last executing test programs:

36m51.214947854s ago: executing program 1 (id=48):
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r4, 0x5)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000001234567890abcdef00100100000e000000000000000000003fe9aa3b9e944c54c048dd12e1fa3db233f7d59a06ebc300133242b8035e2738452087c95aad83e7c1b9bb298da60f4fad2c3e195c486c4f5aa6f9757b40e2dcd2b9d676b8bcfe40a5afc4f95217a3d335cb42887d54f1c1085490962f79deb9ba056a560c533c95090cbd5288825342903d851662a647c6f119302f80f7ce7f265e7772518d7501368ff2163e6e3543ae345f41db668a74937fafa56f0112929b"], 0x28}, 0x0)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde1"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde3"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x15, 0x110, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r7 = openat(r6, &(0x7f0000000400)='test\x00', 0x42, 0x1ff)
write(r7, &(0x7f0000000500)='A', 0x1000)

36m47.850323152s ago: executing program 1 (id=55):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xd)
write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xff2e)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0)
read(r5, &(0x7f0000000500)=""/1024, 0x400)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x9, 0xf7, 0x6})
close_range(r0, 0xffffffffffffffff, 0x0)

36m42.491732168s ago: executing program 1 (id=68):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
clock_settime(0x0, &(0x7f0000000000)={0x2, 0xfffffffc})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
fsopen(&(0x7f00000001c0)='bdev\x00', 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbde252100000008000300", @ANYRES32=r6, @ANYBLOB="38002d800a"], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840)
lseek(0xffffffffffffffff, 0x3, 0x0)

36m40.239565226s ago: executing program 1 (id=73):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000280))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000)
r6 = io_uring_setup(0x7, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000004100010029bd70000400000001000001800c00108005000b80eb00000008000200", @ANYRESHEX=r6], 0x30}, 0x1, 0x0, 0x0, 0x400c8c9}, 0x4008094)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setns(0xc9, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0)

36m36.525101014s ago: executing program 1 (id=80):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
r4 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x7}, 0x8)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb)
getdents64(r6, 0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r7, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3f00cd2e, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0x10, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x40, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x4, 0x6, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x3a21, 0xac8, 0xbf, 0x4002, 0x1ff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x7, 0x1c, 0x120000, 0x5, 0x2, 0x5, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x7, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x80, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)

36m34.480807663s ago: executing program 1 (id=84):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='file drive', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r5, &(0x7f0000000280)='md0', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0xb37f5d35394a2689)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
read(r7, &(0x7f0000000100)=""/4096, 0x1000)
bind$phonet(r4, &(0x7f0000001100)={0x23, 0xc, 0x0, 0x5}, 0x10)
write(r6, &(0x7f0000000300), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0)
write(r8, &(0x7f0000000400)='4096', 0x4)

36m18.457804177s ago: executing program 32 (id=84):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='file drive', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r5, &(0x7f0000000280)='md0', 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0xb37f5d35394a2689)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
read(r7, &(0x7f0000000100)=""/4096, 0x1000)
bind$phonet(r4, &(0x7f0000001100)={0x23, 0xc, 0x0, 0x5}, 0x10)
write(r6, &(0x7f0000000300), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0)
write(r8, &(0x7f0000000400)='4096', 0x4)

6.926848029s ago: executing program 2 (id=7012):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x2, 0x6, {0x8, 0xbde, 0x1, 0x10000}})
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='isp1301 0x2c', 0xc)
write(0xffffffffffffffff, &(0x7f0000000100)="6973703133303120307832e300", 0xd)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)
write(r9, 0x0, 0x0)

5.832153239s ago: executing program 2 (id=7019):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0)
syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f0000000580)}, {&(0x7f00000005c0)}], 0x5, 0x202, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe88)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3, r2}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x3})
mprotect(&(0x7f000055a000/0x4000)=nil, 0x4000, 0x1)
msgget$private(0x0, 0x100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xa4503000)
r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
fcntl$dupfd(r5, 0x0, r3)

5.440478598s ago: executing program 2 (id=7022):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1d42, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00')
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0))
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20042, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000440)=ANY=[])
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, &(0x7f0000000100))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002680)={'tunl0\x00', &(0x7f00000025c0)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x3, 0xc000, {{0x1a, 0x4, 0x3, 0x2f, 0x68, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @remote, {[@rr={0x7, 0x7, 0xc6, [@loopback]}, @rr={0x7, 0xb, 0xbf, [@loopback, @loopback]}, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x0, [{@loopback, 0xfffffffb}, {@rand_addr=0x64010100, 0x8}]}, @generic={0x44, 0x9, "5f363b70aa88d1"}, @timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x6, [{@rand_addr=0x64010101, 0x9}, {@multicast2}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x2}]}]}}}}})

4.483048665s ago: executing program 0 (id=7029):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x2, 0x6, {0x8, 0xbde, 0x1, 0x10000}})
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='isp1301 0x2c', 0xc)
write(0xffffffffffffffff, &(0x7f0000000100)="6973703133303120307832e300", 0xd)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)
write(r9, 0x0, 0x0)

4.187257561s ago: executing program 2 (id=7030):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xe7a}, 0x1c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
r3 = io_uring_setup(0x25e, &(0x7f0000000080))
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x1b, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x16c, 0x4, 0x0, 0x1, [{0x158, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x12f, 0x3, "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"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x7f, 0x14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.49819748s ago: executing program 0 (id=7038):
r0 = socket(0x1e, 0x4, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000018c0)=[{&(0x7f0000001500)='\v', 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4)
read$FUSE(r2, &(0x7f0000001900)={0x2020}, 0x2020)
r6 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x19d}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000440)=<r8=>0x0, &(0x7f0000000180))
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f00000000c0)={0x20000001})
syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x10000)
io_uring_enter(r6, 0x7fffffe, 0x5, 0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x0, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)={0x3})
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getpeername$packet(r0, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002780)=0x14)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r10, @ANYRESDEC, @ANYRESHEX=r10], 0x4c}}, 0x8000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x8005d})
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r11, 0x6, 0xd, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

3.012983722s ago: executing program 0 (id=7044):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66a6628a609a1f59", @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0, @ANYBLOB])
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
fcntl$getflags(r1, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0xfff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
dup(r5)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$packet(0x11, 0x3, 0x300)

2.395645156s ago: executing program 3 (id=7049):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000a5847f16d1f1941a05db2c9a7f1173adbf7fd7a67a150364b1f157b24ae4bae3d48ad0cce5eb930b8356", @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6], 0x30, 0x4048080}}], 0x1, 0x4)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
write$uinput_user_dev(r7, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x1, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x6], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x8, 0x9, 0x3, 0x35, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xfff, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x1, 0x7, 0x694e1c44, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0xfffffffd, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c)
r8 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r8, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.251224256s ago: executing program 5 (id=7051):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})
close(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, 0x0, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)

2.159714901s ago: executing program 4 (id=7052):
mkdir(0x0, 0x11e)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_open_procfs(0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff03)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)

1.900426821s ago: executing program 5 (id=7053):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x88000, &(0x7f0000002a40)=[@rights={{0x10}}], 0x10, 0x26040811}}], 0x1, 0x8000)

1.866241185s ago: executing program 4 (id=7054):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
r0 = syz_open_dev$loop(&(0x7f0000000340), 0x8001, 0x101a00)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f00000003c0)=0x6, 0x4)

1.770586298s ago: executing program 3 (id=7055):
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x48c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, 0x0, 0x0)
listen(r0, 0x5)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000014010000010000001234567890abcde21000"/40], 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000400)='test\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000500)='A', 0x1000)

1.678365404s ago: executing program 5 (id=7056):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0)
syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x202, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe88)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3, r2}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x3})
mprotect(&(0x7f000055a000/0x4000)=nil, 0x4000, 0x1)
msgget$private(0x0, 0x100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xa4503000)
r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
fcntl$dupfd(r5, 0x0, r3)

1.652533938s ago: executing program 4 (id=7057):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa}, 0x10)
wait4(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002240)={0xb0, 0xfffffff5, 0x3, [{{0x1, 0x1, 0xfffffffffffffff7, 0x6, 0x0, 0x6, {0x5, 0x6, 0x80000000, 0xd, 0x9, 0x100, 0x1, 0xffffff01, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x4, 0x10000}}, {0x2, 0x40, 0x1, 0x0, ':'}}]}, 0xb0)
r3 = getegid()
r4 = syz_clone(0xff7b, 0x0, 0x0, 0x0, 0x0, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0xee00, 0x0, r3, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff, r4})
r5 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)

1.611474026s ago: executing program 3 (id=7058):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x401, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc7, 0x405d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x8, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x4, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x1ff, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x9, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xaa, 0x2, 0x809, 0x40, 0x9, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x2, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0x7ffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x9cce, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2000011, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa775, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x56, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x2, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x4, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x9, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x8, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x6)
pread64(0xffffffffffffffff, &(0x7f0000000400)=""/192, 0xc0, 0x2000000000000000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002400010026bd7000fcdbdf25040000003876e50fe937de9d05fed5e53f38d39f9d8a9b68810504000049729829a2014271eb0f4bfaa068ba4d1dd214d8719e5b1f8cf34820749dd54bb52d31d485dc44b388b9a4a431533ef3fec73a983c14f11a8d5990c179f629a295d99786b149401b501c6d721af3a9a01605f9ca4c698c6c3bade00d21e831fbfbc68ff1b220ddaf3e5b11b4a0bab6ff15c19aabfe65e61f73bd79a7c1c44939c60cdd80c10db80da003a0cc"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.479289595s ago: executing program 5 (id=7059):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0)
write$sysctl(r0, &(0x7f0000000280)='1\x00', 0x1)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x140000001, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0x5, 0x2, 0x8, 0xffffff7f, 'syz1\x00', 0x5})
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000300)='1\x00', 0x1)
r4 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0x100000a}})
ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000400)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic={0x0, 0x0, 0x0, 0x0, 0x800000}, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x2, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001940)={0x12, @pix={0x7, 0x3, 0x20343059, 0x5, 0x3d19, 0x800, 0x5, 0x1330, 0x1, 0x1, 0x1, 0x6}})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="07000000762c464b0bc5462d5c8b5fe4040000004da5a80cec3a640c4aaacdb2c1a9a54ee12e28e3df21235f81ad434abaab2a81b957eaa8fabdbff4d3366787db829f5d8b69ab569504c033f7dfa22c80025523e273c6ba7502ae30f6e8729d40f99b7c288f0d7a91e6f5cc8bd593f5c31de973d112c3f3f765c11f5ef6bc4ec07215fb5cde14795807a100a3e7540d91abbc1f3512dff1bc6b0b2d6e92e32e611e4ea1385df3d721684eb7f0fa8f767ae559adfff55e17ca", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000050000000500"/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001700)={r6, &(0x7f0000000600)="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", &(0x7f0000001600)=""/212}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0x36, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200500050000000000000000050022000b82b0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000001900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x48, r8, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "6e34b358ec5103ce48a5e1dffd8b0452"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4a264d13098c26c1f63e14b8c6444570"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4080)

1.422570426s ago: executing program 4 (id=7060):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f00000002c0)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x2, 0x1, 0x0, 0x1}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
close(r2)
getsockopt$inet_int(r1, 0x0, 0xd, 0x0, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

1.352143132s ago: executing program 3 (id=7061):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
setns(0xc9, 0x0)
r1 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, r2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socket(0x8, 0x5, 0x5)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f2, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496", 0xe4}, {&(0x7f0000000cc0)="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", 0x13e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)}, {&(0x7f0000000200)="223aa707c08a7eca", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.345878514s ago: executing program 2 (id=7062):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x2, 0x6, {0x8, 0xbde, 0x1, 0x10000}})
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)

1.217859236s ago: executing program 5 (id=7063):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})
close(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, 0x0, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)

1.191520584s ago: executing program 3 (id=7064):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)
rmdir(0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_open_procfs(0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff03)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)

937.265796ms ago: executing program 0 (id=7065):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0xffffffff, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x206, 0x2}, {0x4000000000, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x50, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffff72}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r7 = gettid()
setrlimit(0xe, &(0x7f0000000000)={0xa, 0x9}) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000700)=""/73, 0x49}], 0x1, 0x5, 0xffe)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)

881.585645ms ago: executing program 5 (id=7066):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000a5847f16d1f1941a05db2c9a7f1173adbf7fd7a67a150364b1f157b24ae4bae3d48ad0cce5eb930b8356", @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6], 0x30, 0x4048080}}], 0x1, 0x4)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
write$uinput_user_dev(r7, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x1, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x6], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x8, 0x9, 0x3, 0x35, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xfff, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x1, 0x7, 0x694e1c44, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0xfffffffd, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c)
r8 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r8, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)

869.097279ms ago: executing program 3 (id=7067):
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540), 0x16dc81, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@echo=0x8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x119)
write(r4, &(0x7f0000000200)='bfq', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='1\n', 0x2)
pread64(r0, &(0x7f0000000400), 0x0, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000140)})
close_range(r6, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f00000002c0)=""/7, 0x7, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000062a60cb0000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x6d, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], <r7=>0x0, 0xed, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x79, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES16=r7], 0x0, 0x0, 0x34, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000380)={{0xc, @empty, 0x4e21, 0x2, 'none\x00', 0x3, 0xd, 0x78}, {@private=0xa010101, 0x4e23, 0x2, 0x12, 0x3, 0xf16}}, 0x44)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000001c0)={0x800103, 0x103, 0x6, 0xe1d9, 0x6})

406.238012ms ago: executing program 4 (id=7068):
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x48c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, 0x0, 0x0)
listen(r0, 0x5)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000014010000010000001234567890abcde21000"/40], 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000400)='test\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000500)='A', 0x1000)

270.802265ms ago: executing program 0 (id=7069):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0)
syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x202, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe88)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3, r2}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x3})
mprotect(&(0x7f000055a000/0x4000)=nil, 0x4000, 0x1)
msgget$private(0x0, 0x100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xa4503000)
r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
fcntl$dupfd(r5, 0x0, r3)

263.849645ms ago: executing program 4 (id=7070):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})
close(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000002)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280), &(0x7f00000002c0))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
lseek(r7, 0x100000100ff9, 0x1)
r8 = dup(r6)
syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)

1.503951ms ago: executing program 0 (id=7071):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1ef0ff0300000000000000003e", @ANYRES32=0x1, @ANYBLOB="70d9214c00"/20, @ANYRES32=r0, @ANYBLOB="0500000005000000050000000200"/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000340)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x2, &(0x7f00000003c0)=0x5})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r7 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000380), 0x10b3)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

0s ago: executing program 2 (id=7072):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xe7a}, 0x1c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
r3 = io_uring_setup(0x25e, &(0x7f0000000080))
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x1b, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x19c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x170, 0x4, 0x0, 0x1, [{0x15c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x134, 0x3, "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"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1c4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x7f, 0x14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

=31470 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2074.146730][T30853] tipc: Disabling bearer <eth:gre0>
[ 2074.201112][T30853] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 2074.460384][T30853] bond1 (unregistering): Released all slaves
[ 2074.500959][T30853] bond2 (unregistering): Released all slaves
[ 2074.571867][T30853] bond3 (unregistering): Released all slaves
[ 2074.615388][T30853] bond4 (unregistering): Released all slaves
[ 2074.668799][T30853] bond5 (unregistering): Released all slaves
[ 2074.676246][T31495] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2074.705990][T31495] CPU: 0 UID: 0 PID: 31495 Comm: syz.5.6214 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2074.706036][T31495] Tainted: [L]=SOFTLOCKUP
[ 2074.706046][T31495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2074.706061][T31495] Call Trace:
[ 2074.706070][T31495]  <TASK>
[ 2074.706081][T31495]  dump_stack_lvl+0x100/0x190
[ 2074.706118][T31495]  sysfs_warn_dup.cold+0x1c/0x28
[ 2074.706154][T31495]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2074.706182][T31495]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2074.706204][T31495]  ? find_held_lock+0x2b/0x80
[ 2074.706241][T31495]  ? kobject_add_internal+0x25f/0x930
[ 2074.706273][T31495]  ? kobject_add_internal+0x25f/0x930
[ 2074.706306][T31495]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2074.706341][T31495]  kobject_add_internal+0x2c8/0x930
[ 2074.706375][T31495]  kobject_add+0x16a/0x1e0
[ 2074.706406][T31495]  ? __pfx_kobject_add+0x10/0x10
[ 2074.706436][T31495]  ? __kasan_kmalloc+0xaa/0xb0
[ 2074.706464][T31495]  ? lockdep_init_map_type+0x5c/0x250
[ 2074.706493][T31495]  ? class_to_subsys+0x114/0x150
[ 2074.706530][T31495]  device_add+0x294/0x1970
[ 2074.706561][T31495]  ? lockdep_init_map_type+0x5c/0x250
[ 2074.706589][T31495]  ? __pfx_device_add+0x10/0x10
[ 2074.706617][T31495]  ? lockdep_init_map_type+0x5c/0x250
[ 2074.706646][T31495]  ? __init_waitqueue_head+0xca/0x150
[ 2074.706684][T31495]  i2c_new_client_device+0x660/0xd30
[ 2074.706724][T31495]  new_device_store+0x20f/0x420
[ 2074.706756][T31495]  ? __lock_acquire+0x49f/0x1a40
[ 2074.706782][T31495]  ? __pfx_new_device_store+0x10/0x10
[ 2074.706817][T31495]  ? find_held_lock+0x2b/0x80
[ 2074.706846][T31495]  ? sysfs_file_kobj+0xe4/0x290
[ 2074.706876][T31495]  ? sysfs_file_kobj+0xe4/0x290
[ 2074.706908][T31495]  ? __pfx_new_device_store+0x10/0x10
[ 2074.706936][T31495]  dev_attr_store+0x58/0x80
[ 2074.706962][T31495]  ? __pfx_dev_attr_store+0x10/0x10
[ 2074.706988][T31495]  sysfs_kf_write+0xf2/0x150
[ 2074.707034][T31495]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2074.707066][T31495]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2074.707104][T31495]  vfs_write+0x6ac/0x1050
[ 2074.707140][T31495]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2074.707175][T31495]  ? __pfx_vfs_write+0x10/0x10
[ 2074.707232][T31495]  ksys_write+0x12a/0x250
[ 2074.707264][T31495]  ? __pfx_ksys_write+0x10/0x10
[ 2074.707308][T31495]  do_syscall_64+0x115/0x870
[ 2074.707330][T31495]  ? clear_bhb_loop+0x40/0x90
[ 2074.707355][T31495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2074.707376][T31495] RIP: 0033:0x7fb613f9e0d9
[ 2074.707394][T31495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2074.707413][T31495] RSP: 002b:00007fb6115cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2074.707435][T31495] RAX: ffffffffffffffda RBX: 00007fb614226450 RCX: 00007fb613f9e0d9
[ 2074.707449][T31495] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000b
[ 2074.707463][T31495] RBP: 00007fb614035024 R08: 0000000000000000 R09: 0000000000000000
[ 2074.707476][T31495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2074.707489][T31495] R13: 00007fb6142264e8 R14: 00007fb614226450 R15: 00007ffc59895c98
[ 2074.707517][T31495]  </TASK>
[ 2074.710793][T31495] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2075.096518][T30853] bond6 (unregistering): Released all slaves
[ 2075.108215][T31495] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2075.114560][T30853] bond7 (unregistering): Released all slaves
[ 2075.146865][T30853] bond8 (unregistering): Released all slaves
[ 2075.179994][T30853] bond9 (unregistering): Released all slaves
[ 2075.204288][T30853] bond10 (unregistering): Released all slaves
[ 2075.228662][T30853] bond0 (unregistering): Released all slaves
[ 2075.254440][T30853] bond11 (unregistering): Released all slaves
[ 2075.287726][T30853] bond12 (unregistering): Released all slaves
[ 2075.328968][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2075.628247][T31321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2076.213648][T31321] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2076.228467][T31321] bridge_slave_0: entered allmulticast mode
[ 2076.264774][T31321] bridge_slave_0: entered promiscuous mode
[ 2076.299509][T31321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2076.435022][T31321] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2076.465353][T31321] bridge_slave_1: entered allmulticast mode
[ 2076.593959][T31321] bridge_slave_1: entered promiscuous mode
[ 2076.604059][T31515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6216'.
[ 2076.622817][T30853] tipc: Left network mode
[ 2077.140694][T31321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2077.153091][T31321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2077.218924][T31321] team0: Port device team_slave_0 added
[ 2077.249651][T31321] team0: Port device team_slave_1 added
[ 2077.496647][T31321] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2077.633868][T31321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2078.186505][T31534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6220'.
[ 2078.214560][T31321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2078.399101][T31321] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2078.439027][T31321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2078.530759][T31321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2079.191232][   T29] audit: type=1400 audit(1786056625.869:2051): avc:  denied  { write } for  pid=31504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2079.635766][   T29] audit: type=1400 audit(1786056626.999:2052): avc:  denied  { write } for  pid=31547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2079.661877][T31543] 9p: Could not find request transport: r÷

[ 2079.819625][T30853] hsr_slave_0: left promiscuous mode
[ 2079.845893][T30853] hsr_slave_1: left promiscuous mode
[ 2079.861475][T30853] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2079.884993][T30853] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2080.350650][T30853] team0 (unregistering): Port device team_slave_1 removed
[ 2080.414702][T30853] team0 (unregistering): Port device team_slave_0 removed
[ 2080.599137][T31579] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2080.670614][T31579] CPU: 0 UID: 0 PID: 31579 Comm: syz.3.6226 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2080.670652][T31579] Tainted: [L]=SOFTLOCKUP
[ 2080.670661][T31579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2080.670676][T31579] Call Trace:
[ 2080.670685][T31579]  <TASK>
[ 2080.670695][T31579]  dump_stack_lvl+0x100/0x190
[ 2080.670731][T31579]  sysfs_warn_dup.cold+0x1c/0x28
[ 2080.670768][T31579]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2080.670794][T31579]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2080.670817][T31579]  ? find_held_lock+0x2b/0x80
[ 2080.670853][T31579]  ? kobject_add_internal+0x25f/0x930
[ 2080.670884][T31579]  ? kobject_add_internal+0x25f/0x930
[ 2080.670924][T31579]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2080.670962][T31579]  kobject_add_internal+0x2c8/0x930
[ 2080.670997][T31579]  kobject_add+0x16a/0x1e0
[ 2080.671025][T31579]  ? __pfx_kobject_add+0x10/0x10
[ 2080.671056][T31579]  ? __kasan_kmalloc+0xaa/0xb0
[ 2080.671085][T31579]  ? lockdep_init_map_type+0x5c/0x250
[ 2080.671111][T31579]  ? class_to_subsys+0x114/0x150
[ 2080.671149][T31579]  device_add+0x294/0x1970
[ 2080.671178][T31579]  ? lockdep_init_map_type+0x5c/0x250
[ 2080.671208][T31579]  ? __pfx_device_add+0x10/0x10
[ 2080.671235][T31579]  ? lockdep_init_map_type+0x5c/0x250
[ 2080.671265][T31579]  ? __init_waitqueue_head+0xca/0x150
[ 2080.671304][T31579]  i2c_new_client_device+0x660/0xd30
[ 2080.671343][T31579]  new_device_store+0x20f/0x420
[ 2080.671374][T31579]  ? __lock_acquire+0x49f/0x1a40
[ 2080.671402][T31579]  ? __pfx_new_device_store+0x10/0x10
[ 2080.671442][T31579]  ? find_held_lock+0x2b/0x80
[ 2080.671475][T31579]  ? sysfs_file_kobj+0xe4/0x290
[ 2080.671508][T31579]  ? sysfs_file_kobj+0xe4/0x290
[ 2080.671544][T31579]  ? __pfx_new_device_store+0x10/0x10
[ 2080.671574][T31579]  dev_attr_store+0x58/0x80
[ 2080.671602][T31579]  ? __pfx_dev_attr_store+0x10/0x10
[ 2080.671630][T31579]  sysfs_kf_write+0xf2/0x150
[ 2080.671666][T31579]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2080.671697][T31579]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2080.671735][T31579]  vfs_write+0x6ac/0x1050
[ 2080.671770][T31579]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2080.671804][T31579]  ? __pfx_vfs_write+0x10/0x10
[ 2080.671860][T31579]  ksys_write+0x12a/0x250
[ 2080.671894][T31579]  ? __pfx_ksys_write+0x10/0x10
[ 2080.671946][T31579]  do_syscall_64+0x115/0x870
[ 2080.671970][T31579]  ? clear_bhb_loop+0x40/0x90
[ 2080.671999][T31579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2080.672023][T31579] RIP: 0033:0x7fb3fd39e0d9
[ 2080.672043][T31579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2080.672066][T31579] RSP: 002b:00007fb3fa9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2080.672091][T31579] RAX: ffffffffffffffda RBX: 00007fb3fd626450 RCX: 00007fb3fd39e0d9
[ 2080.672107][T31579] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000b
[ 2080.672122][T31579] RBP: 00007fb3fd435024 R08: 0000000000000000 R09: 0000000000000000
[ 2080.672136][T31579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2080.672149][T31579] R13: 00007fb3fd6264e8 R14: 00007fb3fd626450 R15: 00007ffc7775f708
[ 2080.672183][T31579]  </TASK>
[ 2081.148677][T31579] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2081.190276][T31579] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2081.200461][T31321] hsr_slave_0: entered promiscuous mode
[ 2081.209916][T31321] hsr_slave_1: entered promiscuous mode
[ 2081.217850][T31321] debugfs: 'hsr0' already exists in 'hsr'
[ 2081.232600][T31321] Cannot create hsr debugfs directory
[ 2081.247058][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2081.426706][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2081.434157][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2081.454020][T31591] ceph: No mds server is up or the cluster is laggy
[ 2082.453306][T31609] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6230'.
[ 2082.824122][T31614] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6231'.
[ 2083.451940][T31624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2083.955660][   T29] audit: type=1400 audit(1786056631.309:2053): avc:  denied  { write } for  pid=31603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2084.277761][   T29] audit: type=1400 audit(1786056631.639:2054): avc:  denied  { write } for  pid=31632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2085.517518][T31641] 9p: Could not find request transport: r÷

[ 2085.790737][T31321] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2085.855539][T31321] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2085.882471][T31321] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2085.927481][T31321] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2085.972519][T31321] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2086.005147][T31321] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2086.042978][T31321] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2086.063912][T31321] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2086.203018][   T29] audit: type=1400 audit(1786056633.529:2055): avc:  denied  { write } for  pid=31640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2086.335571][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2086.365332][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2086.409466][T31671] ceph: No mds server is up or the cluster is laggy
[ 2086.446545][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2086.486266][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2086.496279][   T29] audit: type=1400 audit(1786056633.849:2056): avc:  denied  { write } for  pid=31682 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2086.537188][T31321] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2086.683669][T31321] 8021q: adding VLAN 0 to HW filter on device team0
[ 2086.816983][T14027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2086.824109][T14027] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2086.937664][T14027] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2086.944782][T14027] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2086.999121][T31693] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6243'.
[ 2087.019945][T31321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2088.761952][T31711] 9p: Could not find request transport: r÷

[ 2088.962023][T31724] jffs2: notice: (31724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2089.024580][   T29] audit: type=1400 audit(1786056636.389:2057): avc:  denied  { write } for  pid=31722 comm="syz.4.6249" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2089.070152][   T29] audit: type=1400 audit(1786056636.429:2058): avc:  denied  { write } for  pid=31690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2089.797416][   T29] audit: type=1400 audit(1786056637.159:2059): avc:  denied  { write } for  pid=31734 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2089.966864][T31740] jffs2: notice: (31740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2090.215998][T31321] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2090.430274][T31321] veth0_vlan: entered promiscuous mode
[ 2090.485617][T31321] veth1_vlan: entered promiscuous mode
[ 2090.738851][   T29] audit: type=1400 audit(1786056638.089:2060): avc:  denied  { write } for  pid=31746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2091.347830][T31321] veth0_macvtap: entered promiscuous mode
[ 2091.391588][T31321] veth1_macvtap: entered promiscuous mode
[ 2091.499931][T31777] jffs2: notice: (31777) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2091.525271][   T29] audit: type=1400 audit(1786056638.889:2061): avc:  denied  { write } for  pid=31778 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2091.556343][T31321] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2091.595015][T31321] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2091.635667][   T29] audit: type=1400 audit(1786056638.999:2062): avc:  denied  { write } for  pid=31776 comm="syz.4.6258" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2091.955888][T30444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.021934][T30444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.128960][T30228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.182803][T30228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.243245][T31795] jffs2: notice: (31795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2092.406042][T31787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2092.419985][   T29] audit: type=1400 audit(1786056639.779:2063): avc:  denied  { write } for  pid=31793 comm="syz.4.6261" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2092.469086][T30228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2092.510408][T30228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.556464][T30228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2092.588840][T30228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.954315][T31810] jffs2: notice: (31810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2093.418998][   T29] audit: type=1400 audit(1786056640.769:2064): avc:  denied  { write } for  pid=31809 comm="syz.3.6264" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2093.472558][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2093.479717][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2093.552499][   T29] audit: type=1400 audit(1786056640.919:2065): avc:  denied  { write } for  pid=31790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2093.680545][T31813] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2093.969804][   T29] audit: type=1400 audit(1786056641.339:2066): avc:  denied  { write } for  pid=31826 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2094.270040][T18475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2094.282986][T18475] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2094.291557][T18475] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2094.299291][T18475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2094.309257][T18475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2094.996508][T15136] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 2095.258582][T15136] usb 3-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config
[ 2095.294309][T15136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2095.322604][T15136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 7
[ 2095.358583][T15136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41873, setting to 1024
[ 2095.393785][T15136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2095.434832][T15136] usb 3-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[ 2095.453159][T15136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.471704][T15136] usb 3-1: Product: syz
[ 2095.481226][T15136] usb 3-1: Manufacturer: syz
[ 2095.487420][T15136] usb 3-1: SerialNumber: syz
[ 2095.561612][T15136] usb 3-1: config 0 descriptor??
[ 2095.750991][T15136] ushc 3-1:0.0: probe with driver ushc failed with error -110
[ 2095.979712][T31858] jffs2: notice: (31858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2095.990569][T31841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6269'.
[ 2096.081305][   T29] audit: type=1400 audit(1786056643.389:2067): avc:  denied  { write } for  pid=31857 comm="syz.0.6273" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2096.371822][T30120] Bluetooth: hci3: command tx timeout
[ 2096.784424][T31864] ushc 3-1:0.0: probe with driver ushc failed with error -32
[ 2096.915222][T31868] jffs2: notice: (31868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2097.021106][   T29] audit: type=1400 audit(1786056644.379:2068): avc:  denied  { write } for  pid=31867 comm="syz.3.6275" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2097.166536][T15136] usb 3-1: USB disconnect, device number 66
[ 2097.433480][T30444] bridge_slave_1: left allmulticast mode
[ 2097.463430][T30444] bridge_slave_1: left promiscuous mode
[ 2097.469363][T31883] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6277'.
[ 2097.498526][T30444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2097.526262][T30444] bridge_slave_0: left allmulticast mode
[ 2097.536364][T30444] bridge_slave_0: left promiscuous mode
[ 2097.553026][T30444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2098.431317][T30120] Bluetooth: hci3: command tx timeout
[ 2098.656530][   T29] audit: type=1400 audit(1786056645.949:2069): avc:  denied  { write } for  pid=31881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2099.380796][T31911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6282'.
[ 2099.480121][   T29] audit: type=1400 audit(1786056646.839:2070): avc:  denied  { write } for  pid=31915 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2099.776111][T30444] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 2100.048688][T30444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2100.088260][T30444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2100.120104][T30444] bond0 (unregistering): Released all slaves
[ 2100.161427][T30444] bond1 (unregistering): Released all slaves
[ 2100.209535][T30444] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 2100.252901][T30444] bond2 (unregistering): Released all slaves
[ 2100.302827][T31925] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6285'.
[ 2100.408467][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2100.513597][T30120] Bluetooth: hci3: command tx timeout
[ 2100.686507][T31931] jffs2: notice: (31931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2100.755736][   T29] audit: type=1400 audit(1786056648.119:2071): avc:  denied  { write } for  pid=31928 comm="syz.4.6286" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2100.840714][T31833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2100.877732][T31833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2100.911589][T31833] bridge_slave_0: entered allmulticast mode
[ 2100.929216][T31833] bridge_slave_0: entered promiscuous mode
[ 2101.033844][T31833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2101.049577][T31833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2101.095975][T31833] bridge_slave_1: entered allmulticast mode
[ 2101.124946][T31833] bridge_slave_1: entered promiscuous mode
[ 2101.323362][T31833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2101.365223][T31939] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2101.388364][T31939] CPU: 1 UID: 0 PID: 31939 Comm: syz.3.6288 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2101.388405][T31939] Tainted: [L]=SOFTLOCKUP
[ 2101.388413][T31939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2101.388427][T31939] Call Trace:
[ 2101.388436][T31939]  <TASK>
[ 2101.388446][T31939]  dump_stack_lvl+0x100/0x190
[ 2101.388483][T31939]  sysfs_warn_dup.cold+0x1c/0x28
[ 2101.388519][T31939]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2101.388543][T31939]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2101.388565][T31939]  ? find_held_lock+0x2b/0x80
[ 2101.388600][T31939]  ? kobject_add_internal+0x25f/0x930
[ 2101.388630][T31939]  ? kobject_add_internal+0x25f/0x930
[ 2101.388673][T31939]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2101.388709][T31939]  kobject_add_internal+0x2c8/0x930
[ 2101.388744][T31939]  kobject_add+0x16a/0x1e0
[ 2101.388772][T31939]  ? __pfx_kobject_add+0x10/0x10
[ 2101.388804][T31939]  ? __kasan_kmalloc+0xaa/0xb0
[ 2101.388833][T31939]  ? lockdep_init_map_type+0x5c/0x250
[ 2101.388859][T31939]  ? class_to_subsys+0x114/0x150
[ 2101.388899][T31939]  device_add+0x294/0x1970
[ 2101.388932][T31939]  ? lockdep_init_map_type+0x5c/0x250
[ 2101.388962][T31939]  ? __pfx_device_add+0x10/0x10
[ 2101.388988][T31939]  ? lockdep_init_map_type+0x5c/0x250
[ 2101.389017][T31939]  ? __init_waitqueue_head+0xca/0x150
[ 2101.389054][T31939]  i2c_new_client_device+0x660/0xd30
[ 2101.389093][T31939]  new_device_store+0x20f/0x420
[ 2101.389124][T31939]  ? __lock_acquire+0x49f/0x1a40
[ 2101.389151][T31939]  ? __pfx_new_device_store+0x10/0x10
[ 2101.389189][T31939]  ? find_held_lock+0x2b/0x80
[ 2101.389222][T31939]  ? sysfs_file_kobj+0xe4/0x290
[ 2101.389255][T31939]  ? sysfs_file_kobj+0xe4/0x290
[ 2101.389292][T31939]  ? __pfx_new_device_store+0x10/0x10
[ 2101.389320][T31939]  dev_attr_store+0x58/0x80
[ 2101.389347][T31939]  ? __pfx_dev_attr_store+0x10/0x10
[ 2101.389372][T31939]  sysfs_kf_write+0xf2/0x150
[ 2101.389406][T31939]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2101.389433][T31939]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2101.389468][T31939]  vfs_write+0x6ac/0x1050
[ 2101.389502][T31939]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2101.389535][T31939]  ? __pfx_vfs_write+0x10/0x10
[ 2101.389585][T31939]  ksys_write+0x12a/0x250
[ 2101.389617][T31939]  ? __pfx_ksys_write+0x10/0x10
[ 2101.389666][T31939]  do_syscall_64+0x115/0x870
[ 2101.389691][T31939]  ? clear_bhb_loop+0x40/0x90
[ 2101.389721][T31939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2101.389746][T31939] RIP: 0033:0x7fb3fd39e0d9
[ 2101.389767][T31939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2101.389790][T31939] RSP: 002b:00007fb3fe1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2101.389811][T31939] RAX: ffffffffffffffda RBX: 00007fb3fd625fa0 RCX: 00007fb3fd39e0d9
[ 2101.389825][T31939] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000a
[ 2101.389839][T31939] RBP: 00007fb3fd435024 R08: 0000000000000000 R09: 0000000000000000
[ 2101.389852][T31939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2101.389862][T31939] R13: 00007fb3fd626038 R14: 00007fb3fd625fa0 R15: 00007ffc7775f708
[ 2101.389879][T31939]  </TASK>
[ 2101.708295][T31833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2101.832881][T30444] hsr_slave_0: left promiscuous mode
[ 2101.841279][T31939] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2101.869052][T30444] hsr_slave_1: left promiscuous mode
[ 2101.895900][T30444] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2101.927875][T31939] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2101.962292][T30444] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2102.666320][T30120] Bluetooth: hci3: command tx timeout
[ 2102.773709][   T29] audit: type=1400 audit(1786056650.139:2072): avc:  denied  { write } for  pid=31943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2103.055337][T31968] 9p: Could not find request transport: r÷

[ 2103.092363][   T29] audit: type=1400 audit(1786056650.459:2073): avc:  denied  { write } for  pid=31970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2103.172137][T30444] team0 (unregistering): Port device team_slave_1 removed
[ 2103.206350][T30444] team0 (unregistering): Port device team_slave_0 removed
[ 2103.472496][T31833] team0: Port device team_slave_0 added
[ 2103.547121][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2103.557786][T31833] team0: Port device team_slave_1 added
[ 2103.663063][T31833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2103.670868][T31833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2103.732114][T31833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2103.758569][T31833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2103.766909][T31833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2103.767754][T31983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6295'.
[ 2103.820336][T31833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2103.977848][T31833] hsr_slave_0: entered promiscuous mode
[ 2103.996981][T31833] hsr_slave_1: entered promiscuous mode
[ 2104.018117][T31833] debugfs: 'hsr0' already exists in 'hsr'
[ 2104.031015][T31833] Cannot create hsr debugfs directory
[ 2104.086139][T31992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6296'.
[ 2104.691965][T32007] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2105.771096][   T29] audit: type=1400 audit(1786056653.119:2074): avc:  denied  { write } for  pid=31991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2106.134319][   T29] audit: type=1400 audit(1786056653.489:2075): avc:  denied  { write } for  pid=32026 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2106.229768][T29969] libceph: connect (1)[c::]:6789 error -101
[ 2106.248712][T29969] libceph: mon0 (1)[c::]:6789 connect error
[ 2106.290964][T32020] ceph: No mds server is up or the cluster is laggy
[ 2107.335018][T32043] 9p: Could not find request transport: r÷

[ 2107.368437][T32053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6306'.
[ 2107.454769][T32055] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2107.479021][T32055] CPU: 0 UID: 0 PID: 32055 Comm: syz.0.6308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2107.479059][T32055] Tainted: [L]=SOFTLOCKUP
[ 2107.479069][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2107.479084][T32055] Call Trace:
[ 2107.479091][T32055]  <TASK>
[ 2107.479101][T32055]  dump_stack_lvl+0x100/0x190
[ 2107.479136][T32055]  sysfs_warn_dup.cold+0x1c/0x28
[ 2107.479172][T32055]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2107.479196][T32055]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2107.479217][T32055]  ? find_held_lock+0x2b/0x80
[ 2107.479248][T32055]  ? kobject_add_internal+0x25f/0x930
[ 2107.479278][T32055]  ? kobject_add_internal+0x25f/0x930
[ 2107.479309][T32055]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2107.479342][T32055]  kobject_add_internal+0x2c8/0x930
[ 2107.479377][T32055]  kobject_add+0x16a/0x1e0
[ 2107.479407][T32055]  ? __pfx_kobject_add+0x10/0x10
[ 2107.479438][T32055]  ? __kasan_kmalloc+0xaa/0xb0
[ 2107.479464][T32055]  ? lockdep_init_map_type+0x5c/0x250
[ 2107.479491][T32055]  ? class_to_subsys+0x114/0x150
[ 2107.479527][T32055]  device_add+0x294/0x1970
[ 2107.479557][T32055]  ? lockdep_init_map_type+0x5c/0x250
[ 2107.479585][T32055]  ? __pfx_device_add+0x10/0x10
[ 2107.479622][T32055]  ? lockdep_init_map_type+0x5c/0x250
[ 2107.479653][T32055]  ? __init_waitqueue_head+0xca/0x150
[ 2107.479693][T32055]  i2c_new_client_device+0x660/0xd30
[ 2107.479732][T32055]  new_device_store+0x20f/0x420
[ 2107.479765][T32055]  ? __lock_acquire+0x49f/0x1a40
[ 2107.479793][T32055]  ? __pfx_new_device_store+0x10/0x10
[ 2107.479834][T32055]  ? find_held_lock+0x2b/0x80
[ 2107.479867][T32055]  ? sysfs_file_kobj+0xe4/0x290
[ 2107.479901][T32055]  ? sysfs_file_kobj+0xe4/0x290
[ 2107.479936][T32055]  ? __pfx_new_device_store+0x10/0x10
[ 2107.479967][T32055]  dev_attr_store+0x58/0x80
[ 2107.479994][T32055]  ? __pfx_dev_attr_store+0x10/0x10
[ 2107.480019][T32055]  sysfs_kf_write+0xf2/0x150
[ 2107.480054][T32055]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2107.480082][T32055]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2107.480118][T32055]  vfs_write+0x6ac/0x1050
[ 2107.480156][T32055]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2107.480191][T32055]  ? __pfx_vfs_write+0x10/0x10
[ 2107.480245][T32055]  ksys_write+0x12a/0x250
[ 2107.480280][T32055]  ? __pfx_ksys_write+0x10/0x10
[ 2107.480326][T32055]  do_syscall_64+0x115/0x870
[ 2107.480350][T32055]  ? clear_bhb_loop+0x40/0x90
[ 2107.480381][T32055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2107.480406][T32055] RIP: 0033:0x7f6ee359e0d9
[ 2107.480427][T32055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2107.480450][T32055] RSP: 002b:00007f6ee43b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2107.480474][T32055] RAX: ffffffffffffffda RBX: 00007f6ee3825fa0 RCX: 00007f6ee359e0d9
[ 2107.480491][T32055] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000c
[ 2107.480506][T32055] RBP: 00007f6ee3635024 R08: 0000000000000000 R09: 0000000000000000
[ 2107.480521][T32055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2107.480535][T32055] R13: 00007f6ee3826038 R14: 00007f6ee3825fa0 R15: 00007fff273a0be8
[ 2107.480568][T32055]  </TASK>
[ 2107.541285][T32055] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2107.589098][T31833] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2107.622636][   T29] audit: type=1400 audit(1786056654.979:2076): avc:  denied  { write } for  pid=32035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2107.662631][T32055] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2107.751195][   T29] audit: type=1400 audit(1786056655.109:2077): avc:  denied  { write } for  pid=32068 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2108.025227][T31833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2108.050242][T31833] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2108.091972][T32072] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2108.311742][T31833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2108.404070][T31833] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2108.454629][T31833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2108.463090][T31833] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2108.572670][T31833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2109.196040][T31833] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2109.300474][T31833] 8021q: adding VLAN 0 to HW filter on device team0
[ 2109.348723][T30444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2109.355897][T30444] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2110.092187][T30856] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2110.099407][T30856] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2111.546583][T32113] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6317'.
[ 2111.805010][   T29] audit: type=1400 audit(1786056659.159:2078): avc:  denied  { write } for  pid=32087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2112.103335][T32130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6319'.
[ 2112.153970][   T29] audit: type=1400 audit(1786056659.509:2079): avc:  denied  { write } for  pid=32129 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2112.626823][T31833] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2113.604685][T32159] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2113.622432][   T29] audit: type=1400 audit(1786056660.989:2080): avc:  denied  { write } for  pid=32134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2113.652636][T32159] CPU: 0 UID: 0 PID: 32159 Comm: syz.2.6324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2113.652662][T32159] Tainted: [L]=SOFTLOCKUP
[ 2113.652667][T32159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2113.652676][T32159] Call Trace:
[ 2113.652681][T32159]  <TASK>
[ 2113.652687][T32159]  dump_stack_lvl+0x100/0x190
[ 2113.652707][T32159]  sysfs_warn_dup.cold+0x1c/0x28
[ 2113.652726][T32159]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2113.652739][T32159]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2113.652751][T32159]  ? find_held_lock+0x2b/0x80
[ 2113.652770][T32159]  ? kobject_add_internal+0x25f/0x930
[ 2113.652786][T32159]  ? kobject_add_internal+0x25f/0x930
[ 2113.652803][T32159]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2113.652820][T32159]  kobject_add_internal+0x2c8/0x930
[ 2113.652839][T32159]  kobject_add+0x16a/0x1e0
[ 2113.652854][T32159]  ? __pfx_kobject_add+0x10/0x10
[ 2113.652870][T32159]  ? __kasan_kmalloc+0xaa/0xb0
[ 2113.652885][T32159]  ? lockdep_init_map_type+0x5c/0x250
[ 2113.652900][T32159]  ? class_to_subsys+0x114/0x150
[ 2113.652919][T32159]  device_add+0x294/0x1970
[ 2113.652936][T32159]  ? lockdep_init_map_type+0x5c/0x250
[ 2113.652952][T32159]  ? __pfx_device_add+0x10/0x10
[ 2113.652966][T32159]  ? lockdep_init_map_type+0x5c/0x250
[ 2113.652985][T32159]  ? __init_waitqueue_head+0xca/0x150
[ 2113.653006][T32159]  i2c_new_client_device+0x660/0xd30
[ 2113.653026][T32159]  new_device_store+0x20f/0x420
[ 2113.653042][T32159]  ? __lock_acquire+0x49f/0x1a40
[ 2113.653056][T32159]  ? __pfx_new_device_store+0x10/0x10
[ 2113.653077][T32159]  ? find_held_lock+0x2b/0x80
[ 2113.653096][T32159]  ? sysfs_file_kobj+0xe4/0x290
[ 2113.653113][T32159]  ? sysfs_file_kobj+0xe4/0x290
[ 2113.653131][T32159]  ? __pfx_new_device_store+0x10/0x10
[ 2113.653146][T32159]  dev_attr_store+0x58/0x80
[ 2113.653161][T32159]  ? __pfx_dev_attr_store+0x10/0x10
[ 2113.653175][T32159]  sysfs_kf_write+0xf2/0x150
[ 2113.653194][T32159]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2113.653209][T32159]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2113.653229][T32159]  vfs_write+0x6ac/0x1050
[ 2113.653247][T32159]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2113.653265][T32159]  ? __pfx_vfs_write+0x10/0x10
[ 2113.653293][T32159]  ksys_write+0x12a/0x250
[ 2113.653311][T32159]  ? __pfx_ksys_write+0x10/0x10
[ 2113.653335][T32159]  do_syscall_64+0x115/0x870
[ 2113.653355][T32159]  ? clear_bhb_loop+0x40/0x90
[ 2113.653377][T32159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2113.653391][T32159] RIP: 0033:0x7f26f319e0d9
[ 2113.653403][T32159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2113.653415][T32159] RSP: 002b:00007f26f409c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2113.653429][T32159] RAX: ffffffffffffffda RBX: 00007f26f3425fa0 RCX: 00007f26f319e0d9
[ 2113.653438][T32159] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000c
[ 2113.653446][T32159] RBP: 00007f26f3235024 R08: 0000000000000000 R09: 0000000000000000
[ 2113.653454][T32159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2113.653462][T32159] R13: 00007f26f3426038 R14: 00007f26f3425fa0 R15: 00007ffc43154278
[ 2113.653480][T32159]  </TASK>
[ 2113.653759][T32159] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2114.065989][T32159] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2114.206420][   T29] audit: type=1400 audit(1786056661.569:2081): avc:  denied  { write } for  pid=32166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2114.357998][T31833] veth0_vlan: entered promiscuous mode
[ 2114.379790][T31833] veth1_vlan: entered promiscuous mode
[ 2114.443863][T31833] veth0_macvtap: entered promiscuous mode
[ 2114.464882][T31833] veth1_macvtap: entered promiscuous mode
[ 2114.496321][T31833] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2114.527018][T31833] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2114.611799][T30229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2114.823919][T32179] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2114.942276][T30853] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2115.113087][T30853] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2115.171160][T30853] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2115.206825][T30862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2115.220014][T30862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2115.472616][T28078] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 2115.726525][T28078] usb 3-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config
[ 2115.830250][T28078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2115.929275][T28078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 7
[ 2116.045472][T28078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41873, setting to 1024
[ 2116.162263][T28078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2116.164433][   T29] audit: type=1400 audit(1786056663.529:2082): avc:  denied  { write } for  pid=32171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2116.203702][T21624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2116.221211][T32194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6329'.
[ 2116.244560][T21624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2116.274622][T28078] usb 3-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[ 2116.304451][T28078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2116.353701][T28078] usb 3-1: Product: syz
[ 2116.373839][T28078] usb 3-1: Manufacturer: syz
[ 2116.388655][T28078] usb 3-1: SerialNumber: syz
[ 2116.416613][T28078] usb 3-1: config 0 descriptor??
[ 2117.045673][T32184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6327'.
[ 2117.132634][T28078] ushc 3-1:0.0: probe with driver ushc failed with error -110
[ 2117.258010][T32209] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6266'.
[ 2117.560519][T32210] ushc 3-1:0.0: probe with driver ushc failed with error -32
[ 2117.593760][   T29] audit: type=1400 audit(1786056664.959:2083): avc:  denied  { write } for  pid=32203 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2117.717578][ T5597] usb 3-1: USB disconnect, device number 67
[ 2117.909876][T32215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2118.061072][T23646] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[ 2118.497045][T23646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2118.516930][T23646] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2118.565635][T23646] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2118.585572][T23646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2118.617985][T23646] usb 5-1: Product: syz
[ 2118.632159][T23646] usb 5-1: Manufacturer: syz
[ 2118.657529][T23646] usb 5-1: SerialNumber: syz
[ 2118.685006][T23646] usb 5-1: config 0 descriptor??
[ 2118.917226][T23646] usb 5-1: USB disconnect, device number 40
[ 2119.974264][T32242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2119.989390][T32242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2120.238434][T32244] jffs2: notice: (32244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2120.290061][   T29] audit: type=1400 audit(1786056667.649:2084): avc:  denied  { write } for  pid=32243 comm="syz.3.6340" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2120.461967][T32250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6341'.
[ 2121.355459][T32259] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2121.736421][T32269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6345'.
[ 2123.083733][T32267] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2123.351083][T23646] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[ 2123.420054][T32288] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6351'.
[ 2123.532626][T23646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2123.563218][T23646] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2123.593168][T23646] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2123.605349][T23646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2123.643281][T23646] usb 4-1: Product: syz
[ 2123.658365][T23646] usb 4-1: Manufacturer: syz
[ 2123.696658][T23646] usb 4-1: SerialNumber: syz
[ 2123.747973][T23646] usb 4-1: config 0 descriptor??
[ 2123.837205][T32294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6354'.
[ 2123.932657][T32298] jffs2: notice: (32298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2123.982849][T23646] usb 4-1: USB disconnect, device number 54
[ 2123.998945][   T29] audit: type=1400 audit(1786056671.359:2085): avc:  denied  { write } for  pid=32297 comm="syz.2.6356" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2124.721292][T32306] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2124.891138][T32306] CPU: 0 UID: 0 PID: 32306 Comm: syz.5.6358 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2124.891177][T32306] Tainted: [L]=SOFTLOCKUP
[ 2124.891185][T32306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2124.891200][T32306] Call Trace:
[ 2124.891208][T32306]  <TASK>
[ 2124.891218][T32306]  dump_stack_lvl+0x100/0x190
[ 2124.891251][T32306]  sysfs_warn_dup.cold+0x1c/0x28
[ 2124.891287][T32306]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2124.891312][T32306]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2124.891334][T32306]  ? find_held_lock+0x2b/0x80
[ 2124.891368][T32306]  ? kobject_add_internal+0x25f/0x930
[ 2124.891398][T32306]  ? kobject_add_internal+0x25f/0x930
[ 2124.891431][T32306]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2124.891462][T32306]  kobject_add_internal+0x2c8/0x930
[ 2124.891497][T32306]  kobject_add+0x16a/0x1e0
[ 2124.891527][T32306]  ? __pfx_kobject_add+0x10/0x10
[ 2124.891557][T32306]  ? __kasan_kmalloc+0xaa/0xb0
[ 2124.891622][T32306]  ? lockdep_init_map_type+0x5c/0x250
[ 2124.891650][T32306]  ? class_to_subsys+0x114/0x150
[ 2124.891686][T32306]  device_add+0x294/0x1970
[ 2124.891717][T32306]  ? lockdep_init_map_type+0x5c/0x250
[ 2124.891745][T32306]  ? __pfx_device_add+0x10/0x10
[ 2124.891771][T32306]  ? lockdep_init_map_type+0x5c/0x250
[ 2124.891800][T32306]  ? __init_waitqueue_head+0xca/0x150
[ 2124.891838][T32306]  i2c_new_client_device+0x660/0xd30
[ 2124.891878][T32306]  new_device_store+0x20f/0x420
[ 2124.891909][T32306]  ? __lock_acquire+0x49f/0x1a40
[ 2124.891936][T32306]  ? __pfx_new_device_store+0x10/0x10
[ 2124.891978][T32306]  ? find_held_lock+0x2b/0x80
[ 2124.892011][T32306]  ? sysfs_file_kobj+0xe4/0x290
[ 2124.892043][T32306]  ? sysfs_file_kobj+0xe4/0x290
[ 2124.892078][T32306]  ? __pfx_new_device_store+0x10/0x10
[ 2124.892107][T32306]  dev_attr_store+0x58/0x80
[ 2124.892136][T32306]  ? __pfx_dev_attr_store+0x10/0x10
[ 2124.892165][T32306]  sysfs_kf_write+0xf2/0x150
[ 2124.892201][T32306]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2124.892231][T32306]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2124.892269][T32306]  vfs_write+0x6ac/0x1050
[ 2124.892305][T32306]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2124.892339][T32306]  ? __pfx_vfs_write+0x10/0x10
[ 2124.892395][T32306]  ksys_write+0x12a/0x250
[ 2124.892429][T32306]  ? __pfx_ksys_write+0x10/0x10
[ 2124.892473][T32306]  do_syscall_64+0x115/0x870
[ 2124.892497][T32306]  ? clear_bhb_loop+0x40/0x90
[ 2124.892525][T32306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2124.892549][T32306] RIP: 0033:0x7fd7cb59e0d9
[ 2124.892577][T32306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2124.892601][T32306] RSP: 002b:00007fd7cc4d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2124.892624][T32306] RAX: ffffffffffffffda RBX: 00007fd7cb825fa0 RCX: 00007fd7cb59e0d9
[ 2124.892640][T32306] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000b
[ 2124.892655][T32306] RBP: 00007fd7cb635024 R08: 0000000000000000 R09: 0000000000000000
[ 2124.892671][T32306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2124.892686][T32306] R13: 00007fd7cb826038 R14: 00007fd7cb825fa0 R15: 00007fffffd68e78
[ 2124.892719][T32306]  </TASK>
[ 2125.761413][T32306] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2125.922345][T32306] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2125.975078][T32319] jffs2: notice: (32319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2126.273576][T18475] Bluetooth: hci0: command 0x0406 tx timeout
[ 2126.985146][   T29] audit: type=1400 audit(1786056674.319:2086): avc:  denied  { write } for  pid=32317 comm="syz.2.6361" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2127.784831][T32341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6368'.
[ 2127.939251][T32347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6367'.
[ 2127.999533][T32348] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6366'.
[ 2128.312718][   T24] libceph: connect (1)[c::]:6789 error -101
[ 2128.335541][T32358] ceph: No mds server is up or the cluster is laggy
[ 2128.350830][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 2128.990751][T28078] libceph: connect (1)[c::]:6789 error -101
[ 2129.029216][T28078] libceph: mon0 (1)[c::]:6789 connect error
[ 2129.285279][T32362] ceph: No mds server is up or the cluster is laggy
[ 2129.295995][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2129.350375][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2132.195968][T32389] ceph: No mds server is up or the cluster is laggy
[ 2132.215870][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2132.260579][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2132.613211][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2132.782047][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2133.453749][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2133.577363][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2133.636675][T32396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6380'.
[ 2133.772517][T32400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6379'.
[ 2134.866358][T32407] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6381'.
[ 2135.251148][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2135.317198][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2135.384033][T32413] ceph: No mds server is up or the cluster is laggy
[ 2135.392852][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2135.447459][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2137.730744][T32432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6387'.
[ 2138.904423][T32440] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6389'.
[ 2139.311211][T23646] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[ 2139.557438][T23646] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2139.573482][T23646] usb 3-1: config 0 has no interface number 0
[ 2139.611077][ T5694] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 2139.639011][T23646] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2139.661801][T23646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2139.680949][T23646] usb 3-1: Product: syz
[ 2139.755978][T23646] usb 3-1: Manufacturer: syz
[ 2139.772208][T23646] usb 3-1: SerialNumber: syz
[ 2139.802665][ T5694] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2139.831694][ T5694] usb 6-1: config 0 has no interface number 0
[ 2139.836618][T23646] usb 3-1: config 0 descriptor??
[ 2139.858052][ T5694] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2139.893664][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2139.919792][ T5694] usb 6-1: Product: syz
[ 2139.933317][ T5694] usb 6-1: Manufacturer: syz
[ 2139.950875][ T5694] usb 6-1: SerialNumber: syz
[ 2139.954878][T23646] usb 3-1: selecting invalid altsetting 1
[ 2139.989089][T23646] dvb_ttusb_budget: ttusb_init_controller: error
[ 2140.008958][ T5694] usb 6-1: config 0 descriptor??
[ 2140.012628][T23646] ttusb 3-1:0.1: probe with driver ttusb failed with error -23
[ 2140.047940][ T5694] usb 6-1: selecting invalid altsetting 1
[ 2140.068401][ T5694] dvb_ttusb_budget: ttusb_init_controller: error
[ 2140.082301][ T5694] ttusb 6-1:0.1: probe with driver ttusb failed with error -23
[ 2140.272922][ T5694] usb 6-1: USB disconnect, device number 42
[ 2140.508298][T32451] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2140.559553][T32454] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 2141.966609][T28078] usb 3-1: USB disconnect, device number 68
[ 2142.617484][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2142.782479][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2142.818234][T32471] ceph: No mds server is up or the cluster is laggy
[ 2144.305662][T28078] libceph: connect (1)[c::]:6789 error -101
[ 2144.322604][T32488] ceph: No mds server is up or the cluster is laggy
[ 2144.406559][T28078] libceph: mon0 (1)[c::]:6789 connect error
[ 2144.657544][T32493] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6399'.
[ 2144.722311][T32487] ceph: No mds server is up or the cluster is laggy
[ 2144.753023][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2144.975545][T32502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6402'.
[ 2145.231745][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2145.353327][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2145.359450][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2145.386418][T32500] ceph: No mds server is up or the cluster is laggy
[ 2145.881059][ T5694] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 2146.033384][ T5694] usb 6-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config
[ 2146.047847][T32518] syzkaller0: entered promiscuous mode
[ 2146.057248][ T5694] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2146.070793][T32518] syzkaller0: entered allmulticast mode
[ 2146.077281][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 7
[ 2146.100173][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41873, setting to 1024
[ 2146.127751][ T5694] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2146.162429][ T5694] usb 6-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[ 2146.185351][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2146.234112][ T5694] usb 6-1: Product: syz
[ 2146.249339][ T5694] usb 6-1: Manufacturer: syz
[ 2146.291747][ T5694] usb 6-1: SerialNumber: syz
[ 2146.343369][ T5694] usb 6-1: config 0 descriptor??
[ 2147.071189][T32510] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6404'.
[ 2147.104373][ T5694] ushc 6-1:0.0: probe with driver ushc failed with error -110
[ 2147.357784][T23646] usb 6-1: USB disconnect, device number 43
[ 2147.594793][T32529] ceph: No mds server is up or the cluster is laggy
[ 2147.607583][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2147.665611][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2147.838260][T32532] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6411'.
[ 2149.098848][T32538] ceph: No mds server is up or the cluster is laggy
[ 2149.109643][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2150.817950][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2153.047530][T32568] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6418'.
[ 2153.289186][T32573] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6420'.
[ 2153.362119][T32364] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2153.446570][T32573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2153.476731][T32573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2154.025434][T32364] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2154.037988][T32364] usb 6-1: config 0 has no interfaces?
[ 2154.043429][T32584] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2154.045509][T32364] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 2154.052650][T32573] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component
[ 2154.081732][T32364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2154.091799][T32364] usb 6-1: Product: syz
[ 2154.101985][T32364] usb 6-1: Manufacturer: syz
[ 2154.117671][T32364] usb 6-1: SerialNumber: syz
[ 2154.276551][T32585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6423'.
[ 2154.420227][T32364] usb 6-1: config 0 descriptor??
[ 2154.775790][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2154.819415][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2154.874977][T32594] ceph: No mds server is up or the cluster is laggy
[ 2154.884936][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2154.914163][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2154.935905][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2154.945422][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2155.215273][T32598] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component
[ 2156.792689][T32609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2156.801655][T32609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2157.526211][ T5597] usb 6-1: USB disconnect, device number 44
[ 2158.651684][T32627] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6432'.
[ 2162.733502][T32671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6443'.
[ 2162.879285][T32674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2162.892529][T32674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2163.186244][T32675] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2164.875273][T32702] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2165.446945][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2165.453199][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2165.488675][T32707] ceph: No mds server is up or the cluster is laggy
[ 2167.333721][ T5597] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 2167.711322][T17209] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[ 2167.754310][ T5597] usb 4-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config
[ 2167.765593][ T5597] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2167.774818][ T5597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 7
[ 2167.809872][ T5597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41873, setting to 1024
[ 2167.885683][ T5597] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2167.910370][ T5597] usb 4-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[ 2167.919954][ T5597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2167.928124][ T5597] usb 4-1: Product: syz
[ 2167.934278][ T5597] usb 4-1: Manufacturer: syz
[ 2167.943929][ T5597] usb 4-1: SerialNumber: syz
[ 2167.954290][T17209] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2167.962671][ T5597] usb 4-1: config 0 descriptor??
[ 2167.967666][T17209] usb 5-1: config 0 has no interface number 0
[ 2167.981979][T17209] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2167.991376][T17209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2167.999940][T17209] usb 5-1: Product: syz
[ 2168.004289][T17209] usb 5-1: Manufacturer: syz
[ 2168.008925][T17209] usb 5-1: SerialNumber: syz
[ 2168.016594][T17209] usb 5-1: config 0 descriptor??
[ 2168.030817][T17209] usb 5-1: selecting invalid altsetting 1
[ 2168.042424][T17209] dvb_ttusb_budget: ttusb_init_controller: error
[ 2168.055993][T17209] ttusb 5-1:0.1: probe with driver ttusb failed with error -23
[ 2168.091517][ T5597] ushc 4-1:0.0: probe with driver ushc failed with error -110
[ 2168.154648][T32744] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6463'.
[ 2168.290955][T32724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6458'.
[ 2168.466275][   T29] audit: type=1400 audit(1786056715.819:2087): avc:  denied  { read write } for  pid=32741 comm="syz.5.6462" dev="sockfs" ino=148552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2168.712804][T32364] usb 5-1: USB disconnect, device number 41
[ 2168.781103][T15136] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 2168.985469][T15136] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2169.100402][T15136] usb 3-1: config 0 has no interfaces?
[ 2169.114576][T17209] usb 4-1: USB disconnect, device number 55
[ 2169.126417][T15136] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 2169.140312][T15136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2169.149077][T15136] usb 3-1: Product: syz
[ 2169.154156][T15136] usb 3-1: Manufacturer: syz
[ 2169.158828][T15136] usb 3-1: SerialNumber: syz
[ 2169.172928][T15136] usb 3-1: config 0 descriptor??
[ 2169.402888][T32758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6465'.
[ 2170.310120][T32763] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component
[ 2170.775563][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2170.796284][T32766] ceph: No mds server is up or the cluster is laggy
[ 2170.854762][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2171.805827][  T309] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2171.986263][T15136] usb 3-1: USB disconnect, device number 69
[ 2172.907924][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2173.026266][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2173.073720][  T314] ceph: No mds server is up or the cluster is laggy
[ 2174.559400][T23646] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[ 2175.506309][T23646] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2175.528492][T23646] usb 4-1: config 0 has no interface number 0
[ 2176.104876][T23646] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2176.128311][T23646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2176.153695][T23646] usb 4-1: Product: syz
[ 2176.316972][T23646] usb 4-1: Manufacturer: syz
[ 2176.411178][T23646] usb 4-1: SerialNumber: syz
[ 2176.945812][T23646] usb 4-1: config 0 descriptor??
[ 2176.992452][T23646] usb 4-1: can't set config #0, error -71
[ 2177.048062][T23646] usb 4-1: USB disconnect, device number 56
[ 2179.031512][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2179.049108][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2179.080394][  T370] ceph: No mds server is up or the cluster is laggy
[ 2179.170856][  T377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6488'.
[ 2182.051108][ T5597] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[ 2182.252931][ T5597] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2182.373424][ T5597] usb 6-1: config 0 has no interface number 0
[ 2182.520640][ T5597] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2182.529804][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2182.553973][ T5597] usb 6-1: Product: syz
[ 2182.570237][ T5597] usb 6-1: Manufacturer: syz
[ 2182.584237][ T5597] usb 6-1: SerialNumber: syz
[ 2182.595652][T30120] Bluetooth: hci1: command 0x0406 tx timeout
[ 2182.621008][ T5597] usb 6-1: config 0 descriptor??
[ 2182.635602][ T5597] usb 6-1: selecting invalid altsetting 1
[ 2182.650526][ T5597] dvb_ttusb_budget: ttusb_init_controller: error
[ 2182.660358][ T5597] ttusb 6-1:0.1: probe with driver ttusb failed with error -23
[ 2182.850815][T32364] usb 6-1: USB disconnect, device number 45
[ 2187.222566][  T440] jffs2: notice: (440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2187.592203][  T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2187.609586][  T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2190.029357][  T460] jffs2: notice: (460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2190.061187][   T29] audit: type=1400 audit(1786056737.419:2088): avc:  denied  { write } for  pid=459 comm="syz.5.6511" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2190.356776][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2190.367540][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2190.374428][  T463] ceph: No mds server is up or the cluster is laggy
[ 2191.577970][  T480] netlink: 'syz.0.6516': attribute type 1 has an invalid length.
[ 2191.862128][  T480] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2191.899019][  T482] bond1: (slave veth0_to_bond): Releasing backup interface
[ 2191.919558][  T488] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6517'.
[ 2192.468709][  T482] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 2193.532287][  T504] jffs2: notice: (504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2193.562959][   T29] audit: type=1400 audit(1786056740.929:2089): avc:  denied  { write } for  pid=502 comm="syz.0.6523" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2193.735107][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2193.746923][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2193.770896][  T512] ceph: No mds server is up or the cluster is laggy
[ 2194.305240][T15136] libceph: connect (1)[c::]:6789 error -101
[ 2194.320675][T15136] libceph: mon0 (1)[c::]:6789 connect error
[ 2194.349984][  T520] ceph: No mds server is up or the cluster is laggy
[ 2196.661079][  T536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6530'.
[ 2196.777989][  T538] jffs2: notice: (538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2196.931988][   T29] audit: type=1400 audit(1786056744.299:2090): avc:  denied  { write } for  pid=537 comm="syz.4.6532" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2197.638894][  T549] 9p: Could not find request transport: r÷

[ 2197.749508][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2197.789335][  T554] ceph: No mds server is up or the cluster is laggy
[ 2197.826135][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2198.558554][  T565] ceph: No mds server is up or the cluster is laggy
[ 2198.568034][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2198.598587][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2198.977956][  T576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6542'.
[ 2201.239074][  T598] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2201.638337][  T605] syzkaller0: entered promiscuous mode
[ 2201.657806][  T605] syzkaller0: entered allmulticast mode
[ 2202.208504][  T605] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2202.218619][  T605] CPU: 1 UID: 0 PID: 605 Comm: syz.5.6550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2202.218663][  T605] Tainted: [L]=SOFTLOCKUP
[ 2202.218673][  T605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2202.218689][  T605] Call Trace:
[ 2202.218698][  T605]  <TASK>
[ 2202.218708][  T605]  dump_stack_lvl+0x100/0x190
[ 2202.218746][  T605]  sysfs_warn_dup.cold+0x1c/0x28
[ 2202.218781][  T605]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2202.218807][  T605]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2202.218829][  T605]  ? find_held_lock+0x2b/0x80
[ 2202.218867][  T605]  ? kobject_add_internal+0x25f/0x930
[ 2202.218898][  T605]  ? kobject_add_internal+0x25f/0x930
[ 2202.218932][  T605]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2202.218967][  T605]  kobject_add_internal+0x2c8/0x930
[ 2202.219003][  T605]  kobject_add+0x16a/0x1e0
[ 2202.219041][  T605]  ? __pfx_kobject_add+0x10/0x10
[ 2202.219075][  T605]  ? __kasan_kmalloc+0xaa/0xb0
[ 2202.219105][  T605]  ? lockdep_init_map_type+0x5c/0x250
[ 2202.219136][  T605]  ? class_to_subsys+0x114/0x150
[ 2202.219175][  T605]  device_add+0x294/0x1970
[ 2202.219204][  T605]  ? lockdep_init_map_type+0x5c/0x250
[ 2202.219233][  T605]  ? __pfx_device_add+0x10/0x10
[ 2202.219261][  T605]  ? lockdep_init_map_type+0x5c/0x250
[ 2202.219290][  T605]  ? __init_waitqueue_head+0xca/0x150
[ 2202.219330][  T605]  i2c_new_client_device+0x660/0xd30
[ 2202.219369][  T605]  new_device_store+0x20f/0x420
[ 2202.219400][  T605]  ? __lock_acquire+0x49f/0x1a40
[ 2202.219428][  T605]  ? __pfx_new_device_store+0x10/0x10
[ 2202.219469][  T605]  ? find_held_lock+0x2b/0x80
[ 2202.219502][  T605]  ? sysfs_file_kobj+0xe4/0x290
[ 2202.219535][  T605]  ? sysfs_file_kobj+0xe4/0x290
[ 2202.219572][  T605]  ? __pfx_new_device_store+0x10/0x10
[ 2202.219602][  T605]  dev_attr_store+0x58/0x80
[ 2202.219630][  T605]  ? __pfx_dev_attr_store+0x10/0x10
[ 2202.219659][  T605]  sysfs_kf_write+0xf2/0x150
[ 2202.219694][  T605]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2202.219734][  T605]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2202.219770][  T605]  vfs_write+0x6ac/0x1050
[ 2202.219803][  T605]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2202.219838][  T605]  ? __pfx_vfs_write+0x10/0x10
[ 2202.219894][  T605]  ksys_write+0x12a/0x250
[ 2202.219929][  T605]  ? __pfx_ksys_write+0x10/0x10
[ 2202.219973][  T605]  do_syscall_64+0x115/0x870
[ 2202.219996][  T605]  ? clear_bhb_loop+0x40/0x90
[ 2202.220031][  T605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2202.220057][  T605] RIP: 0033:0x7fd7cb59e0d9
[ 2202.220076][  T605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2202.220100][  T605] RSP: 002b:00007fd7cc4d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2202.220124][  T605] RAX: ffffffffffffffda RBX: 00007fd7cb825fa0 RCX: 00007fd7cb59e0d9
[ 2202.220140][  T605] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000b
[ 2202.220155][  T605] RBP: 00007fd7cb635024 R08: 0000000000000000 R09: 0000000000000000
[ 2202.220170][  T605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2202.220185][  T605] R13: 00007fd7cb826038 R14: 00007fd7cb825fa0 R15: 00007fffffd68e78
[ 2202.220219][  T605]  </TASK>
[ 2202.220325][  T605] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2202.694168][  T605] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2202.703616][  T612] ceph: No mds server is up or the cluster is laggy
[ 2202.710607][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2202.723258][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2204.200159][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2204.223420][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2204.240667][  T635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6558'.
[ 2204.261796][  T625] ceph: No mds server is up or the cluster is laggy
[ 2206.137569][   T29] audit: type=1400 audit(1786056753.479:2091): avc:  denied  { setattr } for  pid=646 comm="syz.4.6562" name="SCTP" dev="sockfs" ino=148415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 2206.300840][  T653] syzkaller0: entered promiscuous mode
[ 2206.316226][  T653] syzkaller0: entered allmulticast mode
[ 2206.391242][  T653] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2206.422670][  T653] CPU: 0 UID: 0 PID: 653 Comm: syz.0.6564 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2206.422710][  T653] Tainted: [L]=SOFTLOCKUP
[ 2206.422718][  T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2206.422731][  T653] Call Trace:
[ 2206.422739][  T653]  <TASK>
[ 2206.422748][  T653]  dump_stack_lvl+0x100/0x190
[ 2206.422783][  T653]  sysfs_warn_dup.cold+0x1c/0x28
[ 2206.422819][  T653]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2206.422844][  T653]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2206.422867][  T653]  ? find_held_lock+0x2b/0x80
[ 2206.422902][  T653]  ? kobject_add_internal+0x25f/0x930
[ 2206.422932][  T653]  ? kobject_add_internal+0x25f/0x930
[ 2206.422964][  T653]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2206.422995][  T653]  kobject_add_internal+0x2c8/0x930
[ 2206.423028][  T653]  kobject_add+0x16a/0x1e0
[ 2206.423058][  T653]  ? __pfx_kobject_add+0x10/0x10
[ 2206.423090][  T653]  ? __kasan_kmalloc+0xaa/0xb0
[ 2206.423118][  T653]  ? lockdep_init_map_type+0x5c/0x250
[ 2206.423146][  T653]  ? class_to_subsys+0x114/0x150
[ 2206.423184][  T653]  device_add+0x294/0x1970
[ 2206.423216][  T653]  ? lockdep_init_map_type+0x5c/0x250
[ 2206.423244][  T653]  ? __pfx_device_add+0x10/0x10
[ 2206.423269][  T653]  ? lockdep_init_map_type+0x5c/0x250
[ 2206.423295][  T653]  ? __init_waitqueue_head+0xca/0x150
[ 2206.423332][  T653]  i2c_new_client_device+0x660/0xd30
[ 2206.423372][  T653]  new_device_store+0x20f/0x420
[ 2206.423403][  T653]  ? __lock_acquire+0x49f/0x1a40
[ 2206.423430][  T653]  ? __pfx_new_device_store+0x10/0x10
[ 2206.423469][  T653]  ? find_held_lock+0x2b/0x80
[ 2206.423502][  T653]  ? sysfs_file_kobj+0xe4/0x290
[ 2206.423532][  T653]  ? sysfs_file_kobj+0xe4/0x290
[ 2206.423565][  T653]  ? __pfx_new_device_store+0x10/0x10
[ 2206.423595][  T653]  dev_attr_store+0x58/0x80
[ 2206.423622][  T653]  ? __pfx_dev_attr_store+0x10/0x10
[ 2206.423658][  T653]  sysfs_kf_write+0xf2/0x150
[ 2206.423697][  T653]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2206.423727][  T653]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2206.423766][  T653]  vfs_write+0x6ac/0x1050
[ 2206.423801][  T653]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2206.423834][  T653]  ? __pfx_vfs_write+0x10/0x10
[ 2206.423890][  T653]  ksys_write+0x12a/0x250
[ 2206.423924][  T653]  ? __pfx_ksys_write+0x10/0x10
[ 2206.423967][  T653]  do_syscall_64+0x115/0x870
[ 2206.423988][  T653]  ? clear_bhb_loop+0x40/0x90
[ 2206.424017][  T653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2206.424040][  T653] RIP: 0033:0x7f6ee359e0d9
[ 2206.424060][  T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2206.424083][  T653] RSP: 002b:00007f6ee43b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2206.424105][  T653] RAX: ffffffffffffffda RBX: 00007f6ee3825fa0 RCX: 00007f6ee359e0d9
[ 2206.424120][  T653] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000b
[ 2206.424134][  T653] RBP: 00007f6ee3635024 R08: 0000000000000000 R09: 0000000000000000
[ 2206.424148][  T653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2206.424162][  T653] R13: 00007f6ee3826038 R14: 00007f6ee3825fa0 R15: 00007fff273a0be8
[ 2206.424195][  T653]  </TASK>
[ 2206.426177][  T653] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2206.806658][  T653] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2206.825560][  T661] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6567'.
[ 2206.840498][T28078] libceph: connect (1)[c::]:6789 error -101
[ 2206.847152][T28078] libceph: mon0 (1)[c::]:6789 connect error
[ 2206.890551][  T658] ceph: No mds server is up or the cluster is laggy
[ 2207.127856][T15136] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 2207.243675][  T670] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6568'.
[ 2207.296279][T15136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2207.938110][T15136] usb 4-1: config 0 has no interfaces?
[ 2208.026530][T15136] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 2208.088972][T15136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2208.097657][T15136] usb 4-1: Product: syz
[ 2208.103072][T15136] usb 4-1: Manufacturer: syz
[ 2208.107897][T15136] usb 4-1: SerialNumber: syz
[ 2208.117377][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2208.128957][T15136] usb 4-1: config 0 descriptor??
[ 2208.139095][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2208.171466][  T680] ceph: No mds server is up or the cluster is laggy
[ 2208.430422][T17209] libceph: connect (1)[c::]:6789 error -101
[ 2208.445608][  T690] ceph: No mds server is up or the cluster is laggy
[ 2208.501117][T17209] libceph: mon0 (1)[c::]:6789 connect error
[ 2209.194875][  T694] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component
[ 2210.590814][  T711] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2210.642691][  T711] CPU: 0 UID: 0 PID: 711 Comm: syz.4.6579 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2210.642729][  T711] Tainted: [L]=SOFTLOCKUP
[ 2210.642738][  T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2210.642753][  T711] Call Trace:
[ 2210.642761][  T711]  <TASK>
[ 2210.642770][  T711]  dump_stack_lvl+0x100/0x190
[ 2210.642803][  T711]  sysfs_warn_dup.cold+0x1c/0x28
[ 2210.642837][  T711]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2210.642860][  T711]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2210.642884][  T711]  ? find_held_lock+0x2b/0x80
[ 2210.642917][  T711]  ? kobject_add_internal+0x25f/0x930
[ 2210.642948][  T711]  ? kobject_add_internal+0x25f/0x930
[ 2210.642981][  T711]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2210.643016][  T711]  kobject_add_internal+0x2c8/0x930
[ 2210.643053][  T711]  kobject_add+0x16a/0x1e0
[ 2210.643080][  T711]  ? __pfx_kobject_add+0x10/0x10
[ 2210.643110][  T711]  ? __kasan_kmalloc+0xaa/0xb0
[ 2210.643138][  T711]  ? lockdep_init_map_type+0x5c/0x250
[ 2210.643167][  T711]  ? class_to_subsys+0x114/0x150
[ 2210.643203][  T711]  device_add+0x294/0x1970
[ 2210.643233][  T711]  ? lockdep_init_map_type+0x5c/0x250
[ 2210.643262][  T711]  ? __pfx_device_add+0x10/0x10
[ 2210.643296][  T711]  ? lockdep_init_map_type+0x5c/0x250
[ 2210.643326][  T711]  ? __init_waitqueue_head+0xca/0x150
[ 2210.643369][  T711]  i2c_new_client_device+0x660/0xd30
[ 2210.643408][  T711]  new_device_store+0x20f/0x420
[ 2210.643437][  T711]  ? __lock_acquire+0x49f/0x1a40
[ 2210.643463][  T711]  ? __pfx_new_device_store+0x10/0x10
[ 2210.643500][  T711]  ? find_held_lock+0x2b/0x80
[ 2210.643533][  T711]  ? sysfs_file_kobj+0xe4/0x290
[ 2210.643569][  T711]  ? sysfs_file_kobj+0xe4/0x290
[ 2210.643606][  T711]  ? __pfx_new_device_store+0x10/0x10
[ 2210.643637][  T711]  dev_attr_store+0x58/0x80
[ 2210.643664][  T711]  ? __pfx_dev_attr_store+0x10/0x10
[ 2210.643692][  T711]  sysfs_kf_write+0xf2/0x150
[ 2210.643730][  T711]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2210.643761][  T711]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2210.643799][  T711]  vfs_write+0x6ac/0x1050
[ 2210.643835][  T711]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2210.643870][  T711]  ? __pfx_vfs_write+0x10/0x10
[ 2210.643927][  T711]  ksys_write+0x12a/0x250
[ 2210.643961][  T711]  ? __pfx_ksys_write+0x10/0x10
[ 2210.644006][  T711]  do_syscall_64+0x115/0x870
[ 2210.644029][  T711]  ? clear_bhb_loop+0x40/0x90
[ 2210.644058][  T711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2210.644083][  T711] RIP: 0033:0x7f655f79e0d9
[ 2210.644103][  T711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2210.644126][  T711] RSP: 002b:00007f65606f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2210.644149][  T711] RAX: ffffffffffffffda RBX: 00007f655fa26180 RCX: 00007f655f79e0d9
[ 2210.644166][  T711] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000a
[ 2210.644181][  T711] RBP: 00007f655f835024 R08: 0000000000000000 R09: 0000000000000000
[ 2210.644196][  T711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2210.644209][  T711] R13: 00007f655fa26218 R14: 00007f655fa26180 R15: 00007ffede746de8
[ 2210.644239][  T711]  </TASK>
[ 2210.783819][  T711] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2210.811957][  T722] syzkaller0: entered promiscuous mode
[ 2210.870381][  T711] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2210.872552][  T722] syzkaller0: entered allmulticast mode
[ 2211.024511][T28078] libceph: connect (1)[c::]:6789 error -101
[ 2211.030615][T28078] libceph: mon0 (1)[c::]:6789 connect error
[ 2211.048569][  T726] ceph: No mds server is up or the cluster is laggy
[ 2211.688853][ T5597] usb 4-1: USB disconnect, device number 57
[ 2212.900183][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2212.917227][  T751] ceph: No mds server is up or the cluster is laggy
[ 2213.000936][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2213.092058][  T748] 0: reclassify loop, rule prio 0, protocol 700
[ 2214.036888][ T5597] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[ 2214.333738][  T761] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2214.384011][ T5597] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2214.412549][ T5597] usb 6-1: config 0 has no interface number 0
[ 2214.463832][ T5597] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2214.474379][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2214.488557][ T5597] usb 6-1: Product: syz
[ 2214.498435][ T5597] usb 6-1: Manufacturer: syz
[ 2214.514211][ T5597] usb 6-1: SerialNumber: syz
[ 2214.648146][  T770] ceph: No mds server is up or the cluster is laggy
[ 2214.662591][T15136] libceph: connect (1)[c::]:6789 error -101
[ 2214.688386][  T773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6593'.
[ 2214.698576][T15136] libceph: mon0 (1)[c::]:6789 connect error
[ 2216.198977][ T5597] usb 6-1: config 0 descriptor??
[ 2216.237464][ T5597] usb 6-1: selecting invalid altsetting 1
[ 2216.243293][ T5597] dvb_ttusb_budget: ttusb_init_controller: error
[ 2216.251791][ T5597] ttusb 6-1:0.1: probe with driver ttusb failed with error -23
[ 2216.481555][ T5597] usb 6-1: USB disconnect, device number 46
[ 2216.592173][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2216.601004][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2216.658129][  T795] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2216.694700][  T795] CPU: 1 UID: 0 PID: 795 Comm: syz.4.6595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2216.694722][  T795] Tainted: [L]=SOFTLOCKUP
[ 2216.694727][  T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2216.694735][  T795] Call Trace:
[ 2216.694742][  T795]  <TASK>
[ 2216.694748][  T795]  dump_stack_lvl+0x100/0x190
[ 2216.694769][  T795]  sysfs_warn_dup.cold+0x1c/0x28
[ 2216.694790][  T795]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2216.694804][  T795]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2216.694815][  T795]  ? find_held_lock+0x2b/0x80
[ 2216.694834][  T795]  ? kobject_add_internal+0x25f/0x930
[ 2216.694850][  T795]  ? kobject_add_internal+0x25f/0x930
[ 2216.694867][  T795]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2216.694884][  T795]  kobject_add_internal+0x2c8/0x930
[ 2216.694903][  T795]  kobject_add+0x16a/0x1e0
[ 2216.694918][  T795]  ? __pfx_kobject_add+0x10/0x10
[ 2216.694934][  T795]  ? __kasan_kmalloc+0xaa/0xb0
[ 2216.694949][  T795]  ? lockdep_init_map_type+0x5c/0x250
[ 2216.694964][  T795]  ? class_to_subsys+0x114/0x150
[ 2216.694983][  T795]  device_add+0x294/0x1970
[ 2216.694999][  T795]  ? lockdep_init_map_type+0x5c/0x250
[ 2216.695025][  T795]  ? __pfx_device_add+0x10/0x10
[ 2216.695052][  T795]  ? lockdep_init_map_type+0x5c/0x250
[ 2216.695081][  T795]  ? __init_waitqueue_head+0xca/0x150
[ 2216.695107][  T795]  i2c_new_client_device+0x660/0xd30
[ 2216.695128][  T795]  new_device_store+0x20f/0x420
[ 2216.695144][  T795]  ? __lock_acquire+0x49f/0x1a40
[ 2216.695158][  T795]  ? __pfx_new_device_store+0x10/0x10
[ 2216.695180][  T795]  ? find_held_lock+0x2b/0x80
[ 2216.695199][  T795]  ? sysfs_file_kobj+0xe4/0x290
[ 2216.695217][  T795]  ? sysfs_file_kobj+0xe4/0x290
[ 2216.695235][  T795]  ? __pfx_new_device_store+0x10/0x10
[ 2216.695258][  T795]  dev_attr_store+0x58/0x80
[ 2216.695274][  T795]  ? __pfx_dev_attr_store+0x10/0x10
[ 2216.695289][  T795]  sysfs_kf_write+0xf2/0x150
[ 2216.695309][  T795]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2216.695325][  T795]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2216.695344][  T795]  vfs_write+0x6ac/0x1050
[ 2216.695362][  T795]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2216.695380][  T795]  ? __pfx_vfs_write+0x10/0x10
[ 2216.695413][  T795]  ksys_write+0x12a/0x250
[ 2216.695440][  T795]  ? __pfx_ksys_write+0x10/0x10
[ 2216.695462][  T795]  do_syscall_64+0x115/0x870
[ 2216.695474][  T795]  ? clear_bhb_loop+0x40/0x90
[ 2216.695489][  T795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2216.695501][  T795] RIP: 0033:0x7f655f79e0d9
[ 2216.695513][  T795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2216.695525][  T795] RSP: 002b:00007f6560690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2216.695538][  T795] RAX: ffffffffffffffda RBX: 00007f655fa26450 RCX: 00007f655f79e0d9
[ 2216.695546][  T795] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000a
[ 2216.695554][  T795] RBP: 00007f655f835024 R08: 0000000000000000 R09: 0000000000000000
[ 2216.695561][  T795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2216.695569][  T795] R13: 00007f655fa264e8 R14: 00007f655fa26450 R15: 00007ffede746de8
[ 2216.695586][  T795]  </TASK>
[ 2216.696172][  T795] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2217.036488][  T795] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2217.880168][  T806] jffs2: notice: (806) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2217.899651][  T804] syzkaller0: entered promiscuous mode
[ 2217.923413][  T804] syzkaller0: entered allmulticast mode
[ 2217.936110][   T29] audit: type=1400 audit(1786581053.042:2092): avc:  denied  { write } for  pid=805 comm="syz.0.6600" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2218.369884][  T820] ceph: No mds server is up or the cluster is laggy
[ 2218.406393][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2218.429154][  T824] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2218.645901][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2218.723788][T18475] Bluetooth: hci3: command 0x0406 tx timeout
[ 2219.030938][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2219.037263][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2219.271874][  T831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6605'.
[ 2220.783827][  T846] ceph: No mds server is up or the cluster is laggy
[ 2220.821497][ T5597] libceph: connect (1)[c::]:6789 error -101
[ 2221.050059][ T5597] libceph: mon0 (1)[c::]:6789 connect error
[ 2221.656682][  T866] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c'
[ 2221.693888][  T866] CPU: 1 UID: 0 PID: 866 Comm: syz.2.6612 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2221.693916][  T866] Tainted: [L]=SOFTLOCKUP
[ 2221.693922][  T866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2221.693931][  T866] Call Trace:
[ 2221.693935][  T866]  <TASK>
[ 2221.693941][  T866]  dump_stack_lvl+0x100/0x190
[ 2221.693962][  T866]  sysfs_warn_dup.cold+0x1c/0x28
[ 2221.693982][  T866]  sysfs_create_dir_ns+0x24b/0x2b0
[ 2221.693996][  T866]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2221.694008][  T866]  ? find_held_lock+0x2b/0x80
[ 2221.694028][  T866]  ? kobject_add_internal+0x25f/0x930
[ 2221.694044][  T866]  ? kobject_add_internal+0x25f/0x930
[ 2221.694068][  T866]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2221.694087][  T866]  kobject_add_internal+0x2c8/0x930
[ 2221.694107][  T866]  kobject_add+0x16a/0x1e0
[ 2221.694123][  T866]  ? __pfx_kobject_add+0x10/0x10
[ 2221.694141][  T866]  ? __kasan_kmalloc+0xaa/0xb0
[ 2221.694156][  T866]  ? lockdep_init_map_type+0x5c/0x250
[ 2221.694172][  T866]  ? class_to_subsys+0x114/0x150
[ 2221.694191][  T866]  device_add+0x294/0x1970
[ 2221.694207][  T866]  ? lockdep_init_map_type+0x5c/0x250
[ 2221.694221][  T866]  ? __pfx_device_add+0x10/0x10
[ 2221.694236][  T866]  ? lockdep_init_map_type+0x5c/0x250
[ 2221.694251][  T866]  ? __init_waitqueue_head+0xca/0x150
[ 2221.694272][  T866]  i2c_new_client_device+0x660/0xd30
[ 2221.694292][  T866]  new_device_store+0x20f/0x420
[ 2221.694308][  T866]  ? __lock_acquire+0x49f/0x1a40
[ 2221.694323][  T866]  ? __pfx_new_device_store+0x10/0x10
[ 2221.694351][  T866]  ? find_held_lock+0x2b/0x80
[ 2221.694370][  T866]  ? sysfs_file_kobj+0xe4/0x290
[ 2221.694389][  T866]  ? sysfs_file_kobj+0xe4/0x290
[ 2221.694408][  T866]  ? __pfx_new_device_store+0x10/0x10
[ 2221.694425][  T866]  dev_attr_store+0x58/0x80
[ 2221.694439][  T866]  ? __pfx_dev_attr_store+0x10/0x10
[ 2221.694453][  T866]  sysfs_kf_write+0xf2/0x150
[ 2221.694472][  T866]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 2221.694488][  T866]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2221.694507][  T866]  vfs_write+0x6ac/0x1050
[ 2221.694526][  T866]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 2221.694544][  T866]  ? __pfx_vfs_write+0x10/0x10
[ 2221.694571][  T866]  ksys_write+0x12a/0x250
[ 2221.694589][  T866]  ? __pfx_ksys_write+0x10/0x10
[ 2221.694611][  T866]  do_syscall_64+0x115/0x870
[ 2221.694623][  T866]  ? clear_bhb_loop+0x40/0x90
[ 2221.694638][  T866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2221.694651][  T866] RIP: 0033:0x7f26f319e0d9
[ 2221.694662][  T866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2221.694674][  T866] RSP: 002b:00007f26f3ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2221.694687][  T866] RAX: ffffffffffffffda RBX: 00007f26f3426450 RCX: 00007f26f319e0d9
[ 2221.694696][  T866] RDX: 000000000000000c RSI: 0000200000000100 RDI: 000000000000000a
[ 2221.694704][  T866] RBP: 00007f26f3235024 R08: 0000000000000000 R09: 0000000000000000
[ 2221.694712][  T866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2221.694720][  T866] R13: 00007f26f34264e8 R14: 00007f26f3426450 R15: 00007ffc43154278
[ 2221.694738][  T866]  </TASK>
[ 2222.010689][  T866] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory.
[ 2222.025767][  T866] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17)
[ 2223.161911][  T877] jffs2: notice: (877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2223.205359][   T29] audit: type=1400 audit(1786581058.241:2093): avc:  denied  { write } for  pid=876 comm="syz.4.6615" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2224.233079][  T889] libceph: connect (1)[c::]:6789 error -101
[ 2224.248148][  T895] ceph: No mds server is up or the cluster is laggy
[ 2224.309093][  T889] libceph: mon0 (1)[c::]:6789 connect error
[ 2225.020028][  T905] syzkaller0: entered promiscuous mode
[ 2225.158817][  T905] syzkaller0: entered allmulticast mode
[ 2225.919747][  T923] ceph: No mds server is up or the cluster is laggy
[ 2225.946407][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2226.104156][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2226.308086][  T919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2226.829463][  T938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2227.847508][  T954] jffs2: notice: (954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 2227.961232][   T29] audit: type=1400 audit(1786581062.955:2094): avc:  denied  { write } for  pid=953 comm="syz.5.6630" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2229.075664][  T964] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2231.673662][  T983] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2232.142404][  T994] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6637'.
[ 2232.213212][ T1003] 9p: Could not find request transport: r÷

[ 2232.295666][  T997] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2234.343246][T23646] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[ 2234.525640][T23646] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2234.539472][T23646] usb 3-1: config 0 has no interface number 0
[ 2234.567839][T23646] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 2234.581175][T23646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2234.727892][T23646] usb 3-1: Product: syz
[ 2234.742695][T23646] usb 3-1: Manufacturer: syz
[ 2234.768144][T23646] usb 3-1: SerialNumber: syz
[ 2234.811071][T23646] usb 3-1: config 0 descriptor??
[ 2234.850204][T23646] usb 3-1: selecting invalid altsetting 1
[ 2234.883618][T23646] dvb_ttusb_budget: ttusb_init_controller: error
[ 2234.932832][T23646] ttusb 3-1:0.1: probe with driver ttusb failed with error -23
[ 2235.258113][T32364] usb 3-1: USB disconnect, device number 70
[ 2235.485245][T15136] libceph: connect (1)[c::]:6789 error -101
[ 2235.497042][T15136] libceph: mon0 (1)[c::]:6789 connect error
[ 2235.513568][ T1045] ceph: No mds server is up or the cluster is laggy
[ 2236.025678][ T1059] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2237.208018][ T1078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2239.367172][ T1099] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6659'.
[ 2239.618004][T15136] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[ 2239.863588][T15136] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[ 2239.874624][T15136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2239.905589][T15136] usb 6-1: config 0 descriptor??
[ 2241.683690][T15136] usb 6-1: string descriptor 0 read error: -71
[ 2241.699457][T15136] ldusb 6-1:0.0: Interrupt in endpoint not found
[ 2241.712848][T15136] usb 6-1: USB disconnect, device number 47
[ 2243.136783][ T1141] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2243.904268][ T1142] 9p: Could not find request transport: r÷

[ 2244.520807][ T1157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6675'.
[ 2244.670061][ T1153] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2246.296019][ T1177] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2248.493220][ T1193] sit0: entered promiscuous mode
[ 2248.771407][ T1199] ceph: No mds server is up or the cluster is laggy
[ 2248.794920][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2248.834662][ T1193] netlink: 'syz.4.6682': attribute type 1 has an invalid length.
[ 2248.893811][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2249.188497][ T1193] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6682'.
[ 2250.196566][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2250.338313][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2250.344416][ T1207] ceph: No mds server is up or the cluster is laggy
[ 2252.636794][T30120] block nbd0: Receive control failed (result -32)
[ 2252.660562][T18475] block nbd0: Receive control failed (result -32)
[ 2254.289589][ T1248] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2254.767376][ T1264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2254.793475][ T1264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2256.183578][T17279] libceph: connect (1)[c::]:6789 error -101
[ 2256.193263][T17279] libceph: mon0 (1)[c::]:6789 connect error
[ 2256.719401][  T889] libceph: connect (1)[c::]:6789 error -101
[ 2256.725467][  T889] libceph: mon0 (1)[c::]:6789 connect error
[ 2256.753759][ T1271] ceph: No mds server is up or the cluster is laggy
[ 2257.473609][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2257.618463][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2257.674946][ T1287] ceph: No mds server is up or the cluster is laggy
[ 2258.847393][ T1312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2260.835930][ T1337] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6719'.
[ 2261.095042][   T29] audit: type=1400 audit(1786581095.970:2095): avc:  denied  { write } for  pid=1342 comm="syz.5.6721" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2261.670718][   T29] audit: type=1404 audit(1786581096.540:2096): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[ 2261.765077][   T29] audit: type=1400 audit(1786581096.630:2097): avc:  denied  { prog_load } for  pid=1355 comm="syz.5.6725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 2261.960008][   T29] audit: type=1400 audit(1786581096.829:2098): avc:  denied  { read write } for  pid=1355 comm="syz.5.6725" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0
[ 2262.050771][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2262.064945][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2262.071054][   T29] audit: type=1400 audit(1786581096.919:2099): avc:  denied  { create } for  pid=1355 comm="syz.5.6725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[ 2262.099203][ T1357] ceph: No mds server is up or the cluster is laggy
[ 2262.125147][   T29] audit: type=1400 audit(1786581096.989:2100): avc:  denied  { read } for  pid=1352 comm="syz.3.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[ 2262.236021][   T29] audit: type=1400 audit(1786581097.109:2101): avc:  denied  { read write } for  pid=29595 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 2262.341892][   T29] audit: type=1400 audit(1786581097.219:2102): avc:  denied  { create } for  pid=1363 comm="syz.0.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[ 2262.401636][   T29] audit: type=1400 audit(1786581097.229:2103): avc:  denied  { create } for  pid=1363 comm="syz.0.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[ 2262.426310][   T29] audit: type=1400 audit(1786581097.229:2104): avc:  denied  { map_create } for  pid=1363 comm="syz.0.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 2262.976981][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2262.983107][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2263.021140][ T1376] ceph: No mds server is up or the cluster is laggy
[ 2264.045088][ T1408] ip_tables: iptables: counters copy to user failed while replacing table
[ 2266.127078][   T29] kauditd_printk_skb: 142 callbacks suppressed
[ 2266.127102][   T29] audit: type=1400 audit(1786581100.996:2247): avc:  denied  { read write } for  pid=30118 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 2266.212681][   T29] audit: type=1400 audit(1786581101.056:2248): avc:  denied  { create } for  pid=1450 comm="syz.3.6756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[ 2266.268090][   T29] audit: type=1400 audit(1786581101.056:2249): avc:  denied  { read } for  pid=1450 comm="syz.3.6756" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[ 2266.337109][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2266.354890][   T29] audit: type=1400 audit(1786581101.056:2250): avc:  denied  { read } for  pid=1450 comm="syz.3.6756" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[ 2266.379372][ T5259] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 2266.398697][ T5259] audit: backlog limit exceeded
[ 2266.404012][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2266.418200][ T5259] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[ 2266.429268][   T29] audit: type=1400 audit(1786581101.176:2251): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2267.789888][  T889] libceph: connect (1)[c::]:6789 error -101
[ 2267.815124][ T1470] ceph: No mds server is up or the cluster is laggy
[ 2267.825235][  T889] libceph: mon0 (1)[c::]:6789 connect error
[ 2268.605664][ T1446] [U] 
[ 2270.125030][ T1504] ip_tables: iptables: counters copy to user failed while replacing table
[ 2270.329903][ T1493] syz.0.6771 (1493): drop_caches: 2
[ 2270.904532][ T5695] libceph: connect (1)[c::]:6789 error -101
[ 2270.916268][ T1517] ceph: No mds server is up or the cluster is laggy
[ 2270.970733][ T5695] libceph: mon0 (1)[c::]:6789 connect error
[ 2271.131917][   T29] kauditd_printk_skb: 7665 callbacks suppressed
[ 2271.131935][   T29] audit: type=1400 audit(1786581105.993:9127): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2271.195491][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2271.213996][ T5259] audit: audit_lost=266 audit_rate_limit=0 audit_backlog_limit=64
[ 2271.232952][   T29] audit: type=1400 audit(1786581105.993:9128): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2271.250675][ T5259] audit: backlog limit exceeded
[ 2271.275683][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2271.294109][ T5259] audit: audit_lost=267 audit_rate_limit=0 audit_backlog_limit=64
[ 2271.310213][T30713] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2271.328220][T30713] audit: audit_lost=268 audit_rate_limit=0 audit_backlog_limit=64
[ 2271.339187][ T5259] audit: backlog limit exceeded
[ 2274.424060][ T1561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6792'.
[ 2276.143862][   T29] kauditd_printk_skb: 6768 callbacks suppressed
[ 2276.143879][   T29] audit: type=1400 audit(1786581111.011:15896): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2276.244647][   T29] audit: type=1400 audit(1786581111.011:15897): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2276.279457][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2276.293281][ T1584] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2276.305620][ T5259] audit: audit_lost=269 audit_rate_limit=0 audit_backlog_limit=64
[ 2276.311584][ T1584] audit: audit_lost=270 audit_rate_limit=0 audit_backlog_limit=64
[ 2276.329794][ T5259] audit: backlog limit exceeded
[ 2276.356173][ T1584] audit: backlog limit exceeded
[ 2276.369879][ T1585] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2276.381982][   T29] audit: type=1400 audit(1786581111.041:15898): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2277.637073][ T5695] libceph: connect (1)[c::]:6789 error -101
[ 2277.658381][ T5695] libceph: mon0 (1)[c::]:6789 connect error
[ 2277.672833][ T1600] ceph: No mds server is up or the cluster is laggy
[ 2278.024980][ T1612] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6808'.
[ 2278.298276][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2278.304745][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2278.342515][ T5695] libceph: connect (1)[c::]:6789 error -101
[ 2278.349637][ T5695] libceph: mon0 (1)[c::]:6789 connect error
[ 2278.378945][ T1619] ceph: No mds server is up or the cluster is laggy
[ 2278.909396][ T5695] libceph: connect (1)[c::]:6789 error -101
[ 2278.926908][ T5695] libceph: mon0 (1)[c::]:6789 connect error
[ 2278.933711][ T1632] ceph: No mds server is up or the cluster is laggy
[ 2279.248000][ T1643] xt_hl: Unknown TTL match mode: 255
[ 2279.709791][ T5695] libceph: connect (1)[c::]:6789 error -101
[ 2279.723589][ T5695] libceph: mon0 (1)[c::]:6789 connect error
[ 2279.749275][ T1664] ceph: No mds server is up or the cluster is laggy
[ 2280.717919][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2280.741241][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2280.767654][ T1683] ceph: No mds server is up or the cluster is laggy
[ 2281.155463][   T29] kauditd_printk_skb: 8062 callbacks suppressed
[ 2281.155480][   T29] audit: type=1400 audit(1786581116.009:23692): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2281.197340][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2281.208664][ T5259] audit: audit_lost=361 audit_rate_limit=0 audit_backlog_limit=64
[ 2281.219860][ T5259] audit: backlog limit exceeded
[ 2281.235416][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2281.236789][T31321] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2281.249843][ T5259] audit: audit_lost=362 audit_rate_limit=0 audit_backlog_limit=64
[ 2281.261590][   T29] audit: type=1400 audit(1786581116.009:23693): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2281.287671][T31321] audit: audit_lost=363 audit_rate_limit=0 audit_backlog_limit=64
[ 2281.297126][T31321] audit: backlog limit exceeded
[ 2282.682264][T17279] libceph: connect (1)[c::]:6789 error -101
[ 2282.690816][T17279] libceph: mon0 (1)[c::]:6789 connect error
[ 2282.717474][ T1718] ceph: No mds server is up or the cluster is laggy
[ 2282.810194][ T1724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6843'.
[ 2283.808214][ T1745] vlan2: entered promiscuous mode
[ 2283.826537][ T1745] bridge0: entered promiscuous mode
[ 2284.311735][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2284.330098][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2284.357549][ T1757] ceph: No mds server is up or the cluster is laggy
[ 2284.358706][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2284.403806][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2284.709394][ T1772] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:19999
[ 2286.027828][T32364] libceph: connect (1)[c::]:6789 error -101
[ 2286.056099][T32364] libceph: mon0 (1)[c::]:6789 connect error
[ 2286.072301][ T1799] ceph: No mds server is up or the cluster is laggy
[ 2286.166529][   T29] kauditd_printk_skb: 7062 callbacks suppressed
[ 2286.166546][   T29] audit: type=1400 audit(1786581121.028:30599): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2286.244910][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2286.254508][T31833] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2286.256342][   T29] audit: type=1400 audit(1786581121.028:30600): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2286.294696][T31833] audit: audit_lost=416 audit_rate_limit=0 audit_backlog_limit=64
[ 2286.305673][ T5259] audit: audit_lost=417 audit_rate_limit=0 audit_backlog_limit=64
[ 2286.322549][ T5259] audit: backlog limit exceeded
[ 2286.330100][T31833] audit: backlog limit exceeded
[ 2286.335179][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2286.352037][   T29] audit: type=1400 audit(1786581121.028:30601): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2288.372770][ T1855] syzkaller0: entered promiscuous mode
[ 2288.389885][ T1855] syzkaller0: entered allmulticast mode
[ 2291.180147][   T29] kauditd_printk_skb: 9869 callbacks suppressed
[ 2291.180166][   T29] audit: type=1400 audit(1786581126.037:38153): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2291.253904][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2291.269780][ T5259] audit: audit_lost=1191 audit_rate_limit=0 audit_backlog_limit=64
[ 2291.293537][ T5259] audit: backlog limit exceeded
[ 2291.304556][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2291.320812][ T5259] audit: audit_lost=1192 audit_rate_limit=0 audit_backlog_limit=64
[ 2291.346595][ T5259] audit: backlog limit exceeded
[ 2291.357311][ T1900] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2291.364183][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2291.377230][ T1900] audit: audit_lost=1193 audit_rate_limit=0 audit_backlog_limit=64
[ 2291.587877][ T1903] FAULT_INJECTION: forcing a failure.
[ 2291.587877][ T1903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2291.644882][ T1903] CPU: 0 UID: 0 PID: 1903 Comm: syz.4.6909 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2291.644914][ T1903] Tainted: [L]=SOFTLOCKUP
[ 2291.644921][ T1903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2291.644933][ T1903] Call Trace:
[ 2291.644939][ T1903]  <TASK>
[ 2291.644947][ T1903]  dump_stack_lvl+0x100/0x190
[ 2291.644980][ T1903]  should_fail_ex.cold+0x5/0xa
[ 2291.645005][ T1903]  _copy_to_user+0x32/0xd0
[ 2291.645031][ T1903]  simple_read_from_buffer+0xcb/0x170
[ 2291.645065][ T1903]  proc_fail_nth_read+0x1af/0x230
[ 2291.645096][ T1903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2291.645128][ T1903]  ? rw_verify_area+0xce/0x6d0
[ 2291.645154][ T1903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2291.645184][ T1903]  vfs_read+0x1e4/0xb40
[ 2291.645216][ T1903]  ? __pfx_vfs_read+0x10/0x10
[ 2291.645243][ T1903]  ? __fget_files+0x215/0x3d0
[ 2291.645268][ T1903]  ? __fget_files+0x21f/0x3d0
[ 2291.645297][ T1903]  ksys_read+0x12a/0x250
[ 2291.645324][ T1903]  ? __pfx_ksys_read+0x10/0x10
[ 2291.645366][ T1903]  do_syscall_64+0x115/0x870
[ 2291.645388][ T1903]  ? clear_bhb_loop+0x40/0x90
[ 2291.645413][ T1903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2291.645435][ T1903] RIP: 0033:0x7f655f75e90e
[ 2291.645451][ T1903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2291.645471][ T1903] RSP: 002b:00007f6560734fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2291.645491][ T1903] RAX: ffffffffffffffda RBX: 00007f65607356c0 RCX: 00007f655f75e90e
[ 2291.645506][ T1903] RDX: 000000000000000f RSI: 00007f65607350a0 RDI: 0000000000000003
[ 2291.645519][ T1903] RBP: 00007f6560735090 R08: 0000000000000000 R09: 0000000000000000
[ 2291.645531][ T1903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2291.645543][ T1903] R13: 00007f655fa26038 R14: 00007f655fa25fa0 R15: 00007ffede746de8
[ 2291.645572][ T1903]  </TASK>
[ 2293.407710][ T1951] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6925'.
[ 2293.637351][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2293.650309][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2293.688836][ T1953] ceph: No mds server is up or the cluster is laggy
[ 2293.698834][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2293.776769][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2295.077380][ T1991] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6938'.
[ 2296.191546][   T29] kauditd_printk_skb: 4369 callbacks suppressed
[ 2296.191564][   T29] audit: type=1400 audit(1786581131.047:42520): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2296.268697][ T2008] ceph: No mds server is up or the cluster is laggy
[ 2296.277896][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2296.302480][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2296.316373][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2296.336675][   T29] audit: type=1400 audit(1786581131.047:42522): avc:  denied  { read write } for  pid=2006 comm="syz.4.6945" name="raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[ 2296.378668][   T29] audit: type=1400 audit(1786581131.047:42521): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2296.417752][ T5259] audit: audit_lost=1195 audit_rate_limit=0 audit_backlog_limit=64
[ 2296.448820][ T5259] audit: backlog limit exceeded
[ 2296.461299][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2296.497224][   T29] audit: type=1400 audit(1786581131.057:42523): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2296.523905][ T5259] audit: audit_lost=1196 audit_rate_limit=0 audit_backlog_limit=64
[ 2296.583484][   T29] audit: type=1400 audit(1786581131.087:42524): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2297.281728][  T889] libceph: connect (1)[c::]:6789 error -101
[ 2297.313725][  T889] libceph: mon0 (1)[c::]:6789 connect error
[ 2297.336303][ T2030] ceph: No mds server is up or the cluster is laggy
[ 2298.199316][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2298.231285][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2298.259938][ T2054] ceph: No mds server is up or the cluster is laggy
[ 2298.267081][T23646] libceph: connect (1)[c::]:6789 error -101
[ 2298.278798][T23646] libceph: mon0 (1)[c::]:6789 connect error
[ 2299.304981][  T889] libceph: connect (1)[c::]:6789 error -101
[ 2299.334618][  T889] libceph: mon0 (1)[c::]:6789 connect error
[ 2299.376635][ T2079] ceph: No mds server is up or the cluster is laggy
[ 2299.807301][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2299.814190][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2299.835211][ T2093] ceph: No mds server is up or the cluster is laggy
[ 2300.854222][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2300.883317][ T2119] ceph: No mds server is up or the cluster is laggy
[ 2300.890223][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2301.198438][   T29] kauditd_printk_skb: 6163 callbacks suppressed
[ 2301.198455][   T29] audit: type=1400 audit(1786581136.056:48390): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2301.228522][   T29] audit: type=1400 audit(1786581136.056:48391): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2301.252554][   T29] audit: type=1400 audit(1786581136.066:48392): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2301.274791][   T29] audit: type=1400 audit(1786581136.066:48393): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2301.316688][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2301.333354][ T2142] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2301.340919][ T5259] audit: audit_lost=1296 audit_rate_limit=0 audit_backlog_limit=64
[ 2301.347860][   T29] audit: type=1400 audit(1786581136.066:48394): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2301.372241][ T2144] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2301.378934][ T2142] audit: audit_lost=1297 audit_rate_limit=0 audit_backlog_limit=64
[ 2302.792249][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6998'.
[ 2302.825647][ T2168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6998'.
[ 2302.855010][ T2168] netlink: 'syz.5.6998': attribute type 19 has an invalid length.
[ 2302.868353][ T2168] netlink: 'syz.5.6998': attribute type 20 has an invalid length.
[ 2303.029721][   T57] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2303.093545][   T57] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2303.125322][   T57] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2303.180039][   T57] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2306.213380][   T29] kauditd_printk_skb: 11153 callbacks suppressed
[ 2306.213398][   T29] audit: type=1400 audit(1786581141.076:58167): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2306.266737][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2306.284264][   T29] audit: type=1400 audit(1786581141.076:58168): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2306.295489][ T5259] audit: audit_lost=1758 audit_rate_limit=0 audit_backlog_limit=64
[ 2306.329002][   T29] audit: type=1400 audit(1786581141.076:58169): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2306.347828][ T5259] audit: backlog limit exceeded
[ 2306.358274][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2306.359864][   T29] audit: type=1400 audit(1786581141.076:58170): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2306.374775][ T5259] audit: audit_lost=1759 audit_rate_limit=0 audit_backlog_limit=64
[ 2306.414133][ T2241] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2307.715596][ T2274] ip_tables: iptables: counters copy to user failed while replacing table
[ 2308.824473][ T2305] ip_tables: iptables: counters copy to user failed while replacing table
[ 2309.223804][ T5694] libceph: connect (1)[c::]:6789 error -101
[ 2309.255547][ T2312] ceph: No mds server is up or the cluster is laggy
[ 2309.262898][ T5694] libceph: mon0 (1)[c::]:6789 connect error
[ 2310.822713][  T889] libceph: connect (1)[c::]:6789 error -101
[ 2310.838639][  T889] libceph: mon0 (1)[c::]:6789 connect error
[ 2310.863927][ T2358] ceph: No mds server is up or the cluster is laggy
[ 2311.225101][   T29] kauditd_printk_skb: 7593 callbacks suppressed
[ 2311.225118][   T29] audit: type=1400 audit(1786581147.088:65296): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2311.275438][   T29] audit: type=1400 audit(1786581147.088:65297): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2311.317395][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2311.324555][ T2370] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2311.331158][ T2370] audit: audit_lost=1916 audit_rate_limit=0 audit_backlog_limit=64
[ 2311.344520][ T5259] audit: audit_lost=1917 audit_rate_limit=0 audit_backlog_limit=64
[ 2311.354204][ T2370] audit: backlog limit exceeded
[ 2311.366167][ T2367] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2311.369794][   T29] audit: type=1400 audit(1786581147.088:65298): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2311.377218][ T2367] audit: audit_lost=1918 audit_rate_limit=0 audit_backlog_limit=64
[ 2311.499721][T32364] 
[ 2311.502073][T32364] ============================================
[ 2311.508205][T32364] WARNING: possible recursive locking detected
[ 2311.514347][T32364] syzkaller #0 Tainted: G             L     
[ 2311.520303][T32364] --------------------------------------------
[ 2311.526427][T32364] kworker/1:2/32364 is trying to acquire lock:
[ 2311.532560][T32364] ffff8880329bf128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860
[ 2311.542294][T32364] 
[ 2311.542294][T32364] but task is already holding lock:
[ 2311.549632][T32364] ffff88807db66928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860
[ 2311.559406][T32364] 
[ 2311.559406][T32364] other info that might help us debug this:
[ 2311.567438][T32364]  Possible unsafe locking scenario:
[ 2311.567438][T32364] 
[ 2311.574862][T32364]        CPU0
[ 2311.578119][T32364]        ----
[ 2311.581381][T32364]   lock(&grp->list_lock);
[ 2311.585780][T32364]   lock(&grp->list_lock);
[ 2311.590180][T32364] 
[ 2311.590180][T32364]  *** DEADLOCK ***
[ 2311.590180][T32364] 
[ 2311.598300][T32364]  May be due to missing lock nesting notation
[ 2311.598300][T32364] 
[ 2311.606596][T32364] 3 locks held by kworker/1:2/32364:
[ 2311.611858][T32364]  #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[ 2311.622288][T32364]  #1: ffffc90004a5fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[ 2311.634191][T32364]  #2: ffff88807db66928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860
[ 2311.644365][T32364] 
[ 2311.644365][T32364] stack backtrace:
[ 2311.650237][T32364] CPU: 1 UID: 0 PID: 32364 Comm: kworker/1:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2311.650263][T32364] Tainted: [L]=SOFTLOCKUP
[ 2311.650270][T32364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2311.650292][T32364] Workqueue: events snd_rawmidi_input_event_work
[ 2311.650318][T32364] Call Trace:
[ 2311.650325][T32364]  <TASK>
[ 2311.650332][T32364]  dump_stack_lvl+0x100/0x190
[ 2311.650354][T32364]  print_deadlock_bug.cold+0xbd/0xca
[ 2311.650382][T32364]  __lock_acquire+0x1256/0x1a40
[ 2311.650408][T32364]  lock_acquire+0x1b9/0x370
[ 2311.650428][T32364]  ? snd_seq_deliver_event+0x230/0x860
[ 2311.650453][T32364]  ? do_raw_read_unlock+0x3f/0x70
[ 2311.650479][T32364]  _raw_read_lock+0x5f/0x70
[ 2311.650506][T32364]  ? snd_seq_deliver_event+0x230/0x860
[ 2311.650528][T32364]  snd_seq_deliver_event+0x230/0x860
[ 2311.650551][T32364]  ? do_raw_spin_lock+0x128/0x260
[ 2311.650577][T32364]  ? __pfx_snd_seq_deliver_event+0x10/0x10
[ 2311.650600][T32364]  ? mark_held_locks+0x40/0x70
[ 2311.650620][T32364]  ? lockdep_hardirqs_on+0x78/0x100
[ 2311.650637][T32364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2311.650664][T32364]  ? client_use_ptr+0x107/0x4b0
[ 2311.650685][T32364]  snd_seq_kernel_client_dispatch+0x16f/0x1b0
[ 2311.650711][T32364]  queue_broadcast_event.isra.0+0x143/0x1b0
[ 2311.650739][T32364]  ? __pfx_queue_broadcast_event.isra.0+0x10/0x10
[ 2311.650767][T32364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2311.650794][T32364]  ? snd_seq_timer_start+0x1f0/0x2a0
[ 2311.650814][T32364]  snd_seq_control_queue+0x709/0xb70
[ 2311.650841][T32364]  ? __pfx_event_input_timer+0x10/0x10
[ 2311.650861][T32364]  __snd_seq_deliver_single_event+0x127/0x1c0
[ 2311.650887][T32364]  snd_seq_deliver_single_event+0x31f/0x8c0
[ 2311.650912][T32364]  ? __pfx_snd_seq_deliver_single_event+0x10/0x10
[ 2311.650936][T32364]  ? __lock_acquire+0x49f/0x1a40
[ 2311.650960][T32364]  snd_seq_deliver_event+0x44b/0x860
[ 2311.650983][T32364]  ? do_raw_spin_lock+0x128/0x260
[ 2311.651009][T32364]  ? __pfx_snd_seq_deliver_event+0x10/0x10
[ 2311.651031][T32364]  ? mark_held_locks+0x40/0x70
[ 2311.651051][T32364]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2311.651077][T32364]  ? lockdep_hardirqs_on+0x78/0x100
[ 2311.651094][T32364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2311.651121][T32364]  ? client_use_ptr+0x107/0x4b0
[ 2311.651142][T32364]  snd_seq_kernel_client_dispatch+0x16f/0x1b0
[ 2311.651168][T32364]  send_timer_event.isra.0+0x130/0x190
[ 2311.651192][T32364]  ? __pfx_send_timer_event.isra.0+0x10/0x10
[ 2311.651220][T32364]  ? lockdep_hardirqs_on+0x78/0x100
[ 2311.651238][T32364]  ? snd_seq_queue_timer_set_tempo+0x199/0x510
[ 2311.651268][T32364]  snd_seq_oss_timer_start+0x1db/0x320
[ 2311.651292][T32364]  ? __pfx_snd_seq_oss_timer_start+0x10/0x10
[ 2311.651316][T32364]  ? snd_seq_oss_readq_put_timestamp+0xd1/0x260
[ 2311.651337][T32364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2311.651364][T32364]  ? find_slot+0x166/0x1b0
[ 2311.651390][T32364]  snd_seq_oss_midi_input+0x467/0xa30
[ 2311.651419][T32364]  ? __pfx_snd_seq_oss_midi_input+0x10/0x10
[ 2311.651449][T32364]  ? find_held_lock+0x2b/0x80
[ 2311.651475][T32364]  ? snd_seq_port_use_ptr+0x128/0x190
[ 2311.651497][T32364]  snd_seq_oss_event_input+0x194/0x250
[ 2311.651522][T32364]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[ 2311.651547][T32364]  __snd_seq_deliver_single_event+0x127/0x1c0
[ 2311.651573][T32364]  snd_seq_deliver_single_event+0x31f/0x8c0
[ 2311.651598][T32364]  ? __pfx_snd_seq_deliver_single_event+0x10/0x10
[ 2311.651622][T32364]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2311.651649][T32364]  ? lockdep_hardirqs_on+0x78/0x100
[ 2311.651666][T32364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2311.651693][T32364]  ? snd_seq_timer_get_cur_tick+0x50/0x70
[ 2311.651715][T32364]  snd_seq_deliver_event+0x2c1/0x860
[ 2311.651741][T32364]  ? __pfx_snd_seq_deliver_event+0x10/0x10
[ 2311.651764][T32364]  ? mark_held_locks+0x40/0x70
[ 2311.651784][T32364]  ? lockdep_hardirqs_on+0x78/0x100
[ 2311.651801][T32364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2311.651828][T32364]  ? client_use_ptr+0x107/0x4b0
[ 2311.651849][T32364]  snd_seq_kernel_client_dispatch+0x16f/0x1b0
[ 2311.651875][T32364]  snd_midi_input_event+0x32f/0x470
[ 2311.651897][T32364]  ? __pfx_snd_midi_input_event+0x10/0x10
[ 2311.651918][T32364]  ? lock_acquire+0x5e/0x370
[ 2311.651940][T32364]  ? __pfx_snd_midi_input_event+0x10/0x10
[ 2311.651960][T32364]  snd_rawmidi_input_event_work+0x61/0x80
[ 2311.651985][T32364]  process_one_work+0xa23/0x1940
[ 2311.652008][T32364]  ? __pfx_process_one_work+0x10/0x10
[ 2311.652029][T32364]  ? __pfx_snd_rawmidi_input_event_work+0x10/0x10
[ 2311.652055][T32364]  worker_thread+0x5ef/0xe50
[ 2311.652077][T32364]  ? __pfx_worker_thread+0x10/0x10
[ 2311.652095][T32364]  ? kthread+0x13a/0x450
[ 2311.652111][T32364]  ? __pfx_worker_thread+0x10/0x10
[ 2311.652128][T32364]  kthread+0x370/0x450
[ 2311.652144][T32364]  ? __pfx_kthread+0x10/0x10
[ 2311.652161][T32364]  ret_from_fork+0x72b/0xd50
[ 2311.652185][T32364]  ? __pfx_ret_from_fork+0x10/0x10
[ 2311.652212][T32364]  ? __switch_to+0x800/0x10f0
[ 2311.652230][T32364]  ? __pfx_kthread+0x10/0x10
[ 2311.652246][T32364]  ret_from_fork_asm+0x1a/0x30
[ 2311.652277][T32364]  </TASK>
[ 2316.228879][   T29] kauditd_printk_skb: 34042 callbacks suppressed
[ 2316.228911][   T29] audit: type=1400 audit(1786581152.098:96063): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2316.256510][   T29] audit: type=1400 audit(1786581152.098:96064): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2316.278675][   T29] audit: type=1400 audit(1786581152.098:96065): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2316.284311][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2316.300013][   T29] audit: type=1400 audit(1786581152.098:96066): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2316.300048][   T29] audit: type=1400 audit(1786581152.098:96067): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2316.308627][ T5259] audit: audit_lost=3011 audit_rate_limit=0 audit_backlog_limit=64
[ 2316.330482][   T29] audit: type=1400 audit(1786581152.098:96068): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2316.349268][ T5259] audit: backlog limit exceeded
[ 2316.360533][   T29] audit: type=1400 audit(1786581152.098:96069): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.238563][   T29] kauditd_printk_skb: 42382 callbacks suppressed
[ 2321.238584][   T29] audit: type=1400 audit(1786581157.098:137297): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.247086][ T5259] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2321.272786][   T29] audit: type=1400 audit(1786581157.108:137298): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.272814][ T5259] audit: audit_lost=3397 audit_rate_limit=0 audit_backlog_limit=64
[ 2321.294074][   T29] audit: type=1400 audit(1786581157.108:137299): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.294111][   T29] audit: type=1400 audit(1786581157.108:137300): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.294145][   T29] audit: type=1400 audit(1786581157.108:137301): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.294179][   T29] audit: type=1400 audit(1786581157.108:137302): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.294213][   T29] audit: type=1400 audit(1786581157.108:137303): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[ 2321.294247][   T29] audit: type=1400 audit(1786581157.108:137304): avc:  denied  { read } for  pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0