last executing test programs:

39.043070648s ago: executing program 3 (id=158):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0d00000006000000040000000100001b0000f0ff", @ANYRES32=r0], 0x50)

38.984178147s ago: executing program 3 (id=160):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
r2 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000040)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6210f7f9e8fe4255}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r10, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010fd8916df61a243138161000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4)

38.904607044s ago: executing program 3 (id=162):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000e500060000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000ff0000850000000c000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

38.902853581s ago: executing program 3 (id=164):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2210088, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./mnt\x00', 0x0, 0x21)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000002540))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020)
r2 = syz_open_dev$loop(&(0x7f0000000480), 0x8f, 0x463c1)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x6, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x3fffffff]}})

38.782412813s ago: executing program 3 (id=166):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xa)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)

38.382873512s ago: executing program 3 (id=176):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000b1a000/0x400000)=nil) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x220, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a6be2c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17047e23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885714}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fd1942a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed19fa1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b69efc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76993e35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x248fa36c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ff9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fb131dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a4fde64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4254a89a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4bd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5487}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x365a9c1a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b7802b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79bd3129}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x455a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512de8c8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dcf8bb9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3623}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15888df5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a87}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf59a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xac9ad3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71f5912e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f5547f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c8ad18d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636794d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaff4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df1b6f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4645}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x990e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74d378f4}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5edcd31a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x634cb1dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a960f84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a0fafcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1451d560}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44c099e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ca9c7d3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x220}, 0x1, 0x0, 0x0, 0x44080}, 0x2000c000) (async)
r5 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup(r6, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1b, 0xd, &(0x7f0000000c00)=@raw=[@jmp={0x5, 0x0, 0x4, 0x8, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0x70, 0x7, 0xe, 0xd3ff, 0xc84}], &(0x7f0000000c80)='GPL\x00', 0x6, 0xf4, &(0x7f0000000cc0)=""/244, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x9, r6, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0xffffffff, 0x9, 0x5, 0x5}, 0x10, 0x0, r6, 0x3, &(0x7f0000001140)=[r6, 0xffffffffffffffff, r6, r6, r6, r6], &(0x7f0000001180)=[{0x5, 0x1, 0x3, 0xb}, {0x2, 0x3, 0xc, 0x7}, {0x0, 0x1, 0x8, 0x6}], 0x10, 0x8001}, 0x94)
r8 = openat$cgroup_type(r7, &(0x7f0000000880), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f00000008c0), 0x9) (async)
r9 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@code={0xa, 0x55, {"f00fc78c384822000065654e0fc7190f200566460f38803366b83d008ee0c42135ddd7b805000000b9000000000f01d9460f3066b82d010f00d866ba6100b85589db05ef"}}], 0x55})
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) (async)
r10 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async)
bind$packet(r10, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14)
r12 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x5) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file1\x00', 0x1019c0, 0x83)

38.324771924s ago: executing program 32 (id=176):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000b1a000/0x400000)=nil) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x220, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a6be2c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17047e23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d885714}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fd1942a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed19fa1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b69efc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76993e35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x248fa36c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ff9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fb131dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a4fde64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4254a89a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4bd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5487}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x365a9c1a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b7802b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79bd3129}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x455a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512de8c8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dcf8bb9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3623}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15888df5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a87}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf59a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xac9ad3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71f5912e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f5547f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c8ad18d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636794d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaff4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df1b6f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4645}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x990e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74d378f4}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5edcd31a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x634cb1dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a960f84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a0fafcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1451d560}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44c099e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ca9c7d3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x220}, 0x1, 0x0, 0x0, 0x44080}, 0x2000c000) (async)
r5 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup(r6, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1b, 0xd, &(0x7f0000000c00)=@raw=[@jmp={0x5, 0x0, 0x4, 0x8, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0x70, 0x7, 0xe, 0xd3ff, 0xc84}], &(0x7f0000000c80)='GPL\x00', 0x6, 0xf4, &(0x7f0000000cc0)=""/244, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x9, r6, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0xffffffff, 0x9, 0x5, 0x5}, 0x10, 0x0, r6, 0x3, &(0x7f0000001140)=[r6, 0xffffffffffffffff, r6, r6, r6, r6], &(0x7f0000001180)=[{0x5, 0x1, 0x3, 0xb}, {0x2, 0x3, 0xc, 0x7}, {0x0, 0x1, 0x8, 0x6}], 0x10, 0x8001}, 0x94)
r8 = openat$cgroup_type(r7, &(0x7f0000000880), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f00000008c0), 0x9) (async)
r9 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@code={0xa, 0x55, {"f00fc78c384822000065654e0fc7190f200566460f38803366b83d008ee0c42135ddd7b805000000b9000000000f01d9460f3066b82d010f00d866ba6100b85589db05ef"}}], 0x55})
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) (async)
r10 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async)
bind$packet(r10, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14)
r12 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x5) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file1\x00', 0x1019c0, 0x83)

37.574931422s ago: executing program 0 (id=188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file2\x00', 0x0)
stat(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0))
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000680), 0x7, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x14d443, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x20000, 0x1d2)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000700)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d80100f7061a74dfd4800000070000004b30c50997d3b4f409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3fa79a00", "67529ffeff0f00000000502748e5da4f321cedeb449a5dd3952b000000007013", [0xfffffffffffffce8, 0x6]}})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x10000, 0x0, 0x9, 0x13, 0x4, "cabdaa4304547f07f51e64beaacb4033314d148678f493e8a9356f54dfcbb2567c6396371f199711d7c8f8dfeaf7747a577e56755bf1f57a9a8a92bc3157ad13", "144aed87c1c8215e62c3bbb7bfa1bda58887334f3f77a85fe204a7521cb673db19277d1c3613c1508e9b4ba54e7b43ef6757dd115b0af60f1d5c3aa5a19ef419", "0cb33b946682f5f2e7890ba0fe35b36bd90b3f066b3ddce09ea0d0d0540fa752", [0x3, 0x10001]})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa5a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @random="0001ff8d00"})
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x1d8, 0xfffffffffffffffe)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, 0x0, 0x1)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x4}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest64=0x280c, 0x100, 0xd52}}, @nested_vmlaunch={0x12f, 0x18}], 0x80})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

37.21433178s ago: executing program 0 (id=189):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040efc07140c"], 0xff)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000379000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01725900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x65}], 0x1, 0x14, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000379000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01725900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x65}], 0x1, 0x14, 0x0, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x68c})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000140)={@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

36.534075775s ago: executing program 0 (id=200):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6ce683, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1000000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x1fe, 0x4, 0xe000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000001c0)={0x10000, 0x1000000})

36.529747698s ago: executing program 0 (id=202):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/console\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xefe, &(0x7f0000000000)={0x0, 0xaa7f, 0x0, 0x3, 0x4b}, &(0x7f00000000c0), &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = creat(&(0x7f00000006c0)='./file0\x00', 0x104)
r6 = open$dir(&(0x7f0000000700)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000880)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=[0x5], &(0x7f0000000980)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c)
socket$kcm(0x11, 0x3, 0x300)
socket$kcm(0x11, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x85)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000540)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
fchownat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xee01, 0x0, 0x1000)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [{0x8, 0x4}], {0x10, 0x6}, {0x20, 0x4}}, 0x2c, 0x2)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x42, 0x85)
syz_ublk_setup_io_uring(0xe0a, &(0x7f0000000180)={0x0, 0x9de0, 0x0, 0x3, 0x379, 0x0, r1}, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000240), &(0x7f0000000280))
syz_io_uring_submit(r11, r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x28, r4, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x835e, 0x20880, 0x0, {0x1}})
io_uring_enter(r1, 0x2000, 0x6eed, 0x49, 0x0, 0x0)

36.302771423s ago: executing program 0 (id=207):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8, &(0x7f0000000340)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x4c}}, 0xc8c1) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$inet6(r0, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @private2, 0x3d}, 0x1c) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd4}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x1, 0x0) (async)
mount$afs(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x14800, 0x0)
getpeername$inet6(r0, &(0x7f0000000100), &(0x7f0000000140)=0x1c) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xb) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8435001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2261df2ff65e47a668ba"], 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64)
sendmmsg(r4, &(0x7f0000000480), 0x40000000000009f, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x0, 0x3, 0x3}, 0x20) (async)
sendto$inet6(r0, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0)

36.003372914s ago: executing program 0 (id=213):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
openat$fb0(0xffffffffffffff9c, &(0x7f00000011c0), 0x8002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="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", 0x1000, r0}, 0x68)

35.940081904s ago: executing program 33 (id=213):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
openat$fb0(0xffffffffffffff9c, &(0x7f00000011c0), 0x8002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="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", 0x1000, r0}, 0x68)

3.322872395s ago: executing program 4 (id=639):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="100100"], 0x110}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x1081b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x44)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000740)={0x8, 0xa75, 0x0, 0x9, 0xe51, 0xc20b})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000010801010000000000000000050000010c0004800800014000009d746ec9010073797a3000000000ef304eb86683869299a1e4974564d5050a522a9c9ac1a174c7"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8014)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000004c0)=0x2000001)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000500))
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000)

2.734230786s ago: executing program 4 (id=640):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000540)='./tracing/events/lock/contended_release/enable\x00', &(0x7f0000000200)='iso9660\x00', 0x22465, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/lock/contended_release/enable\x00', 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r1, &(0x7f0000000140)='27', 0x2)
unshare(0xa000200) (async)
write(r0, &(0x7f0000000500)='1', 0x1) (async, rerun: 32)
write(r0, &(0x7f0000000600)='0', 0x1) (rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bridge0/bridge/root_id\x00', 0x0, 0x168) (rerun: 64)
read(r2, &(0x7f0000000480)=""/128, 0x80) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [""]}, 0x28}}, 0x0)

2.684268964s ago: executing program 4 (id=642):
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x4, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095180000000000008500000062000000b70000000000000095"], &(0x7f00000013c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.673855301s ago: executing program 4 (id=643):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000e500032000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000ff0000850000000c000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

2.657067392s ago: executing program 4 (id=644):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000300)='casefold,strict_encoding\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/dynamic_events\x00', 0x40000, 0x0)
read(r0, &(0x7f0000000440)=""/256, 0x100)
mount$overlay(0x0, &(0x7f0000001140)='./mnt/dir\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './mnt'}}]})

2.583946698s ago: executing program 4 (id=647):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000700)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000480)={0x14, &(0x7f00000002c0)={0x20, 0x21, 0x99, {0x99, 0x21, "a9a2633aabbaa81c128afa6a5633a9789fe9f441da039f59aa68947fe8419c2e31b969db403cdd7cb7ba4f4e121f720f0ba3a83f5f95dfc66a1314704071329e19d18d908542ccc34218d85e4eefd5e1549e97fe880fa09e84ab97f13e62901b203272f3dd7674ee7e845d90ffdca2bee706b79fff7c6131e088e6e203493bce134d302e5d35a3a64b0b64c9292d07a3475af6818e26c2"}}, &(0x7f0000000380)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "3618d099585513b94cda73679bd0f0b3d603f4d158cf07356a9c7d643fedfdd2690f0ad630f07078d37869c226a86927f8c2e77ae56cd162869e564fe368d01ea3594a0b230a2dcf65759de6113851e61e2a277d9fd36e4b05784bd952e5590c859ee1f725bf5cc0275a22cba614b2e71ea9ad54035ace532678c95c41fac4538b5d06b99a02b5a1551e0419bab612cb3b5da5f0997cabd7abbb81935821a23fc8a8305d893e202e4027459346031c234ef015572b8158bf56cb57ed870a08f4e21a1f899e645b66c3dfd8bc08ecec70bf498ccbfba95ef2a79b49af012c3ee384a897ed925747fbf66e7b1fcf323400e6d90ba209bf60ef"}}}, &(0x7f00000008c0)={0x44, &(0x7f00000004c0)={0x40, 0x5, 0x87, "60c182ced5a9b002197cf5db661f13c12e649ddbdc61daa8ad3681cee2ae16d94bd90039021b2e45b5bf3520d1732eb3aedf5db694274471fe71fd8804c9c576cf6ea1548c9ec899729b093d207e564043a3608d669ec77a0ea80b5764fe9fc91af41e5bb87b44ecaee65910998a2f34182526a101b5def5a318388f6ad06539c268134b8f81fd"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x81, 0x2, "8b3d"}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "b4"}, &(0x7f0000000800)=ANY=[@ANYBLOB="208303000100c54994"], &(0x7f0000000840)={0x20, 0x84, 0x1, "ac"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "cd120a"}})
openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r2, 0xaf290000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r5, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f00000001c0)=0x84, 0x4)
sendto$inet6(r8, 0x0, 0x0, 0x200c8084, &(0x7f0000000200)={0xa, 0x4e1f, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x4000010, 0x0, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000240)=0x8, 0x4)
recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, 0x0)
ioctl$XFS_IOC_DIOINFO(r6, 0x800c581e, &(0x7f0000000180))

2.024339948s ago: executing program 2 (id=658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a0100000000000e000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0)

1.963816765s ago: executing program 2 (id=660):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000280)={&(0x7f00000002c0)=""/198, 0xc6, 0x0, &(0x7f00000003c0)=""/225, 0xe1}}, 0x10)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000540))
r2 = syz_create_resource$futex(&(0x7f0000000040)=0x200001)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$COMEDI_INSNLIST(r3, 0x8010640b, 0x0)
futex(r2, 0x6, 0x0, 0x0, r2, 0x1)

1.963321288s ago: executing program 2 (id=662):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fcntl$setlease(r0, 0x400, 0x7)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="100100"], 0x110}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000)

1.963202427s ago: executing program 1 (id=663):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000"/95, @ANYRES32], 0x254}}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8, 0x8, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
r2 = syz_open_pts(r1, 0x141401)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
fcntl$setstatus(r2, 0x4, 0x2000)
write(r2, &(0x7f00000000c0)="d5", 0xfffffedf)
close_range(r0, 0xffffffffffffffff, 0x0)

1.884415182s ago: executing program 2 (id=664):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001d12d285d2853bc4dc54c6910c1d66f8841a0000e80406364c39c5a796ebd43804ae0e2a4edf8ab4b5781b6cdb8dabc8955ffb8df4ee6c8c603c3cb96d612861591e1b1f504aca99c78932f7f4b2359ddf90bfa59dbe23e8e4e2a3f244f5cb6b7afdadd6e49709f769b9f747d2c85513f7f468e227f733acbfe776e8c09e18efd1a441fdad1def983b4de2babbd71f39406adb42f64d9a7e6bb61a397574eca023d921a92b24b3a4da0702d4bd6dd8d4a94020cb63a2a342a714c33670685bca63b43a58aea224c8142a34b8211424294c9a8303649412841b60c47ca7e6c1e16d9193f1ce1ac15d728443af31e7"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001d12d285d2853bc4dc54c6910c1d66f8841a0000e80406364c39c5a796ebd43804ae0e2a4edf8ab4b5781b6cdb8dabc8955ffb8df4ee6c8c603c3cb96d612861591e1b1f504aca99c78932f7f4b2359ddf90bfa59dbe23e8e4e2a3f244f5cb6b7afdadd6e49709f769b9f747d2c85513f7f468e227f733acbfe776e8c09e18efd1a441fdad1def983b4de2babbd71f39406adb42f64d9a7e6bb61a397574eca023d921a92b24b3a4da0702d4bd6dd8d4a94020cb63a2a342a714c33670685bca63b43a58aea224c8142a34b8211424294c9a8303649412841b60c47ca7e6c1e16d9193f1ce1ac15d728443af31e7"], 0x0) (async)

1.884274642s ago: executing program 2 (id=665):
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x4, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095200000000000008500000062000000b70000000000000095"], &(0x7f00000013c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.874697053s ago: executing program 2 (id=666):
r0 = syz_usb_connect(0x1, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.86340188s ago: executing program 1 (id=667):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000e500035000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000ff0000850000000c000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

1.794467239s ago: executing program 1 (id=668):
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xf04, &(0x7f00000004c0)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f00000000c0), &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xee7, 0x1000002, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000200)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
rmdir(&(0x7f0000000040)='.\x00')
io_uring_enter(r1, 0x64ec, 0xfffffffd, 0x6a, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r5, &(0x7f0000000440)={0xa, 0x4e22, 0x6, @local, 0xb}, 0x1c)
chdir(&(0x7f0000000080)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x14e174135c0b87af)

1.794262774s ago: executing program 1 (id=669):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000001f0000000000000000000000000000001300000000000000c9b6a88916eeb46622659973ba44a53953c0a88cef40257465a8d23c84ca3377e8dbb604807c67c6236eed8e0583c257994c2d8c3318e58bbf3fdeecbf02e4ed4b002a8c5adba2874ed8613f48500f806fb06ad77b108df010a73c0ac85b344ae2701f457f2549f06f6b13602d5dca2521e527b78d74d38a50c7bfc2d0f4c8fd0a6ab8c44615ed773361b4f3a4ecaca73503668eeea3ec94d7ae3db5a61ad0957f38fd"], 0x50)

1.724597673s ago: executing program 1 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a0100000000000f000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0)

1.723614237s ago: executing program 1 (id=671):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000ac0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl(r4, 0x100, &(0x7f0000000000)="c33097b9ef04724f6eaad4fd623de326b1836be518461950c0110f62f72c8758b386b9c2211675456b276b70fdda32dae6bb7c86baa5df0c256b1b804c054086cc9dde6fbf2d26887237311b4dc8f1643da933823c2fe5e3f71b502f14856c9faaa69095fdaf306e17c97c201298e3ec0dab18aeaeef8684b5a5c877365bf04e3b65ea141d37054a77b9697fe005347adec91d24c08b4a88")
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = syz_open_dev$dvb_dvr(&(0x7f0000000700), 0x8000000000000001, 0x101000)
vmsplice(r5, &(0x7f00000007c0)=[{&(0x7f0000000740)="9722aacdc31135bc066a70e36a507ab850a5ee2938749335181f0b435af99140866dd0e44c5d7c12ba39edc1c283f825138e6932fe2f9be6ab715af45e6f6ba67d2399b520533e99d1667dfe89b6c362fa56d94f766132", 0x57}], 0x1, 0x7)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xd1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd700000dbdf251000000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB="08003b0003000000050035"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000003c0)=0x1, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff02000000000000000000000186009078010002000000000000000000"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c20000bf6519c5d2d05d00aaaaaaaaaaaa869d6001044a40203afffe80000000000000edffffff000000aafe8000000000000000000000000000aa8800907800000000fe8000000000000001000000000000bb02010000000040"], 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/111, 0x6f}], 0x1, &(0x7f0000000680)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4}}], 0x48, 0x40080}, 0x4000000)
openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/ttyUSB0\x00', 0x40, 0x24)
syz_usb_control_io(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

174.705543ms ago: executing program 5 (id=681):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000007a2c700000000000000009c0001000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2}, 0x94)
setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "2f48b60dcda8754f79d8e6733983aa1b5db42d84"}, 0x15, 0x2)

174.561371ms ago: executing program 5 (id=682):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000012000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0)

114.701134ms ago: executing program 5 (id=683):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="100100"], 0x110}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000)

114.243173ms ago: executing program 5 (id=684):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x200000) (async)
pwrite64(r0, &(0x7f0000000080)="0000010042", 0x5, 0x1be) (async)
pwrite64(r0, &(0x7f00000000c0)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f0000000140)="0002000b", 0x4, 0xc0c) (async)
pwrite64(r0, &(0x7f0000000180)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30)
pwrite64(r0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) (async)
pwrite64(r0, &(0x7f0000000200)="00000000000088", 0x7, 0xd2b)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x3, 0x0, 0x2) (async)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x1000000000130, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

44.748319ms ago: executing program 5 (id=685):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a", @ANYRES32], 0x254}}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8, 0x8, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
r2 = syz_open_pts(r1, 0x141401)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
fcntl$setstatus(r2, 0x4, 0x2000)
write(r2, &(0x7f00000000c0)="d5", 0xfffffedf)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=686):
r0 = syz_open_dev$dri(&(0x7f0000000640), 0x48, 0x189140)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000680)={0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x1, 0x1})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000840)="0300ffff0000", 0x6)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000740)={0x0})
close(r0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="100100"], 0x110}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/48, 0x30}, {&(0x7f0000000900)=""/152, 0x98}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/95, 0x5f}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc821}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x8, 0x3000000000002}, 0x0)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9c000000070a0300000000000000000007000006cf3a57d1f5940769d335e109815f86880004803800018008000100666962002c00028008add5f9d426539aca0002400000000108000340ad8d8ad1080003400000000008000140000000114c000180090001006c6a7374000000003c00028008000140000000040800014000000b2c0800014000009f2e0c000240000000e73df2dc77efbf3c4000000000000000040800014000000006"], 0x9c}, 0x1, 0x0, 0x0, 0x80048c4}, 0x2004c840)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20000)
socket$inet(0x2, 0x800, 0x6)

kernel console output (not intermixed with test programs):

66][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.168579][ T6282] device-mapper: ioctl: error adding target to table
[   56.168773][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.168787][ T6282] device-mapper: ioctl: error adding target to table
[   56.168970][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.168980][ T6282] device-mapper: ioctl: error adding target to table
[   56.169179][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.169194][ T6282] device-mapper: ioctl: error adding target to table
[   56.169871][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.169882][ T6282] device-mapper: ioctl: error adding target to table
[   56.170054][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.170063][ T6282] device-mapper: ioctl: error adding target to table
[   56.170239][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.170249][ T6282] device-mapper: ioctl: error adding target to table
[   56.170414][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.170424][ T6282] device-mapper: ioctl: error adding target to table
[   56.171039][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.171053][ T6282] device-mapper: ioctl: error adding target to table
[   56.171319][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.171333][ T6282] device-mapper: ioctl: error adding target to table
[   56.171627][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.171642][ T6282] device-mapper: ioctl: error adding target to table
[   56.171865][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.171875][ T6282] device-mapper: ioctl: error adding target to table
[   56.172153][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.172167][ T6282] device-mapper: ioctl: error adding target to table
[   56.172541][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.172556][ T6282] device-mapper: ioctl: error adding target to table
[   56.172839][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.172853][ T6282] device-mapper: ioctl: error adding target to table
[   56.173141][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.173155][ T6282] device-mapper: ioctl: error adding target to table
[   56.173429][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.173444][ T6282] device-mapper: ioctl: error adding target to table
[   56.173721][ T6282] device-mapper: table: 248:1: integrity: Internal hash not set in inline mode (-EINVAL)
[   56.173735][ T6282] device-mapper: ioctl: error adding target to table
[   56.221317][ T6293] FAULT_INJECTION: forcing a failure.
[   56.221317][ T6293] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   56.221348][ T6293] CPU: 2 UID: 0 PID: 6293 Comm: syz.1.102 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   56.221374][ T6293] Tainted: [L]=SOFTLOCKUP
[   56.221380][ T6293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.221391][ T6293] Call Trace:
[   56.221398][ T6293]  <TASK>
[   56.221406][ T6293]  dump_stack_lvl+0x100/0x190
[   56.221441][ T6293]  should_fail_ex.cold+0x5/0xa
[   56.221471][ T6293]  _copy_from_user+0x2e/0xd0
[   56.221500][ T6293]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[   56.221531][ T6293]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   56.221567][ T6293]  do_sock_getsockopt+0x43c/0x570
[   56.221585][ T6293]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   56.221603][ T6293]  ? __fget_files+0x34/0x3d0
[   56.221623][ T6293]  ? find_held_lock+0x2b/0x80
[   56.221651][ T6293]  ? __fget_files+0x21f/0x3d0
[   56.221679][ T6293]  __sys_getsockopt+0x148/0x260
[   56.221708][ T6293]  ? __x64_sys_getsockopt+0xbd/0x160
[   56.221729][ T6293]  __x64_sys_getsockopt+0xbd/0x160
[   56.221750][ T6293]  ? do_syscall_64+0xae/0x790
[   56.221771][ T6293]  ? lockdep_hardirqs_on+0x7d/0x110
[   56.221792][ T6293]  do_syscall_64+0x123/0x790
[   56.221813][ T6293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.221831][ T6293] RIP: 0033:0x7f5db8f9fb19
[   56.221846][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.221861][ T6293] RSP: 002b:00007f5db9ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   56.221874][ T6293] RAX: ffffffffffffffda RBX: 00007f5db9225fa0 RCX: 00007f5db8f9fb19
[   56.221881][ T6293] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004
[   56.221888][ T6293] RBP: 00007f5db9ed7090 R08: 0000200000000040 R09: 0000000000000000
[   56.221911][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.221921][ T6293] R13: 00007f5db9226038 R14: 00007f5db9225fa0 R15: 00007ffd141482c8
[   56.221944][ T6293]  </TASK>
[   56.414760][ T6325] can0: slcan on ttyS3.
[   56.420889][ T6330] FAULT_INJECTION: forcing a failure.
[   56.420889][ T6330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.420909][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.1.114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   56.420925][ T6330] Tainted: [L]=SOFTLOCKUP
[   56.420929][ T6330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.420935][ T6330] Call Trace:
[   56.420940][ T6330]  <TASK>
[   56.420944][ T6330]  dump_stack_lvl+0x100/0x190
[   56.420967][ T6330]  should_fail_ex.cold+0x5/0xa
[   56.420985][ T6330]  _copy_from_user+0x2e/0xd0
[   56.421008][ T6330]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[   56.421028][ T6330]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   56.421051][ T6330]  sockptr_to_sockopt+0xc6/0x520
[   56.421066][ T6330]  ? __pfx_sockptr_to_sockopt+0x10/0x10
[   56.421080][ T6330]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[   56.421098][ T6330]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   56.421120][ T6330]  do_sock_getsockopt+0x25f/0x570
[   56.421135][ T6330]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   56.421153][ T6330]  ? __fget_files+0x34/0x3d0
[   56.421168][ T6330]  ? find_held_lock+0x2b/0x80
[   56.421185][ T6330]  ? __fget_files+0x21f/0x3d0
[   56.421203][ T6330]  __sys_getsockopt+0x148/0x260
[   56.421221][ T6330]  ? __x64_sys_getsockopt+0xbd/0x160
[   56.421234][ T6330]  __x64_sys_getsockopt+0xbd/0x160
[   56.421248][ T6330]  ? do_syscall_64+0xae/0x790
[   56.421261][ T6330]  ? lockdep_hardirqs_on+0x7d/0x110
[   56.421273][ T6330]  do_syscall_64+0x123/0x790
[   56.421288][ T6330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.421300][ T6330] RIP: 0033:0x7f5db8f9fb19
[   56.421310][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.421321][ T6330] RSP: 002b:00007f5db9ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   56.421333][ T6330] RAX: ffffffffffffffda RBX: 00007f5db9225fa0 RCX: 00007f5db8f9fb19
[   56.421340][ T6330] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004
[   56.421347][ T6330] RBP: 00007f5db9ed7090 R08: 0000200000000040 R09: 0000000000000000
[   56.421353][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.421360][ T6330] R13: 00007f5db9226038 R14: 00007f5db9225fa0 R15: 00007ffd141482c8
[   56.421374][ T6330]  </TASK>
[   56.479774][ T6325] can0 (unregistered): slcan off ttyS3.
[   56.517227][ T5800] Bluetooth: hci1: command tx timeout
[   56.517251][ T5800] Bluetooth: hci0: command tx timeout
[   56.517291][ T5803] Bluetooth: hci2: command tx timeout
[   56.597424][ T5794] Bluetooth: hci3: command tx timeout
[   56.630362][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   56.630376][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'.
[   56.630390][ T6365] netlink: 'syz.0.124': attribute type 12 has an invalid length.
[   56.630397][ T6365] netlink: 'syz.0.124': attribute type 7 has an invalid length.
[   56.657174][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.657201][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.657220][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.657238][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.658629][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   56.658649][ T6365] netlink: 'syz.0.124': attribute type 12 has an invalid length.
[   56.658657][ T6365] netlink: 'syz.0.124': attribute type 7 has an invalid length.
[   56.662860][ T6373] FAULT_INJECTION: forcing a failure.
[   56.662860][ T6373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.662878][ T6373] CPU: 2 UID: 0 PID: 6373 Comm: syz.2.125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   56.662894][ T6373] Tainted: [L]=SOFTLOCKUP
[   56.662898][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.662905][ T6373] Call Trace:
[   56.662909][ T6373]  <TASK>
[   56.662913][ T6373]  dump_stack_lvl+0x100/0x190
[   56.662937][ T6373]  should_fail_ex.cold+0x5/0xa
[   56.662955][ T6373]  _copy_to_user+0x32/0xd0
[   56.662972][ T6373]  do_sock_getsockopt+0x4d3/0x570
[   56.662989][ T6373]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   56.663005][ T6373]  ? __fget_files+0x34/0x3d0
[   56.663021][ T6373]  ? find_held_lock+0x2b/0x80
[   56.663038][ T6373]  ? __fget_files+0x21f/0x3d0
[   56.663056][ T6373]  __sys_getsockopt+0x148/0x260
[   56.663074][ T6373]  ? __x64_sys_getsockopt+0xbd/0x160
[   56.663087][ T6373]  __x64_sys_getsockopt+0xbd/0x160
[   56.663107][ T6373]  ? do_syscall_64+0xae/0x790
[   56.663120][ T6373]  ? lockdep_hardirqs_on+0x7d/0x110
[   56.663133][ T6373]  do_syscall_64+0x123/0x790
[   56.663147][ T6373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.663160][ T6373] RIP: 0033:0x7f8cbad9fb19
[   56.663170][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.663181][ T6373] RSP: 002b:00007f8cbbd2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   56.663193][ T6373] RAX: ffffffffffffffda RBX: 00007f8cbb025fa0 RCX: 00007f8cbad9fb19
[   56.663201][ T6373] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004
[   56.663207][ T6373] RBP: 00007f8cbbd2a090 R08: 0000200000000040 R09: 0000000000000000
[   56.663214][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.663221][ T6373] R13: 00007f8cbb026038 R14: 00007f8cbb025fa0 R15: 00007ffdeab8e458
[   56.663235][ T6373]  </TASK>
[   56.695802][ T6375] FAULT_INJECTION: forcing a failure.
[   56.695802][ T6375] name fail_futex, interval 1, probability 0, space 0, times 1
[   56.695824][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.1.126 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   56.695842][ T6375] Tainted: [L]=SOFTLOCKUP
[   56.695846][ T6375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.695854][ T6375] Call Trace:
[   56.695859][ T6375]  <TASK>
[   56.695864][ T6375]  dump_stack_lvl+0x100/0x190
[   56.695889][ T6375]  should_fail_ex.cold+0x5/0xa
[   56.695908][ T6375]  get_futex_key+0x1c9/0x13e0
[   56.695944][ T6375]  ? __pfx_get_futex_key+0x10/0x10
[   56.695960][ T6375]  ? __pfx___smp_call_single_queue+0x10/0x10
[   56.695975][ T6375]  futex_wait_setup+0x91/0x540
[   56.695997][ T6375]  __futex_wait+0x19f/0x360
[   56.696016][ T6375]  ? __pfx___futex_wait+0x10/0x10
[   56.696033][ T6375]  ? __pfx_try_to_wake_up+0x10/0x10
[   56.696057][ T6375]  ? futex_hash+0x311/0x400
[   56.696072][ T6375]  ? __pfx_futex_wake_mark+0x10/0x10
[   56.696093][ T6375]  ? find_held_lock+0x2b/0x80
[   56.696121][ T6375]  ? futex_wake+0x4ea/0x5e0
[   56.696142][ T6375]  futex_wait+0xe6/0x370
[   56.696159][ T6375]  ? __pfx_futex_wait+0x10/0x10
[   56.696180][ T6375]  ? find_held_lock+0x2b/0x80
[   56.696196][ T6375]  do_futex+0x265/0x440
[   56.696211][ T6375]  ? __pfx_do_futex+0x10/0x10
[   56.696226][ T6375]  ? fput+0x7c/0x100
[   56.696243][ T6375]  __x64_sys_futex+0x34f/0x4d0
[   56.696259][ T6375]  ? __pfx___x64_sys_futex+0x10/0x10
[   56.696279][ T6375]  do_syscall_64+0x123/0x790
[   56.696294][ T6375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.696307][ T6375] RIP: 0033:0x7f5db8f9fb19
[   56.696318][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.696329][ T6375] RSP: 002b:00007f5db9ed70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   56.696342][ T6375] RAX: ffffffffffffffda RBX: 00007f5db9225fa8 RCX: 00007f5db8f9fb19
[   56.696350][ T6375] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5db9225fa8
[   56.696358][ T6375] RBP: 00007f5db9225fa0 R08: 0000000000000000 R09: 0000000000000000
[   56.696366][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.696373][ T6375] R13: 00007f5db9226038 R14: 00007ffd141481e0 R15: 00007ffd141482c8
[   56.696389][ T6375]  </TASK>
[   56.721920][ T6381] tipc: Started in network mode
[   56.721938][ T6381] tipc: Node identity ac1414aa, cluster identity 4711
[   56.722507][ T6381] tipc: New replicast peer: 172.20.20.187
[   56.723071][ T6381] tipc: Enabled bearer <udp:syz0>, priority 10
[   56.828384][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   56.828496][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   56.828506][ T6404] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   56.828513][ T6404] UDF-fs: Scanning with blocksize 512 failed
[   56.832461][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   56.832538][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   56.832548][ T6404] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   56.832555][ T6404] UDF-fs: Scanning with blocksize 1024 failed
[   56.832852][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   56.832901][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   56.832911][ T6404] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   56.832918][ T6404] UDF-fs: Scanning with blocksize 2048 failed
[   56.833157][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   56.833200][ T6404] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   56.833210][ T6404] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   56.833216][ T6404] UDF-fs: Scanning with blocksize 4096 failed
[   56.833221][ T6404] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[   57.032693][ T6426] FAULT_INJECTION: forcing a failure.
[   57.032693][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.032713][ T6426] CPU: 3 UID: 0 PID: 6426 Comm: syz.0.136 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   57.032730][ T6426] Tainted: [L]=SOFTLOCKUP
[   57.032734][ T6426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.032741][ T6426] Call Trace:
[   57.032745][ T6426]  <TASK>
[   57.032750][ T6426]  dump_stack_lvl+0x100/0x190
[   57.032773][ T6426]  should_fail_ex.cold+0x5/0xa
[   57.032792][ T6426]  _copy_to_user+0x32/0xd0
[   57.032808][ T6426]  simple_read_from_buffer+0xcb/0x170
[   57.032825][ T6426]  proc_fail_nth_read+0x1af/0x230
[   57.032843][ T6426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   57.032860][ T6426]  ? rw_verify_area+0xce/0x6d0
[   57.032879][ T6426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   57.032895][ T6426]  vfs_read+0x1e4/0xb40
[   57.032908][ T6426]  ? lock_acquire+0x1d1/0x380
[   57.032925][ T6426]  ? __fget_files+0x34/0x3d0
[   57.032940][ T6426]  ? __pfx_vfs_read+0x10/0x10
[   57.032951][ T6426]  ? find_held_lock+0x2b/0x80
[   57.032964][ T6426]  ? __fget_files+0x215/0x3d0
[   57.032981][ T6426]  ? __fget_files+0x21f/0x3d0
[   57.033000][ T6426]  ksys_read+0x12a/0x250
[   57.033012][ T6426]  ? __pfx_ksys_read+0x10/0x10
[   57.033028][ T6426]  do_syscall_64+0x123/0x790
[   57.033044][ T6426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.033057][ T6426] RIP: 0033:0x7f22de16034e
[   57.033067][ T6426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   57.033078][ T6426] RSP: 002b:00007f22defe3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   57.033090][ T6426] RAX: ffffffffffffffda RBX: 00007f22defe46c0 RCX: 00007f22de16034e
[   57.033097][ T6426] RDX: 000000000000000f RSI: 00007f22defe40a0 RDI: 0000000000000003
[   57.033104][ T6426] RBP: 00007f22defe4090 R08: 0000000000000000 R09: 0000000000000000
[   57.033110][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.033117][ T6426] R13: 00007f22de426038 R14: 00007f22de425fa0 R15: 00007fff36556418
[   57.033131][ T6426]  </TASK>
[   57.155872][ T6447] syz.0.142 uses obsolete (PF_INET,SOCK_PACKET)
[   57.483615][ T6456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6456 comm=syz.1.146
[   57.538820][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   57.539251][ T6456] kvm [6455]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   57.540780][ T6456] kvm [6455]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   57.697579][ T5890] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00
[   57.698377][ T5890] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   57.698394][ T5890] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   57.698406][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   57.698420][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   57.698438][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.701141][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   57.701245][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   57.704586][ T5890] pl2303 5-1:1.0: pl2303 converter detected
[   57.706418][ T5890] usb 5-1: pl2303 converter now attached to ttyUSB0
[   57.719687][ T1904] tipc: Node number set to 2886997162
[   57.805577][ T6479] __nla_validate_parse: 6 callbacks suppressed
[   57.805595][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'.
[   57.806350][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'.
[   58.114697][   T42] kauditd_printk_skb: 138 callbacks suppressed
[   58.114717][   T42] audit: type=1400 audit(1793931643.827:411): avc:  denied  { write } for  pid=6494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.170179][   T42] audit: type=1400 audit(1793931643.887:412): avc:  denied  { write } for  pid=6502 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.170314][ T6500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   58.172467][ T6503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28688 sclass=netlink_route_socket pid=6503 comm=syz.3.155
[   58.231281][   T42] audit: type=1400 audit(1793931643.947:413): avc:  denied  { write } for  pid=6506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.298365][   T42] audit: type=1400 audit(1793931644.017:414): avc:  denied  { write } for  pid=6510 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.365927][   T42] audit: type=1400 audit(1793931644.077:415): avc:  denied  { write } for  pid=6513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.414363][   T42] audit: type=1400 audit(1793931644.127:416): avc:  denied  { write } for  pid=6516 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.417551][ T6509] pl2303 ttyUSB0: pl2303_set_line_request - failed: -110
[   58.418109][ T6509] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   58.418156][ T6509] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[   58.478374][ T6469] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   58.478393][ T6469] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   58.491391][ T6469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   58.491412][ T6469] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   58.503374][ T6469] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   58.503394][ T6469] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   58.506491][ T6469] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   58.506568][ T6469] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   58.514769][ T5877] usb 5-1: USB disconnect, device number 2
[   58.524894][ T5877] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   58.525418][ T5877] pl2303 5-1:1.0: device disconnected
[   58.725990][ T6527] netlink: 'syz.3.160': attribute type 1 has an invalid length.
[   58.731137][   T42] audit: type=1400 audit(1793931644.447:417): avc:  denied  { create } for  pid=6526 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.732100][   T42] audit: type=1400 audit(1793931644.447:418): avc:  denied  { connect } for  pid=6526 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.735279][   T42] audit: type=1400 audit(1793931644.447:419): avc:  denied  { getopt } for  pid=6526 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.771201][ T6527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64784 sclass=netlink_route_socket pid=6527 comm=syz.3.160
[   58.834470][   T42] audit: type=1400 audit(1793931644.547:420): avc:  denied  { mount } for  pid=6536 comm="syz.3.164" name="/" dev="9p" ino=71827713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   59.061909][ T6549] netlink: 'syz.0.168': attribute type 4 has an invalid length.
[   59.061931][ T6549] netlink: 152 bytes leftover after parsing attributes in process `syz.0.168'.
[   59.071143][ T6549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   59.123905][ T5790] rxe_eth0 speed is unknown, defaulting to 1000
[   59.177352][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'.
[   59.180328][ T6561] IPv6: sit1: Disabled Multicast RS
[   59.181102][ T6561] sit1: entered allmulticast mode
[   59.230586][ T6570] process 'syz.1.174' launched './file0' with NULL argv: empty string added
[   59.424683][ T6580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6580 comm=syz.1.177
[   59.429021][ T6580] Format for adding new port is "id [perm_addr]" (uint MAC).
[   59.458985][ T6580] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   59.483003][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.484087][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.486096][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.490845][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.491957][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.493617][ T6580] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups)
[   59.505883][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.507391][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.507547][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.507969][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.510411][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.698587][ T6599] tmpfs: Unknown parameter 'mA���d1�5�4��.�mA	E3-�y��U�cS��b� �{7�z%���b\�Ϣ���C	��o�@a���U�y#�Neh7o�H�bZܥ�װ�j��l̵.\��O�jcxN�s�A&��y�|Wa;�K�[��Cqפ]!���K镅iwShv�f�~4���!0~�n誱8�[P'��?@a*�	u���m�ԙ�0����$�fzs]1r�n� �
�.�0��|�R6R��'
[   59.715166][ T6582] rxe_eth0 speed is unknown, defaulting to 1000
[   59.857106][   T10] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   59.989893][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.990024][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.990185][ T6582] bridge_slave_0: entered allmulticast mode
[   59.990245][   T10] usb 6-1: device descriptor read/64, error -71
[   59.990893][ T6582] bridge_slave_0: entered promiscuous mode
[   59.992531][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.992597][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.992658][ T6582] bridge_slave_1: entered allmulticast mode
[   59.993454][ T6582] bridge_slave_1: entered promiscuous mode
[   60.009384][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.010218][ T6620] netlink: 'syz.2.187': attribute type 11 has an invalid length.
[   60.010990][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.026607][ T6582] team0: Port device team_slave_0 added
[   60.028366][ T6582] team0: Port device team_slave_1 added
[   60.041022][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.041037][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.041056][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.042679][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.042688][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.042702][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.063542][ T6582] hsr_slave_0: entered promiscuous mode
[   60.064005][ T6582] hsr_slave_1: entered promiscuous mode
[   60.064301][ T6582] debugfs: 'hsr0' already exists in 'hsr'
[   60.064310][ T6582] Cannot create hsr debugfs directory
[   60.138911][ T6622] loop7: detected capacity change from 0 to 7
[   60.144233][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.144360][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.147902][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.147959][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.148178][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.148207][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.148566][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.148597][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149204][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.149235][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149321][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.149348][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149400][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.149426][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149444][ T6622] ldm_validate_partition_table(): Disk read failed.
[   60.149494][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.149521][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149578][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.149605][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149673][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   60.149700][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[   60.149789][ T6622] Dev loop7: unable to read RDB block 0
[   60.151348][ T6622]  loop7: unable to read partition table
[   60.151449][ T6622] loop7: partition table beyond EOD, truncated
[   60.151480][ T6622] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   60.192462][ T6582] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   60.194483][ T6582] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   60.194906][ T6582] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   60.197691][ T6582] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   60.198087][ T6582] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   60.200278][ T6582] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   60.200707][ T6582] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   60.202732][ T6582] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   60.218204][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.218251][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.218352][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.218469][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.227295][   T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   60.263771][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.285307][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.285989][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.296963][ T6582] 8021q: adding VLAN 0 to HW filter on device team0
[   60.300743][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.300817][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.304675][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.304719][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.340851][ T6582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.357291][   T10] usb 6-1: device descriptor read/64, error -71
[   60.468633][   T10] usb usb6-port1: attempt power cycle
[   60.574795][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.715848][ T6582] veth0_vlan: entered promiscuous mode
[   60.719071][ T6582] veth1_vlan: entered promiscuous mode
[   60.732389][ T6582] veth0_macvtap: entered promiscuous mode
[   60.735197][ T6582] veth1_macvtap: entered promiscuous mode
[   60.742579][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.745881][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.780819][ T5876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.780860][ T5876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.780892][ T5876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.780922][ T5876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.794063][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.794077][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.807232][   T10] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[   60.815532][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.815555][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.828564][   T10] usb 6-1: device descriptor read/8, error -71
[   61.067945][   T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[   61.088052][   T10] usb 6-1: device descriptor read/8, error -71
[   61.197257][   T10] usb usb6-port1: unable to enumerate USB device
[   61.315109][ T6710] netlink: 'syz.2.206': attribute type 1 has an invalid length.
[   61.371866][ T6712] netlink: 'syz.2.206': attribute type 1 has an invalid length.
[   61.557258][ T5803] Bluetooth: hci1: command tx timeout
[   61.575710][ T6728] rxe_eth0 speed is unknown, defaulting to 1000
[   61.662563][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.662588][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.678125][ T6727] rxe_eth0 speed is unknown, defaulting to 1000
[   61.731261][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.731286][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.800949][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.800974][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.850063][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.850099][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.872364][ T6740] FAULT_INJECTION: forcing a failure.
[   61.872364][ T6740] name failslab, interval 1, probability 0, space 0, times 0
[   61.872387][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.4.215 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   61.872404][ T6740] Tainted: [L]=SOFTLOCKUP
[   61.872408][ T6740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   61.872416][ T6740] Call Trace:
[   61.872443][ T6740]  <TASK>
[   61.872449][ T6740]  dump_stack_lvl+0x100/0x190
[   61.872479][ T6740]  should_fail_ex.cold+0x5/0xa
[   61.872499][ T6740]  should_failslab+0xc2/0x120
[   61.872522][ T6740]  __kvmalloc_node_noprof+0x113/0x9b0
[   61.872557][ T6740]  ? file_tty_write.isra.0+0x6a7/0x8f0
[   61.872581][ T6740]  file_tty_write.isra.0+0x6a7/0x8f0
[   61.872595][ T6740]  ? security_file_permission+0x76/0x210
[   61.872615][ T6740]  ? rw_verify_area+0xce/0x6d0
[   61.872652][ T6740]  vfs_write+0x6af/0x1050
[   61.872669][ T6740]  ? __pfx_tty_write+0x10/0x10
[   61.872689][ T6740]  ? __pfx_vfs_write+0x10/0x10
[   61.872703][ T6740]  ? find_held_lock+0x2b/0x80
[   61.872733][ T6740]  ksys_write+0x12a/0x250
[   61.872746][ T6740]  ? __pfx_ksys_write+0x10/0x10
[   61.872762][ T6740]  do_syscall_64+0x123/0x790
[   61.872783][ T6740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.872796][ T6740] RIP: 0033:0x7f3817f9fb19
[   61.872814][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.872826][ T6740] RSP: 002b:00007f3818e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   61.872838][ T6740] RAX: ffffffffffffffda RBX: 00007f3818225fa0 RCX: 00007f3817f9fb19
[   61.872846][ T6740] RDX: 00000000fffffedf RSI: 00002000000000c0 RDI: 0000000000000005
[   61.872853][ T6740] RBP: 00007f3818e70090 R08: 0000000000000000 R09: 0000000000000000
[   61.872860][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.872867][ T6740] R13: 00007f3818226038 R14: 00007f3818225fa0 R15: 00007ffe904421d8
[   61.872882][ T6740]  </TASK>
[   61.873535][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.875654][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.876657][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.878185][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.878438][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.960898][   T13] bridge_slave_1: left allmulticast mode
[   61.960930][   T13] bridge_slave_1: left promiscuous mode
[   61.961658][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.963539][   T13] bridge_slave_0: left allmulticast mode
[   61.963555][   T13] bridge_slave_0: left promiscuous mode
[   61.963703][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.086763][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.095574][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.101709][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   62.103243][   T13] bond0 (unregistering): Released all slaves
[   62.151748][   T13] tipc: Disabling bearer <udp:syz0>
[   62.153251][   T13] tipc: Left network mode
[   62.273374][ T6738] rxe_eth0 speed is unknown, defaulting to 1000
[   62.302238][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2
[   62.529697][   T13] hsr_slave_0: left promiscuous mode
[   62.530413][   T13] hsr_slave_1: left promiscuous mode
[   62.531154][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.531179][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.532232][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.532247][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.542522][   T13] veth1_macvtap: left promiscuous mode
[   62.542554][   T13] veth0_macvtap: left promiscuous mode
[   62.542609][   T13] veth1_vlan: left promiscuous mode
[   62.542729][   T13] veth0_vlan: left promiscuous mode
[   62.653692][ T6780] gadgetfs: bound to dummy_udc driver
[   62.704019][   T13] team0 (unregistering): Port device team_slave_1 removed
[   62.712163][   T13] team0 (unregistering): Port device team_slave_0 removed
[   62.798712][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3
[   62.815469][ T6793] FAULT_INJECTION: forcing a failure.
[   62.815469][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.815499][ T6793] CPU: 2 UID: 0 PID: 6793 Comm: syz.4.224 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   62.815526][ T6793] Tainted: [L]=SOFTLOCKUP
[   62.815533][ T6793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.815552][ T6793] Call Trace:
[   62.815559][ T6793]  <TASK>
[   62.815566][ T6793]  dump_stack_lvl+0x100/0x190
[   62.815603][ T6793]  should_fail_ex.cold+0x5/0xa
[   62.815635][ T6793]  _copy_from_iter+0x1f4/0x16c0
[   62.815679][ T6793]  ? rcu_is_watching+0x13/0xc0
[   62.815712][ T6793]  ? __pfx__copy_from_iter+0x10/0x10
[   62.815734][ T6793]  ? __kasan_kmalloc+0xaa/0xb0
[   62.815756][ T6793]  ? __kvmalloc_node_noprof+0x377/0x9b0
[   62.815787][ T6793]  ? file_tty_write.isra.0+0x6ed/0x8f0
[   62.815809][ T6793]  ? rcu_is_watching+0x13/0xc0
[   62.815830][ T6793]  ? file_tty_write.isra.0+0x6ed/0x8f0
[   62.815850][ T6793]  ? kfree+0x1e5/0x6d0
[   62.815879][ T6793]  file_tty_write.isra.0+0x453/0x8f0
[   62.815932][ T6793]  vfs_write+0x6af/0x1050
[   62.815955][ T6793]  ? __pfx_tty_write+0x10/0x10
[   62.815978][ T6793]  ? __pfx_vfs_write+0x10/0x10
[   62.815997][ T6793]  ? find_held_lock+0x2b/0x80
[   62.816036][ T6793]  ksys_write+0x12a/0x250
[   62.816056][ T6793]  ? __pfx_ksys_write+0x10/0x10
[   62.816084][ T6793]  do_syscall_64+0x123/0x790
[   62.816111][ T6793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.816132][ T6793] RIP: 0033:0x7f3817f9fb19
[   62.816149][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.816168][ T6793] RSP: 002b:00007f3818e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   62.816189][ T6793] RAX: ffffffffffffffda RBX: 00007f3818225fa0 RCX: 00007f3817f9fb19
[   62.816201][ T6793] RDX: 00000000fffffedf RSI: 00002000000000c0 RDI: 0000000000000005
[   62.816214][ T6793] RBP: 00007f3818e70090 R08: 0000000000000000 R09: 0000000000000000
[   62.816226][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.816237][ T6793] R13: 00007f3818226038 R14: 00007f3818225fa0 R15: 00007ffe904421d8
[   62.816265][ T6793]  </TASK>
[   62.862262][ T6797] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[   62.875162][ T6797] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.880586][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'.
[   62.885132][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[   62.885964][ T6797] FAULT_INJECTION: forcing a failure.
[   62.885964][ T6797] name failslab, interval 1, probability 0, space 0, times 0
[   62.885983][ T6797] CPU: 2 UID: 0 PID: 6797 Comm: syz.1.225 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   62.886001][ T6797] Tainted: [L]=SOFTLOCKUP
[   62.886005][ T6797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.886013][ T6797] Call Trace:
[   62.886018][ T6797]  <TASK>
[   62.886023][ T6797]  dump_stack_lvl+0x100/0x190
[   62.886047][ T6797]  should_fail_ex.cold+0x5/0xa
[   62.886068][ T6797]  should_failslab+0xc2/0x120
[   62.886084][ T6797]  __kmalloc_cache_node_noprof+0x94/0x710
[   62.886098][ T6797]  ? __alloc_workqueue+0x7b9/0x1900
[   62.886130][ T6797]  __alloc_workqueue+0x7b9/0x1900
[   62.886156][ T6797]  alloc_workqueue_noprof+0xc7/0x130
[   62.886176][ T6797]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[   62.886197][ T6797]  ? lockdep_init_map_type+0x5c/0x250
[   62.886218][ T6797]  ? lockdep_init_map_type+0x5c/0x250
[   62.886236][ T6797]  ? __raw_spin_lock_init+0x3a/0x110
[   62.886271][ T6797]  wg_newlink+0x29e/0x7a0
[   62.886289][ T6797]  ? rtnl_create_link+0xa4b/0xf80
[   62.886308][ T6797]  ? __pfx_wg_newlink+0x10/0x10
[   62.886320][ T6797]  rtnl_newlink+0x1697/0x2620
[   62.886342][ T6797]  ? __pfx_rtnl_newlink+0x10/0x10
[   62.886360][ T6797]  ? avc_has_perm_noaudit+0x56/0x470
[   62.886378][ T6797]  ? find_held_lock+0x2b/0x80
[   62.886392][ T6797]  ? avc_has_perm_noaudit+0x11e/0x470
[   62.886407][ T6797]  ? avc_has_perm_noaudit+0x11e/0x470
[   62.886437][ T6797]  ? lock_acquire+0x1d1/0x380
[   62.886454][ T6797]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[   62.886471][ T6797]  ? find_held_lock+0x2b/0x80
[   62.886484][ T6797]  ? rtnetlink_rcv_msg+0x93a/0xe90
[   62.886501][ T6797]  ? rtnetlink_rcv_msg+0x93a/0xe90
[   62.886519][ T6797]  ? __pfx_rtnl_newlink+0x10/0x10
[   62.886543][ T6797]  rtnetlink_rcv_msg+0x95e/0xe90
[   62.886562][ T6797]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   62.886588][ T6797]  netlink_rcv_skb+0x159/0x420
[   62.886605][ T6797]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   62.886626][ T6797]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   62.886641][ T6797]  ? __asan_memcpy+0x3c/0x60
[   62.886667][ T6797]  ? netlink_deliver_tap+0x1ae/0xb50
[   62.886687][ T6797]  netlink_unicast+0x668/0x950
[   62.886706][ T6797]  ? __pfx_netlink_unicast+0x10/0x10
[   62.886727][ T6797]  netlink_sendmsg+0x9ac/0x10c0
[   62.886747][ T6797]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.886766][ T6797]  ? selinux_socket_sendmsg+0x198/0x2f0
[   62.886787][ T6797]  ? ____sys_sendmsg+0xa99/0xc30
[   62.886804][ T6797]  ____sys_sendmsg+0xa99/0xc30
[   62.886822][ T6797]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.886840][ T6797]  ? __pfx_____sys_sendmsg+0x10/0x10
[   62.886861][ T6797]  ? plist_check_list+0x1b8/0x280
[   62.886881][ T6797]  ? plist_del+0x308/0x510
[   62.886901][ T6797]  ___sys_sendmsg+0x190/0x1e0
[   62.886921][ T6797]  ? __pfx____sys_sendmsg+0x10/0x10
[   62.886940][ T6797]  ? futex_wake+0x220/0x5e0
[   62.886971][ T6797]  ? find_held_lock+0x2b/0x80
[   62.886996][ T6797]  __sys_sendmsg+0x160/0x210
[   62.887012][ T6797]  ? __pfx___sys_sendmsg+0x10/0x10
[   62.887037][ T6797]  do_syscall_64+0x123/0x790
[   62.887052][ T6797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.887073][ T6797] RIP: 0033:0x7f5db8f9fb19
[   62.887085][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.887097][ T6797] RSP: 002b:00007f5db9ed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.887110][ T6797] RAX: ffffffffffffffda RBX: 00007f5db9225fa0 RCX: 00007f5db8f9fb19
[   62.887119][ T6797] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000009
[   62.887127][ T6797] RBP: 00007f5db9037b70 R08: 0000000000000000 R09: 0000000000000000
[   62.887135][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   62.887143][ T6797] R13: 00007f5db9226038 R14: 00007f5db9225fa0 R15: 00007ffd141482c8
[   62.887159][ T6797]  </TASK>
[   62.918888][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   62.919092][    C3] gadgetfs: connected
[   62.919323][ T5877] gadgetfs: disconnected
[   63.014204][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.014294][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.014349][ T6738] bridge_slave_0: entered allmulticast mode
[   63.015035][ T6738] bridge_slave_0: entered promiscuous mode
[   63.017199][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4
[   63.018347][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.018548][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.018643][ T6738] bridge_slave_1: entered allmulticast mode
[   63.019309][ T6738] bridge_slave_1: entered promiscuous mode
[   63.020588][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.229'.
[   63.052077][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.054120][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.076336][ T6738] team0: Port device team_slave_0 added
[   63.077645][    C3] gadgetfs: connected
[   63.078001][ T5877] usb 5-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00
[   63.078638][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.080223][    C3] gadgetfs: configuration #1
[   63.087123][ T6738] team0: Port device team_slave_1 added
[   63.111568][ T5877] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input6
[   63.120467][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.120480][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.120500][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.121470][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.121479][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.121493][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.141730][   T42] kauditd_printk_skb: 41 callbacks suppressed
[   63.141742][   T42] audit: type=1400 audit(1793931648.857:462): avc:  denied  { write } for  pid=6821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.147646][ T6738] hsr_slave_0: entered promiscuous mode
[   63.148137][ T6738] hsr_slave_1: entered promiscuous mode
[   63.148430][ T6738] debugfs: 'hsr0' already exists in 'hsr'
[   63.148439][ T6738] Cannot create hsr debugfs directory
[   63.175068][    C3] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1
[   63.197586][   T13] IPVS: stop unused estimator thread 0...
[   63.202828][   T42] audit: type=1400 audit(1793931648.917:463): avc:  denied  { write } for  pid=6828 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.217659][   T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[   63.246018][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5
[   63.367958][   T10] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   63.369463][   T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   63.369487][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.369519][   T10] usb 6-1: config 0 has no interface number 0
[   63.369555][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.372528][   T10] usb 6-1: config 0 descriptor??
[   63.374924][   T10] ldusb 6-1:0.55: Interrupt in endpoint not found
[   63.410279][ T6778] gadgetfs: suspended from state 3
[   63.410819][ T6778] gadgetfs: disconnected
[   63.412810][ T5790] usb 5-1: USB disconnect, device number 3
[   63.434499][   T42] audit: type=1400 audit(1793931649.147:464): avc:  denied  { unmount } for  pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   63.500567][   T42] audit: type=1400 audit(1793931649.217:465): avc:  denied  { remount } for  pid=6833 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   63.503278][ T6827] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[   63.572791][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[   63.579609][ T6738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   63.583837][   T10] usb 6-1: USB disconnect, device number 8
[   63.584835][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.585252][ T6738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   63.588858][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.590806][ T6738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   63.604870][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.607667][ T6738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   63.618427][ T6738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.646573][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.646656][ T6738] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.646829][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.646902][ T6738] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.647316][ T5803] Bluetooth: hci1: command tx timeout
[   63.680127][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.692189][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.692752][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.692764][   T42] audit: type=1400 audit(1793931649.407:466): avc:  denied  { write } for  pid=6851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.724114][ T6738] 8021q: adding VLAN 0 to HW filter on device team0
[   63.730569][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.730646][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.750185][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.750231][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.764756][   T42] audit: type=1400 audit(1793931649.477:467): avc:  denied  { write } for  pid=6856 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.784650][ T6738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.869734][   T42] audit: type=1400 audit(1793931649.587:468): avc:  denied  { write } for  pid=6862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.880354][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'.
[   63.918905][   T42] audit: type=1400 audit(1793931649.637:469): avc:  denied  { write } for  pid=6870 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.957165][ T5803] Bluetooth: hci3: command tx timeout
[   63.990555][ T5890] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[   63.991015][   T42] audit: type=1400 audit(1793931649.707:470): avc:  denied  { write } for  pid=6876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.014492][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.040569][   T42] audit: type=1400 audit(1793931649.757:471): avc:  denied  { write } for  pid=6882 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.144742][ T6738] veth0_vlan: entered promiscuous mode
[   64.148330][ T6738] veth1_vlan: entered promiscuous mode
[   64.160811][ T6738] veth0_macvtap: entered promiscuous mode
[   64.163010][ T6738] veth1_macvtap: entered promiscuous mode
[   64.175480][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.182217][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.205161][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.238'.
[   64.207988][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.208016][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.208036][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.232311][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.232327][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.254601][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.254616][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.257984][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.488998][ T5790] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[   65.727234][ T5803] Bluetooth: hci1: command tx timeout
[   66.037335][ T5803] Bluetooth: hci3: command tx timeout
[   67.807130][ T5803] Bluetooth: hci1: command tx timeout
[   68.117186][ T5803] Bluetooth: hci3: command tx timeout
[   69.210201][   T42] kauditd_printk_skb: 6 callbacks suppressed
[   69.210222][   T42] audit: type=1400 audit(1793931654.927:478): avc:  denied  { write } for  pid=6922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.279322][   T42] audit: type=1400 audit(1793931654.997:479): avc:  denied  { write } for  pid=6925 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.197193][ T5803] Bluetooth: hci3: command tx timeout
[   71.242564][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[   71.364756][   T42] audit: type=1400 audit(1793931657.077:480): avc:  denied  { write } for  pid=6931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   71.415309][   T42] audit: type=1400 audit(1793931657.127:481): avc:  denied  { write } for  pid=6934 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.905295][   T42] audit: type=1400 audit(1793931659.617:482): avc:  denied  { write } for  pid=6937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.962626][   T42] audit: type=1400 audit(1793931659.677:483): avc:  denied  { write } for  pid=6940 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.056386][   T42] audit: type=1400 audit(1793931659.767:484): avc:  denied  { write } for  pid=6943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.109454][   T42] audit: type=1400 audit(1793931659.827:485): avc:  denied  { write } for  pid=6946 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.600802][   T42] audit: type=1400 audit(1793931660.317:486): avc:  denied  { write } for  pid=6949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.665227][   T42] audit: type=1400 audit(1793931660.377:487): avc:  denied  { write } for  pid=6952 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.768202][   T42] audit: type=1400 audit(1793931660.487:488): avc:  denied  { write } for  pid=6955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.833639][   T42] audit: type=1400 audit(1793931660.547:489): avc:  denied  { write } for  pid=6958 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.106628][   T42] audit: type=1400 audit(1793931660.817:490): avc:  denied  { write } for  pid=6961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.160297][   T42] audit: type=1400 audit(1793931660.877:491): avc:  denied  { write } for  pid=6964 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.361976][   T58] cfg80211: failed to load regulatory.db
[   77.672220][   T42] audit: type=1400 audit(1793931663.387:492): avc:  denied  { append } for  pid=6970 comm="syz.5.239" name="sg2" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   77.672757][   T42] audit: type=1400 audit(1793931663.387:493): avc:  denied  { create } for  pid=6969 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   77.691855][ T6977] capability: warning: `syz.2.241' uses deprecated v2 capabilities in a way that may be insecure
[   77.692827][   T42] audit: type=1400 audit(1793931663.407:494): avc:  denied  { name_bind } for  pid=6969 comm="syz.1.240" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   77.826560][ T6988] nvme_fabrics: missing parameter 'traddr=%s'
[   77.870528][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'.
[   78.037133][ T5790] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[   78.188940][ T5790] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   78.190537][ T5790] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   78.190558][ T5790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.190576][ T5790] usb 6-1: config 0 has no interface number 0
[   78.190614][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.192748][ T5790] usb 6-1: config 0 descriptor??
[   78.195069][ T5790] ldusb 6-1:0.55: Interrupt in endpoint not found
[   78.398411][ T5790] usb 6-1: USB disconnect, device number 9
[   78.589484][ T7002] FAULT_INJECTION: forcing a failure.
[   78.589484][ T7002] name failslab, interval 1, probability 0, space 0, times 0
[   78.589533][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.5.251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   78.589564][ T7002] Tainted: [L]=SOFTLOCKUP
[   78.589572][ T7002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.589586][ T7002] Call Trace:
[   78.589594][ T7002]  <TASK>
[   78.589602][ T7002]  dump_stack_lvl+0x100/0x190
[   78.589642][ T7002]  should_fail_ex.cold+0x5/0xa
[   78.589676][ T7002]  should_failslab+0xc2/0x120
[   78.589702][ T7002]  __kmalloc_cache_noprof+0x91/0x6d0
[   78.589732][ T7002]  ? gadgetfs_bind+0x5fe/0x940
[   78.589767][ T7002]  gadgetfs_bind+0x5fe/0x940
[   78.589807][ T7002]  gadget_bind_driver+0x28c/0xbf0
[   78.589830][ T7002]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[   78.589868][ T7002]  ? __pfx_gadget_bind_driver+0x10/0x10
[   78.589894][ T7002]  really_probe+0x241/0xa60
[   78.589926][ T7002]  __driver_probe_device+0x210/0x460
[   78.589953][ T7002]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   78.589979][ T7002]  driver_probe_device+0x4a/0x140
[   78.590006][ T7002]  __driver_attach+0x231/0x5b0
[   78.590030][ T7002]  ? __pfx___driver_attach+0x10/0x10
[   78.590054][ T7002]  bus_for_each_dev+0x13e/0x1d0
[   78.590076][ T7002]  ? __pfx_bus_for_each_dev+0x10/0x10
[   78.590095][ T7002]  ? bus_add_driver+0x306/0x620
[   78.590126][ T7002]  bus_add_driver+0x4bf/0x620
[   78.590148][ T7002]  driver_register+0x1e2/0x360
[   78.590180][ T7002]  usb_gadget_register_driver_owner+0x132/0x210
[   78.590205][ T7002]  dev_config+0xdce/0x1610
[   78.590237][ T7002]  ? ksys_write+0x90/0x250
[   78.590259][ T7002]  ? __pfx_dev_config+0x10/0x10
[   78.590297][ T7002]  vfs_write+0x2aa/0x1050
[   78.590319][ T7002]  ? __pfx_dev_config+0x10/0x10
[   78.590348][ T7002]  ? lock_acquire+0x1d1/0x380
[   78.590376][ T7002]  ? __fget_files+0x34/0x3d0
[   78.590418][ T7002]  ? __pfx_vfs_write+0x10/0x10
[   78.590439][ T7002]  ? find_held_lock+0x2b/0x80
[   78.590464][ T7002]  ? __fget_files+0x215/0x3d0
[   78.590496][ T7002]  ? __fget_files+0x21f/0x3d0
[   78.590531][ T7002]  ksys_write+0x12a/0x250
[   78.590554][ T7002]  ? __pfx_ksys_write+0x10/0x10
[   78.590585][ T7002]  do_syscall_64+0x123/0x790
[   78.590613][ T7002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.590636][ T7002] RIP: 0033:0x7f6a9b79fb19
[   78.590654][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.590675][ T7002] RSP: 002b:00007f6a9c685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   78.590697][ T7002] RAX: ffffffffffffffda RBX: 00007f6a9ba25fa0 RCX: 00007f6a9b79fb19
[   78.590710][ T7002] RDX: 000000000000001f RSI: 0000200000000680 RDI: 0000000000000008
[   78.590722][ T7002] RBP: 00007f6a9b837b70 R08: 0000000000000000 R09: 0000000000000000
[   78.590734][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.590746][ T7002] R13: 00007f6a9ba26038 R14: 00007f6a9ba25fa0 R15: 00007ffcc1d84c88
[   78.590774][ T7002]  </TASK>
[   78.593226][ T7002] udc dummy_udc.0: failed to start USB Gadget filesystem: -12
[   78.593251][ T7002] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12
[   78.595452][ T7002] gadgetfs: bound to dummy_udc driver
[   78.602634][ T7002] netlink: 'syz.5.251': attribute type 1 has an invalid length.
[   78.602793][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.251'.
[   78.636091][   T42] audit: type=1400 audit(1793931664.347:495): avc:  denied  { create } for  pid=7009 comm="syz.5.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   78.637193][ T7011] sd 0:0:0:0: PR command failed: 1026
[   78.637218][ T7011] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   78.637240][ T7011] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   78.728121][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.259'.
[   78.795942][ T7031] netlink: 104 bytes leftover after parsing attributes in process `syz.5.264'.
[   78.814840][ T7033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.086779][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'.
[   79.429205][ T7096] syz.4.292 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   79.486911][ T7103] Failed to decode metaid 5 dlen 4 err -22
[   79.507121][ T1904] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   79.520291][ T5877] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[   79.678512][ T1904] usb 10-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[   79.678906][ T5877] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   79.681592][ T1904] usb 10-1: config 1 has an invalid interface number: 3 but max is 0
[   79.681616][ T1904] usb 10-1: config 1 has no interface number 0
[   79.682816][ T5877] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   79.682841][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.682859][ T5877] usb 6-1: config 0 has no interface number 0
[   79.682897][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.685858][ T1904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.685879][ T1904] usb 10-1: Product: syz
[   79.685892][ T1904] usb 10-1: Manufacturer: syz
[   79.685904][ T1904] usb 10-1: SerialNumber: syz
[   79.686911][ T5877] usb 6-1: config 0 descriptor??
[   79.691223][ T5877] ldusb 6-1:0.55: Interrupt in endpoint not found
[   79.701813][ T1904] usb 10-1: 3:0 : does not exist
[   79.701833][ T1904] usb 10-1: 3:0 : does not exist
[   79.894833][ T5877] usb 6-1: USB disconnect, device number 10
[   79.900928][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.284'.
[   79.900952][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.284'.
[   79.901806][ T7079] netlink: 'syz.5.284': attribute type 1 has an invalid length.
[   79.977175][   T42] kauditd_printk_skb: 7 callbacks suppressed
[   79.977188][   T42] audit: type=1400 audit(1793931665.697:503): avc:  denied  { create } for  pid=7114 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.977598][   T42] audit: type=1400 audit(1793931665.697:504): avc:  denied  { getopt } for  pid=7114 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.977744][   T42] audit: type=1400 audit(1793931665.697:505): avc:  denied  { bind } for  pid=7114 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.978075][   T42] audit: type=1400 audit(1793931665.697:506): avc:  denied  { name_bind } for  pid=7114 comm="syz.2.299" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   79.978366][   T42] audit: type=1400 audit(1793931665.697:507): avc:  denied  { node_bind } for  pid=7114 comm="syz.2.299" saddr=172.20.20.187 src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   79.978793][   T42] audit: type=1400 audit(1793931665.697:508): avc:  denied  { setopt } for  pid=7114 comm="syz.2.299" laddr=172.20.20.187 lport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   80.090885][   T42] audit: type=1400 audit(1793931665.807:509): avc:  denied  { read } for  pid=7123 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   80.091412][   T42] audit: type=1400 audit(1793931665.807:510): avc:  denied  { ioctl } for  pid=7123 comm="syz.4.303" path="socket:[16065]" dev="sockfs" ino=16065 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   80.108355][ T5877] usb 10-1: USB disconnect, device number 2
[   80.196578][   T42] audit: type=1400 audit(1793931665.907:511): avc:  denied  { ioctl } for  pid=7123 comm="syz.4.303" path="socket:[18464]" dev="sockfs" ino=18464 ioctlcmd=0xc0185879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   80.750781][ T7166] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   80.756241][   T42] audit: type=1400 audit(1793931666.467:512): avc:  denied  { write } for  pid=7165 comm="syz.1.319" name="md1" dev="devtmpfs" ino=2964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   80.913355][ T7166] md/raid1:md1: active with 2 out of 2 mirrors
[   80.914415][ T7166] md1: detected capacity change from 0 to 4096
[   80.924977][ T7175] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   80.960286][ T7194] jffs2: notice: (7194) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.970284][ T7180] md: couldn't update array info. -22
[   81.017339][ T7182] md: could not open device unknown-block(1,2).
[   81.017393][ T7182] md: md_import_device returned -16
[   81.017536][ T7183] md: could not open device unknown-block(1,3).
[   81.017575][ T7183] md: md_import_device returned -16
[   81.148166][ T1354] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[   81.207164][ T5890] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   81.234730][ T7216] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   81.308007][ T1354] usb 10-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   81.308896][ T1354] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[   81.308915][ T1354] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.308931][ T1354] usb 10-1: config 0 has no interface number 0
[   81.309016][ T1354] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   81.309036][ T1354] usb 10-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.309064][ T1354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.311484][ T1354] usb 10-1: config 0 descriptor??
[   81.313874][ T1354] ldusb 10-1:0.55: Interrupt in endpoint not found
[   81.377102][ T5890] usb 9-1: Using ep0 maxpacket: 8
[   81.377851][ T5890] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.378996][ T5890] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[   81.379036][ T5890] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.379056][ T5890] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.379076][ T5890] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.379096][ T5890] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.379129][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.509696][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[   81.509728][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[   81.517205][ T1354] usb 10-1: USB disconnect, device number 3
[   81.749154][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[   81.806593][ T7242] syz.2.342 (7242): /proc/7241/oom_adj is deprecated, please use /proc/7241/oom_score_adj instead.
[   82.342184][ T7285] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   82.394466][ T7285] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   82.394512][ T7285] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   82.738604][ T7303] xt_hashlimit: overflow, rate too high: 1
[   82.764610][ T7303] team0 (unregistering): Port device team_slave_0 removed
[   82.776386][ T7303] team0 (unregistering): Port device team_slave_1 removed
[   82.867112][   T29] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[   83.037882][   T29] usb 10-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   83.039021][   T29] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[   83.039040][   T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.039054][   T29] usb 10-1: config 0 has no interface number 0
[   83.039079][   T29] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   83.039094][   T29] usb 10-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.039179][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.044295][   T29] usb 10-1: config 0 descriptor??
[   83.054839][   T29] ldusb 10-1:0.55: Interrupt in endpoint not found
[   83.144649][ T7323] __nla_validate_parse: 3 callbacks suppressed
[   83.144664][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'.
[   83.251650][   T29] usb 10-1: USB disconnect, device number 4
[   83.678799][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'.
[   83.954195][ T7363] netlink: 'syz.1.391': attribute type 12 has an invalid length.
[   83.954925][ T7363] libceph: secret too big 3051
[   83.977899][ T5890] usb 9-1: usb_control_msg returned -71
[   83.977926][ T5890] usbtmc 9-1:16.0: can't read capabilities
[   84.005758][ T5890] usb 9-1: USB disconnect, device number 2
[   84.028907][ T7371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'.
[   84.202411][ T7398] rxe_eth0 speed is unknown, defaulting to 1000
[   84.427151][   T29] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[   84.458295][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.408'.
[   84.590467][   T29] usb 10-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   84.591518][   T29] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[   84.591544][   T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.591559][   T29] usb 10-1: config 0 has no interface number 0
[   84.591588][   T29] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   84.591605][   T29] usb 10-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.591636][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.593863][   T29] usb 10-1: config 0 descriptor??
[   84.600347][   T29] ldusb 10-1:0.55: Interrupt in endpoint not found
[   84.762543][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'.
[   84.803916][ T1788] usb 10-1: USB disconnect, device number 5
[   84.970509][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.970529][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   84.970670][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.970682][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   84.970806][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.970819][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   84.970957][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.970970][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   84.971106][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.971118][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   84.971250][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.971390][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.971517][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.971650][ T7448] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   84.992204][ T7453] device-mapper: table: 248:3: snapshot: Cannot get origin device (-EBUSY)
[   84.992220][ T7453] device-mapper: ioctl: error adding target to table
[   85.275933][   T42] kauditd_printk_skb: 17 callbacks suppressed
[   85.275946][   T42] audit: type=1400 audit(1793931670.987:530): avc:  denied  { ioctl } for  pid=7484 comm="syz.2.430" path="socket:[17175]" dev="sockfs" ino=17175 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   85.413648][ T7504] overlayfs: failed to resolve './file1/file0dont_hash': -2
[   85.496577][   T42] audit: type=1400 audit(1793931671.207:531): avc:  denied  { watch watch_reads } for  pid=7503 comm="syz.2.434" path="/syzcgroup/net/syz2/devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   85.702409][ T7545] FAULT_INJECTION: forcing a failure.
[   85.702409][ T7545] name failslab, interval 1, probability 0, space 0, times 0
[   85.702432][ T7545] CPU: 2 UID: 0 PID: 7545 Comm: syz.2.445 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   85.702451][ T7545] Tainted: [L]=SOFTLOCKUP
[   85.702456][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   85.702465][ T7545] Call Trace:
[   85.702491][ T7545]  <TASK>
[   85.702496][ T7545]  dump_stack_lvl+0x100/0x190
[   85.702529][ T7545]  should_fail_ex.cold+0x5/0xa
[   85.702551][ T7545]  should_failslab+0xc2/0x120
[   85.702576][ T7545]  kmem_cache_alloc_noprof+0x92/0x6a0
[   85.702606][ T7545]  ? mas_preallocate+0xc22/0xee0
[   85.702630][ T7545]  mas_preallocate+0xc22/0xee0
[   85.702649][ T7545]  ? __pfx_mas_preallocate+0x10/0x10
[   85.702669][ T7545]  ? anon_vma_name+0x5a/0x250
[   85.702686][ T7545]  ? vma_add_pgoff+0x1fd/0xa90
[   85.702723][ T7545]  __split_vma+0x447/0xce0
[   85.702742][ T7545]  ? __pfx___split_vma+0x10/0x10
[   85.702758][ T7545]  ? mas_next_slot+0xc05/0x13a0
[   85.702784][ T7545]  vms_gather_munmap_vmas+0x3a5/0x1720
[   85.702806][ T7545]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[   85.702827][ T7545]  ? mmap_region+0x410/0x6d0
[   85.702853][ T7545]  ? __pfx_mmap_region+0x10/0x10
[   85.702871][ T7545]  ? thp_get_unmapped_area_vmaflags+0x2a5/0x330
[   85.702894][ T7545]  do_vmi_align_munmap+0x287/0x5f0
[   85.702914][ T7545]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[   85.702937][ T7545]  ? __lock_acquire+0x5c0/0x1f40
[   85.702981][ T7545]  ? mas_walk+0x260/0x310
[   85.702999][ T7545]  do_vmi_munmap+0x1f8/0x410
[   85.703019][ T7545]  __vm_munmap+0x196/0x3c0
[   85.703038][ T7545]  ? __pfx___vm_munmap+0x10/0x10
[   85.703066][ T7545]  __x64_sys_munmap+0x59/0x80
[   85.703080][ T7545]  do_syscall_64+0x123/0x790
[   85.703096][ T7545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.703110][ T7545] RIP: 0033:0x7f8cbad9f947
[   85.703130][ T7545] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.703143][ T7545] RSP: 002b:00007f8cbbd28d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[   85.703156][ T7545] RAX: ffffffffffffffda RBX: 00007f8cb4000000 RCX: 00007f8cbad9f947
[   85.703165][ T7545] RDX: 0000000000000000 RSI: 0000000003200000 RDI: 00007f8cb0e00000
[   85.703173][ T7545] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[   85.703182][ T7545] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[   85.703190][ T7545] R13: 0000000000001000 R14: 00007f8cb8000000 R15: 0000000003200000
[   85.703207][ T7545]  </TASK>
[   86.030120][ T7564] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   86.033573][ T7564] iommufd_mock iommufd_mock1: Adding to iommu group 11
[   86.036875][   T42] audit: type=1400 audit(1793931671.747:532): avc:  denied  { connect } for  pid=7563 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.261030][ T7572] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3360270339 (6720540678 ns) > initial count (994822890 ns). Using initial count to start timer.
[   86.261241][ T7572] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3340563249 (13362252996 ns) > initial count (4838176320 ns). Using initial count to start timer.
[   86.344814][   T42] audit: type=1400 audit(1793931672.057:533): avc:  denied  { map } for  pid=7583 comm="syz.5.457" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   86.416342][   T42] audit: type=1400 audit(1793931672.127:534): avc:  denied  { ioctl } for  pid=7592 comm="syz.1.458" path="socket:[19693]" dev="sockfs" ino=19693 ioctlcmd=0x800448d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   86.479027][   T42] audit: type=1400 audit(1793931672.197:535): avc:  denied  { view } for  pid=7592 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   86.499547][   T42] audit: type=1400 audit(1793931672.217:536): avc:  denied  { create } for  pid=7602 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.504123][   T42] audit: type=1400 audit(1793931672.217:537): avc:  denied  { shutdown } for  pid=7602 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   87.098353][   T42] audit: type=1400 audit(1793931672.817:538): avc:  denied  { setopt } for  pid=7648 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   87.099211][   T42] audit: type=1400 audit(1793931672.817:539): avc:  denied  { bind } for  pid=7648 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   87.376956][ T7663] loop7: detected capacity change from 0 to 7
[   87.378915][    C3] blk_print_req_error: 11 callbacks suppressed
[   87.378927][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.378966][    C3] buffer_io_error: 10 callbacks suppressed
[   87.378972][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.379191][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.379219][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.379844][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.379874][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.381165][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.381210][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.381392][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.381423][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.381580][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.381609][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.381747][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.381775][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.381826][ T7663] ldm_validate_partition_table(): Disk read failed.
[   87.381924][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.381952][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.382134][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.382163][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.382277][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.382305][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[   87.382457][ T7663] Dev loop7: unable to read RDB block 0
[   87.383301][ T7663]  loop7: unable to read partition table
[   87.383454][ T7663] loop7: partition table beyond EOD, truncated
[   87.383469][ T7663] loop_reread_partitions: partition scan of loop7 (���������C�j̖4FLQk��5) failed (rc=-5)
[   87.889752][ T5194] ldm_validate_partition_table(): Disk read failed.
[   87.891822][ T5194] Dev loop7: unable to read RDB block 0
[   87.893045][ T5194]  loop7: unable to read partition table
[   87.893145][ T5194] loop7: partition table beyond EOD, truncated
[   88.466702][ T7716] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   89.347794][ T7781] mmap: syz.1.524 (7781) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   89.392889][ T7787] syz.1.526: attempt to access beyond end of device
[   89.392889][ T7787] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[   89.392932][ T7787] gfs2: error -5 reading superblock
[   89.852549][ T7835] sctp: [Deprecated]: syz.4.541 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.852549][ T7835] Use struct sctp_sack_info instead
[   89.970913][ T7845] rnbd_client L127: Can't parse path i��v��P������|d�-y���Y_~X���G&P�Xt�~450d5>!��JS�"w	e,: -22
[   90.553052][ T7893] FAULT_INJECTION: forcing a failure.
[   90.553052][ T7893] name failslab, interval 1, probability 0, space 0, times 0
[   90.553101][ T7893] CPU: 2 UID: 0 PID: 7893 Comm: syz.1.554 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   90.553130][ T7893] Tainted: [L]=SOFTLOCKUP
[   90.553138][ T7893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.553149][ T7893] Call Trace:
[   90.553157][ T7893]  <TASK>
[   90.553166][ T7893]  dump_stack_lvl+0x100/0x190
[   90.553206][ T7893]  should_fail_ex.cold+0x5/0xa
[   90.553240][ T7893]  should_failslab+0xc2/0x120
[   90.553266][ T7893]  __kmalloc_noprof+0xfc/0x840
[   90.553296][ T7893]  ? rcu_is_watching+0x13/0xc0
[   90.553320][ T7893]  ? tomoyo_realpath_from_path+0xb6/0x690
[   90.553364][ T7893]  tomoyo_realpath_from_path+0xb6/0x690
[   90.553394][ T7893]  tomoyo_path_number_perm+0x23c/0x580
[   90.553426][ T7893]  ? tomoyo_path_number_perm+0x22e/0x580
[   90.553460][ T7893]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   90.553493][ T7893]  ? __pfx_futex_wait+0x10/0x10
[   90.553542][ T7893]  ? __lock_acquire+0x5c0/0x1f40
[   90.553585][ T7893]  ? __fget_files+0x34/0x3d0
[   90.553623][ T7893]  ? find_held_lock+0x2b/0x80
[   90.553644][ T7893]  ? hook_file_ioctl_common+0x140/0x440
[   90.553678][ T7893]  ? __fget_files+0x21f/0x3d0
[   90.553708][ T7893]  security_file_ioctl+0xd3/0x230
[   90.553754][ T7893]  __x64_sys_ioctl+0xb7/0x210
[   90.553789][ T7893]  do_syscall_64+0x123/0x790
[   90.553818][ T7893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.553842][ T7893] RIP: 0033:0x7f5db8f9fb19
[   90.553860][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.553880][ T7893] RSP: 002b:00007f5db9ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.553901][ T7893] RAX: ffffffffffffffda RBX: 00007f5db9225fa0 RCX: 00007f5db8f9fb19
[   90.553915][ T7893] RDX: 0000200000001a00 RSI: 0000000000005423 RDI: 0000000000000004
[   90.553928][ T7893] RBP: 00007f5db9037b70 R08: 0000000000000000 R09: 0000000000000000
[   90.553941][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.553953][ T7893] R13: 00007f5db9226038 R14: 00007f5db9225fa0 R15: 00007ffd141482c8
[   90.553980][ T7893]  </TASK>
[   90.553988][ T7893] ERROR: Out of memory at tomoyo_realpath_from_path.
[   90.561834][ T7893] can0: slcan on ttynull.
[   90.567082][   T42] kauditd_printk_skb: 588 callbacks suppressed
[   90.567097][   T42] audit: type=1400 audit(1793931676.277:1128): avc:  denied  { read } for  pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   90.630359][ T7892] can0 (unregistered): slcan off ttynull.
[   90.706598][   T42] audit: type=1400 audit(1793931676.417:1129): avc:  denied  { watch_reads } for  pid=7908 comm="syz.5.562" path="/69" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   90.751558][   T42] audit: type=1400 audit(1793931676.467:1130): avc:  denied  { ioctl } for  pid=7913 comm="syz.5.564" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x80404532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   90.762226][   T42] audit: type=1400 audit(1793931676.477:1131): avc:  denied  { write } for  pid=7913 comm="syz.5.564" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   90.762383][   T42] audit: type=1400 audit(1793931676.477:1132): avc:  denied  { open } for  pid=7913 comm="syz.5.564" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   90.763671][   T42] audit: type=1400 audit(1793931676.477:1133): avc:  denied  { bind } for  pid=7915 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   90.765264][ T7916] __nla_validate_parse: 62 callbacks suppressed
[   90.765274][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'.
[   90.864741][   T42] audit: type=1400 audit(1793931676.577:1134): avc:  denied  { setopt } for  pid=7927 comm="syz.5.569" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   90.895140][   T64] IPVS: starting estimator thread 0...
[   90.914938][ T7932] IPVS: ip_vs_edit_dest(): server weight less than zero
[   90.987173][ T7933] IPVS: using max 28 ests per chain, 67200 per kthread
[   90.995535][   T42] audit: type=1400 audit(1793931676.707:1135): avc:  denied  { read } for  pid=7938 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   91.010211][ T7941] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.575'.
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   91.050343][   T42] audit: type=1400 audit(1793931676.767:1136): avc:  denied  { mounton } for  pid=7942 comm="syz.4.576" path="/110/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   91.244625][ T7952] FAULT_INJECTION: forcing a failure.
[   91.244625][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.244647][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.4.580 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   91.244664][ T7952] Tainted: [L]=SOFTLOCKUP
[   91.244668][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.244675][ T7952] Call Trace:
[   91.244679][ T7952]  <TASK>
[   91.244684][ T7952]  dump_stack_lvl+0x100/0x190
[   91.244708][ T7952]  should_fail_ex.cold+0x5/0xa
[   91.244727][ T7952]  _copy_from_user+0x2e/0xd0
[   91.244759][ T7952]  copy_msghdr_from_user+0x9f/0x4c0
[   91.244783][ T7952]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   91.244805][ T7952]  ? lock_acquire+0x1d1/0x380
[   91.244822][ T7952]  ? get_pid_task+0x2a/0x250
[   91.244844][ T7952]  ___sys_sendmsg+0x106/0x1e0
[   91.244863][ T7952]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.244881][ T7952]  ? get_pid_task+0x106/0x250
[   91.244898][ T7952]  ? find_held_lock+0x2b/0x80
[   91.244920][ T7952]  __sys_sendmsg+0x160/0x210
[   91.244935][ T7952]  ? __pfx___sys_sendmsg+0x10/0x10
[   91.244957][ T7952]  do_syscall_64+0x123/0x790
[   91.244972][ T7952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.244984][ T7952] RIP: 0033:0x7f3817f9fb19
[   91.244995][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.245006][ T7952] RSP: 002b:00007f3818e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.245018][ T7952] RAX: ffffffffffffffda RBX: 00007f3818225fa0 RCX: 00007f3817f9fb19
[   91.245025][ T7952] RDX: 0000000000020000 RSI: 0000200000000140 RDI: 0000000000000003
[   91.245032][ T7952] RBP: 00007f3818e70090 R08: 0000000000000000 R09: 0000000000000000
[   91.245039][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.245046][ T7952] R13: 00007f3818226038 R14: 00007f3818225fa0 R15: 00007ffe904421d8
[   91.245061][ T7952]  </TASK>
[   91.427322][ T5790] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   91.599549][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.584'.
[   91.704347][   T42] audit: type=1400 audit(1793931677.417:1137): avc:  denied  { listen } for  pid=7966 comm="syz.4.586" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   91.862562][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.862921][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.869261][ T7975] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70000
[   91.869286][ T7975] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[   91.869313][ T7975] raw: 00fff00000002000 ffffea0001c00008 ffffea0001c00008 0000000000000000
[   91.869386][ T7975] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   91.869399][ T7975] page dumped because: unmovable page
[   91.869450][ T7975] page_owner info is not present (never set?)
[   91.907922][ T7984] FAULT_INJECTION: forcing a failure.
[   91.907922][ T7984] name failslab, interval 1, probability 0, space 0, times 0
[   91.907944][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.5.592 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   91.907961][ T7984] Tainted: [L]=SOFTLOCKUP
[   91.907965][ T7984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.907972][ T7984] Call Trace:
[   91.907976][ T7984]  <TASK>
[   91.907982][ T7984]  dump_stack_lvl+0x100/0x190
[   91.908005][ T7984]  should_fail_ex.cold+0x5/0xa
[   91.908024][ T7984]  should_failslab+0xc2/0x120
[   91.908039][ T7984]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   91.908059][ T7984]  ? __alloc_skb+0x5b7/0x710
[   91.908088][ T7984]  ? __alloc_skb+0x140/0x710
[   91.908103][ T7984]  __alloc_skb+0x140/0x710
[   91.908116][ T7984]  ? __alloc_skb+0x5b7/0x710
[   91.908129][ T7984]  ? __pfx___alloc_skb+0x10/0x10
[   91.908147][ T7984]  netlink_alloc_large_skb+0x69/0x150
[   91.908164][ T7984]  netlink_sendmsg+0x755/0x10c0
[   91.908183][ T7984]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.908202][ T7984]  ? selinux_socket_sendmsg+0x198/0x2f0
[   91.908222][ T7984]  ? ____sys_sendmsg+0xa99/0xc30
[   91.908240][ T7984]  ____sys_sendmsg+0xa99/0xc30
[   91.908256][ T7984]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.908274][ T7984]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.908295][ T7984]  ? lock_acquire+0x1d1/0x380
[   91.908311][ T7984]  ? get_pid_task+0x2a/0x250
[   91.908324][ T7984]  ___sys_sendmsg+0x190/0x1e0
[   91.908344][ T7984]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.908362][ T7984]  ? get_pid_task+0x106/0x250
[   91.908378][ T7984]  ? find_held_lock+0x2b/0x80
[   91.908400][ T7984]  __sys_sendmsg+0x160/0x210
[   91.908415][ T7984]  ? __pfx___sys_sendmsg+0x10/0x10
[   91.908438][ T7984]  do_syscall_64+0x123/0x790
[   91.908458][ T7984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.908471][ T7984] RIP: 0033:0x7f6a9b79fb19
[   91.908481][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.908493][ T7984] RSP: 002b:00007f6a9c685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.908505][ T7984] RAX: ffffffffffffffda RBX: 00007f6a9ba25fa0 RCX: 00007f6a9b79fb19
[   91.908512][ T7984] RDX: 0000000000020000 RSI: 0000200000000140 RDI: 0000000000000003
[   91.908519][ T7984] RBP: 00007f6a9c685090 R08: 0000000000000000 R09: 0000000000000000
[   91.908526][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.908533][ T7984] R13: 00007f6a9ba26038 R14: 00007f6a9ba25fa0 R15: 00007ffcc1d84c88
[   91.908548][ T7984]  </TASK>
[   91.933500][ T7986] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   92.022834][ T7991] validate_nla: 58 callbacks suppressed
[   92.022847][ T7991] netlink: 'syz.4.593': attribute type 2 has an invalid length.
[   92.022855][ T7991] netlink: 228 bytes leftover after parsing attributes in process `syz.4.593'.
[   92.023135][ T7991] Bluetooth: MGMT ver 1.23
[   92.083600][ T5790] usb 6-1: unable to get BOS descriptor or descriptor too short
[   92.084261][ T5790] usb 6-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=56.4a
[   92.084284][ T5790] usb 6-1: too many configurations: 185, using maximum allowed: 8
[   92.085462][ T5790] usb 6-1: unable to read config index 0 descriptor/start: -71
[   92.085481][ T5790] usb 6-1: can't read configurations, error -71
[   92.226237][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.5.595'.
[   92.787299][ T5570] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[   92.938808][ T5570] usb 10-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   92.939639][ T5570] usb 10-1: config 0 has an invalid interface number: 50 but max is 0
[   92.939654][ T5570] usb 10-1: config 0 has no interface number 0
[   92.939681][ T5570] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.941207][ T5570] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.941229][ T5570] usb 10-1: Product: syz
[   92.941241][ T5570] usb 10-1: Manufacturer: syz
[   92.941252][ T5570] usb 10-1: SerialNumber: syz
[   92.942626][ T5570] usb 10-1: config 0 descriptor??
[   92.946769][ T5570] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0
[   92.993996][ T8042] FAULT_INJECTION: forcing a failure.
[   92.993996][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.994025][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.4.616 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   92.994052][ T8042] Tainted: [L]=SOFTLOCKUP
[   92.994058][ T8042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.994071][ T8042] Call Trace:
[   92.994078][ T8042]  <TASK>
[   92.994087][ T8042]  dump_stack_lvl+0x100/0x190
[   92.994124][ T8042]  should_fail_ex.cold+0x5/0xa
[   92.994156][ T8042]  _copy_from_iter+0x1f4/0x16c0
[   92.994184][ T8042]  ? __asan_memset+0x23/0x50
[   92.994216][ T8042]  ? __pfx__copy_from_iter+0x10/0x10
[   92.994241][ T8042]  ? __pfx___alloc_skb+0x10/0x10
[   92.994274][ T8042]  netlink_sendmsg+0x8f5/0x10c0
[   92.994308][ T8042]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.994359][ T8042]  ? selinux_socket_sendmsg+0x198/0x2f0
[   92.994394][ T8042]  ? ____sys_sendmsg+0xa99/0xc30
[   92.994424][ T8042]  ____sys_sendmsg+0xa99/0xc30
[   92.994452][ T8042]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.994486][ T8042]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.994536][ T8042]  ? lock_acquire+0x1d1/0x380
[   92.994565][ T8042]  ? get_pid_task+0x2a/0x250
[   92.994588][ T8042]  ___sys_sendmsg+0x190/0x1e0
[   92.994619][ T8042]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.994648][ T8042]  ? get_pid_task+0x106/0x250
[   92.994677][ T8042]  ? find_held_lock+0x2b/0x80
[   92.994720][ T8042]  __sys_sendmsg+0x160/0x210
[   92.994747][ T8042]  ? __pfx___sys_sendmsg+0x10/0x10
[   92.994786][ T8042]  do_syscall_64+0x123/0x790
[   92.994812][ T8042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.994833][ T8042] RIP: 0033:0x7f3817f9fb19
[   92.994851][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.994871][ T8042] RSP: 002b:00007f3818e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.994893][ T8042] RAX: ffffffffffffffda RBX: 00007f3818225fa0 RCX: 00007f3817f9fb19
[   92.994905][ T8042] RDX: 0000000000020000 RSI: 0000200000000140 RDI: 0000000000000003
[   92.994917][ T8042] RBP: 00007f3818e70090 R08: 0000000000000000 R09: 0000000000000000
[   92.994929][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.994940][ T8042] R13: 00007f3818226038 R14: 00007f3818225fa0 R15: 00007ffe904421d8
[   92.994966][ T8042]  </TASK>
[   93.094316][ T8051] SELinux:  Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped).
[   93.151435][ T5940] usb 10-1: USB disconnect, device number 6
[   93.158094][ T5940] yurex 10-1:0.50: USB YUREX #0 now disconnected
[   93.307117][ T5790] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   93.457558][ T5790] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   93.458385][ T5790] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[   93.458403][ T5790] usb 6-1: config 0 interface 0 has no altsetting 0
[   93.459995][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   93.460010][ T5790] usb 6-1: Product: syz
[   93.460018][ T5790] usb 6-1: Manufacturer: syz
[   93.460028][ T5790] usb 6-1: SerialNumber: syz
[   93.461452][ T5790] usb 6-1: config 0 descriptor??
[   93.464726][ T5790] usb 6-1: selecting invalid altsetting 0
[   93.667121][ T5790] usb 6-1: USB disconnect, device number 13
[   93.896167][ T8071] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter
[   93.896647][ T8071] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95
[   93.903486][ T8071] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22
[   93.913101][ T8070] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[   93.995542][ T8081] FAULT_INJECTION: forcing a failure.
[   93.995542][ T8081] name failslab, interval 1, probability 0, space 0, times 0
[   93.995564][ T8081] CPU: 3 UID: 0 PID: 8081 Comm: syz.5.628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   93.995581][ T8081] Tainted: [L]=SOFTLOCKUP
[   93.995585][ T8081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.995593][ T8081] Call Trace:
[   93.995597][ T8081]  <TASK>
[   93.995602][ T8081]  dump_stack_lvl+0x100/0x190
[   93.995628][ T8081]  should_fail_ex.cold+0x5/0xa
[   93.995647][ T8081]  should_failslab+0xc2/0x120
[   93.995664][ T8081]  kmem_cache_alloc_noprof+0x92/0x6a0
[   93.995683][ T8081]  ? netlink_deliver_tap+0x103/0xb50
[   93.995698][ T8081]  ? skb_clone+0x187/0x3f0
[   93.995715][ T8081]  skb_clone+0x187/0x3f0
[   93.995731][ T8081]  netlink_deliver_tap+0x82f/0xb50
[   93.995774][ T8081]  netlink_unicast+0x708/0x950
[   93.995795][ T8081]  ? __pfx_netlink_unicast+0x10/0x10
[   93.995815][ T8081]  netlink_sendmsg+0x9ac/0x10c0
[   93.995833][ T8081]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.995853][ T8081]  ? selinux_socket_sendmsg+0x198/0x2f0
[   93.995873][ T8081]  ? ____sys_sendmsg+0xa99/0xc30
[   93.995890][ T8081]  ____sys_sendmsg+0xa99/0xc30
[   93.995907][ T8081]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.995925][ T8081]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.995947][ T8081]  ? lock_acquire+0x1d1/0x380
[   93.995963][ T8081]  ? get_pid_task+0x2a/0x250
[   93.995977][ T8081]  ___sys_sendmsg+0x190/0x1e0
[   93.995997][ T8081]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.996016][ T8081]  ? get_pid_task+0x106/0x250
[   93.996033][ T8081]  ? find_held_lock+0x2b/0x80
[   93.996055][ T8081]  __sys_sendmsg+0x160/0x210
[   93.996084][ T8081]  ? __pfx___sys_sendmsg+0x10/0x10
[   93.996107][ T8081]  do_syscall_64+0x123/0x790
[   93.996123][ T8081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.996136][ T8081] RIP: 0033:0x7f6a9b79fb19
[   93.996146][ T8081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.996158][ T8081] RSP: 002b:00007f6a9c685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.996171][ T8081] RAX: ffffffffffffffda RBX: 00007f6a9ba25fa0 RCX: 00007f6a9b79fb19
[   93.996178][ T8081] RDX: 0000000000020000 RSI: 0000200000000140 RDI: 0000000000000003
[   93.996185][ T8081] RBP: 00007f6a9c685090 R08: 0000000000000000 R09: 0000000000000000
[   93.996192][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.996199][ T8081] R13: 00007f6a9ba26038 R14: 00007f6a9ba25fa0 R15: 00007ffcc1d84c88
[   93.996214][ T8081]  </TASK>
[   94.020547][ T5790] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   94.216241][ T8094] Bluetooth: MGMT ver 1.23
[   94.258422][ T5790] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   94.259491][ T5790] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[   94.259509][ T5790] usb 6-1: config 0 interface 0 has no altsetting 0
[   94.263340][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   94.263370][ T5790] usb 6-1: Product: syz
[   94.263385][ T5790] usb 6-1: Manufacturer: syz
[   94.263400][ T5790] usb 6-1: SerialNumber: syz
[   94.265199][ T5790] usb 6-1: config 0 descriptor??
[   94.293950][ T5790] usb 6-1: selecting invalid altsetting 0
[   94.327168][ T5890] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[   94.339484][ T8100] Bluetooth: MGMT ver 1.23
[   94.382630][ T8102] FAULT_INJECTION: forcing a failure.
[   94.382630][ T8102] name failslab, interval 1, probability 0, space 0, times 0
[   94.382662][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.4.638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   94.382690][ T8102] Tainted: [L]=SOFTLOCKUP
[   94.382697][ T8102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.382709][ T8102] Call Trace:
[   94.382717][ T8102]  <TASK>
[   94.382724][ T8102]  dump_stack_lvl+0x100/0x190
[   94.382762][ T8102]  should_fail_ex.cold+0x5/0xa
[   94.382792][ T8102]  should_failslab+0xc2/0x120
[   94.382817][ T8102]  __kmalloc_noprof+0xfc/0x840
[   94.382848][ T8102]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   94.382886][ T8102]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   94.382919][ T8102]  genl_family_rcv_msg_doit+0xc7/0x300
[   94.382958][ T8102]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   94.382997][ T8102]  ? bpf_lsm_capable+0x9/0x10
[   94.383034][ T8102]  ? security_capable+0x80/0x260
[   94.383064][ T8102]  ? ns_capable+0xcd/0xf0
[   94.383090][ T8102]  genl_rcv_msg+0x560/0x800
[   94.383122][ T8102]  ? __pfx_genl_rcv_msg+0x10/0x10
[   94.383151][ T8102]  ? __lock_acquire+0x5c0/0x1f40
[   94.383178][ T8102]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   94.383200][ T8102]  ? __pfx_nl80211_trigger_scan+0x10/0x10
[   94.383223][ T8102]  ? __pfx_nl80211_post_doit+0x10/0x10
[   94.383280][ T8102]  netlink_rcv_skb+0x159/0x420
[   94.383308][ T8102]  ? __pfx_genl_rcv_msg+0x10/0x10
[   94.383337][ T8102]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   94.383373][ T8102]  ? netlink_deliver_tap+0x1ae/0xb50
[   94.383403][ T8102]  genl_rcv+0x28/0x40
[   94.383430][ T8102]  netlink_unicast+0x668/0x950
[   94.383459][ T8102]  ? __pfx_netlink_unicast+0x10/0x10
[   94.383494][ T8102]  netlink_sendmsg+0x9ac/0x10c0
[   94.383525][ T8102]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.383557][ T8102]  ? selinux_socket_sendmsg+0x198/0x2f0
[   94.383590][ T8102]  ? ____sys_sendmsg+0xa99/0xc30
[   94.383619][ T8102]  ____sys_sendmsg+0xa99/0xc30
[   94.383647][ T8102]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.383676][ T8102]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.383710][ T8102]  ? lock_acquire+0x1d1/0x380
[   94.383737][ T8102]  ? get_pid_task+0x2a/0x250
[   94.383781][ T8102]  ___sys_sendmsg+0x190/0x1e0
[   94.383813][ T8102]  ? __pfx____sys_sendmsg+0x10/0x10
[   94.383844][ T8102]  ? get_pid_task+0x106/0x250
[   94.383874][ T8102]  ? find_held_lock+0x2b/0x80
[   94.383914][ T8102]  __sys_sendmsg+0x160/0x210
[   94.383945][ T8102]  ? __pfx___sys_sendmsg+0x10/0x10
[   94.383983][ T8102]  do_syscall_64+0x123/0x790
[   94.384009][ T8102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.384031][ T8102] RIP: 0033:0x7f3817f9fb19
[   94.384048][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.384067][ T8102] RSP: 002b:00007f3818e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.384090][ T8102] RAX: ffffffffffffffda RBX: 00007f3818225fa0 RCX: 00007f3817f9fb19
[   94.384102][ T8102] RDX: 0000000000020000 RSI: 0000200000000140 RDI: 0000000000000003
[   94.384114][ T8102] RBP: 00007f3818e70090 R08: 0000000000000000 R09: 0000000000000000
[   94.384127][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.384138][ T8102] R13: 00007f3818226038 R14: 00007f3818225fa0 R15: 00007ffe904421d8
[   94.384165][ T8102]  </TASK>
[   94.427504][ T8104] batman_adv: batadv0: Adding interface: ipvlan2
[   94.427516][ T8104] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.427531][ T8104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.427540][ T8104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.427549][ T8104] batman_adv: batadv0: Interface activated: ipvlan2
[   94.432127][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=8104 comm=syz.4.639
[   94.467381][ T5790] usb 6-1: USB disconnect, device number 14
[   94.535028][ T5890] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[   94.536012][ T5890] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.536034][ T5890] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.536051][ T5890] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.536088][ T5890] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.537614][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   94.537635][ T5890] usb 10-1: Product: syz
[   94.537648][ T5890] usb 10-1: Manufacturer: syz
[   94.542544][ T5890] cdc_wdm 10-1:1.0: skipping garbage
[   94.542559][ T5890] cdc_wdm 10-1:1.0: skipping garbage
[   94.545538][ T5890] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[   94.545549][ T5890] cdc_wdm 10-1:1.0: Unknown control protocol
[   94.748244][ T5890] usb 10-1: USB disconnect, device number 7
[   95.082221][ T8117] tmpfs: Using encoding : utf8-12.1.0
[   95.085664][ T8117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   95.172564][ T8127] FAULT_INJECTION: forcing a failure.
[   95.172564][ T8127] name failslab, interval 1, probability 0, space 0, times 0
[   95.172597][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.1.649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.172624][ T8127] Tainted: [L]=SOFTLOCKUP
[   95.172631][ T8127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.172643][ T8127] Call Trace:
[   95.172650][ T8127]  <TASK>
[   95.172658][ T8127]  dump_stack_lvl+0x100/0x190
[   95.172696][ T8127]  should_fail_ex.cold+0x5/0xa
[   95.172728][ T8127]  should_failslab+0xc2/0x120
[   95.172751][ T8127]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   95.172784][ T8127]  ? __alloc_skb+0x140/0x710
[   95.172813][ T8127]  __alloc_skb+0x140/0x710
[   95.172834][ T8127]  ? __alloc_skb+0x5b7/0x710
[   95.172856][ T8127]  ? __pfx___alloc_skb+0x10/0x10
[   95.172878][ T8127]  ? genl_rcv_msg+0x4be/0x800
[   95.172914][ T8127]  netlink_ack+0x117/0xba0
[   95.172948][ T8127]  netlink_rcv_skb+0x333/0x420
[   95.172974][ T8127]  ? __pfx_genl_rcv_msg+0x10/0x10
[   95.173004][ T8127]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   95.173043][ T8127]  ? netlink_deliver_tap+0x1ae/0xb50
[   95.173089][ T8127]  genl_rcv+0x28/0x40
[   95.173114][ T8127]  netlink_unicast+0x668/0x950
[   95.173144][ T8127]  ? __pfx_netlink_unicast+0x10/0x10
[   95.173178][ T8127]  netlink_sendmsg+0x9ac/0x10c0
[   95.173208][ T8127]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.173241][ T8127]  ? selinux_socket_sendmsg+0x198/0x2f0
[   95.173274][ T8127]  ? ____sys_sendmsg+0xa99/0xc30
[   95.173303][ T8127]  ____sys_sendmsg+0xa99/0xc30
[   95.173332][ T8127]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.173362][ T8127]  ? __pfx_____sys_sendmsg+0x10/0x10
[   95.173404][ T8127]  ? lock_acquire+0x1d1/0x380
[   95.173431][ T8127]  ? get_pid_task+0x2a/0x250
[   95.173454][ T8127]  ___sys_sendmsg+0x190/0x1e0
[   95.173486][ T8127]  ? __pfx____sys_sendmsg+0x10/0x10
[   95.173516][ T8127]  ? get_pid_task+0x106/0x250
[   95.173546][ T8127]  ? find_held_lock+0x2b/0x80
[   95.173585][ T8127]  __sys_sendmsg+0x160/0x210
[   95.173610][ T8127]  ? __pfx___sys_sendmsg+0x10/0x10
[   95.173650][ T8127]  do_syscall_64+0x123/0x790
[   95.173676][ T8127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.173697][ T8127] RIP: 0033:0x7f5db8f9fb19
[   95.173714][ T8127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.173733][ T8127] RSP: 002b:00007f5db9ed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.173753][ T8127] RAX: ffffffffffffffda RBX: 00007f5db9225fa0 RCX: 00007f5db8f9fb19
[   95.173766][ T8127] RDX: 0000000000020000 RSI: 0000200000000140 RDI: 0000000000000003
[   95.173777][ T8127] RBP: 00007f5db9ed7090 R08: 0000000000000000 R09: 0000000000000000
[   95.173789][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.173800][ T8127] R13: 00007f5db9226038 R14: 00007f5db9225fa0 R15: 00007ffd141482c8
[   95.173828][ T8127]  </TASK>
[   95.187568][ T6098] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[   95.210791][ T8129] netlink: 'syz.1.650': attribute type 4 has an invalid length.
[   95.214866][ T8129] netlink: 'syz.1.650': attribute type 42 has an invalid length.
[   95.254154][ T8132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'.
[   95.330017][ T8136] FAULT_INJECTION: forcing a failure.
[   95.330017][ T8136] name failslab, interval 1, probability 0, space 0, times 0
[   95.330051][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.1.653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.330080][ T8136] Tainted: [L]=SOFTLOCKUP
[   95.330088][ T8136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.330101][ T8136] Call Trace:
[   95.330109][ T8136]  <TASK>
[   95.330118][ T8136]  dump_stack_lvl+0x100/0x190
[   95.330157][ T8136]  should_fail_ex.cold+0x5/0xa
[   95.330193][ T8136]  should_failslab+0xc2/0x120
[   95.330218][ T8136]  kmem_cache_alloc_noprof+0x92/0x6a0
[   95.330251][ T8136]  ? d_instantiate+0x8a/0xb0
[   95.330281][ T8136]  ? alloc_empty_file+0x5b/0x1c0
[   95.330315][ T8136]  alloc_empty_file+0x5b/0x1c0
[   95.330346][ T8136]  alloc_file_pseudo+0x17e/0x290
[   95.330378][ T8136]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   95.330409][ T8136]  ? alloc_fd+0x471/0x7a0
[   95.330438][ T8136]  sock_alloc_file+0x50/0x210
[   95.330466][ T8136]  __sys_socket+0x1c0/0x260
[   95.330499][ T8136]  ? __pfx___sys_socket+0x10/0x10
[   95.330536][ T8136]  __x64_sys_socket+0x72/0xb0
[   95.330554][ T8136]  ? lockdep_hardirqs_on+0x7d/0x110
[   95.330577][ T8136]  do_syscall_64+0x123/0x790
[   95.330604][ T8136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.330627][ T8136] RIP: 0033:0x7f5db8fa1387
[   95.330646][ T8136] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.330668][ T8136] RSP: 002b:00007f5db9ed5f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   95.330691][ T8136] RAX: ffffffffffffffda RBX: 00007f5db9225fa0 RCX: 00007f5db8fa1387
[   95.330707][ T8136] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   95.330720][ T8136] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   95.330732][ T8136] R10: 0000200000000840 R11: 0000000000000286 R12: 0000000000000000
[   95.330745][ T8136] R13: 00007f5db9226038 R14: 00007f5db9225fa0 R15: 00007ffd141482c8
[   95.330774][ T8136]  </TASK>
[   95.338491][ T6098] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[   95.339474][ T6098] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   95.339497][ T6098] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.339513][ T6098] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[   95.339551][ T6098] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.340944][ T6098] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   95.340963][ T6098] usb 10-1: Product: syz
[   95.340976][ T6098] usb 10-1: Manufacturer: syz
[   95.344769][ T6098] cdc_wdm 10-1:1.0: skipping garbage
[   95.344784][ T6098] cdc_wdm 10-1:1.0: skipping garbage
[   95.345811][ T6098] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[   95.345821][ T6098] cdc_wdm 10-1:1.0: Unknown control protocol
[   95.377529][ T5877] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   95.527649][ T5877] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00
[   95.528514][ T5877] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   95.529265][ T5877] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   95.530795][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.530808][ T5877] usb 9-1: Product: syz
[   95.530816][ T5877] usb 9-1: Manufacturer: syz
[   95.530824][ T5877] usb 9-1: SerialNumber: syz
[   95.534290][ T5877] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[   95.536322][ T5877] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[   95.538745][ T5877] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[   95.550086][ T8147] netlink: 'syz.1.657': attribute type 12 has an invalid length.
[   95.580963][ T8147] netlink: 'syz.1.657': attribute type 12 has an invalid length.
[   95.897169][   T42] kauditd_printk_skb: 23 callbacks suppressed
[   95.897195][   T42] audit: type=1400 audit(1793931681.607:1161): avc:  denied  { read write } for  pid=8086 comm="syz.5.631" name="cdc-wdm0" dev="devtmpfs" ino=3027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   95.897467][   T42] audit: type=1400 audit(1793931681.617:1162): avc:  denied  { open } for  pid=8086 comm="syz.5.631" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   96.110075][ T8087] squashfs: Unknown parameter 'barrier'
[   96.115832][ T5940] usb 10-1: USB disconnect, device number 8
[   96.257171][ T6098] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   96.343157][   T42] audit: type=1400 audit(1793931682.057:1163): avc:  denied  { map } for  pid=8122 comm="syz.4.647" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   96.407513][ T6098] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[   96.410444][ T6098] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   96.410471][ T6098] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   96.410505][ T6098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.416871][ T6098] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[   96.433958][ T6098] usb 6-1: SPCP8x5 converter now attached to ttyUSB2
[   96.681722][ T8193] FAULT_INJECTION: forcing a failure.
[   96.681722][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.681745][ T8193] CPU: 2 UID: 0 PID: 8193 Comm: syz.5.673 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   96.681764][ T8193] Tainted: [L]=SOFTLOCKUP
[   96.681768][ T8193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.681776][ T8193] Call Trace:
[   96.681780][ T8193]  <TASK>
[   96.681785][ T8193]  dump_stack_lvl+0x100/0x190
[   96.681828][ T8193]  should_fail_ex.cold+0x5/0xa
[   96.681849][ T8193]  _copy_to_user+0x32/0xd0
[   96.681866][ T8193]  simple_read_from_buffer+0xcb/0x170
[   96.681886][ T8193]  proc_fail_nth_read+0x1af/0x230
[   96.681918][ T8193]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   96.681937][ T8193]  ? rw_verify_area+0xce/0x6d0
[   96.681957][ T8193]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   96.681975][ T8193]  vfs_read+0x1e4/0xb40
[   96.681989][ T8193]  ? lock_acquire+0x1d1/0x380
[   96.682007][ T8193]  ? __fget_files+0x34/0x3d0
[   96.682023][ T8193]  ? __pfx_vfs_read+0x10/0x10
[   96.682034][ T8193]  ? find_held_lock+0x2b/0x80
[   96.682047][ T8193]  ? __fget_files+0x215/0x3d0
[   96.682065][ T8193]  ? __fget_files+0x21f/0x3d0
[   96.682084][ T8193]  ksys_read+0x12a/0x250
[   96.682097][ T8193]  ? __pfx_ksys_read+0x10/0x10
[   96.682113][ T8193]  do_syscall_64+0x123/0x790
[   96.682129][ T8193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.682142][ T8193] RIP: 0033:0x7f6a9b76034e
[   96.682153][ T8193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   96.682164][ T8193] RSP: 002b:00007f6a9c684fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   96.682177][ T8193] RAX: ffffffffffffffda RBX: 00007f6a9c6856c0 RCX: 00007f6a9b76034e
[   96.682184][ T8193] RDX: 000000000000000f RSI: 00007f6a9c6850a0 RDI: 0000000000000004
[   96.682191][ T8193] RBP: 00007f6a9c685090 R08: 0000000000000000 R09: 0000000000000000
[   96.682198][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.682204][ T8193] R13: 00007f6a9ba26038 R14: 00007f6a9ba25fa0 R15: 00007ffcc1d84c88
[   96.682220][ T8193]  </TASK>
[   96.715893][ T8196] netlink: 'syz.5.674': attribute type 1 has an invalid length.
[   96.728937][ T8196] bond3: option mode: invalid value (7)
[   96.731886][ T8196] bond3 (unregistering): Released all slaves
[   97.104665][ T8204] No control pipe specified
[   97.161113][ T8183] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110
[   97.162225][ T8182] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32
[   97.162359][ T8182] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[   97.162378][ T8182] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[   97.162550][ T8182] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[   97.218247][ T6036] usb 9-1: USB disconnect, device number 3
[   97.224883][ T6036] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[   97.226337][ T6036] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[   97.226710][ T6036] ti_usb_3410_5052 9-1:2.0: device disconnected
[   97.622514][ T8225] loop0: detected capacity change from 0 to 4096
[   97.757258][   T42] audit: type=1400 audit(1793931683.467:1164): avc:  denied  { write } for  pid=8230 comm="syz.5.686" name="usb_gadget" dev="configfs" ino=2264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.757740][   T42] audit: type=1400 audit(1793931683.477:1165): avc:  denied  { write } for  pid=8230 comm="syz.5.686" name="functions" dev="configfs" ino=19331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.758476][   T42] audit: type=1400 audit(1793931683.477:1166): avc:  denied  { write } for  pid=8230 comm="syz.5.686" name="target" dev="configfs" ino=5606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.759116][   T42] audit: type=1400 audit(1793931683.477:1167): avc:  denied  { write } for  pid=8230 comm="syz.5.686" name="usb_gadget" dev="configfs" ino=19337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.760126][   T42] audit: type=1400 audit(1793931683.477:1168): avc:  denied  { write } for  pid=8230 comm="syz.5.686" name="naa.6001405c935d7912" dev="configfs" ino=19339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.760152][ T8231] 
[   97.794241][ T8231] ======================================================
[   97.796353][ T8231] WARNING: possible circular locking dependency detected
[   97.798447][ T8231] syzkaller #0 Tainted: G             L     
[   97.800347][ T8231] ------------------------------------------------------
[   97.802516][ T8231] syz.5.686/8231 is trying to acquire lock:
[   97.804305][ T8231] ffff888021889440 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0
[   97.807748][ T8231] 
[   97.807748][ T8231] but task is already holding lock:
[   97.809968][ T8231] ffffffff916b7220 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610
[   97.812770][ T8231] 
[   97.812770][ T8231] which lock already depends on the new lock.
[   97.812770][ T8231] 
[   97.815876][ T8231] 
[   97.815876][ T8231] the existing dependency chain (in reverse order) is:
[   97.818571][ T8231] 
[   97.818571][ T8231] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[   97.821049][ T8231]        lock_acquire+0x1d1/0x380
[   97.822627][ T8231]        __mutex_lock+0x19f/0x1c10
[   97.824208][ T8231]        usbg_make_tpg+0x10b/0x610
[   97.825785][ T8231]        target_fabric_make_tpg+0xab/0x8c0
[   97.827571][ T8231]        configfs_mkdir+0x525/0xd40
[   97.829340][ T8231]        vfs_mkdir+0x36d/0x8a0
[   97.830839][ T8231]        filename_mkdirat+0x4c4/0x630
[   97.832480][ T8231]        __x64_sys_mkdirat+0x89/0xc0
[   97.834076][ T8231]        do_syscall_64+0x123/0x790
[   97.835667][ T8231]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.837616][ T8231] 
[   97.837616][ T8231] -> #1 (&subsys->su_mutex){+.+.}-{4:4}:
[   97.839970][ T8231]        lock_acquire+0x1d1/0x380
[   97.841516][ T8231]        __mutex_lock+0x19f/0x1c10
[   97.843074][ T8231]        configfs_rmdir+0x5ae/0x950
[   97.844666][ T8231]        vfs_rmdir+0x328/0x8e0
[   97.846168][ T8231]        filename_rmdir+0x31a/0x610
[   97.847773][ T8231]        __x64_sys_rmdir+0x46/0x70
[   97.849396][ T8231]        do_syscall_64+0x123/0x790
[   97.850958][ T8231]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.852906][ T8231] 
[   97.852906][ T8231] -> #0 (&sb->s_type->i_mutex_key#29){++++}-{4:4}:
[   97.855526][ T8231]        check_prev_add+0xeb/0xe60
[   97.857152][ T8231]        __lock_acquire+0x1528/0x1f40
[   97.858968][ T8231]        lock_acquire+0x1d1/0x380
[   97.860534][ T8231]        down_write+0x86/0x1f0
[   97.862015][ T8231]        configfs_depend_item_unlocked+0xf3/0x6a0
[   97.863956][ T8231]        usbg_make_tpg+0x251/0x610
[   97.865525][ T8231]        target_fabric_make_tpg+0xab/0x8c0
[   97.867279][ T8231]        configfs_mkdir+0x525/0xd40
[   97.868938][ T8231]        vfs_mkdir+0x36d/0x8a0
[   97.870408][ T8231]        filename_mkdirat+0x4c4/0x630
[   97.872067][ T8231]        __x64_sys_mkdirat+0x89/0xc0
[   97.873688][ T8231]        do_syscall_64+0x123/0x790
[   97.875237][ T8231]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.877201][ T8231] 
[   97.877201][ T8231] other info that might help us debug this:
[   97.877201][ T8231] 
[   97.880285][ T8231] Chain exists of:
[   97.880285][ T8231]   &sb->s_type->i_mutex_key#29 --> &subsys->su_mutex --> tpg_instances_lock
[   97.880285][ T8231] 
[   97.884533][ T8231]  Possible unsafe locking scenario:
[   97.884533][ T8231] 
[   97.886789][ T8231]        CPU0                    CPU1
[   97.888663][ T8231]        ----                    ----
[   97.890289][ T8231]   lock(tpg_instances_lock);
[   97.891748][ T8231]                                lock(&subsys->su_mutex);
[   97.893874][ T8231]                                lock(tpg_instances_lock);
[   97.896061][ T8231]   lock(&sb->s_type->i_mutex_key#29);
[   97.897711][ T8231] 
[   97.897711][ T8231]  *** DEADLOCK ***
[   97.897711][ T8231] 
[   97.900153][ T8231] locks held by syz.5.686/8231: 4, last CPU#2:
[   97.902042][ T8231]  #0: ffff888025d28478 (sb_writers#18){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[   97.904868][ T8231]  #1: ffff88803ba5f800 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400
[   97.908091][ T8231]  #2: ffffffff911e70c8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40
[   97.910990][ T8231]  #3: ffffffff916b7220 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610
[   97.913900][ T8231] 
[   97.913900][ T8231] stack backtrace:
[   97.915704][ T8231] CPU: 2 UID: 0 PID: 8231 Comm: syz.5.686 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   97.918926][ T8231] Tainted: [L]=SOFTLOCKUP
[   97.920264][ T8231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.923288][ T8231] Call Trace:
[   97.924351][ T8231]  <TASK>
[   97.925266][ T8231]  dump_stack_lvl+0x100/0x190
[   97.926727][ T8231]  print_circular_bug.cold+0x178/0x1be
[   97.928391][ T8231]  check_noncircular+0x146/0x160
[   97.929902][ T8231]  check_prev_add+0xeb/0xe60
[   97.931328][ T8231]  __lock_acquire+0x1528/0x1f40
[   97.932833][ T8231]  ? rcu_is_watching+0x13/0xc0
[   97.934299][ T8231]  lock_acquire+0x1d1/0x380
[   97.935723][ T8231]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[   97.937570][ T8231]  ? __pfx___might_resched+0x10/0x10
[   97.939171][ T8231]  down_write+0x86/0x1f0
[   97.940491][ T8231]  ? configfs_depend_item_unlocked+0xf3/0x6a0
[   97.942315][ T8231]  ? __pfx_down_write+0x10/0x10
[   97.943806][ T8231]  ? kstrtou16+0xde/0x130
[   97.945150][ T8231]  configfs_depend_item_unlocked+0xf3/0x6a0
[   97.946957][ T8231]  usbg_make_tpg+0x251/0x610
[   97.948390][ T8231]  ? __pfx_usbg_make_tpg+0x10/0x10
[   97.949954][ T8231]  ? find_held_lock+0x2b/0x80
[   97.951406][ T8231]  ? __pfx_usbg_make_tpg+0x10/0x10
[   97.952989][ T8231]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[   97.954780][ T8231]  target_fabric_make_tpg+0xab/0x8c0
[   97.956404][ T8231]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[   97.958205][ T8231]  configfs_mkdir+0x525/0xd40
[   97.959656][ T8231]  ? may_create+0x280/0x430
[   97.961075][ T8231]  ? __pfx_configfs_mkdir+0x10/0x10
[   97.962673][ T8231]  vfs_mkdir+0x36d/0x8a0
[   97.963979][ T8231]  filename_mkdirat+0x4c4/0x630
[   97.965466][ T8231]  ? __pfx_filename_mkdirat+0x10/0x10
[   97.967112][ T8231]  ? strncpy_from_user+0x19d/0x2d0
[   97.968673][ T8231]  ? do_getname+0x191/0x390
[   97.970061][ T8231]  __x64_sys_mkdirat+0x89/0xc0
[   97.971505][ T8231]  do_syscall_64+0x123/0x790
[   97.972940][ T8231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.974746][ T8231] RIP: 0033:0x7f6a9b79fb19
[   97.976163][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.981897][ T8231] RSP: 002b:00007f6a9c685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   97.984422][ T8231] RAX: ffffffffffffffda RBX: 00007f6a9ba25fa0 RCX: 00007f6a9b79fb19
[   97.986836][ T8231] RDX: 00000000000001ff RSI: 0000200000000480 RDI: ffffffffffffff9c
[   97.989187][ T8231] RBP: 00007f6a9b837b70 R08: 0000000000000000 R09: 0000000000000000
[   97.991573][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.993945][ T8231] R13: 00007f6a9ba26038 R14: 00007f6a9ba25fa0 R15: 00007ffcc1d84c88
[   97.996377][ T8231]  </TASK>
[   99.027900][   T29] usb 6-1: USB disconnect, device number 15
[   99.031753][   T29] SPCP8x5 ttyUSB2: SPCP8x5 converter now disconnected from ttyUSB2
[   99.031941][   T29] spcp8x5 6-1:1.0: device disconnected