58c6a62f3acaddad831ae619f681cd9fc87a3de16a7f2cc46bc5fc14bfb31e3b68363e188e92b479a5a7e1641597aead7600cf1f45839274edd08e15a413fc839f2002204534a28393b6eb4ce938778dd434582637a2e5c302f5aeb2b44d7c9cfe3a075dc3e9b207fe04567a6e1c542a685091220f42752f37ef9d2eebcc320373b2e2e4422a138060decbe18932f8898bae8863cf2b4792b2a5beae7a61e49860f3f23980411f96770d9a9db91467c4bebf70cf626313af6e7b12a259d41bc24a815f20394afe0dc7408fbdb649e4ee392b8aa70e740c39954a41665be8c7793b90c7bca135a706070b729caa99919187628f4b6d575467cf1cef0a5f2afab5cf0b95c175aea701e32ea78f083bff52c3dec49792f7a16b24ab69b9eaef3888663661ba5c1ec7a2b95b930a60d37d8150326e78bab7c4a5cf9523707b3b11f32aceafd3859dd045eb904fcb7841e1aa85c8aa2a57f8cc5d30634f5bb330a24d5d7236edc84fdbc0b34356d379fbeccad2cab0f5bad4605af1100a5e4622e7bfcb2155d8f11e9d18dba6cf1715efc51cbd994e1ab75c9ca33208e506b268b015d29b981d86b56a181c1b0aa2fc7973f70809004727d1f3cb77f39cfedc4f76bc450d9f6364892bc898498f661dd920cd1387ad6c16af67ab5e59b8b82c07d5a8ba0f1d3e5b52a7bbc41ef0f557d2729e37623302a0d74c9a8feb6e025c4b17797ce4fd46676339d7dc4e80354f89ab2267ae3bad13793e47e59aeea4def7b219390eb48ab9078d9680e2e4fb6111c43c60964bd380802ec1a45a39de9cc496642a4a6ccbb8f3ed5b6c37eed4f11e322d0509e918d96fc4e143a9aeefae036139712cf8e5f534a65077177d"}})
ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4)
ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r4)

4.290152173s ago: executing program 2 (id=735):
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000)
recvmsg$unix(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340), 0x100}, 0x0)
dup3(r2, r0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004ac0), 0x400000000a882, 0x0)
r4 = dup(r3)
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
pread64(r5, &(0x7f0000000080)=""/4108, 0x100c, 0x3)
add_key(&(0x7f00000010c0)='asymmetric\x00', 0x0, &(0x7f0000001100)="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", 0x110, 0xfffffffffffffffd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mprotect(&(0x7f00005f7000/0x4000)=nil, 0x4000, 0x300000a)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.649672052s ago: executing program 2 (id=739):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delnexthop={0x18, 0x69, 0xb, 0xfffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x28048001}, 0x4000000)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x38415261, 0x66}}) (async)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x38415261, 0x66}})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x10000074, 0x0, 0x20000, 0xb49, 0x9, 0x100000001, 0x0, 0x3e}, 0x0)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x1, 0x0, 0x0)
timer_create(0x5, 0x0, 0x0) (async)
timer_create(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=@framed, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x6c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @beacon={{{}, {0xff}, @broadcast}, 0x0, @default, 0x88b, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xe}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xab, 0x3a}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6, "6c433ebe3226"}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000640)=@generic={0x0, r2}, 0x18)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)='\x00'/33, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000700)={0x0, r6})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000740)=0x1)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000340)='erofs\x00', 0x0, &(0x7f0000000240)='acl')

3.566866994s ago: executing program 4 (id=740):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ff"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)='espintcp', 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
close(r0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9e7b4ae51746b84407e31cbbb33453499f2b3662e81ac383870f4a71c8c64fd3927ebace86b8e1dd6163fffd55fff25ffbd01b6822bde631b94cad4c767edc7e3e272aa74ddcc455c06ddd12a232fb58df8889ae1439d2f8ad74cab79096e27dc065d170efd7463a8b48465b0a5fd897d88278bb71412bc1b26c3338b62fb6a36054698ebbc4f829e5d2d72b8c335a6eeea579e21300d6", 0x97, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @private1, 0x9}, 0x1c)
syz_usbip_server_init(0x3)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000280)={0x4c, 0x0, 0x1})
semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000001c0)=""/135)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='bridge0\x00', 0x10)
sendmmsg$inet6(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r2, &(0x7f0000000400), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd)
syz_emit_ethernet(0x2b, &(0x7f0000000100)={@empty, @empty, @void, {@arp={0x806, @generic={0x335, 0x888e, 0x6, 0x4, 0x9, @empty, "b313e895", @random="40b9a14f9c37", "1512c679c5"}}}}, 0x0)

3.386902504s ago: executing program 2 (id=742):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8502, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000001c0), 0x6)
ioctl$sock_bt_hci(r2, 0x400448dc, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6f41bcbb, @empty, 0x2}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0xffdc}, {&(0x7f0000000280)="fe9e068de255348ad0d3ef9095bbaee2612a3588304c997d32c630dd50214b7f6b079ac4d8f8c1ecdeed5ad551d0416b9ec2b16021fd51659161003c410cf5c5845a50c5"}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000100)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x20, 0x12, 0x1, 0x800, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @generic="358fff5956667aa8d6"]}, 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x80)

2.718817438s ago: executing program 4 (id=747):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
gettid() (async)
r0 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x242, 0x0)
write$dsp(r1, &(0x7f0000000180)=' ', 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000140)='maps\x00')
read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020) (async)
read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r4 = openat(r3, &(0x7f0000000340)='./file0\x00', 0x660a02, 0x3f46137792f68265)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0xc0049364, &(0x7f00000001c0))

2.575901784s ago: executing program 3 (id=748):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214, 0x30000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)

2.575594358s ago: executing program 0 (id=749):
unshare(0x26020480)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000040)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x200, 0x1})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0)

2.410157562s ago: executing program 3 (id=750):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x20a00, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0x16)

2.198984326s ago: executing program 3 (id=751):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x60240)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0x0, 0x282a56856acd26f8, 0x8, 0x0, 0x9}})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000240)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000500)={{0x80}, 'port0\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0xc800, 0x0)

2.198092321s ago: executing program 0 (id=752):
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000001200)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x1c, &(0x7f0000001580)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007ffb000b70000000000000095"], &(0x7f0000001680)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

1.96782723s ago: executing program 0 (id=753):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffd}, 0x90)

1.827957947s ago: executing program 0 (id=754):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000700)=ANY=[@ANYBLOB="60b80000", @ANYRES16=<r0=>0xffffffffffffffff, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRESHEX, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYBLOB='R'], 0x8)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@cache={0x0, 0x1450, 0x0, 0x78, 'cache\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '65', 0x20, '1 metadata2', 0x20, 'smq 0'}}]})
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.749018689s ago: executing program 4 (id=755):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235000800000f3048b85ca60000000000000f23d00f21f835100000010f23f86666410f3882440200c44115fd9834000000f30f1efc66baa000b887000000ef66410fc737f3450f09470f06362e0f01df", 0x57}], 0x1, 0x20, &(0x7f0000000100), 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000140)={0x8, <r2=>r0, 0x2})
setsockopt$sock_int(r2, 0x1, 0x46, &(0x7f0000000180)=0x100, 0x4)
r3 = syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=<r4=>0x0)
fcntl$setown(r3, 0x8, r4)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000240)=0x73)
fcntl$lock(r0, 0x24, &(0x7f0000000280)={0x0, 0x3, 0x5924f2a1, 0xa, r4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendto(r0, &(0x7f00000002c0)="9f67274cfc30668acb24586651e13341ba376f25697e7c9cdd0098e59c4974dbcfa8a3b4566837406d8c8f95b8215cfb4b5293c4209912edbc8923f4d656ecc3849c7484e52cee4a0427fe44153737e0dd5b47a50ad533831f40b8071fccb764cb7682161aefbb65f354e390e1bc7ec9b9d2faf86999c947f14614cc6a3aa65e2d0e5e4fbb952b6fd73d57d1c47cb7af40364a25592d4ee252b93d2bf4093dc9deabe1cd35f49f3025031bdb2ce2d959651cfb56afc99de66a2a5062d701dcff655344f1fa", 0xc5, 0x20000000, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x994, @loopback, 0x48f}}, 0x80)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000440)=0xf1f, 0x4)
ioctl$TCFLSH(r0, 0x540b, 0x1)
getpid()
fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=@v1={0x2, "2d0ebd87"}, 0x5, 0x1)
ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000500))
ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000000540))
sendmsg$nl_generic(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb0, 0x31, 0x200, 0x70bd2b, 0x25dfdbfc, {0x7}, [@nested={0x9a, 0x7f, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0x14, 0x15b, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x2}}, @nested={0x4, 0x12e}, @generic="5697620389443182c38556bda06684932e959b1303b69ed2d3ba62c397ac74169cdf0b4a803b423b98e9247b089fb26ecc16b057797b4d4f554f91c95c966893bb9448538ac7cd7d47fa2f0786f036c44929cc83683071d5f956978623d69053545d617ad10fe399be9a8423dc8df876066c349d0aa7", @nested={0x4, 0xd9}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
read(r2, &(0x7f0000000700)=""/194, 0xc2)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000800))
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1412, 0x800, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x2000001)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000980)=0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f00000009c0))
userfaultfd(0x1)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000a40))

1.400475851s ago: executing program 3 (id=756):
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000e80)=<r1=>0x0, 0x0, &(0x7f0000000f00)=<r2=>0x0)
syz_ublk_add_dev(r0, r1, 0x0, r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0)
r4 = syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x680)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000400)={0x8, @pix={0x3, 0xa, 0x38416761, 0x9, 0x1, 0x4, 0xc, 0x114c, 0x0, 0x3, 0x2, 0x7}})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x40)
mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x8)
mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/irqmode\x00', 0x2, 0xb6)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000540))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x80000001}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pread64(r6, &(0x7f00000002c0)=""/44, 0x2c, 0x40)
write(r5, &(0x7f0000000b80)='100', 0x3)
socket(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r7, &(0x7f0000000c40)='1', 0x1)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff)

1.399815952s ago: executing program 4 (id=757):
setns(0xc9, 0x0)
r0 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10)
r1 = open(&(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000200)={0x7, "c4722e04755c9e28b23369c933f158cea2562711aa066a278c7894a223b864c0", 0x3, 0x1})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000280)={0x6, "3e5fae038674f9000cd76734528c517392151444d6ccb3f2ae4001a06f7340be"})
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
creat(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x54)
shutdown(0xffffffffffffffff, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)="cc455ac0d7b1cd0fd2792e0e491d372439c56bce50000000000000000000000000f8941fb04295a600504471c6503fcc58a756b370e6fa20ce4dde8e8e8f112fb17d0b606ff3ddb8a45227d8e9e9ea645345c1f4ea904aacc832780a9fa48e7aff5a7a753296a94433500ca7f0bd37376d231e3519d8e9b2ac9a3862c68d6629fb31eee9fb4d324338dd7d8b1bae72b451ace3f03dfa3c520ca8b13d02cdc1bac04a0114096804e58c67050f3dea4694f8a28fc27f8e31701b97caf4693da54548d252a6d817d4a9129f6605efd0dac029afb1181df460744a479504366c0161f92058097d8b2a4cf4cf625b9b2c1095dc95e61963789fd530b678e157f8c29876c16ef67a748867e17bf1b4d7b036fe7e2c0ccf1c57f3684b0dd2abf637bee15ce050957f61260e8f", 0xfffffe1a)
accept(r2, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtaction={0x18, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
fanotify_init(0x40, 0x800)

959.368962ms ago: executing program 2 (id=758):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
socket(0x40000000015, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x6}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x4000)

787.533897ms ago: executing program 4 (id=759):
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8a, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001040000000000000800000018150000", @ANYRES32=0x1, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000006bc5030062f000000103080006000000652620000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183000000200000000000000000000000d990600ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000efe800007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000400), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents(r2, &(0x7f00000001c0)=""/81, 0x51)

786.82896ms ago: executing program 0 (id=760):
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000001200)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x1c, &(0x7f0000001580)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950090ffffff0000b7020000001200007b2a00fe00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f0000001680)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

660.025748ms ago: executing program 3 (id=761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x48c42, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20040054)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000500000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0x0, 0x0}, 0x10)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000005c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x2, 0x80000001, 0xffffffff, 0xfffffeff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xfffffffc}, {0x1, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xe61}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
write$P9_RSTATu(r3, 0x0, 0x6e)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000840)=0xffffffff)
close(0x3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040))
creat(&(0x7f0000000080)='./file0\x00', 0x0)
setns(0xc9, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000001000010025bd7004fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000034a04000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000880)={0x7, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x108)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x88, 0x0, 0x0, 0x41002}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(r1, r3, 0x2)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000bc0)=""/225, &(0x7f0000000cc0)=0xe1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000680), 0x1006, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20)

548.111982ms ago: executing program 0 (id=762):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1001841, &(0x7f0000000100)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa0441, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x4) (rerun: 64)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000580)='8', 0x1) (async, rerun: 32)
setresgid(0x0, 0x0, 0x0) (rerun: 32)
inotify_init() (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async)
utime(&(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', &(0x7f0000000a40)={0x9, 0x9}) (async, rerun: 32)
r4 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
getsockopt(r4, 0xff, 0x8, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = open$dir(&(0x7f0000000440)='./file0\x00', 0xc402, 0x80)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000a80), 0x180302, 0x0)
pwritev2(r6, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="8d", 0x1}], 0x1, 0x3e8000, 0x400, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r7, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002f00)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(r7, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000e0a050000000000000000000a0000050900010073797a31000000001c0003800c000080080008000345000000020900020073797a3100000000140000001100010000000000000000000500000a51e0358a00"/116], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) (async, rerun: 64)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async, rerun: 64)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000700)={0x0, 0x9ea5, 0x4000, 0x3, 0x39c, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e13, 0x800, 0x1, 0x20a}}, {0x0, 0x0, <r8=>0xffffffffffffffff, {0x0, 0xbd21, 0x400, 0x2, 0xc, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd50a, 0x20000, 0x1, 0x7b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x721c, 0x20000, 0x0, 0x17e, 0x0, r1}}], 0x4, &(0x7f0000001cc0)={0x2e, 0x4, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x81}, 0x0, 0x0, '\x00', {0x4, 0x854, 0x0, &(0x7f0000000cc0)=@buf_4k="499ee6dc0e9cc9a9193da03d082cb24da07cbdb597d9ab997f42831eba3f2fad63474515282389e08428d7473794d40345d2243fbb267b5b22342ba13b836b97d3c8b6cbbf0be8c4d4b92cdd141b4c72eeaf1b09217eb542964b00d6d8f1fa4465db9464502df837871c9cc3bb13a317cb9912017082bb352a104e7f122529416f57ea2bed90c851fba5a2190605cf5ad9a3164b3a721a1946696923e260bf78a09f55b39d32a747a81e988d4fbfcd9377cb9466aba8d397c96e58ce278461c75c311bd4bd2bfc777ca59656b63c9e82ff28b5374736167c66680046ec3ad166c1aa7fa7190ed688cd88844fceac71832559287716f4eeaf21f2c3b7d684ed2a53f04c0223bfb1c56f88bc3004833b15578daf82e3a5f8c8837ccf6fd02a7e922bf9ea6e00e52e30de788cba18d48477ad218523b7e3febcb129a960e4ca9a60856fd0a7fcdc195bbb20744e0ae115b9794bb6b569cee17e97c6ed14f839b0f0f6423c65b4ed84854f0b1ad8135981e834284d7f83c4be7e0aabb3beba14b654968baff8ebc41d2c2209598aa5b4d179b47894024a978f36a8cadbcf5042ed0ecdde048b66818c12906686927f1b09aede9195288facec9b2208b1b0077c0d755a966756bc8c177a497b59665eee588e71a270bf60b8ae2c92a76d53e106ba092401ed3cdf6aebce966f13ed25387e0af9c6f76f3b036e822cf43841759f770fc1ad8c35c5b11e4e1e3b4578aa299341f1e61b035d95d877536b1b636c73ad290677aa63e58cbdac8e74ec3d14f629a5c8dffe48b56ae047aeb4b012de92c9c1d88e3950c130cd2d71920a29aa8490c1dbd1359eb442a4ce14d027679f13b35e586027c4513278fbbb3804f540aa86506cb4f7d43e5f8604c7d229d4184307e5307a3d75a20da542a6e2f2ea538e18fc26bbcb6b1f671f40614eab940e104ca5416b44530e335b63efd5a7f0ea9db4dcbee9e8260a1bc4225d903c5f83795f6e8972f6e65588e374b8bfcb6cc4ab94d90f6c98d8d877c2428b97fa6b8c882fc7e55cce5e4f2809a9d135c17359b16093ac3b4c27affa843237ff92f64de4b01ea94f7995a1e24a16a1c48288004233eedb551438dd9949e7bd760a6cfc0cf0ef720dbad92f590d551de9c1d2a00bf5ad52bbaff19afc0924148ebad878e55deb50488718568bf3aed033037fbf4f15ef1a00064f44b0dfee203449e1ad97aee4b128d4585d66081457d1012beada290bec07e20b6a4afafb778ba8d420bf3db2495722f8b96d8f647c548d42a99cbab406b59df458a1ca576b5042d6b4edef9e6cf662c74738c2db61d69db67623cac6f0f821ae22f0b2f32addeaa0299a8dab1efa4e9c138ea1132e786950b805629496d6f27aab1406ee1f6b7e86817bff2a64bf65839df6a4e44ce4219f205d01e43f7a5f18f5df5fb274ad0411b647c02e72b1c7b2a93b0c1499be92111156938eb03f7709418d7e6d1f52748a040db88d8543abd0c4f513936317dc685b549a6292e3cc1a91de85a0fc8b3da3d95a141aae3ff88e5c86ca9f93287be011f6ef57b148b7c21cc50e1fa30974791f375fd79da736cb0163fefd2a66adf40a41d8a0cacd2c31ee36dd5b7f73346d9f97042f83976ac79728f6897064c8bccb4964059148a0d7639ab43e182c676bd4735e92433f055e2426cf3be97679ec5b45aecb6fa1951709ec07d7ac883d3cc92a82222617bc73e09aeb6d2b2fd32a4bb0ebf96016ce8dfc999268e6574d8293c0ea930ed44b94875056add01155d1149a7726e6302a84ebbd360633f7792fb06c02434f84ce6d4c51424f871c9defae6b237e175ad8d1ce6d5d6aa5d61d158b71c51c01a626cd912501362debbf393599e7c8fa1e1b844887379f2a5d8368f08a1b80be60411c439b8757d5bdfe975439eec155fb66a788e0b8019f261ec9c5c11499a62bdd58a567dcafe4259175bc52263a2cb1df13654b4abc7434d3aa00fa314bad84a65b8afb8cfb454045d578944556eb328805c3a04c0b172a3d40a12835b44d1960f663564985711cab26bbea627993498f490e0415ef70335727830a2a60f343faf27d11005ea8adb42717f2366f29082226bddb9663f9d303f3ea88623551820f88fa8cfd0ebc7399f61f4d74f048acc8a43652a7c1fd13e80abf0338e31c48f772bcad9897dcd0aef0537a32f23b7032f05efe456d2c71bcc7893b17427966f7eb5f70818ce20f26d61bee065cf2f320d1e1981420a2ac7140b435c34b875fa2b97aed6b83844cfda3c6f26e5bfa1d7937fba24dfc04d9cfb5df146761721cae0fe395f451c0313830205850c4d91e351fe523d4fc0159af968274e0ac7dd881a40979deaed3509d2eff9b5cc32e7a9f3839109b888683e31e308daff395e4c1e48b8d40e033930b4e37917fe7fc04db7dbc7276ec8ee696cb5d1ac10020c91591ac0d023f561e2761685caaf42d1f75e8295b6d7fd1dd1b53bf1b21b90694d0ba4eb46406c7c190cf3d4e8ef47ef15a7223afca163b24df6e697ddfb8304d0aedca058d9138760043506ecfa884b260005ec4844520190d771bd59d580af8e3138b496c719cff9c08777535775848f3f385f2d867e32f91b996058114303e88a8223845e531f77d86da2b5baa7bb2e48d76b1f39f7bfd7cae10c935bee0c88ac5883ef1d518a2c87d2003937fbb4aed7c7c40ff9a27dd47c4a2e574526affebc644e65a02e7c192e52f6a3ddbca995dca2b4018080b56b98eb81b1b1b246f96e2d3c1677046851b38581e4e04effc8b4ac5438fdf07525cd0104b2b2613d95c80e498215a111f5b521d8455eeb100dd7adcf7ca767329c8285c9aa75778d47b00e4b556b3bf17b393e804710dec8e99945b9bbf7c31050231f77202db0ddfe7bec96c343c33e74a9a58ccf67301c09719f2e0f5fec48f9e834d7acfc2eb7fa5de125e222df2d44124695144c6612d1fa0ee21ad6544a0f28691d9ab86fa67d0ed80820195db7d26b0060bf6cac1f9e3befacafa42f81a023d8a120e78f27325a03b0f49cf7029eecf2943bc712e12b9e8c4cdab1e47d56952b937450ce6b3364decfdcce2a94db462b3a84167458ad1cd5f5907fcae5901461af3b5c53a6c52d8b797c49c5509fa8080277616389ea7928520bd6c4a163bfa4dc07fc0219d0b6edfba9550103f837c28600f044448f942a4b99423b3c1b5dec7fe30d2c733a5e6f3baa59dc71157c7c4b95ed6d1180cb5107f3edd36a336e32097f807f1ae7324229b7cf30f3d5339c37759ffe0e85ca4303f58c222cab2a8b51acd173d16514427f51f4b1decf107e0f86ffce16167ce397fdef40b0e27013f8b0b4b5a31e76e5553287527d46f30d51fce297754daf39d4a993db9baec902de6c32717cce7aec4885b32b9f85d52ab59bb932a53748464bf5469e87da009a5c69bc66912254432303f471de3dde1c8efaf9d54daa7bb40c565b0113a074a6835bd72a6ce33f305a43e38f42cdfdc71759d31781efac989aa37409ad1b70a4ab6e556dfc36330d077f6d60f13935bfde13f3b0b0f1a88afdf54bd2d570425629db37a04300f3d29febb7ce445a6e54805d9fa6c24fdd1270cc3b1f4819f0fe2e0d4824568fadf7678f0856351dc8e016f9ce7037df83968b27a83466c0d6384ee9d6cd93d68403d529a6ae27d1dd02c0a097e181a912d3cf16b9374e5154ea1884fe7d15d614c8490329e0cbea20f06b198f7daf3c5420914d05a7a290666a2d7fbdb085f13a460d186cd240455445d245ac4e7afe5d98eba8620c2587cabcd7a1ba712cf3186e387ed473d2aa10a5bea8cfdf388b31466df9583e8106a6fbb7376a90525c8273e415b412e38ea0d555fff7e6c898d2dbdffe73652f76969ef80ed90a49dbf35d8d379a76989a1e04d0628146999ac28fe7c953dab79654d9342ed26ee415c07867cc1fd0be1bab7cda404f804d6fd6e9630fb6ad5e68bc0d8fdca1467befdb568eca918bbee02203759f60d20edfa7f0034e53b9b9e4c2a4e812fbd840eecd8f3fd028bc3c9e936c494f3e2b4d27f0cf9d2754d2b985be5cf5ddcd0b2bd0184e8e18f33a4ccadd907ff5e21ffdd1271cbc36e694242a1c2a6feb88aa64e18e7dd8508e097cd63c9defcd7dcc3640444e4b894a897d7ad0a5f2a3b97db39f30dcead06a30db35f5da33c77fd087a9e6b06c17cf955642be0956636e72edbf708688f55bc5857403f8f899cedfee0196572d87e15fc1ac818f41886174a533751b51932a12fb04915c2aa1317e3182124f52d3c62240a9247a6e9cd91268eddde583dc4b321895a2d3c43e0420096fd9ccdec2dd338122c23ed8b16aac738ca0313d569f096b4c2fd35752f42336188875fa02c43ea72f94cd61cb0d6d0841dcbf6f60af44e2ffa4a0b8ebc3bcc9e979cb847ba30e3c7ef4bd3770ef813c410a90bb54e5992d17da3eaa85848f5b08f2990ab9383b543dc8fbadc82a489fabd89e9bc49d1bb1ed1a33243e6bb079e87809958094e4ca431e8b87c68b0192ca541967e227726b4a7d91468a953b26c672ffe3a407a89220100e5f324495b69c622fb385f88b7f77431912d5e10dbf41d001d38e9cfe65fbee3178b65a44d11857936f8a5a31a515f253c4edd6ec6302cc50c3c39f4f9ab5b178fde5126e6159f05ace274798dc514ed3133e7c11ad9a244beedc1acc38bf816a1b2ece667c8bd3bde282d5b0b23208182ec09823354658803fa0bbce7ff1eb17d2205d4e0f297615ad94795cc8b534752fe31196f7cac1b478c33b66db37d8e8cf9b5ab7c29a61d197944c5119e7fbdefd77013ce1032a7d9071f24401e9156a1b4bdbf07f265f8153ac44e72b86313e9b1e9a391847abebecff7e56f0749202561006acaf3777a7d9ce4cc1835dbf67dac5e1d8299399e130bcc4e0f81997736f1385b11b3f04f118e6ee54636fc0900431524276dda92e669a2a1ca59ba1a304ab8045ef3dcfb862518809c4a299cdfee67280951556932caa13c7ac75bbe5078e5b8a8b93dfb7312e046a85808ff5407dc59a18480a5c628dccadeb8a6a954671b159c11e10ad313aa190304cb87a03da0eac6802d2f145c3e2976d43b149a090354d66ba61ba1359b3a6c3114e05c9139e9ec02178c8e963c6ba05fd2fa311f9057a74d5b05580c3f553fc8e1bad16d3bb5427ac6730a464c7cd83ec16c480682374b9814457c42f7b5d8021bc7cbd1f7f0218f7ac498417daec16b043a309987b927ae4f70b4c9c34515695154afe29ccd0961902fc138ccc7940781ae6e8ba471e29242455362655e1f8d2583208f3a2e0ba0dd81fba411242923c6b6e682e79f1fe4f7c44e303b5dc09bfdec5d1605bfa3e574755490736525ce32e118489e8055ae93ece85442c7f122a17027f9cb97240fe83c36b48d6969aa59edf3785037c268a77bde26b094c152ea38d7b278f60aba12fe43bce29179c2e8e31205e2eefc4bfa6428b900587ad5fa78637778c9840231b257db2995e6c848a4bfadb820fe8c07c36f0210c931b44d042d18e0ab304a9119f219b803e137de826dbd54a37dffb6a49b37a2589ff8c043595289b68bb121174087ffdfb5f6b498ead1a5d7e3b9f0d49ddfd74a3914b2573961b2f636d4ca97fce87f30f992f7de4e648d19f7af7fa9a906fede6614c47086de9f738214391b4d7286a57db1e3c738dd4e42217098f2bbc0f383dc8d36b067cf25782399a3b5934615aa6509bc224e5e81cfb31a60f211395d8c9b00c4af8e776621198f4da6f8b4a251498a99d8626054dd"}}, &(0x7f0000001d40))
pwrite64$ublk_ch(r8, &(0x7f0000001d80)=@buf_1k="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", 0x1000, 0x4) (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
pread64(r9, &(0x7f00000001c0)=""/15, 0xf, 0x404)

547.728649ms ago: executing program 4 (id=763):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0)
write(r0, &(0x7f0000000480)='3', 0x1)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000004c0), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x10, 0x80000)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1a6b}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x3, 0x1, 0xb, 0x3, 0x7, 0xb87, 0x2, 0x9c}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000880}, 0x20040084)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043106aaaaaaaaaa1096703eea903c8b37885ae3471f0c30e1acaffd92d9f1af5cda845935746109abdd000d485f9d173d53018cadf33bf47a0105"], 0x9)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="78021e16e786f70fdf16bbd5668063f42c9a08a7648898872c237679922f2259fcb3c91acf48607880e7c2c8aae966436cff4b8e7f926ff59319875f9ea083", @ANYRESDEC=r13, @ANYRES64=r13], 0x50}}, 0x8040)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, r13, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe95}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x84}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

428.934422ms ago: executing program 3 (id=764):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000380)={'wlan0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff58, 0x20008005, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./drv\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./drv/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='0000:00:1f.3', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000600)='100', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./drv/bind\x00', 0x1, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r7)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006000000080004000300000008000500ea8c8c002200070073797374656d5f753a6f626a6563745f723a75"], 0x48}}, 0x0)
write(r6, &(0x7f0000000780)='0000:00:1f.3', 0xc)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r0, 0xd9b2794f6a139537, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=765):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newsa={0x144, 0x10, 0x200, 0x70bd2c, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in=@private=0xa010101, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x192, 0x6, 0xffff, 0x82520, 0x2, 0xff, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@extra_flags={0x8, 0x18, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'cbcmac-aes-ce\x00'}, 0x0, 0x100}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
ppoll(&(0x7f0000000c00)=[{r5, 0x2002}], 0x1, &(0x7f0000000c40), 0x0, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r7=>r0}, './file0\x00'})
syz_io_uring_setup(0x2493, &(0x7f0000000580)={0x0, 0x25f0, 0x14800, 0x2, 0x2eb, 0x0, r7}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680))
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
tee(r4, r8, 0x7, 0x1)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd010000000000140000006028000001082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000300)={&(0x7f0000000340)=""/120, 0xffffffffffffff28})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800002, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004020000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='fdinfo/3\x00')
read$eventfd(r11, &(0x7f0000000a80), 0x8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x80, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x48040)

kernel console output (not intermixed with test programs):

[ T6848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.876468][ T6848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.909508][   T43] audit: type=1400 audit(1794365629.439:26349): avc:  denied  { create } for  pid=6856 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   75.911827][   T43] audit: type=1400 audit(1794365629.439:26350): avc:  denied  { setopt } for  pid=6856 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   75.912600][   T43] audit: type=1400 audit(1794365629.439:26351): avc:  denied  { write } for  pid=6856 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   75.918693][   T43] audit: type=1400 audit(1794365629.449:26352): avc:  denied  { mount } for  pid=6856 comm="syz.2.304" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   75.950613][ T6857] nfs: Unknown parameter ''
[   75.979775][   T25] asus 0005:0B05:8502.0002: item fetching failed at offset 2/3
[   75.982964][ T6848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.987960][   T25] asus 0005:0B05:8502.0002: Asus hid parse failed: -22
[   76.010096][   T25] asus 0005:0B05:8502.0002: probe with driver asus failed with error -22
[   76.045896][ T6848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.055607][   T43] audit: type=1400 audit(1794365629.589:26353): avc:  denied  { unmount } for  pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   76.101138][ T6865] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   76.101160][ T6865] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   76.101370][ T6865] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   76.101382][ T6865] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   76.111519][ T6865] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   76.156890][ T5639] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.195173][ T5884] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.195209][ T5884] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.195231][ T5884] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.312249][ T6895] overlayfs: failed to resolve 'work': -2
[   76.319454][ T6895] overlayfs: failed to resolve 'work': -2
[   76.353918][ T6882] SELinux:  policydb magic number 0x72742f2e does not match expected magic number 0xf97cff8c
[   76.354156][ T6882] SELinux: failed to load policy
[   76.604835][  T941] cfg80211: failed to load regulatory.db
[   76.655760][   T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   76.692783][ T6925] gretap0: entered promiscuous mode
[   76.702047][ T6925] gretap0: left promiscuous mode
[   76.816587][   T30] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[   76.819046][   T30] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   76.819080][   T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.819094][   T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   76.819128][   T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.819147][   T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.820642][   T30] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   76.820660][   T30] usb 8-1: Product: syz
[   76.820671][   T30] usb 8-1: Manufacturer: syz
[   76.847246][   T30] cdc_wdm 8-1:1.0: skipping garbage
[   76.847261][   T30] cdc_wdm 8-1:1.0: skipping garbage
[   76.854922][   T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   76.854938][   T30] cdc_wdm 8-1:1.0: Unknown control protocol
[   76.886370][ T1183] IPVS: starting estimator thread 0...
[   76.893804][ T6929] FAULT_INJECTION: forcing a failure.
[   76.893804][ T6929] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   76.893828][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.1.326 Not tainted syzkaller #0 PREEMPT(full) 
[   76.893847][ T6929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   76.893857][ T6929] Call Trace:
[   76.893870][ T6929]  <TASK>
[   76.893879][ T6929]  dump_stack_lvl+0x100/0x190
[   76.893925][ T6929]  should_fail_ex.cold+0x5/0xa
[   76.893953][ T6929]  should_fail_alloc_page+0xeb/0x140
[   76.893990][ T6929]  prepare_alloc_pages+0x1f0/0x5b0
[   76.894027][ T6929]  __alloc_frozen_pages_noprof+0x1b9/0x31e0
[   76.894063][ T6929]  ? __lock_acquire+0x5c0/0x1f40
[   76.894112][ T6929]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   76.894140][ T6929]  ? __lock_acquire+0x5c0/0x1f40
[   76.894177][ T6929]  ? find_held_lock+0x2b/0x80
[   76.894195][ T6929]  ? page_table_check_set+0x39e/0x630
[   76.894229][ T6929]  ? page_table_check_set+0x39e/0x630
[   76.894255][ T6929]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   76.894319][ T6929]  ? policy_nodemask+0xed/0x5e0
[   76.894343][ T6929]  alloc_pages_mpol+0x201/0x560
[   76.894366][ T6929]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   76.894387][ T6929]  ? find_held_lock+0x2b/0x80
[   76.894405][ T6929]  ? find_held_lock+0x2b/0x80
[   76.894423][ T6929]  ? mfill_atomic_install_pte+0x5d1/0x910
[   76.894451][ T6929]  ? mfill_atomic_install_pte+0x5d1/0x910
[   76.894480][ T6929]  folio_alloc_mpol_noprof+0x36/0x260
[   76.894507][ T6929]  vma_alloc_folio_noprof+0xed/0x1d0
[   76.894533][ T6929]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[   76.894559][ T6929]  ? __pfx_mfill_atomic_install_pte+0x10/0x10
[   76.894585][ T6929]  ? mm_alloc_pmd+0x2c2/0x470
[   76.894614][ T6929]  anon_alloc_folio+0x25/0x160
[   76.894640][ T6929]  ? __pfx_anon_alloc_folio+0x10/0x10
[   76.894666][ T6929]  __mfill_atomic_pte+0x145/0xb50
[   76.894704][ T6929]  ? __pfx___mfill_atomic_pte+0x10/0x10
[   76.894736][ T6929]  ? mm_alloc_pmd+0x2c2/0x470
[   76.894768][ T6929]  mfill_atomic_copy+0x727/0x1620
[   76.894794][ T6929]  ? __pfx_avc_has_extended_perms+0x10/0x10
[   76.894851][ T6929]  ? __pfx_mfill_atomic_copy+0x10/0x10
[   76.894874][ T6929]  ? lock_acquire+0x1d1/0x380
[   76.894895][ T6929]  ? __might_fault+0xc5/0x140
[   76.894928][ T6929]  ? find_held_lock+0x2b/0x80
[   76.894960][ T6929]  userfaultfd_ioctl+0x2278/0x6550
[   76.894995][ T6929]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   76.895027][ T6929]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[   76.895055][ T6929]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   76.895087][ T6929]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[   76.895148][ T6929]  ? __fget_files+0x34/0x3d0
[   76.895184][ T6929]  ? selinux_file_ioctl+0x1e0/0x290
[   76.895199][ T6929]  ? selinux_file_ioctl+0x1e7/0x290
[   76.895218][ T6929]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[   76.895244][ T6929]  ? __x64_sys_ioctl+0x18e/0x210
[   76.895259][ T6929]  __x64_sys_ioctl+0x18e/0x210
[   76.895279][ T6929]  do_syscall_64+0x123/0x7b0
[   76.895312][ T6929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.895332][ T6929] RIP: 0033:0x7fa6567a8f19
[   76.895349][ T6929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.895366][ T6929] RSP: 002b:00007fa657582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   76.895398][ T6929] RAX: ffffffffffffffda RBX: 00007fa656a25fa0 RCX: 00007fa6567a8f19
[   76.895412][ T6929] RDX: 0000200000000440 RSI: 00000000c028aa03 RDI: 000000000000000c
[   76.895424][ T6929] RBP: 00007fa656837f6d R08: 0000000000000000 R09: 0000000000000000
[   76.895435][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.895446][ T6929] R13: 00007fa656a26038 R14: 00007fa656a25fa0 R15: 00007ffc57ddc948
[   76.895471][ T6929]  </TASK>
[   76.919916][ T6933] loop5: detected capacity change from 0 to 7
[   76.921989][ T6933] Dev loop5: unable to read RDB block 7
[   76.922012][ T6933]  loop5: AHDI p1
[   76.922030][ T6933] loop5: partition table partially beyond EOD, truncated
[   76.978490][ T6930] IPVS: using max 28 ests per chain, 67200 per kthread
[   76.978761][ T6936] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   77.038853][ T6906] cdc_wdm 8-1:1.0: Error submitting int urb - -90
[   77.052203][   T30] usb 8-1: USB disconnect, device number 6
[   77.086736][ T6938] FAULT_INJECTION: forcing a failure.
[   77.086736][ T6938] name failslab, interval 1, probability 0, space 0, times 0
[   77.086765][ T6938] CPU: 2 UID: 0 PID: 6938 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT(full) 
[   77.086786][ T6938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.086796][ T6938] Call Trace:
[   77.086803][ T6938]  <TASK>
[   77.086810][ T6938]  dump_stack_lvl+0x100/0x190
[   77.086847][ T6938]  should_fail_ex.cold+0x5/0xa
[   77.086877][ T6938]  should_failslab+0xc2/0x120
[   77.086901][ T6938]  __kmalloc_cache_noprof+0x91/0x6d0
[   77.086927][ T6938]  ? _raw_spin_unlock_irq+0x23/0x50
[   77.086946][ T6938]  ? snd_seq_fifo_new+0x42/0x270
[   77.087004][ T6938]  ? __pfx_snd_seq_open+0x10/0x10
[   77.087039][ T6938]  snd_seq_fifo_new+0x42/0x270
[   77.087064][ T6938]  snd_seq_open+0x144/0x530
[   77.087092][ T6938]  ? __pfx_snd_seq_open+0x10/0x10
[   77.087116][ T6938]  snd_open+0x201/0x450
[   77.087136][ T6938]  ? __pfx_snd_open+0x10/0x10
[   77.087154][ T6938]  chrdev_open+0x234/0x6a0
[   77.087179][ T6938]  ? __pfx_chrdev_open+0x10/0x10
[   77.087202][ T6938]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   77.087241][ T6938]  do_dentry_open+0x674/0x1470
[   77.087280][ T6938]  ? __pfx_chrdev_open+0x10/0x10
[   77.087311][ T6938]  vfs_open_consume+0xcc/0x460
[   77.087342][ T6938]  path_openat+0x1547/0x23f0
[   77.087373][ T6938]  ? __pfx_path_openat+0x10/0x10
[   77.087406][ T6938]  do_file_open+0x20e/0x430
[   77.087433][ T6938]  ? __pfx_do_file_open+0x10/0x10
[   77.087475][ T6938]  ? _raw_spin_unlock+0x28/0x50
[   77.087492][ T6938]  ? alloc_fd+0x471/0x7a0
[   77.087524][ T6938]  do_sys_openat2+0x163/0x1d0
[   77.087549][ T6938]  ? __pfx_do_sys_openat2+0x10/0x10
[   77.087586][ T6938]  __x64_sys_openat+0x12d/0x210
[   77.087612][ T6938]  ? __pfx___x64_sys_openat+0x10/0x10
[   77.087648][ T6938]  do_syscall_64+0x123/0x7b0
[   77.087673][ T6938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.087692][ T6938] RIP: 0033:0x7fa6567a8f19
[   77.087708][ T6938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.087725][ T6938] RSP: 002b:00007fa657582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   77.087745][ T6938] RAX: ffffffffffffffda RBX: 00007fa656a25fa0 RCX: 00007fa6567a8f19
[   77.087757][ T6938] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c
[   77.087769][ T6938] RBP: 00007fa656837f6d R08: 0000000000000000 R09: 0000000000000000
[   77.087781][ T6938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.087792][ T6938] R13: 00007fa656a26038 R14: 00007fa656a25fa0 R15: 00007ffc57ddc948
[   77.087819][ T6938]  </TASK>
[   77.093960][ T5141] Bluetooth: hci0: connection err: -111
[   77.377457][ T6942] netlink: 'syz.2.331': attribute type 2 has an invalid length.
[   77.377480][ T6942] __nla_validate_parse: 72 callbacks suppressed
[   77.377492][ T6942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.331'.
[   77.383919][ T6944] loop2: detected capacity change from 0 to 7
[   77.386985][ T6944] Dev loop2: unable to read RDB block 7
[   77.387018][ T6944]  loop2: unable to read partition table
[   77.387166][ T6944] loop2: partition table beyond EOD, truncated
[   77.387196][ T6944] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[   77.529939][ T6957] netlink: 'syz.0.337': attribute type 21 has an invalid length.
[   77.530066][ T6957] netlink: 156 bytes leftover after parsing attributes in process `syz.0.337'.
[   77.533790][ T6957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62290 sclass=netlink_route_socket pid=6957 comm=syz.0.337
[   77.554960][ T6957] batman_adv: batadv0: Adding interface: syz_tun
[   77.554976][ T6957] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.555000][ T6957] batman_adv: batadv0: Interface activated: syz_tun
[   77.582218][ T6959] FAULT_INJECTION: forcing a failure.
[   77.582218][ T6959] name failslab, interval 1, probability 0, space 0, times 0
[   77.582237][ T6959] CPU: 3 UID: 0 PID: 6959 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) 
[   77.582251][ T6959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.582258][ T6959] Call Trace:
[   77.582262][ T6959]  <TASK>
[   77.582266][ T6959]  dump_stack_lvl+0x100/0x190
[   77.582289][ T6959]  should_fail_ex.cold+0x5/0xa
[   77.582306][ T6959]  should_failslab+0xc2/0x120
[   77.582322][ T6959]  kmem_cache_alloc_noprof+0x92/0x6a0
[   77.582338][ T6959]  ? __pfx_map_id_range_down+0x10/0x10
[   77.582354][ T6959]  ? security_inode_alloc+0x3b/0x2c0
[   77.582373][ T6959]  security_inode_alloc+0x3b/0x2c0
[   77.582388][ T6959]  inode_init_always_gfp+0xc75/0xfb0
[   77.582405][ T6959]  alloc_inode+0x8e/0x250
[   77.582415][ T6959]  iget_locked+0x1d4/0x6c0
[   77.582426][ T6959]  ? __pfx_iget_locked+0x10/0x10
[   77.582435][ T6959]  ? kernfs_root+0xee/0x2a0
[   77.582466][ T6959]  ? kernfs_root+0xee/0x2a0
[   77.582486][ T6959]  kernfs_get_inode+0x46/0x470
[   77.582502][ T6959]  kernfs_iop_lookup+0x1a7/0x2d0
[   77.582515][ T6959]  __lookup_slow+0x155/0x320
[   77.582535][ T6959]  lookup_slow+0x54/0x80
[   77.582551][ T6959]  link_path_walk+0x1449/0x1bd0
[   77.582569][ T6959]  path_openat+0x1a7/0x23f0
[   77.582586][ T6959]  ? __pfx_path_openat+0x10/0x10
[   77.582605][ T6959]  do_file_open+0x20e/0x430
[   77.582621][ T6959]  ? __pfx_do_file_open+0x10/0x10
[   77.582644][ T6959]  ? _raw_spin_unlock+0x28/0x50
[   77.582655][ T6959]  ? alloc_fd+0x471/0x7a0
[   77.582672][ T6959]  do_sys_openat2+0x163/0x1d0
[   77.582687][ T6959]  ? __pfx_do_sys_openat2+0x10/0x10
[   77.582708][ T6959]  __x64_sys_openat+0x12d/0x210
[   77.582722][ T6959]  ? __pfx___x64_sys_openat+0x10/0x10
[   77.582743][ T6959]  do_syscall_64+0x123/0x7b0
[   77.582764][ T6959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.582776][ T6959] RIP: 0033:0x7fd36e3a8f19
[   77.582787][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.582797][ T6959] RSP: 002b:00007fd36f301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   77.582811][ T6959] RAX: ffffffffffffffda RBX: 00007fd36e625fa0 RCX: 00007fd36e3a8f19
[   77.582818][ T6959] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c
[   77.582825][ T6959] RBP: 00007fd36e437f6d R08: 0000000000000000 R09: 0000000000000000
[   77.582832][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.582838][ T6959] R13: 00007fd36e626038 R14: 00007fd36e625fa0 R15: 00007ffe7c257058
[   77.582852][ T6959]  </TASK>
[   77.632851][ T6961] openvswitch: netlink: Missing valid actions attribute.
[   77.632879][ T6961] openvswitch: netlink: Actions may not be safe on all matching packets
[   77.869935][ T6973] evm: overlay not supported
[   78.231767][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.348'.
[   78.231846][ T6985] netlink: 9 bytes leftover after parsing attributes in process `syz.0.348'.
[   78.362535][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'.
[   79.210107][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.250373][  T941] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   80.341946][ T7041] netlink: 108 bytes leftover after parsing attributes in process `syz.3.360'.
[   80.517337][   T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   80.647198][ T6965] bond0: no command found in slaves file - use +ifname or -ifname
[   80.980324][ T7033] ceph: No mds server is up or the cluster is laggy
[   81.026432][ T5944] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   81.424671][ T7056] overlayfs: cannot append lower layer
[   81.435536][   T43] kauditd_printk_skb: 28 callbacks suppressed
[   81.435551][   T43] audit: type=1400 audit(1794365634.969:26382): avc:  denied  { create } for  pid=7055 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.441882][   T43] audit: type=1400 audit(1794365634.969:26383): avc:  denied  { bind } for  pid=7055 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.445811][   T43] audit: type=1400 audit(1794365634.979:26384): avc:  denied  { write } for  pid=7055 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.445835][   T43] audit: type=1400 audit(1794365634.979:26385): avc:  denied  { read } for  pid=7055 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.622050][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'.
[   82.686106][ T7039] syz.0.361 (7039) used greatest stack depth: 19656 bytes left
[   83.166301][ T7101] smpboot: CPU 1 is now offline
[   83.190349][   T43] audit: type=1400 audit(1794365636.719:26386): avc:  denied  { setopt } for  pid=7100 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   83.210260][   T43] audit: type=1400 audit(1794365636.739:26387): avc:  denied  { ioctl } for  pid=7100 comm="syz.3.367" path="socket:[16143]" dev="sockfs" ino=16143 ioctlcmd=0x928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   83.362298][   T43] audit: type=1400 audit(1794365636.889:26388): avc:  denied  { read write } for  pid=7107 comm="syz.0.366" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   83.370168][   T43] audit: type=1400 audit(1794365636.889:26389): avc:  denied  { open } for  pid=7107 comm="syz.0.366" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   83.401783][   T43] audit: type=1400 audit(1794365636.929:26390): avc:  denied  { ioctl } for  pid=7107 comm="syz.0.366" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   83.416499][   T43] audit: type=1400 audit(1794365636.939:26391): avc:  denied  { read } for  pid=7107 comm="syz.0.366" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   83.445966][ T7101] smpboot: CPU 3 is now offline
[   84.011034][ T7120] netlink: 'syz.2.370': attribute type 16 has an invalid length.
[   84.011057][ T7120] netlink: 'syz.2.370': attribute type 17 has an invalid length.
[   84.330352][ T7124] ip_tables: iptables: counters copy to user failed while replacing table
[   84.365378][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'.
[   84.621907][ T7121] rxe_eth0 speed is unknown, defaulting to 1000
[   84.985972][ T7144] FAULT_INJECTION: forcing a failure.
[   84.985972][ T7144] name failslab, interval 1, probability 0, space 0, times 0
[   84.986001][ T7144] CPU: 0 UID: 0 PID: 7144 Comm: syz.2.376 Not tainted syzkaller #0 PREEMPT(full) 
[   84.986022][ T7144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.986034][ T7144] Call Trace:
[   84.986041][ T7144]  <TASK>
[   84.986049][ T7144]  dump_stack_lvl+0x100/0x190
[   84.986100][ T7144]  should_fail_ex.cold+0x5/0xa
[   84.986133][ T7144]  should_failslab+0xc2/0x120
[   84.986159][ T7144]  __kmalloc_noprof+0xfc/0x840
[   84.986179][ T7144]  ? tomoyo_encode2+0xfb/0x3c0
[   84.986204][ T7144]  tomoyo_encode2+0xfb/0x3c0
[   84.986229][ T7144]  tomoyo_encode+0x29/0x50
[   84.986248][ T7144]  tomoyo_realpath_from_path+0x18c/0x690
[   84.986274][ T7144]  tomoyo_path_number_perm+0x23c/0x580
[   84.986302][ T7144]  ? tomoyo_path_number_perm+0x22e/0x580
[   84.986332][ T7144]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   84.986380][ T7144]  ? current_check_access_path+0x25c/0x420
[   84.986405][ T7144]  ? __pfx_current_check_access_path+0x10/0x10
[   84.986429][ T7144]  ? d_lookup+0xe7/0x190
[   84.986450][ T7144]  ? lookup_dcache+0x66/0x170
[   84.986479][ T7144]  ? lookup_one_qstr_excl+0xaf/0x250
[   84.986511][ T7144]  tomoyo_path_mkdir+0x9b/0xe0
[   84.986534][ T7144]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[   84.986559][ T7144]  ? lock_acquire+0x1d1/0x380
[   84.986588][ T7144]  security_path_mkdir+0x154/0x2e0
[   84.986618][ T7144]  filename_mkdirat+0x168/0x630
[   84.986647][ T7144]  ? __pfx_filename_mkdirat+0x10/0x10
[   84.986672][ T7144]  ? strncpy_from_user+0x19d/0x2d0
[   84.986726][ T7144]  ? do_getname+0x191/0x390
[   84.986756][ T7144]  __x64_sys_mkdirat+0x89/0xc0
[   84.986780][ T7144]  do_syscall_64+0x123/0x7b0
[   84.986805][ T7144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.986824][ T7144] RIP: 0033:0x7fd36e3a8f19
[   84.986840][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.986858][ T7144] RSP: 002b:00007fd36f301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   84.986876][ T7144] RAX: ffffffffffffffda RBX: 00007fd36e625fa0 RCX: 00007fd36e3a8f19
[   84.986888][ T7144] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[   84.986899][ T7144] RBP: 00007fd36e437f6d R08: 0000000000000000 R09: 0000000000000000
[   84.986910][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.986920][ T7144] R13: 00007fd36e626038 R14: 00007fd36e625fa0 R15: 00007ffe7c257058
[   84.986949][ T7144]  </TASK>
[   85.071189][ T7144] ERROR: Out of memory at tomoyo_realpath_from_path.
[   85.156277][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.252718][   T58] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   85.271896][   T58] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   85.535742][   T58] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   85.792562][ T7143] overlay: ./file1 is not a directory
[   85.810249][ T7143] erspan0: entered promiscuous mode
[   85.810272][ T7143] erspan0: entered allmulticast mode
[   86.046504][   T58] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   86.197902][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.203649][ T7144] ceph: No mds server is up or the cluster is laggy
[   86.518290][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.587113][ T7160] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   86.768137][ T7164] loop8: detected capacity change from 0 to 7
[   86.780766][ T7164]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[   86.780797][ T7164] loop8: partition table partially beyond EOD, truncated
[   86.780968][ T7164] loop8: p1 size 1905483274 extends beyond EOD, truncated
[   86.784353][ T7164] loop8: p2 start 121280928 is beyond EOD, truncated
[   86.857771][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   87.024088][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[   87.131714][ T7176] loop2: detected capacity change from 0 to 8
[   87.168139][ T7184] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   87.188945][   T43] kauditd_printk_skb: 8 callbacks suppressed
[   87.188961][   T43] audit: type=1400 audit(1794365640.719:26400): avc:  denied  { name_bind } for  pid=7185 comm="syz.0.388" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   87.236453][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.549580][ T7176] Dev loop2: unable to read RDB block 8
[   87.549613][ T7176]  loop2: unable to read partition table
[   87.549771][ T7176] loop2: partition table beyond EOD, truncated
[   87.549801][ T7176] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   87.705757][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.392'.
[   87.708412][ T7206] FAULT_INJECTION: forcing a failure.
[   87.708412][ T7206] name fail_futex, interval 1, probability 0, space 0, times 0
[   87.708430][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT(full) 
[   87.708443][ T7206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.708449][ T7206] Call Trace:
[   87.708453][ T7206]  <TASK>
[   87.708458][ T7206]  dump_stack_lvl+0x100/0x190
[   87.708479][ T7206]  should_fail_ex.cold+0x5/0xa
[   87.708498][ T7206]  get_futex_key+0x1c9/0x13e0
[   87.708512][ T7206]  ? __pfx_get_futex_key+0x10/0x10
[   87.708524][ T7206]  ? ___sys_sendmsg+0x127/0x1e0
[   87.708557][ T7206]  futex_wake+0xf4/0x5e0
[   87.708580][ T7206]  ? __pfx_futex_wake+0x10/0x10
[   87.708606][ T7206]  ? find_held_lock+0x2b/0x80
[   87.708622][ T7206]  do_futex+0x2b2/0x440
[   87.708634][ T7206]  ? __pfx_do_futex+0x10/0x10
[   87.708647][ T7206]  ? fput+0x7c/0x100
[   87.708662][ T7206]  __x64_sys_futex+0x34f/0x4d0
[   87.708676][ T7206]  ? __pfx___x64_sys_futex+0x10/0x10
[   87.708693][ T7206]  do_syscall_64+0x123/0x7b0
[   87.708707][ T7206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.708718][ T7206] RIP: 0033:0x7f8bb61a8f19
[   87.708727][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.708737][ T7206] RSP: 002b:00007f8bb71000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   87.708748][ T7206] RAX: ffffffffffffffda RBX: 00007f8bb6425fa8 RCX: 00007f8bb61a8f19
[   87.708754][ T7206] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bb6425fac
[   87.708760][ T7206] RBP: 00007f8bb6425fa0 R08: 0000000000000001 R09: 0000000000000000
[   87.708767][ T7206] R10: 00000000000000b8 R11: 0000000000000246 R12: 0000000000000000
[   87.708773][ T7206] R13: 00007f8bb6426038 R14: 00007fff0392f350 R15: 00007fff0392f438
[   87.708788][ T7206]  </TASK>
[   87.716738][ T7197] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.134518][   T43] audit: type=1400 audit(1794365641.659:26401): avc:  denied  { name_bind } for  pid=7213 comm="syz.0.394" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   88.148650][   T43] audit: type=1400 audit(1794365641.679:26402): avc:  denied  { node_bind } for  pid=7213 comm="syz.0.394" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   88.276853][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.349609][ T7214] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   88.354077][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[   88.405467][ T7220] device-mapper: table: 248:3: striped: Target length not divisible by chunk size (-EINVAL)
[   88.405488][ T7220] device-mapper: ioctl: error adding target to table
[   88.424081][   T43] audit: type=1400 audit(1794365641.949:26403): avc:  denied  { ioctl } for  pid=7219 comm="syz.3.396" path="socket:[16350]" dev="sockfs" ino=16350 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   88.449480][ T7222] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   88.463688][   T43] audit: type=1400 audit(1794365641.989:26404): avc:  denied  { read } for  pid=7223 comm="syz.2.398" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.463741][   T43] audit: type=1400 audit(1794365641.989:26405): avc:  denied  { open } for  pid=7223 comm="syz.2.398" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.466982][   T43] audit: type=1400 audit(1794365641.999:26406): avc:  denied  { ioctl } for  pid=7223 comm="syz.2.398" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.514866][ T7226] input: syz0 as /devices/virtual/input/input8
[   88.697756][ T5944] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   88.738020][   T43] audit: type=1400 audit(1794365642.269:26407): avc:  denied  { write } for  pid=7236 comm="syz.1.400" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.748753][   T43] audit: type=1400 audit(1794365642.279:26408): avc:  denied  { read } for  pid=7236 comm="syz.1.400" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   88.750219][   T43] audit: type=1400 audit(1794365642.279:26409): avc:  denied  { open } for  pid=7236 comm="syz.1.400" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   88.753695][ T7237] input: syz1 as /devices/virtual/input/input9
[   88.857548][ T5944] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00
[   88.858430][ T5944] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   88.861758][ T5944] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   88.863366][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.863378][ T5944] usb 5-1: Product: syz
[   88.863384][ T5944] usb 5-1: Manufacturer: syz
[   88.863391][ T5944] usb 5-1: SerialNumber: syz
[   88.943590][ T5944] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[   88.952765][ T5944] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[   88.962524][ T5944] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[   89.246476][   T58] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   89.261078][ T7249] 8021q: adding VLAN 0 to HW filter on device macsec1
[   89.289783][ T7253] ip_tables: iptables: counters copy to user failed while replacing table
[   89.314155][   T58] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   89.319187][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.332909][ T7256] netlink: 108 bytes leftover after parsing attributes in process `syz.3.407'.
[   89.341943][ T7256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25616 sclass=netlink_route_socket pid=7256 comm=syz.3.407
[   89.556301][  T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.945381][   T58] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   90.095129][   T58] usb 6-1: Using ep0 maxpacket: 32
[   90.095612][   T58] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   90.097407][   T58] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[   90.097420][   T58] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   90.097429][   T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[   90.097467][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   90.097483][   T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   90.097494][   T58] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   90.097512][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.100054][   T58] usb 6-1: config 0 descriptor??
[   90.129102][ T5860] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   90.287959][ T5860] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[   90.288835][ T5860] usb 8-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config
[   90.288859][ T5860] usb 8-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[   90.288872][ T5860] usb 8-1: config 1 interface 0 has no altsetting 0
[   90.289632][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   90.289643][ T5860] usb 8-1: SerialNumber: syz
[   90.326138][   T58] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   90.342387][   T58] usb 6-1: USB disconnect, device number 7
[   90.360756][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.362900][   T58] usblp0: removed
[   90.528627][ T5860] cdc_ether 8-1:1.0: missing cdc header ether descriptor
[   90.678296][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.695246][   T58] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   90.776505][  T941] usb 8-1: USB disconnect, device number 7
[   90.835658][ T7232] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110
[   90.840026][   T10] usb 5-1: USB disconnect, device number 2
[   90.855129][   T58] usb 6-1: Using ep0 maxpacket: 32
[   90.856498][   T58] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   90.858319][   T58] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[   90.858331][   T58] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   90.858340][   T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[   90.858360][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   90.858372][   T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   90.858388][   T58] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   90.858416][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.869564][   T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[   90.877046][   T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[   90.877756][   T10] ti_usb_3410_5052 5-1:2.0: device disconnected
[   90.925694][   T58] usb 6-1: config 0 descriptor??
[   91.141884][   T58] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   91.349386][   T10] usb 6-1: USB disconnect, device number 8
[   91.360568][   T10] usblp0: removed
[   91.395333][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.764774][ T7302] device-mapper: table: 248:3: striped: Couldn't parse stripe destination (-ENOENT)
[   91.764800][ T7302] device-mapper: ioctl: error adding target to table
[   91.863926][ T7312] loop5: detected capacity change from 0 to 7
[   91.894635][ T7312] Dev loop5: unable to read RDB block 7
[   91.894668][ T7312]  loop5: AHDI p1
[   91.894683][ T7312] loop5: partition table partially beyond EOD, truncated
[   92.112016][ T7319] ./mnt: Can't lookup blockdev
[   92.176768][ T7320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   92.297606][   T43] kauditd_printk_skb: 11 callbacks suppressed
[   92.297623][   T43] audit: type=1400 audit(1794365645.829:26421): avc:  denied  { setopt } for  pid=7324 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.308906][   T43] audit: type=1400 audit(1794365645.829:26422): avc:  denied  { write } for  pid=7324 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.336205][ T7331] syz.2.426 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   92.448296][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.491557][ T7338] loop2: detected capacity change from 0 to 7
[   92.496913][ T7338] Dev loop2: unable to read RDB block 7
[   92.496945][ T7338]  loop2: unable to read partition table
[   92.497534][ T7338] loop2: partition table beyond EOD, truncated
[   92.497561][ T7338] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[   92.678734][   T43] audit: type=1400 audit(1794365646.209:26423): avc:  denied  { create } for  pid=7341 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   93.107995][ T7363] loop5: detected capacity change from 0 to 7
[   93.111995][ T7363] Dev loop5: unable to read RDB block 7
[   93.112012][ T7363]  loop5: AHDI p1
[   93.112023][ T7363] loop5: partition table partially beyond EOD, truncated
[   93.237404][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.318823][   T43] audit: type=1400 audit(1794365646.849:26424): avc:  denied  { write } for  pid=7367 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   93.320791][   T43] audit: type=1400 audit(1794365646.849:26425): avc:  denied  { execute } for  pid=7367 comm="syz.2.438" path="/110/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   93.357225][   T43] audit: type=1400 audit(1794365646.889:26426): avc:  denied  { mounton } for  pid=7367 comm="syz.2.438" path="/110/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   93.357256][ T7370] fuse: Bad value for 'fd'
[   93.357920][ T7370] fuse: Bad value for 'fd'
[   93.475325][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.648321][ T7380] 9pnet_virtio: no channels available for device syz
[   93.696081][   T43] audit: type=1400 audit(1794365647.229:26427): avc:  denied  { write } for  pid=7371 comm="syz.1.439" name="/" dev="9p" ino=77856835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   93.717393][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.721971][   T43] audit: type=1400 audit(1794365647.249:26428): avc:  denied  { create } for  pid=7371 comm="syz.1.439" name="cpuset.memory_pressure" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   93.722136][   T43] audit: type=1400 audit(1794365647.249:26429): avc:  denied  { associate } for  pid=7371 comm="syz.1.439" name="cpuset.memory_pressure" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   93.761988][   T43] audit: type=1400 audit(1794365647.289:26430): avc:  denied  { append } for  pid=7371 comm="syz.1.439" path="/79/file0/cpuset.memory_pressure" dev="9p" ino=77856909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.833090][ T7389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.833450][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.466563][ T7415] loop5: detected capacity change from 0 to 7
[   94.470491][ T7415] Dev loop5: unable to read RDB block 7
[   94.470515][ T7415]  loop5: AHDI p1
[   94.470532][ T7415] loop5: partition table partially beyond EOD, truncated
[   94.761114][ T7419] net_ratelimit: 1 callbacks suppressed
[   94.761133][ T7419] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   94.835331][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.929899][ T7425] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   94.929899][ T7425] Please contact the netfilter-devel mailing list or update your nftables rules.
[   94.934337][ T7425] netlink: 'syz.0.453': attribute type 2 has an invalid length.
[   94.958734][ T7427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.958888][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.998878][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.031835][ T7429] nft_compat: unsupported protocol 0
[   95.254571][ T7435] syz_tun: entered allmulticast mode
[   95.310484][ T7435] syz_tun (unregistering): left allmulticast mode
[   95.433180][ T7433] fuse: Bad value for 'fd'
[   95.558029][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.644672][ T7445] loop5: detected capacity change from 0 to 7
[   95.650508][ T7445] Dev loop5: unable to read RDB block 7
[   95.650533][ T7445]  loop5: AHDI p1
[   95.650553][ T7445] loop5: partition table partially beyond EOD, truncated
[   95.809030][ T7451] ip_tables: iptables: counters copy to user failed while replacing table
[   95.817163][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'.
[   95.817195][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'.
[   95.848798][ T7452] geneve2: entered promiscuous mode
[   95.848812][ T7452] geneve2: entered allmulticast mode
[   95.886263][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.989396][ T7462] loop2: detected capacity change from 0 to 7
[   95.992017][ T7462] Dev loop2: unable to read RDB block 7
[   95.992049][ T7462]  loop2: unable to read partition table
[   95.992246][ T7462] loop2: partition table beyond EOD, truncated
[   95.992267][ T7462] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[   96.030031][ T7458] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   96.093574][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'.
[   96.093829][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'.
[   96.133707][ T7454] Console: switching to colour dummy device 80x25
[   96.282823][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'.
[   96.446632][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.596615][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.873521][ T7496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.476'.
[   96.885201][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[   96.918573][ T7498] syzkaller1: entered promiscuous mode
[   96.918591][ T7498] syzkaller1: entered allmulticast mode
[   97.058826][ T7504] loop5: detected capacity change from 0 to 7
[   97.060125][ T7504] Dev loop5: unable to read RDB block 7
[   97.060147][ T7504]  loop5: AHDI p1
[   97.060162][ T7504] loop5: partition table partially beyond EOD, truncated
[   97.163288][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'.
[   97.239616][ T7505] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.254295][ T7509] overlayfs: failed to resolve './debug': -2
[   97.309706][   T43] kauditd_printk_skb: 14 callbacks suppressed
[   97.309718][   T43] audit: type=1400 audit(1794365650.839:26445): avc:  denied  { search } for  pid=7513 comm="syz.1.483" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.309921][   T43] audit: type=1400 audit(1794365650.839:26446): avc:  denied  { append } for  pid=7513 comm="syz.1.483" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[   97.310440][   T43] audit: type=1400 audit(1794365650.839:26447): avc:  denied  { open } for  pid=7513 comm="syz.1.483" path="/90/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[   97.424440][   T43] audit: type=1400 audit(1794365650.949:26448): avc:  denied  { mounton } for  pid=7513 comm="syz.1.483" path="/90/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.570883][   T43] audit: type=1400 audit(1794365651.099:26449): avc:  denied  { read } for  pid=5787 comm="syz-executor" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.574392][   T43] audit: type=1400 audit(1794365651.099:26450): avc:  denied  { open } for  pid=5787 comm="syz-executor" path="/90/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.591688][   T43] audit: type=1400 audit(1794365651.129:26451): avc:  denied  { read } for  pid=5787 comm="syz-executor" name="clients" dev="nfsd" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.596740][ T5860] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   97.624348][   T43] audit: type=1400 audit(1794365651.149:26452): avc:  denied  { write } for  pid=5787 comm="syz-executor" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.624685][ T7526] loop6: detected capacity change from 0 to 1
[   97.634294][ T7526] Dev loop6: unable to read RDB block 1
[   97.634326][ T7526]  loop6: unable to read partition table
[   97.634531][ T7526] loop6: partition table beyond EOD, truncated
[   97.634555][ T7526] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[   97.640861][   T43] audit: type=1400 audit(1794365651.159:26453): avc:  denied  { read } for  pid=5787 comm="syz-executor" name="clients" dev="nfsd" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.640903][   T43] audit: type=1400 audit(1794365651.169:26454): avc:  denied  { setattr } for  pid=5787 comm="syz-executor" path="/90/nfsd/clients" dev="nfsd" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[   97.650157][    C2] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20800800 phys_seg 0 prio class 2
[   97.755854][ T5860] usb 8-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   97.757082][ T5860] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[   97.757133][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.758128][ T5860] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   97.758146][ T5860] usb 8-1: Manufacturer: syz
[   97.766984][ T5860] usb 8-1: config 0 descriptor??
[   97.888970][ T7502] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   97.895687][ T5860] rc_core: IR keymap rc-hauppauge not found
[   97.895697][ T5860] Registered IR keymap rc-empty
[   97.903844][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[   97.904870][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input10
[   98.102428][ T5944] usb 8-1: USB disconnect, device number 8
[   98.382296][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.467595][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.522705][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.634705][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.644314][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.649710][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.652662][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.653346][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.653818][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.270431][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.273424][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.274399][   T13] bond0 (unregistering): Released all slaves
[   99.292034][   T13] bond1 (unregistering): Released all slaves
[   99.542910][ T7550] rxe_eth0 speed is unknown, defaulting to 1000
[   99.575524][ T7583] loop5: detected capacity change from 0 to 7
[   99.577860][ T7583] Dev loop5: unable to read RDB block 7
[   99.577875][ T7583]  loop5: AHDI p1
[   99.577886][ T7583] loop5: partition table partially beyond EOD, truncated
[   99.798087][   T10] net_ratelimit: 12 callbacks suppressed
[   99.798112][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.973321][ T5495] 8021q: adding VLAN 0 to HW filter on device eth2
[  100.013486][ T7596] MTRR 3 not used
[  100.035675][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.613166][   T13] hsr_slave_0: left promiscuous mode
[  100.617999][   T13] hsr_slave_1: left promiscuous mode
[  100.618698][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.618725][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.635008][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.636815][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.662867][   T13] veth1_macvtap: left promiscuous mode
[  100.662944][   T13] veth0_macvtap: left promiscuous mode
[  100.663058][   T13] veth1_vlan: left promiscuous mode
[  100.663120][   T13] veth0_vlan: left promiscuous mode
[  100.755381][ T5798] Bluetooth: hci0: command tx timeout
[  100.755975][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.757668][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.076376][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.182988][   T13] team0 (unregistering): Port device team_slave_1 removed
[  101.251472][   T13] team0 (unregistering): Port device team_slave_0 removed
[  101.587726][ T5495] 8021q: adding VLAN 0 to HW filter on device eth3
[  101.725848][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.725921][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.726018][ T7550] bridge_slave_0: entered allmulticast mode
[  101.727364][ T7550] bridge_slave_0: entered promiscuous mode
[  101.742135][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.742220][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.742316][ T7550] bridge_slave_1: entered allmulticast mode
[  101.743474][ T7550] bridge_slave_1: entered promiscuous mode
[  101.796939][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.942404][ T7550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.954322][ T7550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.109213][ T7550] team0: Port device team_slave_0 added
[  102.113834][ T7640] xt_hashlimit: max too large, truncated to 1048576
[  102.126509][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.128144][ T7550] team0: Port device team_slave_1 added
[  102.268279][   T13] IPVS: stop unused estimator thread 0...
[  102.297028][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.297044][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.297065][ T7550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.311398][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.311412][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.311433][ T7550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.318700][   T43] kauditd_printk_skb: 220 callbacks suppressed
[  102.318717][   T43] audit: type=1400 audit(1794365655.849:26675): avc:  denied  { write } for  pid=7644 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.491242][ T5495] 8021q: adding VLAN 0 to HW filter on device eth4
[  102.529331][ T7550] hsr_slave_0: entered promiscuous mode
[  102.530045][ T7550] hsr_slave_1: entered promiscuous mode
[  102.530691][ T7550] debugfs: 'hsr0' already exists in 'hsr'
[  102.530705][ T7550] Cannot create hsr debugfs directory
[  102.757074][   T43] audit: type=1400 audit(1794365656.289:26676): avc:  denied  { mounton } for  pid=7649 comm="syz.2.510" path="/133/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  102.757539][ T7650] overlayfs: workdir and upperdir must reside under the same mount
[  102.782869][   T43] audit: type=1400 audit(1794365656.309:26677): avc:  denied  { write } for  pid=7649 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.835558][ T5798] Bluetooth: hci0: command tx timeout
[  102.835749][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.836335][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.836494][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.987810][   T43] audit: type=1400 audit(1794365656.519:26678): avc:  denied  { write } for  pid=7657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.073669][   T43] audit: type=1400 audit(1794365656.599:26679): avc:  denied  { write } for  pid=7662 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.148219][ T5495] 8021q: adding VLAN 0 to HW filter on device eth5
[  103.568536][ T7550] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.574446][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.575594][ T7550] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.597714][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.600862][ T7550] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.617915][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.619464][ T7550] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.624593][ T7550] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.689379][ T7690] [U] zͻ�i������[27|
[  103.689444][ T7690] [U] �Bs��w�A�er��OU�]~�A��`1e��X�!��j5i�5�����y2�ڂ_�S�"q��h$�������6���\P�[2�*/��Wb_$�0A�7� X�ۖ(wc#����� =��g����<�
[  103.689459][ T7690] [U] �I��w�u��b:l��E�e�iBH��k��^�VI|ȥ�\x�d��
[  103.689508][ T7690] [U] ����|K�IH�����;F~�{I�ӎ�����=Mkq%����hd9�!�@a�*���lz��~`E���=��[>me��L�h��c��`��'�u���~+ۤ�m�ͷL�����X��������X����舂�i'�j��3�e=:3�/�C�_��<i�eT^��.��q9!��c���7Q���uR�`���S��+Z�	�
[  103.689530][ T7690] [U] T�qt�v�b����|�@��D D��E/Q�u�ٝ
3������2������y�rr�|l;6�D�����%��jK���Ʒ2A[��ikuC��덁-T1x�T���v���3��l<��3Α��K�Ì5I�.��>��81�(FW
[  103.689548][ T7690] [U] 8)��X�)�YvxRĻ���b��m�b�N�
@ox�;JD�����,
[  103.689563][ T7690] [U] *C�n�3��v7�K�E�Xgt_3�����
[  103.689573][ T7690] [U] D��/Q�a���zҬE�H��gE1$_k����s�=�R@
[  103.689617][ T7690] [U] �ϼcEv��@�
[  103.689624][ T7690] [U] a�
�%
[  103.689647][ T7690] [U] �@���������cÏ_-Ʊ��Z����&�<Z9�ah�_�L@bKÈ�s�3J�J�5����D��;w�W��ˆUu�yL���bҳ53�ż��{�4XRQ���r�H=M"�/�@	o��������p��S�����~{P���ӡ�~i*�T���~W����)�Q�~ȵ�_ߜ�ͬz�~Vq�۪`
[  103.689667][ T7690] [U] �f1�p�3
[  103.689676][ T7690] [U] N0[L;a�_��l�&�k�M�C��
[  103.689703][ T7690] [U] ��r6w^����g��P$�u����4�~GC����ߚp�k��Ft��w��~�@�L1�
[  103.700643][ T7689] [U] �:��K!:��Y咑�;R�����dm����a9�tb�����t���=� Ҫ�+�sS�i�-�Y�Jc� �(����ґ��x�|]k|��_V�
�����҉�T�8MN�i���׎�ͪ���Y΃�zAM�"e�v3�KěO0q]^�)��?ס8ⅴ��S��	�ܝX�e�ݢ��%4�<�g�!���y.����w��a�����׹����)�0�P�/��Q����{���n
[  103.903838][   T43] audit: type=1400 audit(1794365657.429:26680): avc:  denied  { write } for  pid=7693 comm="syz.0.517" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  103.903910][   T43] audit: type=1400 audit(1794365657.429:26681): avc:  denied  { open } for  pid=7693 comm="syz.0.517" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  103.919402][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.931695][   T43] audit: type=1400 audit(1794365657.459:26682): avc:  denied  { prog_run } for  pid=7693 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1
[  103.972145][ T7550] 8021q: adding VLAN 0 to HW filter on device team0
[  103.990287][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.990377][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.023070][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.023177][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.253567][ T7703] bond2: entered allmulticast mode
[  104.254213][ T7703] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.386020][ T7705] netlink: 14 bytes leftover after parsing attributes in process `syz.0.519'.
[  104.460189][   T43] audit: type=1400 audit(1794365657.989:26683): avc:  denied  { ioctl } for  pid=7702 comm="syz.0.519" path="socket:[21912]" dev="sockfs" ino=21912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.474808][ T7703] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  104.493621][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.501721][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.508344][ T7705] bond0 (unregistering): Released all slaves
[  104.745872][   T43] audit: type=1400 audit(1794365658.279:26684): avc:  denied  { watch } for  pid=7716 comm="syz.2.523" path="/138/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  104.916683][ T5798] Bluetooth: hci0: command tx timeout
[  104.927635][ T5860] net_ratelimit: 4 callbacks suppressed
[  104.927650][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.236022][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.270333][ T7735] xt_hashlimit: size too large, truncated to 1048576
[  105.281329][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.812213][ T7750] FAULT_INJECTION: forcing a failure.
[  105.812213][ T7750] name failslab, interval 1, probability 0, space 0, times 0
[  105.812245][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.0.530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.812276][ T7750] Tainted: [L]=SOFTLOCKUP
[  105.812284][ T7750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.812295][ T7750] Call Trace:
[  105.812321][ T7750]  <TASK>
[  105.812330][ T7750]  dump_stack_lvl+0x100/0x190
[  105.812403][ T7750]  should_fail_ex.cold+0x5/0xa
[  105.812446][ T7750]  should_failslab+0xc2/0x120
[  105.812496][ T7750]  __kmalloc_cache_noprof+0x91/0x6d0
[  105.812536][ T7750]  ? cap_capable+0x107/0x430
[  105.812583][ T7750]  ? __x64_sys_futex+0x358/0x4d0
[  105.812626][ T7750]  ? fsnotify_alloc_group+0x8d/0x320
[  105.812665][ T7750]  fsnotify_alloc_group+0x8d/0x320
[  105.812689][ T7750]  __do_sys_fanotify_init+0x26c/0xe10
[  105.812723][ T7750]  do_syscall_64+0x123/0x7b0
[  105.812772][ T7750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.812794][ T7750] RIP: 0033:0x7f72d23a8f19
[  105.812813][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.812832][ T7750] RSP: 002b:00007f72d329b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  105.812873][ T7750] RAX: ffffffffffffffda RBX: 00007f72d2625fa0 RCX: 00007f72d23a8f19
[  105.812888][ T7750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  105.812901][ T7750] RBP: 00007f72d2437f6d R08: 0000000000000000 R09: 0000000000000000
[  105.812913][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.812924][ T7750] R13: 00007f72d2626038 R14: 00007f72d2625fa0 R15: 00007ffe60038098
[  105.812949][ T7750]  </TASK>
[  105.887024][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.952103][ T7759] FAULT_INJECTION: forcing a failure.
[  105.952103][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.952130][ T7759] CPU: 2 UID: 0 PID: 7759 Comm: syz.2.533 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.952152][ T7759] Tainted: [L]=SOFTLOCKUP
[  105.952158][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.952167][ T7759] Call Trace:
[  105.952173][ T7759]  <TASK>
[  105.952180][ T7759]  dump_stack_lvl+0x100/0x190
[  105.952213][ T7759]  should_fail_ex.cold+0x5/0xa
[  105.952240][ T7759]  strncpy_from_user+0x3b/0x2d0
[  105.952300][ T7759]  do_getname+0x78/0x390
[  105.952339][ T7759]  do_sys_openat2+0xc3/0x1d0
[  105.952362][ T7759]  ? __pfx_do_sys_openat2+0x10/0x10
[  105.952389][ T7759]  ? fput+0x7c/0x100
[  105.952414][ T7759]  __x64_sys_openat+0x12d/0x210
[  105.952438][ T7759]  ? __pfx___x64_sys_openat+0x10/0x10
[  105.952473][ T7759]  do_syscall_64+0x123/0x7b0
[  105.952497][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.952516][ T7759] RIP: 0033:0x7fd36e36974e
[  105.952531][ T7759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  105.952547][ T7759] RSP: 002b:00007fd36f300f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  105.952564][ T7759] RAX: ffffffffffffffda RBX: 00007fd36f3016c0 RCX: 00007fd36e36974e
[  105.952575][ T7759] RDX: 0000000000000002 RSI: 00007fd36e437820 RDI: ffffffffffffff9c
[  105.952586][ T7759] RBP: 00007fd36e437f6d R08: 0000000000000000 R09: 0000000000000000
[  105.952595][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  105.952606][ T7759] R13: 00007fd36e626038 R14: 00007fd36e625fa0 R15: 00007ffe7c257058
[  105.952630][ T7759]  </TASK>
[  105.976572][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.113069][ T7761] loop5: detected capacity change from 0 to 7
[  106.117482][ T7761] Dev loop5: unable to read RDB block 7
[  106.117505][ T7761]  loop5: AHDI p1
[  106.117522][ T7761] loop5: partition table partially beyond EOD, truncated
[  106.127328][ T7763] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  106.178749][ T7763] program syz.3.534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.178813][ T7763] ata1.00: non-matching transfer count (808464432/0)
[  106.200049][ T7550] veth0_vlan: entered promiscuous mode
[  106.233302][ T7550] veth1_vlan: entered promiscuous mode
[  106.288168][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.317008][ T7550] veth0_macvtap: entered promiscuous mode
[  106.324907][ T7550] veth1_macvtap: entered promiscuous mode
[  106.352271][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.395853][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.448908][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.449221][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.449255][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.449285][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.646161][   T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  106.707165][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.707180][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.773131][ T7776] netlink: 'syz.3.540': attribute type 4 has an invalid length.
[  106.773153][ T7776] netlink: 156 bytes leftover after parsing attributes in process `syz.3.540'.
[  106.779828][ T7776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  106.797781][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  106.797818][   T10] usb 5-1: New USB device found: idVendor=1430, idProduct=6cdc, bcdDevice=85.cc
[  106.805703][   T10] usb 5-1: config 8 has an invalid interface number: 198 but max is 0
[  106.805720][   T10] usb 5-1: config 8 has no interface number 0
[  106.805750][   T10] usb 5-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8
[  106.808636][   T10] usb 5-1: string descriptor 0 read error: -22
[  106.808732][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.817326][ T7769] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  106.852523][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.889563][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.889584][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.961581][ T7783] netlink: 'syz.3.540': attribute type 4 has an invalid length.
[  106.961601][ T7783] netlink: 156 bytes leftover after parsing attributes in process `syz.3.540'.
[  106.961624][ T7783] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  106.995181][ T5798] Bluetooth: hci0: command tx timeout
[  106.995439][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.188666][   T10] usb 5-1: USB disconnect, device number 3
[  107.482905][ T7798] program syz.4.492 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.607354][   T43] kauditd_printk_skb: 9 callbacks suppressed
[  107.607375][   T43] audit: type=1400 audit(1794365661.139:26694): avc:  denied  { read } for  pid=5495 comm="dhcpcd" name="n38" dev="tmpfs" ino=2919 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.608275][   T43] audit: type=1400 audit(1794365661.139:26695): avc:  denied  { open } for  pid=5495 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=2919 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.608321][   T43] audit: type=1400 audit(1794365661.139:26696): avc:  denied  { getattr } for  pid=5495 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=2919 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.876844][   T43] audit: type=1400 audit(1794365661.409:26697): avc:  denied  { write } for  pid=7809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.879551][   T43] audit: type=1400 audit(1794365661.409:26698): avc:  denied  { create } for  pid=7809 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.900980][   T43] audit: type=1400 audit(1794365661.409:26699): avc:  denied  { write } for  pid=7809 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.914126][   T43] audit: type=1400 audit(1794365661.429:26700): avc:  denied  { append } for  pid=7809 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.930962][   T43] audit: type=1400 audit(1794365661.459:26701): avc:  denied  { view } for  pid=7812 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  107.932934][ T7813] X.509: Couldn't decode AuthKeyIdentifier
[  107.939966][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.039613][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.142702][   T43] audit: type=1400 audit(1794365661.669:26702): avc:  denied  { write } for  pid=7820 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.143060][   T43] audit: type=1400 audit(1794365661.669:26703): avc:  denied  { unlink } for  pid=7820 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  108.164411][ T7822] FAULT_INJECTION: forcing a failure.
[  108.164411][ T7822] name failslab, interval 1, probability 0, space 0, times 0
[  108.164431][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.4.550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  108.164447][ T7822] Tainted: [L]=SOFTLOCKUP
[  108.164451][ T7822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  108.164459][ T7822] Call Trace:
[  108.164465][ T7822]  <TASK>
[  108.164470][ T7822]  dump_stack_lvl+0x100/0x190
[  108.164494][ T7822]  should_fail_ex.cold+0x5/0xa
[  108.164512][ T7822]  should_failslab+0xc2/0x120
[  108.164527][ T7822]  __kmalloc_cache_noprof+0x91/0x6d0
[  108.164541][ T7822]  ? cap_capable+0x107/0x430
[  108.164555][ T7822]  ? __x64_sys_futex+0x358/0x4d0
[  108.164569][ T7822]  ? fsnotify_alloc_group+0x8d/0x320
[  108.164583][ T7822]  fsnotify_alloc_group+0x8d/0x320
[  108.164594][ T7822]  __do_sys_fanotify_init+0x26c/0xe10
[  108.164611][ T7822]  do_syscall_64+0x123/0x7b0
[  108.164641][ T7822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.164653][ T7822] RIP: 0033:0x7f0f97fa8f19
[  108.164662][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.164674][ T7822] RSP: 002b:00007f0f98e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  108.164685][ T7822] RAX: ffffffffffffffda RBX: 00007f0f98225fa0 RCX: 00007f0f97fa8f19
[  108.164693][ T7822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  108.164699][ T7822] RBP: 00007f0f98037f6d R08: 0000000000000000 R09: 0000000000000000
[  108.164706][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.164713][ T7822] R13: 00007f0f98226038 R14: 00007f0f98225fa0 R15: 00007ffde31b9f88
[  108.164729][ T7822]  </TASK>
[  108.312058][ T7827] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size.
[  108.443762][ T7831] loop5: detected capacity change from 0 to 7
[  108.451490][ T7831] Dev loop5: unable to read RDB block 7
[  108.451513][ T7831]  loop5: AHDI p1
[  108.451529][ T7831] loop5: partition table partially beyond EOD, truncated
[  108.593003][ T7833] FAULT_INJECTION: forcing a failure.
[  108.593003][ T7833] name fail_futex, interval 1, probability 0, space 0, times 0
[  108.593026][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.2.553 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  108.593041][ T7833] Tainted: [L]=SOFTLOCKUP
[  108.593046][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  108.593059][ T7833] Call Trace:
[  108.593063][ T7833]  <TASK>
[  108.593068][ T7833]  dump_stack_lvl+0x100/0x190
[  108.593092][ T7833]  should_fail_ex.cold+0x5/0xa
[  108.593110][ T7833]  get_futex_key+0x1c9/0x13e0
[  108.593125][ T7833]  ? __pfx_get_futex_key+0x10/0x10
[  108.593141][ T7833]  futex_wake+0xf4/0x5e0
[  108.593156][ T7833]  ? avc_has_perm_noaudit+0x56/0x470
[  108.593171][ T7833]  ? __pfx_futex_wake+0x10/0x10
[  108.593184][ T7833]  ? avc_has_perm_noaudit+0x11e/0x470
[  108.593201][ T7833]  ? avc_has_perm_noaudit+0x145/0x470
[  108.593217][ T7833]  do_futex+0x2b2/0x440
[  108.593230][ T7833]  ? __pfx_do_futex+0x10/0x10
[  108.593242][ T7833]  ? hook_capable+0x1bc/0x500
[  108.593274][ T7833]  __x64_sys_futex+0x34f/0x4d0
[  108.593289][ T7833]  ? __pfx___x64_sys_futex+0x10/0x10
[  108.593308][ T7833]  do_syscall_64+0x123/0x7b0
[  108.593324][ T7833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.593336][ T7833] RIP: 0033:0x7fd36e3a8f19
[  108.593345][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.593355][ T7833] RSP: 002b:00007fd36f3010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  108.593366][ T7833] RAX: ffffffffffffffda RBX: 00007fd36e625fa8 RCX: 00007fd36e3a8f19
[  108.593373][ T7833] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd36e625fac
[  108.593380][ T7833] RBP: 00007fd36e625fa0 R08: 0000000000000001 R09: 0000000000000000
[  108.593386][ T7833] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  108.593394][ T7833] R13: 00007fd36e626038 R14: 00007ffe7c256f70 R15: 00007ffe7c257058
[  108.593409][ T7833]  </TASK>
[  108.812337][ T7840] syzkaller0: entered promiscuous mode
[  108.812357][ T7840] syzkaller0: entered allmulticast mode
[  108.839333][ T7841] i2c i2c-0: delete_device: Extra parameters
[  109.289771][ T7865] device-mapper: table: 248:5: flakey: Device lookup failed (-ENOENT)
[  109.289793][ T7865] device-mapper: ioctl: error adding target to table
[  109.508787][ T7879] fuse: Bad value for 'fd'
[  109.512617][ T7880] fuse: Bad value for 'fd'
[  109.584284][ T7883] syz_tun: entered allmulticast mode
[  109.649132][ T7883] syz_tun (unregistering): left allmulticast mode
[  109.894697][ T7891] loop5: detected capacity change from 0 to 7
[  109.897065][ T7891] Dev loop5: unable to read RDB block 7
[  109.897086][ T7891]  loop5: AHDI p1
[  109.897100][ T7891] loop5: partition table partially beyond EOD, truncated
[  110.116789][ T5860] net_ratelimit: 3 callbacks suppressed
[  110.116809][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.410737][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'.
[  110.410758][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'.
[  110.448768][ T7914] bridge0: port 3(syz_tun) entered blocking state
[  110.448894][ T7914] bridge0: port 3(syz_tun) entered disabled state
[  110.449074][ T7914] syz_tun: entered allmulticast mode
[  110.462794][ T7914] syz_tun: entered promiscuous mode
[  110.463544][ T7914] bridge0: port 3(syz_tun) entered blocking state
[  110.463623][ T7914] bridge0: port 3(syz_tun) entered listening state
[  110.505354][    C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost
[  110.506263][    C0] bridge0: topology change detected, propagating
[  110.648485][ T7918] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  110.667157][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'.
[  110.684418][ T7921] ip6tnl1: entered allmulticast mode
[  110.692657][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  110.694539][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  110.715358][   T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  110.715489][  T941] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.865399][  T941] usb 5-1: Using ep0 maxpacket: 32
[  110.865954][  T941] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[  110.866998][  T941] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  110.867013][  T941] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  110.867024][  T941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  110.867051][  T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  110.867064][  T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  110.867082][  T941] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  110.867115][  T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.874194][  T941] usb 5-1: config 0 descriptor??
[  111.095660][  T941] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  111.142764][ T7906] fuse: Unknown parameter 'roA'
[  111.166659][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.192105][  T941] usb 5-1: USB disconnect, device number 4
[  111.216953][ T5573] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  111.221815][  T941] usblp0: removed
[  111.478142][  T941] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  111.967422][ T7954] loop5: detected capacity change from 0 to 7
[  111.968086][ T7954] Dev loop5: unable to read RDB block 7
[  111.968108][ T7954]  loop5: AHDI p1
[  111.968121][ T7954] loop5: partition table partially beyond EOD, truncated
[  112.198077][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.276988][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.322652][ T7968] FAULT_INJECTION: forcing a failure.
[  112.322652][ T7968] name failslab, interval 1, probability 0, space 0, times 0
[  112.322683][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.2.587 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.322724][ T7968] Tainted: [L]=SOFTLOCKUP
[  112.322731][ T7968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.322742][ T7968] Call Trace:
[  112.322748][ T7968]  <TASK>
[  112.322753][ T7968]  dump_stack_lvl+0x100/0x190
[  112.322786][ T7968]  should_fail_ex.cold+0x5/0xa
[  112.322813][ T7968]  should_failslab+0xc2/0x120
[  112.322834][ T7968]  kmem_cache_alloc_noprof+0x92/0x6a0
[  112.322857][ T7968]  ? mas_preallocate+0xc22/0xee0
[  112.322885][ T7968]  mas_preallocate+0xc22/0xee0
[  112.322914][ T7968]  ? __pfx_mas_preallocate+0x10/0x10
[  112.322948][ T7968]  ? anon_vma_name+0x5a/0x250
[  112.322965][ T7968]  ? vma_add_pgoff+0x1fd/0xa90
[  112.322992][ T7968]  __split_vma+0x447/0xce0
[  112.323019][ T7968]  ? __pfx___split_vma+0x10/0x10
[  112.323042][ T7968]  ? mas_next_slot+0xc05/0x13a0
[  112.323065][ T7968]  vms_gather_munmap_vmas+0x3a5/0x1720
[  112.323083][ T7968]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  112.323098][ T7968]  ? __pfx_vma_link+0x10/0x10
[  112.323133][ T7968]  ? __pfx___might_resched+0x10/0x10
[  112.323173][ T7968]  do_vmi_align_munmap+0x287/0x5f0
[  112.323195][ T7968]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  112.323251][ T7968]  ? mas_walk+0x260/0x310
[  112.323274][ T7968]  do_vmi_munmap+0x1f8/0x410
[  112.323297][ T7968]  unmap_source_vma+0x35c/0x8f0
[  112.323323][ T7968]  ? __pfx_unmap_source_vma+0x10/0x10
[  112.323356][ T7968]  ? __vm_enough_memory+0x184/0x390
[  112.323386][ T7968]  ? vm_stat_account+0x162/0x190
[  112.323409][ T7968]  move_vma+0x351/0x11e0
[  112.323431][ T7968]  ? __pfx_mtree_load+0x10/0x10
[  112.323454][ T7968]  ? __pfx_move_vma+0x10/0x10
[  112.323473][ T7968]  ? security_mmap_addr+0x71/0x1e0
[  112.323488][ T7968]  ? __get_unmapped_area+0x255/0x3e0
[  112.323509][ T7968]  ? vrm_set_new_addr+0x1f5/0x2a0
[  112.323534][ T7968]  mremap_to+0x234/0x530
[  112.323571][ T7968]  ? __pfx_mremap_to+0x10/0x10
[  112.323593][ T7968]  ? mas_walk+0x260/0x310
[  112.323621][ T7968]  __do_sys_mremap+0x9b7/0x17f0
[  112.323655][ T7968]  ? __pfx___do_sys_mremap+0x10/0x10
[  112.323673][ T7968]  ? vm_mmap_pgoff+0x101/0x490
[  112.323704][ T7968]  ? __pfx_do_futex+0x10/0x10
[  112.323735][ T7968]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  112.323761][ T7968]  ? xfd_validate_state+0x129/0x190
[  112.323788][ T7968]  do_syscall_64+0x123/0x7b0
[  112.323810][ T7968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.323828][ T7968] RIP: 0033:0x7fd36e3a8f19
[  112.323866][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.323883][ T7968] RSP: 002b:00007fd36f301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  112.323902][ T7968] RAX: ffffffffffffffda RBX: 00007fd36e625fa0 RCX: 00007fd36e3a8f19
[  112.323915][ T7968] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000
[  112.323927][ T7968] RBP: 00007fd36e437f6d R08: 0000200000ff6000 R09: 0000000000000000
[  112.323939][ T7968] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  112.323949][ T7968] R13: 00007fd36e626038 R14: 00007fd36e625fa0 R15: 00007ffe7c257058
[  112.323974][ T7968]  </TASK>
[  112.439396][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.440254][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.602578][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  112.606936][ T7974] bond0: entered allmulticast mode
[  112.606956][ T7974] bond_slave_0: entered allmulticast mode
[  112.606971][ T7974] bond_slave_1: entered allmulticast mode
[  112.675032][ T7974] lo: entered promiscuous mode
[  112.702455][ T7974] tunl0: entered promiscuous mode
[  112.712633][ T7974] gre0: entered promiscuous mode
[  112.767778][ T7974] gretap0: entered promiscuous mode
[  112.797131][ T7974] erspan0: entered promiscuous mode
[  112.824056][ T7979] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  112.828201][ T7974] ip_vti0: entered promiscuous mode
[  112.840315][   T43] kauditd_printk_skb: 15 callbacks suppressed
[  112.840332][   T43] audit: type=1400 audit(1794365666.369:26719): avc:  denied  { create } for  pid=7978 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  112.842644][   T43] audit: type=1400 audit(1794365666.369:26720): avc:  denied  { bind } for  pid=7978 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  112.853378][ T7974] ip6_vti0: entered promiscuous mode
[  112.914550][ T7974] sit0: entered promiscuous mode
[  112.948929][ T7974] ip6tnl0: entered promiscuous mode
[  112.950502][ T7980] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  112.965722][ T7974] ip6gre0: entered promiscuous mode
[  112.981534][ T7974] bridge0: port 3(syz_tun) entered disabled state
[  112.984243][ T7974] ip6gretap0: entered promiscuous mode
[  112.999807][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.000095][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.002694][ T7974] bridge0: entered promiscuous mode
[  113.011131][ T7974] vcan0: entered promiscuous mode
[  113.013620][ T7974] bond0: entered promiscuous mode
[  113.013632][ T7974] bond_slave_0: entered promiscuous mode
[  113.013927][ T7974] bond_slave_1: entered promiscuous mode
[  113.014198][ T7974] team0: entered promiscuous mode
[  113.014207][ T7974] team_slave_0: entered promiscuous mode
[  113.014283][ T7974] team_slave_1: entered promiscuous mode
[  113.023594][ T7974] dummy0: entered promiscuous mode
[  113.062831][ T7974] nlmon0: entered promiscuous mode
[  113.064716][ T7974] batadv0: entered promiscuous mode
[  113.073340][ T7974] vxcan0: entered promiscuous mode
[  113.074431][ T7974] vxcan1: entered promiscuous mode
[  113.090546][ T7974] veth0: entered promiscuous mode
[  113.094439][ T7974] veth1: entered promiscuous mode
[  113.111186][ T7974] wg0: entered promiscuous mode
[  113.120450][ T7974] wg1: entered promiscuous mode
[  113.124769][ T7974] wg2: entered promiscuous mode
[  113.127731][ T7974] veth0_to_bridge: entered promiscuous mode
[  113.144542][ T7974] veth1_to_bridge: entered promiscuous mode
[  113.177778][ T7974] veth0_to_bond: entered promiscuous mode
[  113.194058][ T7974] veth1_to_bond: entered promiscuous mode
[  113.210645][ T7974] veth0_to_team: entered promiscuous mode
[  113.227232][ T7974] veth1_to_team: entered promiscuous mode
[  113.237664][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.243784][ T7974] veth0_to_batadv: entered promiscuous mode
[  113.250259][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.250320][ T7974] batadv_slave_0: entered promiscuous mode
[  113.259445][ T7974] veth1_to_batadv: entered promiscuous mode
[  113.264383][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.264414][ T7974] batadv_slave_1: entered promiscuous mode
[  113.310143][ T7974] xfrm0: entered promiscuous mode
[  113.316291][ T7974] veth0_to_hsr: entered promiscuous mode
[  113.334699][ T7974] veth1_to_hsr: entered promiscuous mode
[  113.352369][ T7974] hsr0: entered promiscuous mode
[  113.361155][ T7974] veth1_virt_wifi: entered promiscuous mode
[  113.373983][ T7974] veth0_virt_wifi: entered promiscuous mode
[  113.390595][ T7974] virt_wifi0: entered promiscuous mode
[  113.419772][ T7974] vlan0: entered promiscuous mode
[  113.436963][ T7974] vlan1: entered promiscuous mode
[  113.453412][ T7974] macvlan0: entered promiscuous mode
[  113.477500][ T7974] macvlan1: entered promiscuous mode
[  113.497124][ T7974] ipvtap0: entered promiscuous mode
[  113.504456][ T7974] ipvlan0: entered promiscuous mode
[  113.512127][ T7974] ipvlan1: entered promiscuous mode
[  113.530725][ T7974] macvtap0: entered promiscuous mode
[  113.533533][ T7974] macsec0: entered promiscuous mode
[  113.544225][ T7974] geneve0: entered promiscuous mode
[  113.548762][ T7974] geneve1: entered promiscuous mode
[  113.557457][ T7974] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  113.573902][ T7974] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  113.584891][ T7974] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  113.592377][ T7974] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  113.676453][ T7974] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  113.703676][ T7974] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  113.711046][ T7974] ip6erspan0: entered promiscuous mode
[  113.727976][ T7974] bond1: entered promiscuous mode
[  113.728725][ T7974] ip6tnl1: entered promiscuous mode
[  113.745953][ T5884] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.745981][ T5884] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.745998][ T5884] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.746015][ T5884] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.803763][   T43] audit: type=1800 audit(1794365667.329:26721): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.597" name="file0" dev="9p" ino=77856837 res=0 errno=-22
[  113.806692][   T43] audit: type=1400 audit(1794365667.339:26722): avc:  denied  { map } for  pid=8007 comm="syz.4.597" path="/19/file0/file0" dev="9p" ino=77856837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  113.851287][ T8012] 9pnet_virtio: no channels available for device syz
[  113.854100][   T43] audit: type=1400 audit(1794365667.379:26723): avc:  denied  { mounton } for  pid=8007 comm="syz.4.597" path="/19/file0/file0" dev="9p" ino=77856837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  113.874940][   T43] audit: type=1800 audit(1794365667.399:26724): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.597" name="file0" dev="9p" ino=77856837 res=0 errno=-22
[  113.913844][   T43] audit: type=1400 audit(1794365667.439:26725): avc:  denied  { write } for  pid=8009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.002067][   T43] audit: type=1400 audit(1794365667.529:26726): avc:  denied  { write } for  pid=8021 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.133477][ T8027] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.601'.
[  114.228713][   T43] audit: type=1400 audit(1794365667.759:26727): avc:  denied  { write } for  pid=8028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.275365][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.308863][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.451724][   T43] audit: type=1400 audit(1794365667.979:26728): avc:  denied  { write } for  pid=8036 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.519893][ T8040] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  114.894605][ T8057] fuse: Unknown parameter 'wroup_id'
[  115.166334][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'.
[  115.166758][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'.
[  115.317087][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.329993][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.772495][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'.
[  116.178246][ T8123] loop0: detected capacity change from 0 to 4096
[  116.216964][ T5860] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  116.301595][ T8124] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  116.301628][ T8124] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  116.301726][ T8124]  loop0:
[  116.355627][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.375276][ T5860] usb 5-1: Using ep0 maxpacket: 32
[  116.376082][ T5860] usb 5-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  116.380428][ T5860] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  116.380477][ T5860] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  116.380537][ T5860] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  116.380564][ T5860] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  116.380589][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0
[  116.406089][ T5860] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  116.406115][ T5860] usb 5-1: Product: syz
[  116.406130][ T5860] usb 5-1: Manufacturer: syz
[  116.406145][ T5860] usb 5-1: SerialNumber: syz
[  116.407396][ T8128] loop5: detected capacity change from 0 to 7
[  116.409222][ T8128] Dev loop5: unable to read RDB block 7
[  116.409260][ T8128]  loop5: AHDI p1
[  116.409291][ T8128] loop5: partition table partially beyond EOD, truncated
[  116.438134][ T5860] usb 5-1: config 0 descriptor??
[  116.464846][ T5860] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  116.478540][ T5860] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  116.574047][ T8135] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  116.683260][ T5860] usb 5-1: USB disconnect, device number 5
[  116.683338][    C2] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  116.730024][ T8112] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  116.731564][ T5860] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  116.955625][ T8135] overlay: Unknown parameter '/'
[  117.395591][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.630883][ T8163] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.843648][ T8178] loop5: detected capacity change from 0 to 7
[  117.855473][ T8178] Dev loop5: unable to read RDB block 7
[  117.855498][ T8178]  loop5: AHDI p1
[  117.855513][ T8178] loop5: partition table partially beyond EOD, truncated
[  117.927907][   T43] kauditd_printk_skb: 15 callbacks suppressed
[  117.927925][   T43] audit: type=1400 audit(1794365671.459:26744): avc:  denied  { unmount } for  pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  118.098712][ T8188] ftl_cs: FTL header not found.
[  118.183160][ T8209] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  118.223743][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.246351][ T8188] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6]
[  118.246974][ T8206] block2mtd: error: cannot open device /dev/zram0
[  118.344282][ T8215] rxe_eth0 speed is unknown, defaulting to 1000
[  118.356305][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.435293][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.535907][ T8215] x_tables: duplicate underflow at hook 2
[  118.646254][ T8231] ip_tables: iptables: counters copy to user failed while replacing table
[  118.805102][ T8227] device-mapper: ioctl: device has been removed from the dev hash table.
[  118.927024][   T43] audit: type=1400 audit(1794365672.459:26745): avc:  denied  { create } for  pid=8240 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  119.196593][   T25] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  119.214727][   T43] audit: type=1400 audit(1794365672.739:26746): avc:  denied  { write } for  pid=8248 comm="syz.0.651" name="usb_gadget" dev="configfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  119.216103][   T43] audit: type=1400 audit(1794365672.749:26747): avc:  denied  { write } for  pid=8248 comm="syz.0.651" name="functions" dev="configfs" ino=24324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  119.234675][   T43] audit: type=1400 audit(1794365672.769:26748): avc:  denied  { write } for  pid=8248 comm="syz.0.651" name="uncompressed" dev="configfs" ino=24345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  119.241272][   T43] audit: type=1400 audit(1794365672.769:26749): avc:  denied  { write } for  pid=8248 comm="syz.0.651" name="u" dev="configfs" ino=24355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  119.250376][   T43] audit: type=1400 audit(1794365672.779:26750): avc:  denied  { remount } for  pid=8248 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  119.311159][   T43] audit: type=1400 audit(1794365672.839:26751): avc:  denied  { setattr } for  pid=8250 comm="syz.0.652" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  119.326081][   T43] audit: type=1400 audit(1794365672.839:26752): avc:  denied  { write } for  pid=8239 comm="syz.4.649" name="hidraw0" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  119.326133][   T25] usb 7-1: device descriptor read/64, error -71
[  119.402059][ T8259] loop2: detected capacity change from 0 to 7
[  119.402530][ T8259] Dev loop2: unable to read RDB block 7
[  119.402558][ T8259]  loop2: unable to read partition table
[  119.402697][ T8259] loop2: partition table beyond EOD, truncated
[  119.402723][ T8259] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  119.486160][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.488920][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.575090][   T25] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  119.705912][   T25] usb 7-1: device descriptor read/64, error -71
[  119.816911][   T25] usb usb7-port1: attempt power cycle
[  119.844128][ T8276] FAULT_INJECTION: forcing a failure.
[  119.844128][ T8276] name failslab, interval 1, probability 0, space 0, times 0
[  119.844147][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.3.661 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.844162][ T8276] Tainted: [L]=SOFTLOCKUP
[  119.844166][ T8276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.844172][ T8276] Call Trace:
[  119.844185][ T8276]  <TASK>
[  119.844190][ T8276]  dump_stack_lvl+0x100/0x190
[  119.844222][ T8276]  should_fail_ex.cold+0x5/0xa
[  119.844240][ T8276]  should_failslab+0xc2/0x120
[  119.844266][ T8276]  __kmalloc_noprof+0xfc/0x840
[  119.844285][ T8276]  ? trace_kmalloc+0xeb/0x110
[  119.844298][ T8276]  ? lsm_blob_alloc+0x68/0x90
[  119.844321][ T8276]  lsm_blob_alloc+0x68/0x90
[  119.844334][ T8276]  security_sk_alloc+0x2d/0x290
[  119.844352][ T8276]  sk_prot_alloc+0x12a/0x2a0
[  119.844393][ T8276]  sk_alloc+0x36/0xe80
[  119.844407][ T8276]  can_create+0x1e5/0x630
[  119.844431][ T8276]  __sock_create+0x339/0x860
[  119.844450][ T8276]  __sys_socket+0x14d/0x260
[  119.844461][ T8276]  ? __pfx___sys_socket+0x10/0x10
[  119.844476][ T8276]  __x64_sys_socket+0x72/0xb0
[  119.844487][ T8276]  ? lockdep_hardirqs_on+0x7d/0x110
[  119.844509][ T8276]  do_syscall_64+0x123/0x7b0
[  119.844524][ T8276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.844536][ T8276] RIP: 0033:0x7f8bb61a8f19
[  119.844546][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.844557][ T8276] RSP: 002b:00007f8bb7100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  119.844578][ T8276] RAX: ffffffffffffffda RBX: 00007f8bb6425fa0 RCX: 00007f8bb61a8f19
[  119.844586][ T8276] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
[  119.844593][ T8276] RBP: 00007f8bb6237f6d R08: 0000000000000000 R09: 0000000000000000
[  119.844599][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.844606][ T8276] R13: 00007f8bb6426038 R14: 00007f8bb6425fa0 R15: 00007fff0392f438
[  119.844621][ T8276]  </TASK>
[  119.927235][   T43] audit: type=1400 audit(1794365673.459:26753): avc:  denied  { listen } for  pid=8279 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  119.934200][ T8285] loop2: detected capacity change from 0 to 7
[  119.943314][ T8285] Dev loop2: unable to read RDB block 7
[  119.943335][ T8285]  loop2: unable to read partition table
[  119.943447][ T8285] loop2: partition table beyond EOD, truncated
[  119.943456][ T8285] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  120.185202][   T25] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  120.216078][   T25] usb 7-1: device descriptor read/8, error -71
[  120.321384][ T8299] loop5: detected capacity change from 0 to 7
[  120.321861][ T8299] Dev loop5: unable to read RDB block 7
[  120.321875][ T8299]  loop5: AHDI p1
[  120.321884][ T8299] loop5: partition table partially beyond EOD, truncated
[  120.411253][ T8303] FAULT_INJECTION: forcing a failure.
[  120.411253][ T8303] name fail_futex, interval 1, probability 0, space 0, times 0
[  120.411274][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.3.671 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  120.411290][ T8303] Tainted: [L]=SOFTLOCKUP
[  120.411293][ T8303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  120.411300][ T8303] Call Trace:
[  120.411304][ T8303]  <TASK>
[  120.411309][ T8303]  dump_stack_lvl+0x100/0x190
[  120.411332][ T8303]  should_fail_ex.cold+0x5/0xa
[  120.411349][ T8303]  get_futex_key+0xf5d/0x13e0
[  120.411381][ T8303]  ? __pfx_get_futex_key+0x10/0x10
[  120.411393][ T8303]  ? __mutex_unlock_slowpath+0x35d/0x930
[  120.411411][ T8303]  futex_wake+0xf4/0x5e0
[  120.411428][ T8303]  ? __pfx_futex_wake+0x10/0x10
[  120.411445][ T8303]  ? lock_acquire+0x1d1/0x380
[  120.411476][ T8303]  ? detach_task_ctx_data+0x83/0x490
[  120.411503][ T8303]  do_futex+0x2b2/0x440
[  120.411517][ T8303]  ? __pfx_do_futex+0x10/0x10
[  120.411529][ T8303]  ? __might_fault+0xc5/0x140
[  120.411555][ T8303]  mm_exit_exec_release+0x256/0x2f0
[  120.411572][ T8303]  do_exit+0x6d8/0x2a00
[  120.411586][ T8303]  ? __pfx_futex_wake_mark+0x10/0x10
[  120.411603][ T8303]  ? __pfx_do_exit+0x10/0x10
[  120.411618][ T8303]  ? do_raw_spin_lock+0x128/0x260
[  120.411633][ T8303]  ? find_held_lock+0x2b/0x80
[  120.411669][ T8303]  ? get_signal+0xa28/0x22e0
[  120.411707][ T8303]  do_group_exit+0xd5/0x2a0
[  120.411728][ T8303]  get_signal+0x1f58/0x22e0
[  120.411740][ T8303]  ? __pfx_futex_wait+0x10/0x10
[  120.411761][ T8303]  ? __pfx_get_signal+0x10/0x10
[  120.411776][ T8303]  ? do_futex+0x190/0x440
[  120.411790][ T8303]  arch_do_signal_or_restart+0x91/0x7e0
[  120.411824][ T8303]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  120.411844][ T8303]  exit_to_user_mode_loop+0x139/0x700
[  120.411865][ T8303]  ? rcu_is_watching+0x13/0xc0
[  120.411879][ T8303]  do_syscall_64+0x661/0x7b0
[  120.411893][ T8303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.411905][ T8303] RIP: 0033:0x7f8bb61a8f19
[  120.411916][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.411926][ T8303] RSP: 002b:00007f8bb71000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  120.411937][ T8303] RAX: fffffffffffffe00 RBX: 00007f8bb6425fa8 RCX: 00007f8bb61a8f19
[  120.411944][ T8303] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8bb6425fa8
[  120.411952][ T8303] RBP: 00007f8bb6425fa0 R08: 0000000000000000 R09: 0000000000000000
[  120.411959][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.411965][ T8303] R13: 00007f8bb6426038 R14: 00007fff0392f350 R15: 00007fff0392f438
[  120.411980][ T8303]  </TASK>
[  120.506259][   T25] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  120.510345][ T8305] loop2: detected capacity change from 0 to 7
[  120.514212][ T8305] Dev loop2: unable to read RDB block 7
[  120.514242][ T8305]  loop2: unable to read partition table
[  120.514456][ T8305] loop2: partition table beyond EOD, truncated
[  120.514471][ T8305] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  120.515356][ T5860] net_ratelimit: 1 callbacks suppressed
[  120.515369][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.538147][   T25] usb 7-1: device descriptor read/8, error -71
[  120.627064][ T8308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.645297][   T25] usb usb7-port1: unable to enumerate USB device
[  120.986075][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  121.145458][ T8312] FAULT_INJECTION: forcing a failure.
[  121.145458][ T8312] name failslab, interval 1, probability 0, space 0, times 0
[  121.145477][ T8312] CPU: 0 UID: 0 PID: 8312 Comm: syz.0.675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  121.145505][ T8312] Tainted: [L]=SOFTLOCKUP
[  121.145510][ T8312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  121.145517][ T8312] Call Trace:
[  121.145522][ T8312]  <TASK>
[  121.145527][ T8312]  dump_stack_lvl+0x100/0x190
[  121.145549][ T8312]  should_fail_ex.cold+0x5/0xa
[  121.145567][ T8312]  should_failslab+0xc2/0x120
[  121.145581][ T8312]  kmem_cache_alloc_noprof+0x92/0x6a0
[  121.145598][ T8312]  ? __kernfs_new_node+0xd2/0xa10
[  121.145625][ T8312]  __kernfs_new_node+0xd2/0xa10
[  121.145636][ T8312]  ? __pfx_stack_trace_save+0x10/0x10
[  121.145652][ T8312]  ? stack_depot_save_flags+0x27/0xa10
[  121.145672][ T8312]  ? __pfx___kernfs_new_node+0x10/0x10
[  121.145685][ T8312]  ? lock_acquire+0x1d1/0x380
[  121.145699][ T8312]  ? kernfs_root+0x23/0x2a0
[  121.145716][ T8312]  ? find_held_lock+0x2b/0x80
[  121.145728][ T8312]  ? kernfs_root+0xee/0x2a0
[  121.145743][ T8312]  ? kernfs_root+0xee/0x2a0
[  121.145762][ T8312]  kernfs_new_node+0x194/0x200
[  121.145775][ T8312]  ? __pfx_kernfs_new_node+0x10/0x10
[  121.145791][ T8312]  __kernfs_create_file+0x53/0x350
[  121.145807][ T8312]  sysfs_add_file_mode_ns+0x207/0x3c0
[  121.145826][ T8312]  sysfs_create_file_ns+0x145/0x1e0
[  121.145840][ T8312]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  121.145855][ T8312]  ? module_add_driver+0x1e2/0x420
[  121.145875][ T8312]  ? sysfs_do_create_link_sd+0xbb/0x140
[  121.145896][ T8312]  driver_create_file+0x4a/0x70
[  121.145912][ T8312]  bus_add_driver+0x39d/0x620
[  121.145926][ T8312]  driver_register+0x1e2/0x360
[  121.145940][ T8312]  ? rcu_is_watching+0x13/0xc0
[  121.145954][ T8312]  usb_gadget_register_driver_owner+0x132/0x210
[  121.145977][ T8312]  raw_ioctl+0x1a85/0x2b80
[  121.145991][ T8312]  ? __pfx_raw_ioctl+0x10/0x10
[  121.146000][ T8312]  ? selinux_file_ioctl+0x1e0/0x290
[  121.146019][ T8312]  ? selinux_file_ioctl+0x1e7/0x290
[  121.146029][ T8312]  ? __pfx_raw_ioctl+0x10/0x10
[  121.146045][ T8312]  __x64_sys_ioctl+0x18e/0x210
[  121.146067][ T8312]  do_syscall_64+0x123/0x7b0
[  121.146083][ T8312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.146095][ T8312] RIP: 0033:0x7f72d23a8bab
[  121.146104][ T8312] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  121.146114][ T8312] RSP: 002b:00007f72d3298f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.146125][ T8312] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f72d23a8bab
[  121.146133][ T8312] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006
[  121.146139][ T8312] RBP: 00007f72d3299fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  121.146146][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.146152][ T8312] R13: 00002000000001c0 R14: 0000000000000000 R15: 00000000000010d0
[  121.146166][ T8312]  </TASK>
[  121.147304][ T8312] bus_add_driver: uevent attr (raw-gadget.2) failed
[  121.147530][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.147867][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.162291][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  121.162314][   T10] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40
[  121.163551][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  121.163568][   T10] usb 5-1: can't read configurations, error -71
[  121.351500][ T8329] loop2: detected capacity change from 0 to 7
[  121.352015][ T8329] Dev loop2: unable to read RDB block 7
[  121.352037][ T8329]  loop2: unable to read partition table
[  121.352121][ T8329] loop2: partition table beyond EOD, truncated
[  121.352129][ T8329] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  121.556142][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.599893][ T5798] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13
[  121.609531][ T5798] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13
[  121.924413][   T77] Bluetooth: hci4: Frame reassembly failed (-84)
[  121.935520][   T77] Bluetooth: hci4: Frame reassembly failed (-84)
[  122.220924][ T8364] loop2: detected capacity change from 0 to 7
[  122.229231][ T8364] Dev loop2: unable to read RDB block 7
[  122.229254][ T8364]  loop2: unable to read partition table
[  122.229349][ T8364] loop2: partition table beyond EOD, truncated
[  122.229366][ T8364] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  122.314566][ T8362] syzkaller0: entered promiscuous mode
[  122.314581][ T8362] syzkaller0: entered allmulticast mode
[  122.517047][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.596317][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.677961][ T8387] netlink: 'syz.4.698': attribute type 1 has an invalid length.
[  122.701565][ T8387] bond1: entered promiscuous mode
[  122.701892][ T8387] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.744399][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.698'.
[  122.744521][ T8387] bond1: entered allmulticast mode
[  122.821272][ T8393] bond1: (slave bridge2): making interface the new active one
[  122.821289][ T8393] bridge2: entered promiscuous mode
[  122.821375][ T8393] bridge2: entered allmulticast mode
[  122.823028][ T8393] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  122.843980][ T8387] can: request_module (can-proto-0) failed.
[  122.977844][ T8395] CacheFiles: Failed to register: -95
[  123.225826][   T43] kauditd_printk_skb: 16 callbacks suppressed
[  123.225839][   T43] audit: type=1400 audit(1794365676.759:26770): avc:  denied  { create } for  pid=8402 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  123.228278][   T43] audit: type=1400 audit(1794365676.759:26771): avc:  denied  { bind } for  pid=8402 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  123.365673][ T8404] netlink: 76 bytes leftover after parsing attributes in process `syz.0.703'.
[  123.401050][ T8404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  123.401067][ T8404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  123.401989][ T8404] vhci_hcd vhci_hcd.0: Device attached
[  123.427533][ T8405] vhci_hcd: unknown pdu 1
[  123.442001][   T43] audit: type=1400 audit(1794365676.969:26772): avc:  denied  { read } for  pid=8402 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  123.461117][   T13] vhci_hcd vhci_hcd.0: stop threads
[  123.461136][   T13] vhci_hcd vhci_hcd.0: release socket
[  123.461165][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  123.463800][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'.
[  123.589331][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.589395][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'.
[  123.589503][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.589551][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.589578][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.635355][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.746170][   T43] audit: type=1400 audit(1794365677.279:26773): avc:  denied  { write } for  pid=8409 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  123.956194][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  124.121414][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.138937][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.205298][   T43] audit: type=1400 audit(1794365677.729:26774): avc:  denied  { setopt } for  pid=8414 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.225711][ T8415] bond1: left promiscuous mode
[  124.225732][ T8415] bridge2: left promiscuous mode
[  124.594875][   T43] audit: type=1400 audit(1794365678.119:26775): avc:  denied  { unmount } for  pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  124.686032][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.962039][ T8444] Mount JFS Failure: -5
[  124.962055][ T8444] jfs_mount failed w/return code = -5
[  124.987060][ T8442] Mount JFS Failure: -5
[  124.987070][ T8442] jfs_mount failed w/return code = -5
[  125.281433][ T8454] netlink: 'syz.0.716': attribute type 20 has an invalid length.
[  125.556141][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.583225][ T8465] trusted_key: encrypted_key: insufficient parameters specified
[  125.716056][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.808118][   T43] audit: type=1400 audit(1794365679.339:26776): avc:  denied  { ioctl } for  pid=8474 comm="syz.2.721" path="net:[4026533436]" dev="nsfs" ino=4026533436 ioctlcmd=0x80404521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  125.901312][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  125.911835][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  125.911866][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.721'.
[  125.960591][ T8475] geneve3: entered promiscuous mode
[  125.960615][ T8475] geneve3: entered allmulticast mode
[  125.961845][ T5884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.962020][ T5884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.962146][ T8477] rxe_eth0 speed is unknown, defaulting to 1000
[  125.969611][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.969646][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.613492][ T8502] loop7: detected capacity change from 0 to 7
[  126.621428][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.621594][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.624630][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.624673][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.647280][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.647340][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.648026][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.648082][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.648614][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.648704][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.648866][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.648901][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.649006][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.649039][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.649061][ T8502] ldm_validate_partition_table(): Disk read failed.
[  126.649134][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.649167][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.649255][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.649289][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.649842][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  126.649891][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  126.650051][ T8502] Dev loop7: unable to read RDB block 0
[  126.650595][ T8502]  loop7: unable to read partition table
[  126.650748][ T8502] loop7: partition table beyond EOD, truncated
[  126.668009][ T8502] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  126.756124][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.062736][ T8508] Bluetooth: MGMT ver 1.23
[  127.062761][ T8508] Bluetooth: hci0: unsupported parameter 5161
[  127.062769][ T8508] Bluetooth: hci0: unsupported parameter 8192
[  127.062775][ T8508] Bluetooth: hci0: unsupported parameter 5161
[  127.062781][ T8508] Bluetooth: hci0: unsupported parameter 8192
[  127.762815][   T43] audit: type=1400 audit(1794365681.289:26777): avc:  denied  { watch watch_reads } for  pid=8529 comm="syz.0.738" path="/198" dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  127.797944][   T43] audit: type=1400 audit(1794365681.329:26778): avc:  denied  { mount } for  pid=8529 comm="syz.0.738" name="/" dev="ramfs" ino=26206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  127.816498][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.816635][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.841310][   T43] audit: type=1400 audit(1794365681.369:26779): avc:  denied  { read } for  pid=8527 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  128.083565][ T8538] netlink: 112 bytes leftover after parsing attributes in process `syz.4.740'.
[  128.093823][ T8535] erofs (device loop2): cannot find valid erofs superblock
[  128.206214][ T8538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  128.206241][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  128.211813][ T8538] vhci_hcd vhci_hcd.0: Device attached
[  128.255528][ T8539] vhci_hcd: connection closed
[  128.263284][ T5639] vhci_hcd vhci_hcd.4: stop threads
[  128.263918][ T5639] vhci_hcd vhci_hcd.4: release socket
[  128.263932][ T5639] vhci_hcd vhci_hcd.4: disconnect device
[  128.362972][ T7873] Bluetooth: hci4: Frame reassembly failed (-84)
[  128.369793][   T43] audit: type=1400 audit(1794365681.899:26780): avc:  denied  { read } for  pid=8541 comm="syz.2.742" dev="nsfs" ino=4026533436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  128.371682][   T43] audit: type=1400 audit(1794365681.899:26781): avc:  denied  { open } for  pid=8541 comm="syz.2.742" path="net:[4026533436]" dev="nsfs" ino=4026533436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  128.596319][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.836042][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.905499][   T43] audit: type=1326 audit(1794365682.439:26782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.4.747" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f97fa8f19 code=0x0
[  129.755832][   T43] audit: type=1400 audit(1794365683.289:26783): avc:  denied  { unmount } for  pid=7550 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  129.843093][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  129.843114][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'.
[  129.918856][ T8576] batman_adv: batadv0: Interface deactivated: syz_tun
[  129.939050][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.957348][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.957766][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.067937][   T43] audit: type=1400 audit(1794365683.599:26784): avc:  denied  { ioctl } for  pid=8578 comm="syz.4.755" path="socket:[26713]" dev="sockfs" ino=26713 ioctlcmd=0x80047213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  130.204746][ T8576] team_slave_0: left allmulticast mode
[  130.227675][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.244972][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.304737][   T43] audit: type=1400 audit(1794365683.829:26785): avc:  denied  { append } for  pid=8583 comm="syz.3.756" name="video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  130.321238][   T43] audit: type=1400 audit(1794365683.849:26786): avc:  denied  { write } for  pid=8583 comm="syz.3.756" name="nullb" dev="configfs" ino=6249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.334160][   T43] audit: type=1400 audit(1794365683.869:26787): avc:  denied  { audit_write } for  pid=8585 comm="syz.4.757" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  130.356912][   T43] audit: type=1400 audit(1794365683.879:26788): avc:  denied  { read write } for  pid=8583 comm="syz.3.756" name="irqmode" dev="configfs" ino=26740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  130.362691][   T43] audit: type=1400 audit(1794365683.889:26789): avc:  denied  { open } for  pid=8583 comm="syz.3.756" path="/201/config/nullb/nullb1/irqmode" dev="configfs" ino=26740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  130.436567][ T5141] Bluetooth: hci4: command 0x1003 tx timeout
[  130.437692][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  130.658613][ T8576] ip6erspan0: left allmulticast mode
[  130.671514][ T8576] bond2: left allmulticast mode
[  130.679707][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  130.679719][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'.
[  130.695158][ T5639] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.695177][ T5639] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.695200][ T5639] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.695212][ T5639] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.695228][ T5639] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.695240][ T5639] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.695256][ T5639] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.695283][ T5639] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.784743][ T8584] null_blk: disk nullb1 created
[  130.998691][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.043568][ T8602] netlink: 68 bytes leftover after parsing attributes in process `syz.3.761'.
[  131.141096][ T8608] FAULT_INJECTION: forcing a failure.
[  131.141096][ T8608] name fail_futex, interval 1, probability 0, space 0, times 0
[  131.141126][ T8608] CPU: 2 UID: 0 PID: 8608 Comm: syz.0.762 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.141149][ T8608] Tainted: [L]=SOFTLOCKUP
[  131.141154][ T8608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.141164][ T8608] Call Trace:
[  131.141186][ T8608]  <TASK>
[  131.141193][ T8608]  dump_stack_lvl+0x100/0x190
[  131.141271][ T8608]  should_fail_ex.cold+0x5/0xa
[  131.141328][ T8608]  get_futex_key+0x1c9/0x13e0
[  131.141362][ T8608]  ? __pfx_get_futex_key+0x10/0x10
[  131.141386][ T8608]  futex_wait_setup+0x91/0x540
[  131.141415][ T8608]  __futex_wait+0x19f/0x360
[  131.141439][ T8608]  ? __pfx___futex_wait+0x10/0x10
[  131.141460][ T8608]  ? futex_hash+0x311/0x400
[  131.141480][ T8608]  ? __pfx_futex_wake_mark+0x10/0x10
[  131.141505][ T8608]  ? __pfx_futex_hash+0x10/0x10
[  131.141520][ T8608]  ? __pfx_get_futex_key+0x10/0x10
[  131.141544][ T8608]  futex_wait+0xe6/0x370
[  131.141566][ T8608]  ? __pfx_futex_wait+0x10/0x10
[  131.141593][ T8608]  ? vm_mmap_pgoff+0x101/0x490
[  131.141630][ T8608]  do_futex+0x265/0x440
[  131.141650][ T8608]  ? __pfx_do_futex+0x10/0x10
[  131.141666][ T8608]  ? lock_acquire+0x1d1/0x380
[  131.141689][ T8608]  ? __fget_files+0x34/0x3d0
[  131.141718][ T8608]  __x64_sys_futex+0x34f/0x4d0
[  131.141738][ T8608]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  131.141764][ T8608]  ? __pfx___x64_sys_futex+0x10/0x10
[  131.141792][ T8608]  do_syscall_64+0x123/0x7b0
[  131.141847][ T8608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.141864][ T8608] RIP: 0033:0x7f72d23a8f19
[  131.141878][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.141893][ T8608] RSP: 002b:00007f72d32590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  131.141919][ T8608] RAX: ffffffffffffffda RBX: 00007f72d2626188 RCX: 00007f72d23a8f19
[  131.141929][ T8608] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f72d2626188
[  131.141938][ T8608] RBP: 00007f72d2626180 R08: 0000000000000000 R09: 0000000000000000
[  131.141948][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.141957][ T8608] R13: 00007f72d2626218 R14: 00007ffe60037fb0 R15: 00007ffe60038098
[  131.141980][ T8608]  </TASK>
[  131.158669][ T8606] bond2: Unable to set up delay as MII monitoring is disabled
[  131.258705][ T8606] bond2 (unregistering): Released all slaves
[  131.319688][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'.
[  131.347311][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'.
[  131.362411][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'.
[  131.423822][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'.
[  131.587101][ T8617] ------------[ cut here ]------------
[  131.587110][ T8617] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst.
[  131.587118][ T8617] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#0: syz.3.764/8617
[  131.596541][ T8617] Modules linked in:
[  131.598207][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.3.764 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.601780][ T8617] Tainted: [L]=SOFTLOCKUP
[  131.603201][ T8617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.606436][ T8617] RIP: 0010:device_release+0x1dd/0x270
[  131.608183][ T8617] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 8d bd 90 fb 48 8d 3d a6 1c f9 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 74 bd 90 fb 48 89 da 48 b8 00 00
[  131.615437][ T8617] RSP: 0018:ffffc90006537a38 EFLAGS: 00010283
[  131.617865][ T8617] RAX: 00000000000041e6 RBX: ffff888058da0020 RCX: ffffc90007221000
[  131.620993][ T8617] RDX: 0000000000080000 RSI: ffff88805620f340 RDI: ffffffff9276e020
[  131.624103][ T8617] RBP: ffff88805620f340 R08: 0000000000000000 R09: 0000000000000000
[  131.626337][ T8617] R10: ffff888058da005b R11: 0000000000000000 R12: ffff888054f96000
[  131.628818][ T8617] R13: dffffc0000000000 R14: ffff88805620f340 R15: 0000000000000000
[  131.631618][ T8617] FS:  00007f8bb71006c0(0000) GS:ffff8880d4473000(0000) knlGS:0000000000000000
[  131.634258][ T8617] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  131.636933][ T8617] CR2: 00007f0f97ff06e0 CR3: 00000001275ae000 CR4: 0000000000352ef0
[  131.640755][ T8617] Call Trace:
[  131.642264][ T8617]  <TASK>
[  131.643485][ T8617]  kobject_put+0x1f7/0x640
[  131.646236][ T8617]  device_unregister+0x2f/0xe0
[  131.650198][ T8617]  i2c_unregister_device+0xf5/0x270
[  131.652428][ T8617]  i2c_deregister_clients+0x255/0x460
[  131.654633][ T8617]  i2c_del_adapter+0x13a/0x2e0
[  131.657082][ T8617]  i801_remove+0xa4/0x3d0
[  131.658998][ T8617]  pci_device_remove+0xb2/0x1d0
[  131.661350][ T8617]  ? __pfx_pci_device_remove+0x10/0x10
[  131.663673][ T8617]  device_remove+0xcb/0x180
[  131.665809][ T8617]  device_release_driver_internal+0x441/0x610
[  131.668527][ T8617]  unbind_store+0xf8/0x110
[  131.670385][ T8617]  ? __pfx_unbind_store+0x10/0x10
[  131.672475][ T8617]  drv_attr_store+0x74/0xb0
[  131.674366][ T8617]  ? __pfx_drv_attr_store+0x10/0x10
[  131.676935][ T8617]  sysfs_kf_write+0xf2/0x150
[  131.678870][ T8617]  kernfs_fop_write_iter+0x3e0/0x5f0
[  131.681039][ T8617]  ? __pfx_sysfs_kf_write+0x10/0x10
[  131.683233][ T8617]  vfs_write+0x6af/0x1040
[  131.685115][ T8617]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  131.687540][ T8617]  ? __pfx_vfs_write+0x10/0x10
[  131.689551][ T8617]  ? find_held_lock+0x2b/0x80
[  131.691627][ T8617]  ksys_write+0x12a/0x250
[  131.693458][ T8617]  ? __pfx_ksys_write+0x10/0x10
[  131.695805][ T8617]  do_syscall_64+0x123/0x7b0
[  131.697726][ T8617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.700557][ T8617] RIP: 0033:0x7f8bb61a8f19
[  131.702424][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.710864][ T8617] RSP: 002b:00007f8bb7100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.714295][ T8617] RAX: ffffffffffffffda RBX: 00007f8bb6425fa0 RCX: 00007f8bb61a8f19
[  131.717767][ T8617] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000006
[  131.720921][ T8617] RBP: 00007f8bb6237f6d R08: 0000000000000000 R09: 0000000000000000
[  131.724071][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.727381][ T8617] R13: 00007f8bb6426038 R14: 00007f8bb6425fa0 R15: 00007fff0392f438
[  131.730730][ T8617]  </TASK>
[  131.732046][ T8617] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  131.735069][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.3.764 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.739785][ T8617] Tainted: [L]=SOFTLOCKUP
[  131.741543][ T8617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.745640][ T8617] Call Trace:
[  131.747045][ T8617]  <TASK>
[  131.748302][ T8617]  dump_stack_lvl+0x100/0x190
[  131.750286][ T8617]  vpanic+0x2dc/0x6f8
[  131.751979][ T8617]  panic+0xd1/0xe0
[  131.753604][ T8617]  ? __pfx_panic+0x10/0x10
[  131.755504][ T8617]  check_panic_on_warn.cold+0x19/0x34
[  131.757807][ T8617]  ? device_release+0x1da/0x270
[  131.759904][ T8617]  __warn.cold+0x191/0x321
[  131.762095][ T8617]  __report_bug+0x30f/0x440
[  131.764375][ T8617]  ? device_release+0x1da/0x270
[  131.766714][ T8617]  ? __pfx___report_bug+0x10/0x10
[  131.768893][ T8617]  ? do_raw_spin_lock+0x128/0x260
[  131.770740][ T8617]  ? find_held_lock+0x2b/0x80
[  131.772491][ T8617]  ? kobj_kset_leave+0x160/0x210
[  131.774370][ T8617]  report_bug_entry+0xe2/0x290
[  131.776255][ T8617]  ? device_release+0x1dd/0x270
[  131.778253][ T8617]  handle_bug+0x1cd/0x2a0
[  131.780075][ T8617]  exc_invalid_op+0x17/0x50
[  131.781950][ T8617]  asm_exc_invalid_op+0x1a/0x20
[  131.783962][ T8617] RIP: 0010:device_release+0x1dd/0x270
[  131.786214][ T8617] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 8d bd 90 fb 48 8d 3d a6 1c f9 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 74 bd 90 fb 48 89 da 48 b8 00 00
[  131.794250][ T8617] RSP: 0018:ffffc90006537a38 EFLAGS: 00010283
[  131.796790][ T8617] RAX: 00000000000041e6 RBX: ffff888058da0020 RCX: ffffc90007221000
[  131.799675][ T8617] RDX: 0000000000080000 RSI: ffff88805620f340 RDI: ffffffff9276e020
[  131.802752][ T8617] RBP: ffff88805620f340 R08: 0000000000000000 R09: 0000000000000000
[  131.806069][ T8617] R10: ffff888058da005b R11: 0000000000000000 R12: ffff888054f96000
[  131.809331][ T8617] R13: dffffc0000000000 R14: ffff88805620f340 R15: 0000000000000000
[  131.812594][ T8617]  ? device_release+0x1d3/0x270
[  131.814644][ T8617]  kobject_put+0x1f7/0x640
[  131.816561][ T8617]  device_unregister+0x2f/0xe0
[  131.818560][ T8617]  i2c_unregister_device+0xf5/0x270
[  131.820719][ T8617]  i2c_deregister_clients+0x255/0x460
[  131.822961][ T8617]  i2c_del_adapter+0x13a/0x2e0
[  131.824975][ T8617]  i801_remove+0xa4/0x3d0
[  131.826784][ T8617]  pci_device_remove+0xb2/0x1d0
[  131.828819][ T8617]  ? __pfx_pci_device_remove+0x10/0x10
[  131.831066][ T8617]  device_remove+0xcb/0x180
[  131.833003][ T8617]  device_release_driver_internal+0x441/0x610
[  131.835548][ T8617]  unbind_store+0xf8/0x110
[  131.837425][ T8617]  ? __pfx_unbind_store+0x10/0x10
[  131.839525][ T8617]  drv_attr_store+0x74/0xb0
[  131.841338][ T8617]  ? __pfx_drv_attr_store+0x10/0x10
[  131.843443][ T8617]  sysfs_kf_write+0xf2/0x150
[  131.845200][ T8617]  kernfs_fop_write_iter+0x3e0/0x5f0
[  131.847390][ T8617]  ? __pfx_sysfs_kf_write+0x10/0x10
[  131.849545][ T8617]  vfs_write+0x6af/0x1040
[  131.851367][ T8617]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  131.853900][ T8617]  ? __pfx_vfs_write+0x10/0x10
[  131.855945][ T8617]  ? find_held_lock+0x2b/0x80
[  131.857930][ T8617]  ksys_write+0x12a/0x250
[  131.859767][ T8617]  ? __pfx_ksys_write+0x10/0x10
[  131.861807][ T8617]  do_syscall_64+0x123/0x7b0
[  131.863760][ T8617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.866213][ T8617] RIP: 0033:0x7f8bb61a8f19
[  131.868097][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.875890][ T8617] RSP: 002b:00007f8bb7100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.879301][ T8617] RAX: ffffffffffffffda RBX: 00007f8bb6425fa0 RCX: 00007f8bb61a8f19
[  131.882521][ T8617] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000006
[  131.885775][ T8617] RBP: 00007f8bb6237f6d R08: 0000000000000000 R09: 0000000000000000
[  131.888959][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.892136][ T8617] R13: 00007f8bb6426038 R14: 00007f8bb6425fa0 R15: 00007fff0392f438
[  131.895447][ T8617]  </TASK>
[  131.897472][ T8617] Kernel Offset: disabled
[  131.899269][ T8617] Rebooting in 86400 seconds..