last executing test programs:

2.687841238s ago: executing program 0 (id=536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002200)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000002240)=ANY=[], 0x141)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000002240)={0x0, 0x4, &(0x7f00000022c0)=[{&(0x7f0000002300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000002280)={{&(0x7f0000003000/0x3000)=nil, 0x3000}})
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mknod$loop(&(0x7f0000002400)='./file0\x00', 0xfff, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002440), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x80, &(0x7f0000002500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000002580)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000045c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000004640)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006700)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000006740)="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", 0x2000, &(0x7f0000008740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000008880)='./file0\x00', 0x80101, 0x101)
write$tcp_congestion(r8, &(0x7f00000088c0)='lp\x00', 0xfffffdef)
dup2(r8, r4)
readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/4097, 0x1001}, {&(0x7f0000001200)=""/4082, 0xff2}], 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="f6ffffffffffffff2402128009000c39dcc24c6b38e032dc01edeb41"], 0x44}}, 0x0)

2.465838709s ago: executing program 0 (id=537):
ioprio_get$pid(0x1, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140200001000010000000000000000000a00000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000106140000001100010000000000000000000a00000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000000200000000000000000000000500000a5c0000000c0a010100000000000000000a90118727faa108aa0bedae4c119c0000060900020073797a31000000000900010073797a3100000000300003802c0000800c000180060001000000000019000640801e483668d94497e675e91debab209910ba21b26d000000140200001100010000000000000000000200000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x1b10}, 0x1, 0x0, 0x0, 0x24008855}, 0x40) (async)
r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905", @ANYRES16], 0x0) (async)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203c808028cc426fd90be69e02012000172061006"], 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={<r6=>r4, 0x401, 0x5, 0x6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) (async)
r8 = socket(0x2, 0x80805, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006) (async)
sendmmsg$inet(r8, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c4", 0x1}], 0x1}}], 0x1, 0x4050000) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={<r9=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000280)={0xf, 0x2, 0x80000000, 0xffff, r9}, 0x10) (async)
getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r6, 0x84, 0x82, &(0x7f00000002c0)={r9, 0x4}, &(0x7f0000000300)=0x8) (async)
write$tun(0xffffffffffffffff, 0x0, 0x0)
ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000840)={0x8, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

2.354568316s ago: executing program 2 (id=539):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) (async)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async)

2.26640885s ago: executing program 2 (id=540):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget\x00', 0x1) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async)
mount(0x0, &(0x7f0000000480)='./gadget\x00', &(0x7f00000004c0)='gadgetfs\x00', 0x0, 0x0) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./gadget/dummy_udc\x00', 0x802, 0x0)
io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000540)=[r0, r8, r3], 0x3) (async)
pread64(r8, 0x0, 0x0, 0xa9)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x2, 0x70bd29, 0x25dfdbfe, 0x2, ["", "", "", "", ""]}, 0x14}}, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000180)={0x0, 0xffffffffffffff3d, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1100}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async)
connect$unix(r8, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r11, @ANYBLOB="fcdf0de382112f1eb0e106001a010200000006001000ff040000"], 0x2c}}, 0x0)

2.156267072s ago: executing program 2 (id=542):
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001140)=""/4093, 0xffd}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32)
r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32)
r3 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0x2c9, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xa}}}, &(0x7f0000000500)=<r4=>0x0) (async)
capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x3, 0x7, 0x8d6c, 0x0, 0x3, 0x4})
r5 = syz_open_dev$ublk_chdev(&(0x7f00000005c0), r3, 0x2) (async)
r6 = io_uring_setup(0x7027, &(0x7f0000000000)={0x0, 0x4327, 0x0, 0x3, 0x4f})
syz_ublk_setup_queues(r5, r4, &(0x7f0000000600)={0x0, 0xfdee, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000680)=[{}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x1, 0x169}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d5b, 0x2000}}], 0x1, &(0x7f0000002180)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x8, 0xbc6, 0x0, 0x0}}, &(0x7f0000002200)) (async)
write$cgroup_subtree(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002240)={0x8, 0x100008b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x1, &(0x7f0000002280)=0x7) (async, rerun: 64)
r7 = syz_open_dev$sndmidi(&(0x7f00000022c0), 0x2, 0x143102)
writev(r7, &(0x7f0000002300)=[{&(0x7f0000002340)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002380)='./file1\x00', 0x100)
mkdir(&(0x7f00000023c0)='./file0\x00', 0x184) (async)
mkdir(&(0x7f0000002400)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000002440)='./bus\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f0000002500)='./bus\x00') (async)
r8 = open(&(0x7f0000002540)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r8, &(0x7f0000002580)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r8, r8, &(0x7f0000002640), 0x7f03) (async)
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00')
mkdir(&(0x7f0000002680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x163)

2.051956738s ago: executing program 3 (id=543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080001a00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fb00850000008200000095"], &(0x7f0000000900)='syzkaller\x00', 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)={@map=r0, r2, 0x5}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

1.896326759s ago: executing program 3 (id=544):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0xffe0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0xb, 0x1}}}}]}, 0x40}}, 0x0)

1.165422081s ago: executing program 3 (id=545):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0x5)
ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x101881, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
lseek(r1, 0x6, 0x1)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5)

1.070926234s ago: executing program 3 (id=546):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCDISCONN(r1, 0x7439)

1.06919418s ago: executing program 2 (id=547):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
get_robust_list(0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300))
syz_open_procfs(0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0)={0x11042, 0xfffffffc}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = dup3(r0, r4, 0x80000)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r6=>0x0})
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280))
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="2e00000011008188040f46ecdb4cb9cca7480e3011000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

1.069030583s ago: executing program 1 (id=548):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = inotify_init1(0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000001c0)=[{&(0x7f0000000200)=' ', 0x100120}], 0x1}, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x700)

981.642588ms ago: executing program 3 (id=549):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000800)={0x2, 0x0, 0x98, &(0x7f0000000840)={0x2000, 0x24000, 0x1}})
io_uring_setup(0x3120, &(0x7f0000000900)={0x0, 0x5116, 0x8000, 0x3, 0x310, 0x0, r0})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0xff00, &(0x7f0000000540)=[{&(0x7f0000000580)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000040)={0x7, [[0x9, 0x4, 0x1, 0x6, 0x8a56, 0x4, 0x8, 0x7], [0x0, 0x0, 0x4000009, 0xff, 0x6, 0x5e8d, 0x2000000, 0x7d9], [0x6, 0x40, 0x15, 0x80, 0x2, 0x40, 0x9]], '\x00', [{0xc, 0xffff, 0x0, 0x0, 0x1}, {0x80000001, 0xc26d, 0x1, 0x0, 0x1, 0x1}, {0xfd, 0x77, 0x0, 0x1}, {0x17b, 0x8d, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}, {0xf, 0x210f, 0x1}, {0x580000, 0x9, 0x0, 0x1, 0x1}, {0x2, 0x56, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0x9, 0x48af80, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1}, {0x7fffffff, 0xa, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9})
ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000009c0)='./sys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2, 0x0)
write(r3, &(0x7f0000000a80)='3', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/acpi/uevent\x00', 0x1, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
unlinkat(r0, &(0x7f0000000700)='./sys/bus/acpi/uevent\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000010000300050801100010000000000000000056f162471f4000000050002000100000005000900010000000800030004acff"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
write(r4, &(0x7f00000004c0)='a', 0x1)
syz_io_uring_setup(0x76ea, &(0x7f0000000c40)={0x0, 0xc817, 0x1, 0x0, 0x1a1}, &(0x7f0000000cc0)=<r8=>0x0, &(0x7f0000000d00)=<r9=>0x0, &(0x7f0000000d40)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000d80)=@IORING_OP_NOP128={0x3f, 0x40, 0x0, 0xffffffffffffffff, 0x1, 0x7fffffff, 0x81, 0x22, 0x1, {0x5}})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='fdinfo/3\x00')
read$FUSE(r11, &(0x7f0000000e40)={0x2020}, 0x2020)
r12 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x1000, 0x4040)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r12, 0xc0884123, &(0x7f0000000300)={0x4, "3733090e469bc4d45e45788e5bbdca159a53f617c9d5e2a4b1b85e023410c27dd41c11cfe2f0fd05cb673496f9973143def7b418c4f1920a05ec5982c8e3743b", {0x3, 0x10001}})

885.898916ms ago: executing program 0 (id=550):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x149842, 0x0)
write$dsp(r0, &(0x7f00000000c0)="e6", 0x1)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x6)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000400)=0x2, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd700000000000070000000500130009000000140008"], 0x30}}, 0x0)
sendmmsg$inet(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)

783.988544ms ago: executing program 1 (id=551):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x460000, 0x0) (async, rerun: 32)
r2 = mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x4, 0x4041010, 0xffffffffffffffff, 0x87561b15) (async, rerun: 32)
syz_io_uring_setup(0x5c31, &(0x7f0000000080)={0x0, 0xeff0, 0x1, 0x3, 0x31c}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r3=>0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x2, 0x0, <r4=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7733, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0xde, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xe2}}}, &(0x7f0000000280)) (async, rerun: 64)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64)
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000300)={0x2e, 0x20, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x4, 0x521, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x20}}}, &(0x7f0000000380)) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f0000000040)={'erspan0\x00', 0x0})

783.49568ms ago: executing program 0 (id=552):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0xb, 0x6a980)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000ac0)={0x0, [[0x9ef9, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x7], [0x6, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x3}, {0xfffffffd}, {}, {0x2, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0xfffffffe, 0x0, 0x1, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x7}, {0x8000000, 0x8f96}, {}, {0x0, 0x7}, {0x0, 0xfffff0a5}], '\x00', 0x10000})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x4, @empty, 0x6d}}, 0x0, 0x0, 0x33, 0x0, "ffa1f819be2d45e250fd26562ce09916a27aed631363a5432fb12e08113effb5bb89cfeafda5f79a8e28471efbdc66c9a6152cedb293e5cbbef69e0b815ed1c8e7fd762d9008b749b97592e880b340e1"}, 0xd8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r3=>r1, {0x924}}, './file0\x00'})
ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000640))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@private2, 0x800, 0x0, 0x103, 0x1, 0x40, 0xfffd}, 0x20)
sendmsg$kcm(r4, 0x0, 0x20000011)
sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000880)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25b6788dc011a227a025027c00000c0001800800020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000001c0)={'bond0\x00', @ifru_names='vxcan1\x00'})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x8041}, 0x4000054)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_XEN_HVM(r9, 0x4068aea3, &(0x7f0000000040)={0x26, 0x0, 0xa4})
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xd, 0x406, 0x1000, 0x80, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, r10)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x102, 0x0)
sendfile(r12, r12, &(0x7f0000000180)=0xb, 0x125)
syz_open_dev$media(&(0x7f00000004c0), 0x2, 0x0)
ioctl$BLKREPORTZONE(r11, 0xc0101282, &(0x7f0000000980)={0x8, 0x4, 0x0, [{0x6, 0xffffffff, 0xb, 0x7f, 0x5, 0x2, 0x0, '\x00', 0x9}, {0x0, 0x1, 0xfffffffffffffe01, 0x40, 0x7, 0x3, 0x6, '\x00', 0x3a}, {0x2, 0x0, 0x8, 0x9, 0xa, 0x40, 0xf7, '\x00', 0x9}, {0x5, 0x40, 0x4, 0x6, 0x4, 0xc, 0x57, '\x00', 0x3}]})
syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000580)="3e0fdcc4f20f2a8d4499660f3a62e1350f52c3baf80c66b80a32bd8a66efbafc0ced66b9800000c00f326635010000000f300f001766b90006000066b80000008066ba000000000f30660f3834b8a1000fc76a00", 0x54}], 0xaaaaaaaaaaaa8df, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}], 0x1)
ioctl$TIOCSIG(r12, 0x40045436, 0x13)

782.792077ms ago: executing program 2 (id=553):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}, 0x0, 0x1, {}, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xa080, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r2})
sendto$inet6(r0, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c)

782.192714ms ago: executing program 3 (id=554):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000580)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) (async, rerun: 64)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async, rerun: 64)
socket(0x400000000010, 0x3, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_UNLOCK(r4, 0x6406) (async, rerun: 64)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x4, &(0x7f0000000040)=[{0xed35, 0x90, 0xf3, 0x4}, {0xd, 0x7, 0x0, 0x3}, {0x7, 0x5, 0x2, 0xc481}, {0x914, 0xa, 0xff, 0x9}]})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000006c0)={0x40, 0x3, 0x2}, 0x10) (async)
bind$tipc(r0, 0x0, 0x0)
close(r0) (async)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) (async)
r8 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r8, 0x1000006) (async)
fcntl$addseals(r8, 0x409, 0x7)
r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000440)={r8, 0x0, 0x0, 0x1000000})
syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x0) (async)
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000004c0)=0x5) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x0, &(0x7f0000000540)}) (async, rerun: 64)
close_range(r3, r3, 0x0) (rerun: 64)

616.698233ms ago: executing program 1 (id=555):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pwrite64(r0, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733", 0x3f, 0x200000000002)

529.228293ms ago: executing program 1 (id=556):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xd)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xd) (async)

476.419331ms ago: executing program 0 (id=557):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2c41, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) (async)
open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000ac0)={0x1, 0x0, @pic={0x6, 0x14, 0x6, 0xa2, 0x6, 0x7, 0x4, 0x2, 0x40, 0x9, 0xf0, 0x3, 0x7, 0xfa, 0x3, 0x5}}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000ac0)={0x1, 0x0, @pic={0x6, 0x14, 0x6, 0xa2, 0x6, 0x7, 0x4, 0x2, 0x40, 0x9, 0xf0, 0x3, 0x7, 0xfa, 0x3, 0x5}})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000d00)={0x8, 0xfff})
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r2, &(0x7f00000008c0)=@generic={0x1f, "0000000000000100"}, 0xa)
listen(r2, 0x1) (async)
listen(r2, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
close_range(r3, 0xffffffffffffffff, 0x0)
open(&(0x7f00000006c0)='./file0\x00', 0x108843, 0x98)
lremovexattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=@random={'os2.', 'user.incfs.metadata\x00'}) (async)
lremovexattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=@random={'os2.', 'user.incfs.metadata\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000d40)=@newlink={0x68, 0x10, 0x401, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x13}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
mknod(&(0x7f0000000300)='./file0\x00', 0x8001420, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpu.stat\x00', 0x275a, 0x0)
mount_setattr(r5, &(0x7f0000000600)='.\x02\x00', 0x1100, &(0x7f0000000680)={0x10000b, 0x84, 0x40000, {r5}}, 0x20)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
socket(0x2, 0x80805, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000a40)=0x7fff, 0x4)
mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000940)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
creat(&(0x7f0000000640)='.\x02\x00', 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000740)='./file0\x00', r7, &(0x7f0000000780)='.\x02\x00', 0x4)
lsm_set_self_attr(0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x101, 0x0)

176.883464ms ago: executing program 1 (id=558):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000015000000081a0a783918a19f66000000bc8ffcf4c2ec086c7a388d64ee62c021772543f8d13ae63832de404498f570930d43087330eff50850a10f39f29c6e4cb2cbfbfed9198374f370a27567f6389a1f4782b0fa3002b8aa3b065ec6711f8363a74096e07be202114a77a4485c9cfc8639a9672c172057f907afb2a656a0b5cd5e7e7c53d1a48f0dea2ede90b2a56274ce17902ffa80542a0db374b6b9c8e299665eb1b54b5ca8ced69cb6460e4782b011a6c4ff41db9b8e855d32c81218cc03ca2b98daf52c17be074f20303ea566e8358a132a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000780)=0x1, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) (async)
sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f0000000800)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)='4', 0xffe3}], 0x1}}], 0x1, 0x24000804) (async)
read$FUSE(r0, &(0x7f0000001f40)={0x2020}, 0x2020)

4.009107ms ago: executing program 0 (id=559):
recvmsg(0xffffffffffffffff, 0x0, 0x10100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff)
creat(&(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x50)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x18d)
write(r0, &(0x7f0000000440)='270', 0x3)
preadv2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/14, 0xe}], 0x1, 0x2, 0x4, 0x16)
openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x301002, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)

435.316µs ago: executing program 2 (id=560):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0x0, 0x9, 0x0, 0x20000000, 0x1, 0x2, 0x0, 0x4}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x77c1816f4f559e4e)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x4000004)
capset(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0xfe)
mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000a40)={0x81, 0x0, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000ac0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xbc9}]})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000b00)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]})
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000b40)={"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"})
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1a7)
mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x40, 0x0)
r6 = open$dir(&(0x7f00000009c0)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612)
pipe2(&(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r7, 0x407, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/bus/acpi/uevent\x00', 0x1, 0x0)
write(r8, &(0x7f00000007c0)='add', 0x3)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2)

0s ago: executing program 1 (id=561):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000100)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000780)=@multiplanar_mmap={0x2473, 0x2, 0x4, 0x2, 0x2, {}, {0x3, 0x8, 0x2, 0x0, 0x2, 0x2, "7ac466bd"}, 0x8, 0x1, {0x0}, 0x1000, 0x0, r3}) (async)
write(r1, &(0x7f0000000200)='270', 0x3)
unshare(0x20000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000280))
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) (async)
r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000680)={0x100, 0x6, 0x3, {0x3, @sdr={0x35303553, 0xff}}, 0x7}) (async)
ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) (async)
ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1000, 0x0, 0x60, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '0'}, 0x20, '1', 0x20, 'R', ' 1 sectors_per_bit:8'}}]})

kernel console output (not intermixed with test programs):

ent L2654: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:127.0.0.1 [:0]
[  131.209769][ T6650] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.212161][ T6649] netlink: 'syz.2.180': attribute type 10 has an invalid length.
[  131.212180][ T6649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.180'.
[  131.217393][ T6655] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[  131.217956][ T6650] netlink: 'syz.2.180': attribute type 10 has an invalid length.
[  131.217970][ T6650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.180'.
[  131.241960][ T6607] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  131.333587][ T5626] rtrs_client L1784: <s+>: Resolving route failed, err: -ENODEV
[  131.360221][ T6607] rtrs_client L2654: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:127.0.0.1 [:0]
[  131.384246][ T6607] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  131.427360][ T5626] rtrs_client L1784: <s+>: Resolving route failed, err: -ENODEV
[  131.483509][ T6607] rtrs_client L2654: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:127.0.0.1 [:0]
[  131.512662][ T6607] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  131.572379][ T5626] rtrs_client L1784: <s+>: Resolving route failed, err: -ENODEV
[  131.576803][   T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  131.635632][ T6607] rtrs_client L2654: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:127.0.0.1 [:0]
[  131.652605][ T6607] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  131.699881][ T5626] rtrs_client L1784: <s+>: Resolving route failed, err: -ENODEV
[  131.727315][   T11] usb 6-1: Using ep0 maxpacket: 8
[  131.732296][   T11] usb 6-1: New USB device found: idVendor=04b4, idProduct=931c, bcdDevice=31.15
[  131.733821][   T11] usb 6-1: config 2 has an invalid interface number: 15 but max is 1
[  131.733839][   T11] usb 6-1: config 2 has an invalid interface number: 106 but max is 1
[  131.733851][   T11] usb 6-1: config 2 has an invalid interface number: 95 but max is 1
[  131.733864][   T11] usb 6-1: config 2 has 3 interfaces, different from the descriptor's value: 2
[  131.733877][   T11] usb 6-1: config 2 has no interface number 0
[  131.733887][   T11] usb 6-1: config 2 has no interface number 1
[  131.733897][   T11] usb 6-1: config 2 has no interface number 2
[  131.734003][   T11] usb 6-1: config 2 interface 15 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  131.734037][   T11] usb 6-1: config 2 interface 106 altsetting 4 endpoint 0x3 has an invalid bInterval 48, changing to 9
[  131.734057][   T11] usb 6-1: config 2 interface 106 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  131.734129][   T11] usb 6-1: too many endpoints for config 2 interface 95 altsetting 102: 92, using maximum allowed: 30
[  131.734161][   T11] usb 6-1: config 2 interface 95 altsetting 102 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  131.734184][   T11] usb 6-1: config 2 interface 95 altsetting 102 endpoint 0x7 has invalid wMaxPacketSize 0
[  131.734201][   T11] usb 6-1: config 2 interface 95 altsetting 102 has an invalid descriptor for endpoint zero, skipping
[  131.734219][   T11] usb 6-1: config 2 interface 95 altsetting 102 has a duplicate endpoint with address 0x7, skipping
[  131.734284][   T11] usb 6-1: config 2 interface 95 altsetting 102 has 5 endpoint descriptors, different from the interface descriptor's value: 92
[  131.734302][   T11] usb 6-1: config 2 interface 15 has no altsetting 0
[  131.734314][   T11] usb 6-1: config 2 interface 106 has no altsetting 0
[  131.734325][   T11] usb 6-1: config 2 interface 95 has no altsetting 0
[  131.750174][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.750199][   T11] usb 6-1: Product: �訠鿯으ଦ掔�椯��⸘
[  131.750212][   T11] usb 6-1: Manufacturer: М
[  131.750226][   T11] usb 6-1: SerialNumber: �
[  131.815155][ T6607] rtrs_client L2654: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:127.0.0.1 [:0]
[  132.009655][   T11] usb 6-1: can't set first interface for hiFace device.
[  132.009682][   T11] snd-usb-hiface 6-1:2.15: probe with driver snd-usb-hiface failed with error -5
[  132.053265][   T11] usb 6-1: can't set first interface for hiFace device.
[  132.053289][   T11] snd-usb-hiface 6-1:2.106: probe with driver snd-usb-hiface failed with error -5
[  132.098651][   T11] usb 6-1: can't set first interface for hiFace device.
[  132.098678][   T11] snd-usb-hiface 6-1:2.95: probe with driver snd-usb-hiface failed with error -5
[  132.130449][   T44] kauditd_printk_skb: 75 callbacks suppressed
[  132.130483][   T44] audit: type=1400 audit(1794509392.603:525): avc:  denied  { name_connect } for  pid=6680 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  132.172850][   T11] usb 6-1: USB disconnect, device number 4
[  132.211411][   T44] audit: type=1800 audit(1794509392.683:526): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=137619 res=0 errno=-19
[  132.282693][   T44] audit: type=1326 audit(1794509392.753:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.282815][   T44] audit: type=1326 audit(1794509392.753:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.285658][   T44] audit: type=1326 audit(1794509392.753:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.286906][   T44] audit: type=1326 audit(1794509392.753:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.286954][   T44] audit: type=1326 audit(1794509392.753:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.286986][   T44] audit: type=1326 audit(1794509392.753:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.311116][   T44] audit: type=1326 audit(1794509392.773:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.311169][   T44] audit: type=1326 audit(1794509392.773:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbabfa94d9 code=0x7ffc0000
[  132.705034][   T66] usb 5-1: USB disconnect, device number 2
[  132.898073][ T6700] rxe_eth0 speed is unknown, defaulting to 1000
[  132.900967][ T6711] Bluetooth: MGMT ver 1.23
[  133.886375][ T6731] netlink: 188 bytes leftover after parsing attributes in process `syz.3.198'.
[  133.886400][ T6731] openvswitch: netlink: Flow actions attr not present in new flow.
[  134.486905][ T6741] overlayfs: upper fs does not support file handles, falling back to index=off.
[  134.878660][ T6756] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  134.879613][ T6756] lo: entered promiscuous mode
[  134.922213][ T6756] tunl0: entered promiscuous mode
[  134.924196][ T6756] gre0: entered promiscuous mode
[  134.935211][ T6756] gretap0: entered promiscuous mode
[  134.952525][ T6756] erspan0: entered promiscuous mode
[  134.956555][ T6756] ip_vti0: entered promiscuous mode
[  134.961948][ T6756] ip6_vti0: entered promiscuous mode
[  134.964418][ T6756] sit0: entered promiscuous mode
[  134.968693][ T6756] ip6tnl0: entered promiscuous mode
[  134.971011][ T6761] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  134.988822][ T6756] ip6gre0: entered promiscuous mode
[  135.007540][ T6756] syz_tun: entered promiscuous mode
[  135.067692][ T6756] ip6gretap0: entered promiscuous mode
[  135.082130][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.083299][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.086054][ T6756] bridge0: entered promiscuous mode
[  135.089500][ T6756] vcan0: entered promiscuous mode
[  135.105133][ T6756] bond0: entered promiscuous mode
[  135.105155][ T6756] bond_slave_0: entered promiscuous mode
[  135.105342][ T6756] bond_slave_1: entered promiscuous mode
[  135.160305][ T6756] team0: entered promiscuous mode
[  135.160328][ T6756] team_slave_0: entered promiscuous mode
[  135.160722][ T6756] team_slave_1: entered promiscuous mode
[  135.189775][ T6756] nlmon0: entered promiscuous mode
[  135.191284][ T6756] batadv0: entered promiscuous mode
[  135.193456][ T6756] vxcan0: entered promiscuous mode
[  135.194009][ T6756] vxcan1: entered promiscuous mode
[  135.194725][ T6756] veth0: entered promiscuous mode
[  135.197349][ T6756] veth1: entered promiscuous mode
[  135.210070][ T6763] UBIFS error (pid: 6763): cannot open "ubi0:testvol", error -19
[  135.272750][ T6756] wg0: entered promiscuous mode
[  135.275311][ T6756] wg1: entered promiscuous mode
[  135.285999][ T6756] wg2: entered promiscuous mode
[  135.288900][ T6756] veth0_to_bridge: entered promiscuous mode
[  135.305338][ T6756] veth1_to_bridge: entered promiscuous mode
[  135.318294][ T6756] veth0_to_bond: entered promiscuous mode
[  135.321041][ T6756] veth1_to_bond: entered promiscuous mode
[  135.331648][ T6756] veth0_to_team: entered promiscuous mode
[  135.336781][ T6756] veth1_to_team: entered promiscuous mode
[  135.342438][ T6756] veth0_to_batadv: entered promiscuous mode
[  135.344827][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.355185][ T6756] batadv_slave_0: entered promiscuous mode
[  135.364134][ T6756] veth1_to_batadv: entered promiscuous mode
[  135.365992][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.366031][ T6756] batadv_slave_1: entered promiscuous mode
[  135.394211][ T6756] xfrm0: entered promiscuous mode
[  135.397261][ T6756] veth0_to_hsr: entered promiscuous mode
[  135.405946][ T1360] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  135.406087][ T6756] veth1_to_hsr: entered promiscuous mode
[  135.415403][ T6756] hsr0: entered promiscuous mode
[  135.417473][ T6756] veth1_virt_wifi: entered promiscuous mode
[  135.420241][ T6756] veth0_virt_wifi: entered promiscuous mode
[  135.423486][ T6756] virt_wifi0: entered promiscuous mode
[  135.428867][ T6756] vlan0: entered promiscuous mode
[  135.430761][ T6756] vlan1: entered promiscuous mode
[  135.438680][ T6756] macvlan0: entered promiscuous mode
[  135.445323][ T6756] macvlan1: entered promiscuous mode
[  135.496334][ T6756] ipvtap0: entered promiscuous mode
[  135.499275][ T6756] ipvlan0: entered promiscuous mode
[  135.501527][ T6756] ipvlan1: entered promiscuous mode
[  135.522457][ T6756] macvtap0: entered promiscuous mode
[  135.525276][ T6756] macsec0: entered promiscuous mode
[  135.527547][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[  135.542937][ T6756] geneve0: entered promiscuous mode
[  135.545953][ T6756] geneve1: entered promiscuous mode
[  135.562978][ T6756] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  135.567658][ T1360] usb 6-1: Using ep0 maxpacket: 8
[  135.568401][ T1360] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.569440][ T1360] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  135.569467][ T1360] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  135.569485][ T1360] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  135.569503][ T1360] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.569534][ T1360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.668941][ T6756] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  135.712960][ T6756] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  135.731486][ T6756] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  135.800112][ T6756] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  135.848881][ T1360] usb 6-1: usb_control_msg returned -32
[  135.848924][ T1360] usbtmc 6-1:16.0: can't read capabilities
[  135.864604][ T6756] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  135.908825][ T5626] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.908872][ T5626] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.908925][ T5626] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.908955][ T5626] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.065399][ T6783] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  136.410764][  T860] usb 6-1: USB disconnect, device number 5
[  136.427263][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'.
[  136.565911][ T6794] fuse: root generation should be zero
[  137.020816][   T68] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 255
[  137.039671][ T6819] veth1_to_hsr: entered allmulticast mode
[  137.051589][ T6819] loop2: detected capacity change from 0 to 7
[  137.063094][ T6819] Dev loop2: unable to read RDB block 7
[  137.063161][ T6819]  loop2: unable to read partition table
[  137.063361][ T6819] loop2: partition table beyond EOD, truncated
[  137.063378][ T6819] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  137.063772][ T6819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2647 sclass=netlink_route_socket pid=6819 comm=syz.3.221
[  137.084161][ T6819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2647 sclass=netlink_route_socket pid=6819 comm=syz.3.221
[  137.097960][ T6825] xt_l2tp: missing protocol rule (udp|l2tpip)
[  137.116498][ T6828] xt_l2tp: missing protocol rule (udp|l2tpip)
[  137.156264][   T44] kauditd_printk_skb: 88 callbacks suppressed
[  137.156284][   T44] audit: type=1800 audit(1794509397.583:623): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16104 res=0 errno=-22
[  137.156324][   T44] audit: type=1800 audit(1794509397.623:624): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142418 res=0 errno=-22
[  137.273192][ T6833] x_tables: duplicate underflow at hook 2
[  137.351241][   T44] audit: type=1400 audit(1794509397.823:625): avc:  denied  { setopt } for  pid=6834 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  137.515833][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[  137.515924][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[  137.757872][ T6846] Bluetooth: hci0: load_link_keys: too big key_count value 5121
[  137.779133][   T44] audit: type=1400 audit(1794509398.243:626): avc:  denied  { setopt } for  pid=6845 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  138.070509][ T6858] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[  138.364971][   T44] audit: type=1800 audit(1794509398.833:627): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.232" name="new_array" dev="sysfs" ino=65870 res=0 errno=-13
[  138.406450][ T6865] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  138.411265][   T44] audit: type=1800 audit(1794509398.883:628): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142525 res=0 errno=-22
[  138.579107][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[  138.638382][   T44] audit: type=1800 audit(1794509399.113:629): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.233" name="attach" dev="sysfs" ino=36691 res=0 errno=-13
[  138.657371][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  138.657395][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  138.658893][ T6870] vhci_hcd vhci_hcd.0: Device attached
[  138.663797][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[  138.663823][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  138.663899][ T6870] vhci_hcd vhci_hcd.0: Device attached
[  138.666418][   T44] audit: type=1800 audit(1794509399.133:630): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.233" name="attach" dev="sysfs" ino=36691 res=0 errno=-13
[  138.685882][ T6870] iommufd_mock iommufd_mock1: Adding to iommu group 11
[  138.686856][ T1049] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  138.710164][   T68] Bluetooth: hci3: hcon ffff888034f84000 sent 1 < count 8667
[  138.724884][   T44] audit: type=1800 audit(1794509399.153:631): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142547 res=0 errno=-22
[  138.724940][   T44] audit: type=1400 audit(1794509399.173:632): avc:  denied  { mounton } for  pid=6869 comm="syz.1.233" path="/53/proc/sys/net/mptcp/pm_type" dev="proc" ino=14054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[  138.743853][ T6874] vhci_hcd: connection closed
[  138.759890][ T6871] vhci_hcd: connection closed
[  138.761188][ T5626] vhci_hcd vhci_hcd.1: stop threads
[  138.761211][ T5626] vhci_hcd vhci_hcd.1: release socket
[  138.761228][ T5626] vhci_hcd vhci_hcd.1: disconnect device
[  138.763183][ T5626] vhci_hcd vhci_hcd.1: stop threads
[  138.763198][ T5626] vhci_hcd vhci_hcd.1: release socket
[  138.763212][ T5626] vhci_hcd vhci_hcd.1: disconnect device
[  138.880969][ T1049] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  138.885840][ T1049] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  138.885883][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  138.885903][ T1049] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  138.885921][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  138.885939][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  138.892597][ T1049] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  138.892646][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  138.892669][ T1049] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  138.892688][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  138.892708][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  138.903284][ T1049] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  138.903326][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  138.903344][ T1049] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  138.903363][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  138.903380][ T1049] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  138.907653][ T1049] usb 8-1: string descriptor 0 read error: -22
[  138.907767][ T1049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.968445][ T1049] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  139.251631][ T6877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  139.339279][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.341033][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.369641][  T860] usb 8-1: USB disconnect, device number 3
[  139.427805][ T6878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  139.643478][ T6889] kernel read not supported for file /policy (pid: 6889 comm: syz.1.236)
[  139.700797][ T1450] ieee802154 phy0 wpan0: encryption failed: -22
[  139.700852][ T1450] ieee802154 phy1 wpan1: encryption failed: -22
[  140.227123][ T6905] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  140.286295][ T6905] FAULT_INJECTION: forcing a failure.
[  140.286295][ T6905] name failslab, interval 1, probability 0, space 0, times 0
[  140.286328][ T6905] CPU: 2 UID: 0 PID: 6905 Comm: syz.1.241 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  140.286354][ T6905] Tainted: [L]=SOFTLOCKUP
[  140.286360][ T6905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  140.286404][ T6905] Call Trace:
[  140.286416][ T6905]  <TASK>
[  140.286424][ T6905]  dump_stack_lvl+0x100/0x190
[  140.286516][ T6905]  should_fail_ex.cold+0x5/0xa
[  140.286567][ T6905]  should_failslab+0xc2/0x120
[  140.286602][ T6905]  __kmalloc_noprof+0xfc/0x840
[  140.286628][ T6905]  ? trace_kmalloc+0xeb/0x110
[  140.286649][ T6905]  ? lsm_blob_alloc+0x68/0x90
[  140.286710][ T6905]  lsm_blob_alloc+0x68/0x90
[  140.286756][ T6905]  security_sk_alloc+0x2d/0x290
[  140.286784][ T6905]  sk_prot_alloc+0x12a/0x2a0
[  140.286818][ T6905]  sk_alloc+0x36/0xe80
[  140.286837][ T6905]  __netlink_create+0x5e/0x2c0
[  140.286856][ T6905]  __netlink_kernel_create+0xed/0x750
[  140.286876][ T6905]  ? audit_net_init+0xc7/0x440
[  140.286932][ T6905]  ? __pfx___netlink_kernel_create+0x10/0x10
[  140.286956][ T6905]  ? find_held_lock+0x2b/0x80
[  140.286986][ T6905]  ? audit_net_init+0x190/0x440
[  140.287010][ T6905]  ? audit_net_init+0x190/0x440
[  140.287038][ T6905]  audit_net_init+0x1ae/0x440
[  140.287062][ T6905]  ? __pfx_audit_net_init+0x10/0x10
[  140.287087][ T6905]  ? trace_kmalloc+0xeb/0x110
[  140.287108][ T6905]  ? __kasan_kmalloc+0xaa/0xb0
[  140.287129][ T6905]  ? __pfx_audit_receive+0x10/0x10
[  140.287156][ T6905]  ? __pfx_audit_multicast_bind+0x10/0x10
[  140.287182][ T6905]  ? __pfx_audit_multicast_unbind+0x10/0x10
[  140.287210][ T6905]  ? __pfx_audit_net_init+0x10/0x10
[  140.287231][ T6905]  ops_init+0x1e2/0x5f0
[  140.287257][ T6905]  setup_net+0x117/0x3a0
[  140.287276][ T6905]  ? __pfx_setup_net+0x10/0x10
[  140.287298][ T6905]  ? bpf_lsm_namespace_init+0x9/0x10
[  140.287332][ T6905]  copy_net_ns+0x343/0x7a0
[  140.287355][ T6905]  create_new_namespaces+0x3ea/0xac0
[  140.287401][ T6905]  unshare_nsproxy_namespaces+0xf6/0x210
[  140.287427][ T6905]  ksys_unshare+0x44f/0x980
[  140.296903][ T6905]  ? __pfx_ksys_unshare+0x10/0x10
[  140.296961][ T6905]  __x64_sys_unshare+0x31/0x40
[  140.296987][ T6905]  do_syscall_64+0x123/0x7b0
[  140.297027][ T6905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.297048][ T6905] RIP: 0033:0x7f4916ba94d9
[  140.297080][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.297098][ T6905] RSP: 002b:00007f49179a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  140.297120][ T6905] RAX: ffffffffffffffda RBX: 00007f4916e25fa0 RCX: 00007f4916ba94d9
[  140.297133][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[  140.297144][ T6905] RBP: 00007f4916c3804e R08: 0000000000000000 R09: 0000000000000000
[  140.297155][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.297164][ T6905] R13: 00007f4916e26038 R14: 00007f4916e25fa0 R15: 00007ffe9965d4f8
[  140.297190][ T6905]  </TASK>
[  140.646878][ T1360] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  140.678027][ T6915] capability: warning: `syz.0.244' uses deprecated v2 capabilities in a way that may be insecure
[  140.816807][ T1360] usb 7-1: Using ep0 maxpacket: 32
[  140.818912][ T1360] usb 7-1: unable to get BOS descriptor or descriptor too short
[  140.818948][ T1360] usb 7-1: New USB device found: idVendor=0694, idProduct=6701, bcdDevice=53.80
[  140.819913][ T1360] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  140.819932][ T1360] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  140.819944][ T1360] usb 7-1: config 14 has no interface number 0
[  140.819955][ T1360] usb 7-1: config 14 has no interface number 1
[  140.819999][ T1360] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  140.820015][ T1360] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  140.820032][ T1360] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  140.820050][ T1360] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  140.820069][ T1360] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  140.820088][ T1360] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  140.820108][ T1360] usb 7-1: config 14 interface 57 has no altsetting 0
[  140.820122][ T1360] usb 7-1: config 14 interface 228 has no altsetting 0
[  140.822141][ T1360] usb 7-1: New USB device strings: Mfr=121, Product=2, SerialNumber=3
[  140.822160][ T1360] usb 7-1: Product: syz
[  140.822171][ T1360] usb 7-1: Manufacturer: syz
[  140.822182][ T1360] usb 7-1: SerialNumber: syz
[  141.172781][   T68] Bluetooth: hci2: link tx timeout
[  141.172800][   T68] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.175074][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[  141.207853][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[  141.241745][ T6880] adutux: adu_open - error, can't find device for minor 0
[  141.547516][ T6908] EXT4-fs (loop2): unable to read superblock
[  141.565001][ T6908] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  141.624287][ T6936] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  141.733541][ T1360] usb 7-1: USB disconnect, device number 2
[  141.802924][ T6940] process 'syz.0.251' launched './file0' with NULL argv: empty string added
[  142.252291][   T44] kauditd_printk_skb: 236 callbacks suppressed
[  142.252314][   T44] audit: type=1400 audit(1794509402.713:868): avc:  denied  { mounton } for  pid=6953 comm="syz.0.254" path="/60/file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  142.286817][   T44] audit: type=1800 audit(1794509402.733:869): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143199 res=0 errno=-22
[  142.340387][   T44] audit: type=1400 audit(1794509402.813:870): avc:  denied  { bind } for  pid=6953 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  142.342747][   T44] audit: type=1400 audit(1794509402.813:871): avc:  denied  { name_bind } for  pid=6953 comm="syz.0.254" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  142.366196][   T44] audit: type=1400 audit(1794509402.823:872): avc:  denied  { node_bind } for  pid=6953 comm="syz.0.254" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  142.616864][   T44] audit: type=1800 audit(1794509403.083:873): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143295 res=0 errno=-22
[  142.626976][   T44] audit: type=1800 audit(1794509403.093:874): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143305 res=0 errno=-22
[  142.658950][   T44] audit: type=1400 audit(1794509403.133:875): avc:  denied  { create } for  pid=6966 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  142.716562][ T6971] batman_adv: batadv0: Adding interface: virt_wifi0
[  142.716578][ T6971] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  142.716597][ T6971] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  142.908648][   T44] audit: type=1804 audit(1794509403.373:876): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.261" name="/newroot/66/file1" dev="tmpfs" ino=391 res=1 errno=0
[  143.098427][   T44] audit: type=1400 audit(1794509403.543:877): avc:  denied  { write } for  pid=6991 comm="syz.3.263" name="nullb" dev="configfs" ino=5907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  143.195687][ T6999] netlink: 14 bytes leftover after parsing attributes in process `syz.1.265'.
[  143.219546][ T5805] Bluetooth: hci2: command 0x0406 tx timeout
[  143.355139][ T6992] null_blk: disk my_nullb created
[  143.474353][ T5934] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  143.637190][   T68] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  143.637463][   T68] Bluetooth: hci2: Injecting HCI hardware error event
[  143.643746][   T68] Bluetooth: hci2: hardware error 0x00
[  143.668128][ T5934] usb 5-1: Using ep0 maxpacket: 8
[  143.669221][ T5934] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  143.671020][ T5934] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  143.671045][ T5934] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  143.671080][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  143.671114][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.747236][ T5934] usbtmc 5-1:16.0: bulk endpoints not found
[  143.985896][ T7015] IPVS: Error connecting to the multicast addr
[  144.353582][ T7026] kvm [7025]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff
[  144.546608][ T7030] xt_nat: multiple ranges no longer supported
[  144.592176][ T7030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49117 sclass=netlink_route_socket pid=7030 comm=syz.2.275
[  144.592954][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'.
[  144.925862][ T7037] netlink: 14 bytes leftover after parsing attributes in process `syz.1.279'.
[  145.631468][ T7037] FAULT_INJECTION: forcing a failure.
[  145.631468][ T7037] name fail_futex, interval 1, probability 0, space 0, times 1
[  145.631500][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz.1.279 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.631520][ T7037] Tainted: [L]=SOFTLOCKUP
[  145.631525][ T7037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.631534][ T7037] Call Trace:
[  145.631539][ T7037]  <TASK>
[  145.631546][ T7037]  dump_stack_lvl+0x100/0x190
[  145.631575][ T7037]  should_fail_ex.cold+0x5/0xa
[  145.631597][ T7037]  get_futex_key+0x1c9/0x13e0
[  145.631616][ T7037]  ? __pfx_get_futex_key+0x10/0x10
[  145.631630][ T7037]  ? __mutex_unlock_slowpath+0x35d/0x930
[  145.631652][ T7037]  futex_wake+0xf4/0x5e0
[  145.631671][ T7037]  ? __pfx_futex_wake+0x10/0x10
[  145.631692][ T7037]  ? lock_acquire+0x1d1/0x380
[  145.631724][ T7037]  ? detach_task_ctx_data+0x83/0x490
[  145.631761][ T7037]  do_futex+0x2b2/0x440
[  145.631778][ T7037]  ? __pfx_do_futex+0x10/0x10
[  145.631793][ T7037]  ? __might_fault+0xc5/0x140
[  145.631823][ T7037]  mm_exit_exec_release+0x256/0x2f0
[  145.631844][ T7037]  do_exit+0x6d8/0x2a00
[  145.631862][ T7037]  ? __pfx___might_resched+0x10/0x10
[  145.631883][ T7037]  ? __pfx_do_exit+0x10/0x10
[  145.631902][ T7037]  ? do_raw_spin_lock+0x128/0x260
[  145.631915][ T7037]  ? find_held_lock+0x2b/0x80
[  145.631929][ T7037]  ? get_signal+0xa28/0x22e0
[  145.631949][ T7037]  do_group_exit+0xd5/0x2a0
[  145.631969][ T7037]  get_signal+0x1f58/0x22e0
[  145.631993][ T7037]  ? __pfx_get_signal+0x10/0x10
[  145.632009][ T7037]  ? lock_acquire+0x1d1/0x380
[  145.632026][ T7037]  ? percpu_ref_put_many.constprop.0+0x23/0x2a0
[  145.632060][ T7037]  ? find_held_lock+0x2b/0x80
[  145.632078][ T7037]  arch_do_signal_or_restart+0x91/0x7e0
[  145.632096][ T7037]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  145.632122][ T7037]  exit_to_user_mode_loop+0x139/0x700
[  145.632137][ T7037]  ? rcu_is_watching+0x13/0xc0
[  145.632156][ T7037]  do_syscall_64+0x661/0x7b0
[  145.632173][ T7037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.632187][ T7037] RIP: 0033:0x7f4916ba94d9
[  145.632199][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.632211][ T7037] RSP: 002b:00007f49179a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  145.632226][ T7037] RAX: 0000000000000001 RBX: 00007f4916e25fa0 RCX: 00007f4916ba94d9
[  145.632234][ T7037] RDX: 0000200000000540 RSI: 0000000000000001 RDI: 00007f4917960000
[  145.632242][ T7037] RBP: 00007f4916c3804e R08: 0000000000000000 R09: 0000000000000000
[  145.632251][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.632259][ T7037] R13: 00007f4916e26038 R14: 00007f4916e25fa0 R15: 00007ffe9965d4f8
[  145.632277][ T7037]  </TASK>
[  145.671381][ T5805] Bluetooth: hci3: link tx timeout
[  145.905472][ T5805] Bluetooth: hci3: link tx timeout
[  145.923156][   T68] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  146.118923][ T7078] ufs: You didn't specify the type of your ufs filesystem
[  146.118923][ T7078] 
[  146.118923][ T7078] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  146.118923][ T7078] 
[  146.118923][ T7078] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  146.118955][ T7078] ufs: failed to set blocksize
[  146.172172][ T7082] xt_socket: unknown flags 0x4
[  146.199496][ T7082] program syz.1.288 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  146.219159][ T7082] netlink: 72 bytes leftover after parsing attributes in process `syz.1.288'.
[  146.251860][ T7083] FAULT_INJECTION: forcing a failure.
[  146.251860][ T7083] name failslab, interval 1, probability 0, space 0, times 0
[  146.251893][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.2.287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.251918][ T7083] Tainted: [L]=SOFTLOCKUP
[  146.251925][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.253482][ T7083] Call Trace:
[  146.253490][ T7083]  <TASK>
[  146.253500][ T7083]  dump_stack_lvl+0x100/0x190
[  146.253535][ T7083]  should_fail_ex.cold+0x5/0xa
[  146.253561][ T7083]  should_failslab+0xc2/0x120
[  146.253582][ T7083]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  146.253609][ T7083]  ? __d_alloc+0x34/0xad0
[  146.253653][ T7083]  __d_alloc+0x34/0xad0
[  146.253674][ T7083]  d_alloc+0x4a/0x1e0
[  146.253695][ T7083]  lookup_one_qstr_excl+0x171/0x250
[  146.253732][ T7083]  start_dirop+0x59/0xb0
[  146.253751][ T7083]  simple_start_creating+0xf9/0x110
[  146.253771][ T7083]  ? __pfx_simple_start_creating+0x10/0x10
[  146.253790][ T7083]  ? do_raw_spin_unlock+0x145/0x1e0
[  146.253805][ T7083]  ? mntput+0x70/0xa0
[  146.253825][ T7083]  debugfs_start_creating.part.0+0x7b/0x150
[  146.253860][ T7083]  __debugfs_create_file+0xa9/0x500
[  146.253877][ T7083]  ? dentry_kill+0xc31/0xca0
[  146.253895][ T7083]  debugfs_create_file_short+0x41/0x60
[  146.253916][ T7083]  ieee80211_debugfs_recreate_netdev+0x566/0x1790
[  146.253941][ T7083]  ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10
[  146.253961][ T7083]  ? ieee80211_link_setup+0x68/0xa0
[  146.253982][ T7083]  ? ieee80211_setup_sdata+0x620/0xdc0
[  146.254003][ T7083]  ieee80211_if_change_type+0x5c8/0x790
[  146.254027][ T7083]  ieee80211_change_iface+0xad/0x920
[  146.254049][ T7083]  ? cfg80211_mlme_purge_registrations+0x1eb/0x2b0
[  146.254077][ T7083]  cfg80211_change_iface+0x569/0xdf0
[  146.254096][ T7083]  nl80211_set_interface+0x875/0xc80
[  146.254117][ T7083]  ? __pfx_nl80211_set_interface+0x10/0x10
[  146.254137][ T7083]  ? nl80211_pre_doit+0x570/0x1ed0
[  146.254158][ T7083]  genl_family_rcv_msg_doit+0x214/0x300
[  146.254182][ T7083]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  146.254212][ T7083]  ? bpf_lsm_capable+0x9/0x10
[  146.254229][ T7083]  ? security_capable+0x80/0x260
[  146.254250][ T7083]  ? ns_capable+0xcd/0xf0
[  146.254268][ T7083]  genl_rcv_msg+0x560/0x800
[  146.254289][ T7083]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.254308][ T7083]  ? __lock_acquire+0x5c0/0x1f40
[  146.254325][ T7083]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  146.254341][ T7083]  ? __pfx_nl80211_set_interface+0x10/0x10
[  146.254356][ T7083]  ? __pfx_nl80211_post_doit+0x10/0x10
[  146.254378][ T7083]  netlink_rcv_skb+0x159/0x420
[  146.254396][ T7083]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.254429][ T7083]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  146.258817][ T7083]  ? netlink_deliver_tap+0x1ae/0xb50
[  146.258845][ T7083]  genl_rcv+0x28/0x40
[  146.258866][ T7083]  netlink_unicast+0x668/0x950
[  146.258893][ T7083]  ? __pfx_netlink_unicast+0x10/0x10
[  146.258932][ T7083]  netlink_sendmsg+0x9ac/0x10c0
[  146.258964][ T7083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.258997][ T7083]  ? selinux_socket_sendmsg+0x198/0x2f0
[  146.259029][ T7083]  ? ____sys_sendmsg+0xa99/0xc30
[  146.259056][ T7083]  ____sys_sendmsg+0xa99/0xc30
[  146.259081][ T7083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.259108][ T7083]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.259149][ T7083]  ___sys_sendmsg+0x190/0x1e0
[  146.259179][ T7083]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.259208][ T7083]  ? futex_wait+0x11e/0x370
[  146.259245][ T7083]  ? find_held_lock+0x2b/0x80
[  146.259285][ T7083]  __sys_sendmsg+0x160/0x210
[  146.259309][ T7083]  ? __pfx___sys_sendmsg+0x10/0x10
[  146.259348][ T7083]  do_syscall_64+0x123/0x7b0
[  146.259375][ T7083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.259395][ T7083] RIP: 0033:0x7ff9d67a94d9
[  146.259415][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.259455][ T7083] RSP: 002b:00007ff9d76bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.259476][ T7083] RAX: ffffffffffffffda RBX: 00007ff9d6a25fa0 RCX: 00007ff9d67a94d9
[  146.259489][ T7083] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  146.259503][ T7083] RBP: 00007ff9d683804e R08: 0000000000000000 R09: 0000000000000000
[  146.259516][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.259529][ T7083] R13: 00007ff9d6a26038 R14: 00007ff9d6a25fa0 R15: 00007ffdf09666a8
[  146.259560][ T7083]  </TASK>
[  146.269287][ T3422] usb 5-1: USB disconnect, device number 3
[  146.336135][ T7088] netlink: 'syz.3.289': attribute type 16 has an invalid length.
[  146.336157][ T7088] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.289'.
[  146.396907][   T68] Bluetooth: hci3: link tx timeout
[  146.425512][ T7086] team0 (unregistering): Port device team_slave_0 removed
[  146.464235][ T7086] team0 (unregistering): Port device team_slave_1 removed
[  146.504813][   T68] Bluetooth: hci3: link tx timeout
[  146.673427][ T7112] netlink: 14 bytes leftover after parsing attributes in process `syz.2.293'.
[  147.107028][   T11] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  147.197627][ T7126] SELinux:  policydb version 1309260156 does not match my version range 15-35
[  147.197877][ T7126] SELinux: failed to load policy
[  147.249697][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'.
[  147.314946][   T11] usb 7-1: Using ep0 maxpacket: 8
[  147.327541][   T11] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  147.333054][   T11] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  147.333081][   T11] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  147.333099][   T11] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  147.333113][   T11] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.333141][   T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.366865][   T44] kauditd_printk_skb: 57 callbacks suppressed
[  147.366883][   T44] audit: type=1800 audit(1794509407.833:935): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144229 res=0 errno=-22
[  147.367970][   T44] audit: type=1800 audit(1794509407.843:936): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144258 res=0 errno=-22
[  147.394078][   T44] audit: type=1800 audit(1794509407.843:937): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144236 res=0 errno=-22
[  147.394131][   T44] audit: type=1800 audit(1794509407.853:938): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=144237 res=0 errno=-22
[  147.394163][   T44] audit: type=1800 audit(1794509407.853:939): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=144238 res=0 errno=-22
[  147.416247][   T44] audit: type=1800 audit(1794509407.883:940): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144278 res=0 errno=-22
[  147.502786][ T7142] nvme_fabrics: missing parameter 'nqn=%s'
[  147.526760][   T68] Bluetooth: hci3: link tx timeout
[  147.616206][   T11] usb 7-1: GET_CAPABILITIES returned 0
[  147.616248][   T11] usbtmc 7-1:16.0: can't read capabilities
[  147.620260][   T44] audit: type=1800 audit(1794509408.093:941): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144303 res=0 errno=-22
[  147.630393][   T68] Bluetooth: hci3: link tx timeout
[  147.704927][ T1360] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  147.798782][   T68] Bluetooth: hci3: link tx timeout
[  147.867476][ T1360] usb 8-1: Using ep0 maxpacket: 8
[  147.868273][ T1360] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  147.869628][ T1360] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  147.869668][ T1360] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.869683][ T1360] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  147.869701][ T1360] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  147.869718][ T1360] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.869748][ T1360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.874973][   T44] audit: type=1800 audit(1794509408.343:942): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144370 res=0 errno=-22
[  147.883630][   T44] audit: type=1800 audit(1794509408.353:943): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144399 res=0 errno=-22
[  147.883687][   T44] audit: type=1800 audit(1794509408.353:944): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144377 res=0 errno=-22
[  148.038354][ T7150] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[  148.039748][ T7150] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[  148.045768][ T7150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7150 comm=syz.0.306
[  148.089148][ T1360] usb 8-1: GET_CAPABILITIES returned 0
[  148.089188][ T1360] usbtmc 8-1:16.0: can't read capabilities
[  148.263127][ T7155] syz_tun: entered allmulticast mode
[  148.422425][ T7161] Bluetooth: MGMT ver 1.23
[  148.857102][   T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  149.017302][   T35] usb 6-1: Using ep0 maxpacket: 8
[  149.018220][   T35] usb 6-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  149.018912][   T35] usb 6-1: config 0 has no interfaces?
[  149.021970][   T11] usb 8-1: USB disconnect, device number 4
[  149.026306][   T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.026331][   T35] usb 6-1: Product: syz
[  149.026343][   T35] usb 6-1: Manufacturer: syz
[  149.026355][   T35] usb 6-1: SerialNumber: syz
[  149.112423][   T35] usb 6-1: config 0 descriptor??
[  149.319279][ T7161] xt_hl: Unknown TTL match mode: 255
[  149.523817][   T11] usb 6-1: USB disconnect, device number 6
[  149.753933][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'.
[  149.866073][   T11] usb 7-1: USB disconnect, device number 3
[  150.143402][ T7197] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  150.240594][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'.
[  150.257108][ T7203] MTRR 1 not used
[  150.281209][ T7203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'.
[  150.281241][ T7203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'.
[  150.302386][ T7196] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  150.547622][ T7209] device-mapper: ioctl: The device has no table.
[  150.580600][ T7215] i2c i2c-0: new_device: Missing parameters
[  150.580676][ T7215] i2c i2c-0: new_device: Missing parameters
[  150.614921][   T68] Bluetooth: hci3: link tx timeout
[  151.226824][ T7253] x_tables: duplicate underflow at hook 2
[  151.364345][   T68] Bluetooth: hci3: link tx timeout
[  151.418909][ T7253] bridge0: port 3(vlan2) entered disabled state
[  151.419245][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.419953][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.733514][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.752391][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.775915][   T68] Bluetooth: hci3: link tx timeout
[  152.237055][ T7287] mmap: syz.0.333 (7287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.260020][ T7253] ipvtap1: left promiscuous mode
[  152.260044][ T7253] ipvtap1: left allmulticast mode
[  152.260056][ T7253] bridge0: left allmulticast mode
[  152.295264][ T5878] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.295314][ T5878] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.295343][ T5878] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.295370][ T5878] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.429189][   T44] kauditd_printk_skb: 53 callbacks suppressed
[  152.429218][   T44] audit: type=1400 audit(1794509412.903:998): avc:  denied  { unmount } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  152.467979][ T7294] rxe_eth0 speed is unknown, defaulting to 1000
[  152.468999][   T44] audit: type=1400 audit(1794509412.943:999): avc:  denied  { bind } for  pid=7293 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  152.517703][   T44] audit: type=1400 audit(1794509412.993:1000): avc:  denied  { create } for  pid=7295 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  152.523083][   T44] audit: type=1400 audit(1794509412.993:1001): avc:  denied  { bind } for  pid=7295 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  152.553028][ T7296] ipt_rpfilter: unknown options
[  152.563592][ T7296] FAULT_INJECTION: forcing a failure.
[  152.563592][ T7296] name failslab, interval 1, probability 0, space 0, times 0
[  152.563665][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.0.337 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.563693][ T7296] Tainted: [L]=SOFTLOCKUP
[  152.563698][ T7296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  152.563719][ T7296] Call Trace:
[  152.563732][ T7296]  <TASK>
[  152.563740][ T7296]  dump_stack_lvl+0x100/0x190
[  152.563850][ T7296]  should_fail_ex.cold+0x5/0xa
[  152.563888][ T7296]  should_failslab+0xc2/0x120
[  152.563930][ T7296]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  152.563970][ T7296]  ? __d_alloc+0x34/0xad0
[  152.564011][ T7296]  __d_alloc+0x34/0xad0
[  152.564041][ T7296]  d_alloc+0x4a/0x1e0
[  152.564070][ T7296]  lookup_one_qstr_excl+0x171/0x250
[  152.564112][ T7296]  start_dirop+0x59/0xb0
[  152.564136][ T7296]  simple_start_creating+0xf9/0x110
[  152.564163][ T7296]  ? __pfx_simple_start_creating+0x10/0x10
[  152.564187][ T7296]  ? do_raw_spin_unlock+0x145/0x1e0
[  152.564224][ T7296]  ? mntput+0x70/0xa0
[  152.564251][ T7296]  debugfs_start_creating.part.0+0x7b/0x150
[  152.564289][ T7296]  __debugfs_create_file+0xa9/0x500
[  152.564312][ T7296]  ? dentry_kill+0xc31/0xca0
[  152.564336][ T7296]  debugfs_create_file_full+0x41/0x60
[  152.564363][ T7296]  bdi_register_va+0x343/0x820
[  152.564400][ T7296]  ? __pfx_bdi_register_va+0x10/0x10
[  152.564424][ T7296]  ? lockdep_init_map_type+0x5c/0x250
[  152.564462][ T7296]  ? bdi_init+0x3f4/0x5b0
[  152.564489][ T7296]  super_setup_bdi_name+0xff/0x250
[  152.564520][ T7296]  ? __pfx_super_setup_bdi_name+0x10/0x10
[  152.564554][ T7296]  ? lockdep_init_map_type+0x5c/0x250
[  152.564585][ T7296]  ? fuse_vdax_conn_alloc+0x5b9/0x7f0
[  152.564631][ T7296]  fuse_fill_super_common+0x601/0x1010
[  152.564654][ T7296]  ? __pfx_fuse_fill_super_common+0x10/0x10
[  152.564677][ T7296]  ? __pfx_set_anon_super_fc+0x10/0x10
[  152.564709][ T7296]  ? __pfx_sget_fc+0x10/0x10
[  152.564733][ T7296]  ? lockdep_init_map_type+0x5c/0x250
[  152.564763][ T7296]  ? __raw_spin_lock_init+0x3a/0x110
[  152.564785][ T7296]  ? __pfx_fuse_fill_super+0x10/0x10
[  152.564804][ T7296]  fuse_fill_super+0x100/0x1a0
[  152.564824][ T7296]  get_tree_nodev+0xe3/0x190
[  152.564846][ T7296]  fuse_get_tree+0x314/0x490
[  152.564865][ T7296]  vfs_get_tree+0x92/0x320
[  152.564894][ T7296]  path_mount+0x7d0/0x2850
[  152.564934][ T7296]  ? __pfx_path_mount+0x10/0x10
[  152.564963][ T7296]  ? lockdep_hardirqs_on+0x7d/0x110
[  152.564996][ T7296]  ? putname+0xb1/0x110
[  152.565019][ T7296]  ? kmem_cache_free+0x127/0x6c0
[  152.565055][ T7296]  ? __x64_sys_mount+0x293/0x310
[  152.565082][ T7296]  __x64_sys_mount+0x293/0x310
[  152.565112][ T7296]  ? __pfx___x64_sys_mount+0x10/0x10
[  152.565149][ T7296]  do_syscall_64+0x123/0x7b0
[  152.565174][ T7296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.565196][ T7296] RIP: 0033:0x7fdbabfa94d9
[  152.565227][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.565246][ T7296] RSP: 002b:00007fdbacedd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  152.565268][ T7296] RAX: ffffffffffffffda RBX: 00007fdbac225fa0 RCX: 00007fdbabfa94d9
[  152.565281][ T7296] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000
[  152.565294][ T7296] RBP: 00007fdbac03804e R08: 0000200000000280 R09: 0000000000000000
[  152.565306][ T7296] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[  152.565319][ T7296] R13: 00007fdbac226038 R14: 00007fdbac225fa0 R15: 00007ffc6b7cd018
[  152.565348][ T7296]  </TASK>
[  152.588731][   T44] audit: type=1800 audit(1794509413.043:1002): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145166 res=0 errno=-22
[  152.671253][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.338'.
[  152.683571][   T44] audit: type=1400 audit(1794509413.133:1003): avc:  denied  { remount } for  pid=7297 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  152.934923][   T44] audit: type=1400 audit(1794509413.403:1004): avc:  denied  { name_bind } for  pid=7302 comm="syz.0.340" src=28195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  153.001845][ T7307] ip_tables: iptables: counters copy to user failed while replacing table
[  153.002500][   T44] audit: type=1400 audit(1794509413.473:1005): avc:  denied  { setopt } for  pid=7305 comm="syz.3.342" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  153.002920][   T44] audit: type=1400 audit(1794509413.473:1006): avc:  denied  { write } for  pid=7305 comm="syz.3.342" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  153.084709][ T7307] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  153.109530][   T68] Bluetooth: hci3: link tx timeout
[  153.168530][   T44] audit: type=1400 audit(1794509413.633:1007): avc:  denied  { mount } for  pid=7315 comm="syz.1.344" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  153.715717][ T7327] netlink: 'syz.3.348': attribute type 4 has an invalid length.
[  153.715740][ T7327] netlink: 'syz.3.348': attribute type 10 has an invalid length.
[  153.715749][ T7327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.348'.
[  153.745736][ T7327] bond0: (slave tunl0): refused to change device type
[  153.745761][ T7327] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  153.820954][ T7330] xt_cluster: node mask cannot exceed total number of nodes
[  154.232168][   T68] Bluetooth: hci3: link tx timeout
[  154.234117][ T7350] netlink: 96 bytes leftover after parsing attributes in process `syz.0.353'.
[  154.236513][ T7348] ip_tables: iptables: counters copy to user failed while replacing table
[  154.240992][ T7350] fuse: Bad value for 'fd'
[  154.285786][ T7348] ip_tables: iptables: counters copy to user failed while replacing table
[  154.307878][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'.
[  154.313229][ T7349] syzkaller0: entered promiscuous mode
[  154.313251][ T7349] syzkaller0: entered allmulticast mode
[  154.750081][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.797928][ T7360] loop6: detected capacity change from 0 to 7
[  154.799740][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799783][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799814][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799839][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799899][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799946][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799972][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.799987][ T7360] ldm_validate_partition_table(): Disk read failed.
[  154.800009][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.800031][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.800053][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read
[  154.800077][ T7360] Dev loop6: unable to read RDB block 0
[  154.800122][ T7360]  loop6: unable to read partition table
[  154.800312][ T7360] loop6: partition table beyond EOD, truncated
[  154.800329][ T7360] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  154.837156][ T7362] bridge: RTM_NEWNEIGH with invalid ether address
[  154.854475][ T7364] pim6reg: entered allmulticast mode
[  154.858873][ T7364] overlay: Unknown parameter 'fowner>00000000000000000000'
[  154.965033][ T7370] pim6reg: left allmulticast mode
[  155.032229][ T7366] nvme nvme0: failed to connect socket: -101
[  155.333665][ T7377] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  155.349473][ T7378] program syz.2.362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.742422][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[  155.758679][   T68] Bluetooth: hci3: link tx timeout
[  156.239190][   T68] Bluetooth: hci3: link tx timeout
[  156.301871][ T7426] netlink: 72 bytes leftover after parsing attributes in process `syz.2.374'.
[  156.590293][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'.
[  156.790300][ T7448] xt_hashlimit: size too large, truncated to 1048576
[  157.595133][   T44] kauditd_printk_skb: 34 callbacks suppressed
[  157.595172][   T44] audit: type=1400 audit(1794509418.063:1042): avc:  denied  { write } for  pid=7465 comm="syz.0.383" path="socket:[18938]" dev="sockfs" ino=18938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  157.835116][   T68] Bluetooth: hci3: link tx timeout
[  157.874051][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'.
[  157.910782][ T7482] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  157.917275][   T44] audit: type=1400 audit(1794509418.383:1043): avc:  denied  { read } for  pid=7469 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  158.153160][   T44] audit: type=1400 audit(1794509418.623:1044): avc:  denied  { write } for  pid=7488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.209994][ T7492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7492 comm=syz.1.389
[  158.271999][   T44] audit: type=1400 audit(1794509418.733:1045): avc:  denied  { audit_control } for  pid=7491 comm="syz.1.389" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  158.324214][   T44] audit: type=1400 audit(1794509418.763:1046): avc:  denied  { checkpoint_restore } for  pid=7496 comm="syz.2.390" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  158.443182][   T44] audit: type=1400 audit(1794509418.913:1047): avc:  denied  { write } for  pid=7498 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.638139][   T68] Bluetooth: hci3: link tx timeout
[  158.840027][ T7517] fuse: Bad value for 'fd'
[  158.856546][   T44] audit: type=1400 audit(1794509419.313:1048): avc:  denied  { mount } for  pid=7518 comm="syz.2.395" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  159.244285][   T44] audit: type=1400 audit(1794509419.713:1049): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  159.273881][ T7534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.397'.
[  159.311747][ T7537] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  159.314280][   T44] audit: type=1800 audit(1794509419.783:1050): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145524 res=0 errno=-22
[  159.530818][ T7543] FAULT_INJECTION: forcing a failure.
[  159.530818][ T7543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.530879][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.0.400 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.530905][ T7543] Tainted: [L]=SOFTLOCKUP
[  159.530913][ T7543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.530945][ T7543] Call Trace:
[  159.530960][ T7543]  <TASK>
[  159.530970][ T7543]  dump_stack_lvl+0x100/0x190
[  159.531074][ T7543]  should_fail_ex.cold+0x5/0xa
[  159.531121][ T7543]  _copy_from_iter+0x1f4/0x16c0
[  159.531167][ T7543]  ? __asan_memset+0x23/0x50
[  159.531210][ T7543]  ? __pfx__copy_from_iter+0x10/0x10
[  159.531237][ T7543]  ? __pfx___alloc_skb+0x10/0x10
[  159.531285][ T7543]  netlink_sendmsg+0x8f5/0x10c0
[  159.531318][ T7543]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.531348][ T7543]  ? selinux_socket_sendmsg+0x198/0x2f0
[  159.531394][ T7543]  ? ____sys_sendmsg+0xa99/0xc30
[  159.531424][ T7543]  ____sys_sendmsg+0xa99/0xc30
[  159.531454][ T7543]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.531484][ T7543]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.531520][ T7543]  ? lock_acquire+0x1d1/0x380
[  159.531579][ T7543]  ? get_pid_task+0x2a/0x250
[  159.531610][ T7543]  ___sys_sendmsg+0x190/0x1e0
[  159.531638][ T7543]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.531668][ T7543]  ? get_pid_task+0x106/0x250
[  159.531698][ T7543]  ? find_held_lock+0x2b/0x80
[  159.531741][ T7543]  __sys_sendmsg+0x160/0x210
[  159.531766][ T7543]  ? __pfx___sys_sendmsg+0x10/0x10
[  159.531804][ T7543]  do_syscall_64+0x123/0x7b0
[  159.531838][ T7543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.531865][ T7543] RIP: 0033:0x7fdbabfa94d9
[  159.531895][ T7543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.531936][ T7543] RSP: 002b:00007fdbacebc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.531957][ T7543] RAX: ffffffffffffffda RBX: 00007fdbac226090 RCX: 00007fdbabfa94d9
[  159.531972][ T7543] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000007
[  159.531984][ T7543] RBP: 00007fdbacebc090 R08: 0000000000000000 R09: 0000000000000000
[  159.531996][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.532008][ T7543] R13: 00007fdbac226128 R14: 00007fdbac226090 R15: 00007ffc6b7cd018
[  159.532039][ T7543]  </TASK>
[  159.610565][ T7545] FAULT_INJECTION: forcing a failure.
[  159.610565][ T7545] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  159.610600][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.2.401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.610838][ T7545] Tainted: [L]=SOFTLOCKUP
[  159.610845][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.610855][ T7545] Call Trace:
[  159.610863][ T7545]  <TASK>
[  159.610871][ T7545]  dump_stack_lvl+0x100/0x190
[  159.610981][ T7545]  should_fail_ex.cold+0x5/0xa
[  159.611012][ T7545]  should_fail_alloc_page+0xeb/0x140
[  159.611105][ T7545]  prepare_alloc_pages+0x1f0/0x5b0
[  159.611215][ T7545]  __alloc_frozen_pages_noprof+0x1b9/0x31e0
[  159.611256][ T7545]  ? reacquire_held_locks+0xdd/0x1f0
[  159.611320][ T7545]  ? folio_lock_anon_vma_read+0x348/0xe30
[  159.611383][ T7545]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  159.611412][ T7545]  ? rcu_is_watching+0x13/0xc0
[  159.611516][ T7545]  ? __up_read+0x333/0x980
[  159.611536][ T7545]  ? __pfx___up_read+0x10/0x10
[  159.611549][ T7545]  ? rmap_walk_anon+0x6f1/0x9a0
[  159.611568][ T7545]  ? rmap_walk_anon+0x6f1/0x9a0
[  159.611677][ T7545]  __folio_alloc_noprof+0x16/0x260
[  159.611704][ T7545]  alloc_migration_target+0x1d7/0x6d0
[  159.611799][ T7545]  migrate_pages_batch+0x5c2/0x4700
[  159.611826][ T7545]  ? __pfx_alloc_migration_target+0x10/0x10
[  159.611895][ T7545]  ? __pfx_migrate_pages_batch+0x10/0x10
[  159.611969][ T7545]  migrate_pages_sync+0x12c/0x880
[  159.612034][ T7545]  ? __pfx_alloc_migration_target+0x10/0x10
[  159.612128][ T7545]  ? vma_migratable+0x380/0x450
[  159.612157][ T7545]  ? __pfx_migrate_pages_sync+0x10/0x10
[  159.612179][ T7545]  ? __pfx_queue_pages_test_walk+0x10/0x10
[  159.612276][ T7545]  ? walk_page_range_mm_unsafe+0x32c/0xa10
[  159.612306][ T7545]  migrate_pages+0x1a79/0x2840
[  159.612405][ T7545]  ? __pfx_alloc_migration_target+0x10/0x10
[  159.612434][ T7545]  ? __pfx_migrate_pages+0x10/0x10
[  159.612527][ T7545]  ? queue_pages_range+0x11e/0x180
[  159.612547][ T7545]  ? rcu_is_watching+0x13/0xc0
[  159.612569][ T7545]  ? __up_read+0x333/0x980
[  159.612663][ T7545]  ? __pfx___up_read+0x10/0x10
[  159.612684][ T7545]  ? do_migrate_pages+0x451/0x740
[  159.612775][ T7545]  ? do_migrate_pages+0x451/0x740
[  159.612802][ T7545]  do_migrate_pages+0x488/0x740
[  159.612870][ T7545]  ? __pfx_do_migrate_pages+0x10/0x10
[  159.612895][ T7545]  ? lock_acquire+0x1d1/0x380
[  159.612956][ T7545]  ? rcu_is_watching+0x13/0xc0
[  159.612978][ T7545]  ? cap_capable+0x107/0x430
[  159.613002][ T7545]  ? get_task_mm+0xc2/0xf0
[  159.613025][ T7545]  ? security_capable+0xbd/0x260
[  159.613051][ T7545]  kernel_migrate_pages+0x560/0x700
[  159.613109][ T7545]  ? __pfx_kernel_migrate_pages+0x10/0x10
[  159.613133][ T7545]  ? xfd_validate_state+0x129/0x190
[  159.613200][ T7545]  __x64_sys_migrate_pages+0x96/0x100
[  159.613223][ T7545]  ? lockdep_hardirqs_on+0x7d/0x110
[  159.613300][ T7545]  do_syscall_64+0x123/0x7b0
[  159.613327][ T7545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.613386][ T7545] RIP: 0033:0x7ff9d67a94d9
[  159.613488][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.613564][ T7545] RSP: 002b:00007ff9d76bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[  159.613583][ T7545] RAX: ffffffffffffffda RBX: 00007ff9d6a25fa0 RCX: 00007ff9d67a94d9
[  159.613597][ T7545] RDX: 0000200000000200 RSI: 0000000000000005 RDI: 0000000000000000
[  159.613643][ T7545] RBP: 00007ff9d683804e R08: 0000000000000000 R09: 0000000000000000
[  159.613688][ T7545] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  159.613698][ T7545] R13: 00007ff9d6a26038 R14: 00007ff9d6a25fa0 R15: 00007ffdf09666a8
[  159.613724][ T7545]  </TASK>
[  159.744409][ T7550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.745540][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.403'.
[  159.794812][   T68] Bluetooth: hci3: link tx timeout
[  159.809464][   T44] audit: type=1400 audit(1794509420.273:1051): avc:  denied  { setopt } for  pid=7547 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  161.561490][ T7566] input: syz0 as /devices/virtual/input/input9
[  161.638897][ T7567] netlink: 14 bytes leftover after parsing attributes in process `syz.1.409'.
[  161.955840][ T7577] FAULT_INJECTION: forcing a failure.
[  161.955840][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.955873][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.3.411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  161.955897][ T7577] Tainted: [L]=SOFTLOCKUP
[  161.955903][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  161.955915][ T7577] Call Trace:
[  161.955921][ T7577]  <TASK>
[  161.955928][ T7577]  dump_stack_lvl+0x100/0x190
[  161.955962][ T7577]  should_fail_ex.cold+0x5/0xa
[  161.955991][ T7577]  _copy_from_iter+0x1f4/0x16c0
[  161.956017][ T7577]  ? __asan_memset+0x23/0x50
[  161.956040][ T7577]  ? __pfx__copy_from_iter+0x10/0x10
[  161.956060][ T7577]  ? __pfx___alloc_skb+0x10/0x10
[  161.956093][ T7577]  netlink_sendmsg+0x8f5/0x10c0
[  161.956122][ T7577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.956153][ T7577]  ? selinux_socket_sendmsg+0x198/0x2f0
[  161.956182][ T7577]  ? ____sys_sendmsg+0xa99/0xc30
[  161.956207][ T7577]  ____sys_sendmsg+0xa99/0xc30
[  161.956232][ T7577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.956259][ T7577]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.956289][ T7577]  ? lock_acquire+0x1d1/0x380
[  161.956314][ T7577]  ? get_pid_task+0x2a/0x250
[  161.956342][ T7577]  ___sys_sendmsg+0x190/0x1e0
[  161.956372][ T7577]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.956401][ T7577]  ? get_pid_task+0x106/0x250
[  161.956427][ T7577]  ? find_held_lock+0x2b/0x80
[  161.956466][ T7577]  __sys_sendmsg+0x160/0x210
[  161.956510][ T7577]  ? __pfx___sys_sendmsg+0x10/0x10
[  161.956544][ T7577]  do_syscall_64+0x123/0x7b0
[  161.956570][ T7577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.956590][ T7577] RIP: 0033:0x7f5ff59a94d9
[  161.956607][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.956625][ T7577] RSP: 002b:00007f5ff67e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.956644][ T7577] RAX: ffffffffffffffda RBX: 00007f5ff5c26090 RCX: 00007f5ff59a94d9
[  161.956680][ T7577] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000007
[  161.956692][ T7577] RBP: 00007f5ff67e7090 R08: 0000000000000000 R09: 0000000000000000
[  161.956703][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.956714][ T7577] R13: 00007f5ff5c26128 R14: 00007f5ff5c26090 R15: 00007ffed05b7e28
[  161.956742][ T7577]  </TASK>
[  162.676395][   T44] kauditd_printk_skb: 15 callbacks suppressed
[  162.676420][   T44] audit: type=1326 audit(1794509423.143:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.3.413" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff59a94d9 code=0x0
[  162.953403][   T44] audit: type=1400 audit(1794509423.423:1068): avc:  denied  { mount } for  pid=7597 comm="syz.1.415" name="/" dev="rpc_pipefs" ino=20043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  163.195053][   T44] audit: type=1400 audit(1794509423.663:1069): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  163.336549][   T44] audit: type=1400 audit(1794509423.803:1070): avc:  denied  { bind } for  pid=7619 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  163.389560][ T7620] rxe_eth0 speed is unknown, defaulting to 1000
[  163.452158][ T7624] netlink: 14 bytes leftover after parsing attributes in process `syz.1.418'.
[  163.922781][ T7630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.420'.
[  163.922809][ T7630] FAULT_INJECTION: forcing a failure.
[  163.922809][ T7630] name failslab, interval 1, probability 0, space 0, times 0
[  163.922831][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: syz.2.420 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.922854][ T7630] Tainted: [L]=SOFTLOCKUP
[  163.922861][ T7630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.922891][ T7630] Call Trace:
[  163.922898][ T7630]  <TASK>
[  163.922906][ T7630]  dump_stack_lvl+0x100/0x190
[  163.922938][ T7630]  should_fail_ex.cold+0x5/0xa
[  163.922966][ T7630]  should_failslab+0xc2/0x120
[  163.922988][ T7630]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  163.923007][ T7630]  ? __alloc_skb+0x5b7/0x710
[  163.923027][ T7630]  ? __alloc_skb+0x140/0x710
[  163.923051][ T7630]  __alloc_skb+0x140/0x710
[  163.923070][ T7630]  ? __alloc_skb+0x5b7/0x710
[  163.923090][ T7630]  ? __pfx___alloc_skb+0x10/0x10
[  163.923117][ T7630]  netlink_ack+0x117/0xba0
[  163.923142][ T7630]  ? __lock_acquire+0x5c0/0x1f40
[  163.923173][ T7630]  netlink_rcv_skb+0x333/0x420
[  163.923196][ T7630]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  163.923223][ T7630]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.923256][ T7630]  ? netlink_deliver_tap+0x1ae/0xb50
[  163.923284][ T7630]  netlink_unicast+0x668/0x950
[  163.923311][ T7630]  ? __pfx_netlink_unicast+0x10/0x10
[  163.923349][ T7630]  netlink_sendmsg+0x9ac/0x10c0
[  163.923375][ T7630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.923400][ T7630]  ? selinux_socket_sendmsg+0x198/0x2f0
[  163.923426][ T7630]  ? ____sys_sendmsg+0xa99/0xc30
[  163.923448][ T7630]  ____sys_sendmsg+0xa99/0xc30
[  163.923470][ T7630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.923494][ T7630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.923525][ T7630]  ? lock_acquire+0x1d1/0x380
[  163.923547][ T7630]  ? get_pid_task+0x2a/0x250
[  163.923566][ T7630]  ___sys_sendmsg+0x190/0x1e0
[  163.923593][ T7630]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.923617][ T7630]  ? get_pid_task+0x106/0x250
[  163.923644][ T7630]  ? find_held_lock+0x2b/0x80
[  163.923678][ T7630]  __sys_sendmsg+0x160/0x210
[  163.923700][ T7630]  ? __pfx___sys_sendmsg+0x10/0x10
[  163.923733][ T7630]  do_syscall_64+0x123/0x7b0
[  163.923756][ T7630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.923776][ T7630] RIP: 0033:0x7ff9d67a94d9
[  163.923793][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.923811][ T7630] RSP: 002b:00007ff9d769e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.923830][ T7630] RAX: ffffffffffffffda RBX: 00007ff9d6a26090 RCX: 00007ff9d67a94d9
[  163.923842][ T7630] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000007
[  163.923853][ T7630] RBP: 00007ff9d769e090 R08: 0000000000000000 R09: 0000000000000000
[  163.923864][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.923875][ T7630] R13: 00007ff9d6a26128 R14: 00007ff9d6a26090 R15: 00007ffdf09666a8
[  163.923902][ T7630]  </TASK>
[  164.383753][   T44] audit: type=1800 audit(1794509424.853:1071): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.425" name="reserved_size" dev="sysfs" ino=893 res=0 errno=-22
[  164.385518][ T7653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.427'.
[  164.391636][ T7647] ip6t_hbh: too many supported opts specified
[  164.398779][   T44] audit: type=1800 audit(1794509424.873:1072): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149530 res=0 errno=-22
[  164.419124][   T44] audit: type=1326 audit(1794509424.893:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.2.426" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9d67a94d9 code=0x0
[  164.440266][ T7647] macvlan2: entered promiscuous mode
[  164.442831][ T7647] macvlan2: entered allmulticast mode
[  164.442851][ T7647] batadv_slave_0: entered allmulticast mode
[  164.709087][ T7662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58013 sclass=netlink_route_socket pid=7662 comm=syz.3.428
[  165.187912][ T7652] kvm: debugfs: duplicate directory 7652-30
[  165.304857][ T7672] netlink: 14 bytes leftover after parsing attributes in process `syz.3.430'.
[  165.304882][ T7672] FAULT_INJECTION: forcing a failure.
[  165.304882][ T7672] name failslab, interval 1, probability 0, space 0, times 0
[  165.304903][ T7672] CPU: 3 UID: 0 PID: 7672 Comm: syz.3.430 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.304944][ T7672] Tainted: [L]=SOFTLOCKUP
[  165.304950][ T7672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.304961][ T7672] Call Trace:
[  165.304968][ T7672]  <TASK>
[  165.304975][ T7672]  dump_stack_lvl+0x100/0x190
[  165.305011][ T7672]  should_fail_ex.cold+0x5/0xa
[  165.305039][ T7672]  should_failslab+0xc2/0x120
[  165.305062][ T7672]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  165.305081][ T7672]  ? __alloc_skb+0x5b7/0x710
[  165.305100][ T7672]  ? __alloc_skb+0x140/0x710
[  165.305125][ T7672]  __alloc_skb+0x140/0x710
[  165.305144][ T7672]  ? __alloc_skb+0x5b7/0x710
[  165.305164][ T7672]  ? __pfx___alloc_skb+0x10/0x10
[  165.305193][ T7672]  netlink_ack+0x117/0xba0
[  165.305225][ T7672]  netlink_rcv_skb+0x333/0x420
[  165.305248][ T7672]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  165.305276][ T7672]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.305295][ T7672]  ? __asan_memcpy+0x3c/0x60
[  165.305327][ T7672]  ? netlink_deliver_tap+0x1ae/0xb50
[  165.305353][ T7672]  netlink_unicast+0x668/0x950
[  165.305379][ T7672]  ? __pfx_netlink_unicast+0x10/0x10
[  165.305409][ T7672]  netlink_sendmsg+0x9ac/0x10c0
[  165.305437][ T7672]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.305466][ T7672]  ? selinux_socket_sendmsg+0x198/0x2f0
[  165.305495][ T7672]  ? ____sys_sendmsg+0xa99/0xc30
[  165.305519][ T7672]  ____sys_sendmsg+0xa99/0xc30
[  165.305545][ T7672]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.305574][ T7672]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.305608][ T7672]  ? lock_acquire+0x1d1/0x380
[  165.305634][ T7672]  ? get_pid_task+0x2a/0x250
[  165.305656][ T7672]  ___sys_sendmsg+0x190/0x1e0
[  165.305687][ T7672]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.305716][ T7672]  ? get_pid_task+0x106/0x250
[  165.305745][ T7672]  ? find_held_lock+0x2b/0x80
[  165.305791][ T7672]  __sys_sendmsg+0x160/0x210
[  165.305824][ T7672]  ? __pfx___sys_sendmsg+0x10/0x10
[  165.305863][ T7672]  do_syscall_64+0x123/0x7b0
[  165.305890][ T7672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.305910][ T7672] RIP: 0033:0x7f5ff59a94d9
[  165.305927][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.305945][ T7672] RSP: 002b:00007f5ff67e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.305965][ T7672] RAX: ffffffffffffffda RBX: 00007f5ff5c26090 RCX: 00007f5ff59a94d9
[  165.305977][ T7672] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000007
[  165.305989][ T7672] RBP: 00007f5ff67e7090 R08: 0000000000000000 R09: 0000000000000000
[  165.306001][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.306012][ T7672] R13: 00007f5ff5c26128 R14: 00007f5ff5c26090 R15: 00007ffed05b7e28
[  165.306039][ T7672]  </TASK>
[  165.402689][   T44] audit: type=1400 audit(1794509425.873:1074): avc:  denied  { getopt } for  pid=7673 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  165.675843][ T7678] netlink: 14 bytes leftover after parsing attributes in process `syz.3.432'.
[  165.721482][ T7688] libceph: resolve '0' (ret=-3): failed
[  165.739672][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.741148][ T7685] 8021q: adding VLAN 0 to HW filter on device team0
[  165.743884][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.826333][ T7691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7691 comm=syz.2.434
[  165.846585][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.864771][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.900258][   T44] audit: type=1400 audit(1794509426.363:1075): avc:  denied  { read } for  pid=7687 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  165.934797][ T7685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.934822][ T7685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.952589][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[  165.965261][ T7685] batman_adv: batadv0: Interface activated: virt_wifi0
[  165.965482][ T7685] veth1_vlan: left promiscuous mode
[  165.966223][ T7685] veth0_vlan: left promiscuous mode
[  165.967874][ T7685] veth0_vlan: entered promiscuous mode
[  165.969883][ T7685] veth1_vlan: entered promiscuous mode
[  165.979683][ T7685] veth1_macvtap: left promiscuous mode
[  165.980710][ T7685] veth0_macvtap: left promiscuous mode
[  165.981796][ T7685] veth0_macvtap: entered promiscuous mode
[  165.996212][ T7685] veth1_macvtap: entered promiscuous mode
[  166.018711][ T7685] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  166.019535][ T7685] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  166.021172][ T7685] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  166.037935][ T7685] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  166.182661][ T7685] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.183554][ T7685] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  166.198328][  T113] bridge0: port 3(vlan2) entered blocking state
[  166.198426][  T113] bridge0: port 3(vlan2) entered forwarding state
[  166.201709][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.201829][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.203533][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.203627][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.308072][ T5878] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.308104][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.308137][ T5878] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.308154][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.308180][ T5878] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.308198][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.308222][ T5878] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.308239][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.442513][ T7700] befs: (nullb0): No write support. Marking filesystem read-only
[  166.444041][ T7700] befs: (nullb0): invalid magic header
[  166.652391][ T7702] FAULT_INJECTION: forcing a failure.
[  166.652391][ T7702] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  166.652430][ T7702] CPU: 2 UID: 0 PID: 7702 Comm: syz.2.438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.652460][ T7702] Tainted: [L]=SOFTLOCKUP
[  166.652469][ T7702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.652483][ T7702] Call Trace:
[  166.652490][ T7702]  <TASK>
[  166.652501][ T7702]  dump_stack_lvl+0x100/0x190
[  166.652544][ T7702]  should_fail_ex.cold+0x5/0xa
[  166.652579][ T7702]  should_fail_alloc_page+0xeb/0x140
[  166.652609][ T7702]  prepare_alloc_pages+0x1f0/0x5b0
[  166.652639][ T7702]  __alloc_frozen_pages_noprof+0x1b9/0x31e0
[  166.652675][ T7702]  ? rcu_is_watching+0x13/0xc0
[  166.652698][ T7702]  ? trace_mm_page_alloc+0x164/0x1c0
[  166.652728][ T7702]  ? __alloc_frozen_pages_noprof+0x2fb/0x31e0
[  166.652758][ T7702]  ? arch_stack_walk+0xa6/0xf0
[  166.652790][ T7702]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  166.652826][ T7702]  ? stack_trace_save+0x8e/0xc0
[  166.652869][ T7702]  ? __pfx_stack_trace_save+0x10/0x10
[  166.652900][ T7702]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  166.652941][ T7702]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[  166.652962][ T7702]  ? alloc_vmap_area+0x643/0x2bc0
[  166.652987][ T7702]  ? __get_vm_area_node+0x1ed/0x350
[  166.653011][ T7702]  ? __vmalloc_node_range_noprof+0x2ad/0x1440
[  166.653034][ T7702]  ? vmalloc_user_noprof+0x9e/0xe0
[  166.653056][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.653079][ T7702]  ? __vb2_queue_alloc+0x8d5/0x1160
[  166.653097][ T7702]  ? vb2_core_reqbufs+0x899/0xf30
[  166.653117][ T7702]  ? vb2_ioctl_reqbufs+0x291/0x450
[  166.653149][ T7702]  ? v4l_reqbufs+0x175/0x1d0
[  166.653172][ T7702]  ? __video_do_ioctl+0xb2a/0xdf0
[  166.653202][ T7702]  ? video_usercopy+0x47a/0x1730
[  166.653227][ T7702]  ? v4l2_ioctl+0x1bd/0x250
[  166.653264][ T7702]  alloc_pages_bulk_noprof+0x77e/0x1420
[  166.653301][ T7702]  ? policy_nodemask+0xed/0x5e0
[  166.653332][ T7702]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  166.653384][ T7702]  __kasan_populate_vmalloc+0xf0/0x210
[  166.653412][ T7702]  alloc_vmap_area+0x963/0x2bc0
[  166.653443][ T7702]  ? kasan_save_track+0x14/0x30
[  166.653464][ T7702]  ? __kasan_kmalloc+0xaa/0xb0
[  166.653485][ T7702]  ? __pfx_alloc_vmap_area+0x10/0x10
[  166.653506][ T7702]  ? vb2_vmalloc_alloc+0xf9/0x410
[  166.653527][ T7702]  ? __get_vm_area_node+0x124/0x350
[  166.653547][ T7702]  __get_vm_area_node+0x1ed/0x350
[  166.653572][ T7702]  __vmalloc_node_range_noprof+0x2ad/0x1440
[  166.653596][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.653648][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.653680][ T7702]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  166.653707][ T7702]  ? __kasan_kmalloc+0xaa/0xb0
[  166.653728][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.653748][ T7702]  vmalloc_user_noprof+0x9e/0xe0
[  166.653771][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.653791][ T7702]  vb2_vmalloc_alloc+0x135/0x410
[  166.653808][ T7702]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  166.653831][ T7702]  __vb2_queue_alloc+0x8d5/0x1160
[  166.653865][ T7702]  vb2_core_reqbufs+0x899/0xf30
[  166.653891][ T7702]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  166.653910][ T7702]  ? trace_contention_end+0x126/0x160
[  166.653941][ T7702]  ? __mutex_lock+0x267/0x1c10
[  166.653969][ T7702]  ? avc_has_extended_perms+0x4a5/0x10b0
[  166.654001][ T7702]  vb2_ioctl_reqbufs+0x291/0x450
[  166.654035][ T7702]  ? __pfx_vb2_ioctl_reqbufs+0x10/0x10
[  166.654067][ T7702]  ? check_fmt+0x230/0x900
[  166.654091][ T7702]  v4l_reqbufs+0x175/0x1d0
[  166.654118][ T7702]  __video_do_ioctl+0xb2a/0xdf0
[  166.654147][ T7702]  ? __might_fault+0xc5/0x140
[  166.654189][ T7702]  ? __pfx___video_do_ioctl+0x10/0x10
[  166.654228][ T7702]  video_usercopy+0x47a/0x1730
[  166.654257][ T7702]  ? __pfx___video_do_ioctl+0x10/0x10
[  166.654287][ T7702]  ? __pfx_video_usercopy+0x10/0x10
[  166.654332][ T7702]  v4l2_ioctl+0x1bd/0x250
[  166.654361][ T7702]  ? __pfx_v4l2_ioctl+0x10/0x10
[  166.654391][ T7702]  __x64_sys_ioctl+0x18e/0x210
[  166.654424][ T7702]  do_syscall_64+0x123/0x7b0
[  166.654451][ T7702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.654474][ T7702] RIP: 0033:0x7ff9d67a94d9
[  166.654494][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.654514][ T7702] RSP: 002b:00007ff9d76bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.654533][ T7702] RAX: ffffffffffffffda RBX: 00007ff9d6a25fa0 RCX: 00007ff9d67a94d9
[  166.654544][ T7702] RDX: 00002000000010c0 RSI: 00000000c0145608 RDI: 000000000000000b
[  166.654555][ T7702] RBP: 00007ff9d683804e R08: 0000000000000000 R09: 0000000000000000
[  166.654566][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.654577][ T7702] R13: 00007ff9d6a26038 R14: 00007ff9d6a25fa0 R15: 00007ffdf09666a8
[  166.654634][ T7702]  </TASK>
[  166.655837][ T7702] syz.2.438: vmalloc error: size 921600, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  166.656010][ T7702] CPU: 2 UID: 0 PID: 7702 Comm: syz.2.438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.656038][ T7702] Tainted: [L]=SOFTLOCKUP
[  166.656046][ T7702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.656057][ T7702] Call Trace:
[  166.656063][ T7702]  <TASK>
[  166.656071][ T7702]  dump_stack_lvl+0x100/0x190
[  166.656108][ T7702]  warn_alloc.cold+0x9e/0xb2
[  166.656132][ T7702]  ? __pfx_warn_alloc+0x10/0x10
[  166.656160][ T7702]  ? lockdep_hardirqs_on+0x7d/0x110
[  166.656195][ T7702]  ? __get_vm_area_node+0x2f0/0x350
[  166.656225][ T7702]  ? __get_vm_area_node+0x22b/0x350
[  166.656252][ T7702]  __vmalloc_node_range_noprof+0xdc6/0x1440
[  166.656286][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.656317][ T7702]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  166.656345][ T7702]  ? __kasan_kmalloc+0xaa/0xb0
[  166.656367][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.656389][ T7702]  vmalloc_user_noprof+0x9e/0xe0
[  166.656410][ T7702]  ? vb2_vmalloc_alloc+0x135/0x410
[  166.656431][ T7702]  vb2_vmalloc_alloc+0x135/0x410
[  166.656451][ T7702]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  166.656472][ T7702]  __vb2_queue_alloc+0x8d5/0x1160
[  166.656506][ T7702]  vb2_core_reqbufs+0x899/0xf30
[  166.656531][ T7702]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  166.656549][ T7702]  ? trace_contention_end+0x126/0x160
[  166.656579][ T7702]  ? __mutex_lock+0x267/0x1c10
[  166.656606][ T7702]  ? avc_has_extended_perms+0x4a5/0x10b0
[  166.656636][ T7702]  vb2_ioctl_reqbufs+0x291/0x450
[  166.656690][ T7702]  ? __pfx_vb2_ioctl_reqbufs+0x10/0x10
[  166.656715][ T7702]  ? check_fmt+0x230/0x900
[  166.656734][ T7702]  v4l_reqbufs+0x175/0x1d0
[  166.656756][ T7702]  __video_do_ioctl+0xb2a/0xdf0
[  166.656784][ T7702]  ? __might_fault+0xc5/0x140
[  166.656807][ T7702]  ? __pfx___video_do_ioctl+0x10/0x10
[  166.656842][ T7702]  video_usercopy+0x47a/0x1730
[  166.656868][ T7702]  ? __pfx___video_do_ioctl+0x10/0x10
[  166.656895][ T7702]  ? __pfx_video_usercopy+0x10/0x10
[  166.656938][ T7702]  v4l2_ioctl+0x1bd/0x250
[  166.656962][ T7702]  ? __pfx_v4l2_ioctl+0x10/0x10
[  166.656990][ T7702]  __x64_sys_ioctl+0x18e/0x210
[  166.657013][ T7702]  do_syscall_64+0x123/0x7b0
[  166.657037][ T7702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.657054][ T7702] RIP: 0033:0x7ff9d67a94d9
[  166.657070][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.657087][ T7702] RSP: 002b:00007ff9d76bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.657102][ T7702] RAX: ffffffffffffffda RBX: 00007ff9d6a25fa0 RCX: 00007ff9d67a94d9
[  166.657117][ T7702] RDX: 00002000000010c0 RSI: 00000000c0145608 RDI: 000000000000000b
[  166.657129][ T7702] RBP: 00007ff9d683804e R08: 0000000000000000 R09: 0000000000000000
[  166.657137][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.657147][ T7702] R13: 00007ff9d6a26038 R14: 00007ff9d6a25fa0 R15: 00007ffdf09666a8
[  166.657173][ T7702]  </TASK>
[  166.657338][ T7702] Mem-Info:
[  166.657370][ T7702] active_anon:9758 inactive_anon:1 isolated_anon:0
[  166.657370][ T7702]  active_file:0 inactive_file:65397 isolated_file:0
[  166.657370][ T7702]  unevictable:2024 dirty:173 writeback:0
[  166.657370][ T7702]  slab_reclaimable:14054 slab_unreclaimable:73088
[  166.657370][ T7702]  mapped:26895 shmem:2584 pagetables:1252
[  166.657370][ T7702]  sec_pagetables:303 bounce:0
[  166.657370][ T7702]  kernel_misc_reclaimable:0
[  166.657370][ T7702]  free:425501 free_pcp:13326 free_cma:0
[  166.657417][ T7702] Node 0 active_anon:39032kB inactive_anon:4kB active_file:0kB inactive_file:261324kB unevictable:6096kB isolated(anon):0kB isolated(file):0kB mapped:107516kB dirty:692kB writeback:0kB shmem:8336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13504kB pagetables:4836kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  166.657464][ T7702] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  166.657508][ T7702] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  166.657550][ T7702] lowmem_reserve[]: 0 1201 1201 1201 1201
[  166.657583][ T7702] Node 0 DMA32 free:54740kB boost:0kB min:27064kB low:33828kB high:40592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39032kB inactive_anon:4kB active_file:0kB inactive_file:261324kB unevictable:6096kB writepending:692kB zspages:0kB present:2080628kB managed:1230608kB mlocked:0kB bounce:0kB free_pcp:46480kB local_pcp:4916kB free_cma:0kB
[  166.657633][ T7702] lowmem_reserve[]: 0 0 0 0 0
[  166.657662][ T7702] Node 1 Normal free:1631904kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6824kB local_pcp:0kB free_cma:0kB
[  166.658049][ T7702] lowmem_reserve[]: 0 0 0 0 0
[  166.658790][ T7702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  166.658989][ T7702] Node 0 DMA32: 11*4kB (E) 1*8kB (U) 2*16kB (UE) 12*32kB (U) 78*64kB (UM) 21*128kB (UM) 6*256kB (U) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 9*4096kB (UM) = 54740kB
[  166.659135][ T7702] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 3*16kB (UM) 1*32kB (U) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (U) 2*2048kB (UM) 397*4096kB (M) = 1631904kB
[  166.659278][ T7702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  166.659293][ T7702] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  166.659306][ T7702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  166.659319][ T7702] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  166.659332][ T7702] 67978 total pagecache pages
[  166.659357][ T7702] 1 pages in swap cache
[  166.659364][ T7702] Free swap  = 124992kB
[  166.659371][ T7702] Total swap = 124996kB
[  166.659379][ T7702] 1048443 pages RAM
[  166.659386][ T7702] 0 pages HighMem/MovableOnly
[  166.659392][ T7702] 291481 pages reserved
[  166.659399][ T7702] 0 pages cma reserved
[  166.889039][ T7713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.441'.
[  166.889122][ T7713] FAULT_INJECTION: forcing a failure.
[  166.889122][ T7713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.889145][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.0.441 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.889178][ T7713] Tainted: [L]=SOFTLOCKUP
[  166.889184][ T7713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.889194][ T7713] Call Trace:
[  166.889201][ T7713]  <TASK>
[  166.889208][ T7713]  dump_stack_lvl+0x100/0x190
[  166.889242][ T7713]  should_fail_ex.cold+0x5/0xa
[  166.889269][ T7713]  _copy_to_user+0x32/0xd0
[  166.889294][ T7713]  simple_read_from_buffer+0xcb/0x170
[  166.889318][ T7713]  proc_fail_nth_read+0x1af/0x230
[  166.889368][ T7713]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  166.889391][ T7713]  ? rw_verify_area+0xce/0x6d0
[  166.889429][ T7713]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  166.889451][ T7713]  vfs_read+0x1e4/0xb30
[  166.889469][ T7713]  ? lock_acquire+0x1d1/0x380
[  166.889491][ T7713]  ? __fget_files+0x34/0x3d0
[  166.889512][ T7713]  ? __pfx_vfs_read+0x10/0x10
[  166.889527][ T7713]  ? find_held_lock+0x2b/0x80
[  166.889543][ T7713]  ? __fget_files+0x215/0x3d0
[  166.889565][ T7713]  ? __fget_files+0x21f/0x3d0
[  166.889589][ T7713]  ksys_read+0x12a/0x250
[  166.889605][ T7713]  ? __pfx_ksys_read+0x10/0x10
[  166.889630][ T7713]  do_syscall_64+0x123/0x7b0
[  166.889652][ T7713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.889667][ T7713] RIP: 0033:0x7fdbabf69d0e
[  166.889681][ T7713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  166.889695][ T7713] RSP: 002b:00007fdbacebbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  166.889711][ T7713] RAX: ffffffffffffffda RBX: 00007fdbacebc6c0 RCX: 00007fdbabf69d0e
[  166.889721][ T7713] RDX: 000000000000000f RSI: 00007fdbacebc0a0 RDI: 0000000000000008
[  166.889730][ T7713] RBP: 00007fdbacebc090 R08: 0000000000000000 R09: 0000000000000000
[  166.889739][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.889750][ T7713] R13: 00007fdbac226128 R14: 00007fdbac226090 R15: 00007ffc6b7cd018
[  166.889774][ T7713]  </TASK>
[  167.035227][   T44] audit: type=1400 audit(1794509427.503:1076): avc:  denied  { ioctl } for  pid=7716 comm="syz.0.443" path="socket:[22877]" dev="sockfs" ino=22877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  167.353788][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'.
[  167.353823][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'.
[  167.441694][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'.
[  167.514431][ T7729] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  167.523065][ T7729] bond2 (unregistering): Released all slaves
[  167.868243][ T7742] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  167.916192][ T7742] romfs: unable to set blocksize
[  167.916192][ T7742] 
[  167.953552][   T44] kauditd_printk_skb: 4 callbacks suppressed
[  167.953572][   T44] audit: type=1800 audit(1794509428.393:1081): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.449" name="resume" dev="sysfs" ino=891 res=0 errno=-22
[  168.082152][ T7747] x_tables: duplicate underflow at hook 2
[  168.435317][  T860] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  168.472501][   T44] audit: type=1800 audit(1794509428.943:1082): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=13630 res=0 errno=-22
[  168.624669][  T860] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  168.625899][  T860] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  168.625921][  T860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.625935][  T860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  168.626067][  T860] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.682748][  T860] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  168.682775][  T860] usb 8-1: Product: syz
[  168.682787][  T860] usb 8-1: Manufacturer: syz
[  168.710130][  T860] cdc_wdm 8-1:1.0: skipping garbage
[  168.710152][  T860] cdc_wdm 8-1:1.0: skipping garbage
[  168.737056][   T44] audit: type=1800 audit(1794509429.163:1083): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150251 res=0 errno=-22
[  168.737110][   T44] audit: type=1800 audit(1794509429.163:1084): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=150282 res=0 errno=-22
[  168.737145][   T44] audit: type=1800 audit(1794509429.163:1085): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=150258 res=0 errno=-22
[  168.808106][   T44] audit: type=1800 audit(1794509429.263:1086): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=150259 res=0 errno=-22
[  168.809491][  T860] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  168.809511][  T860] cdc_wdm 8-1:1.0: Unknown control protocol
[  168.835693][   T44] audit: type=1800 audit(1794509429.283:1087): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=150280 res=0 errno=-22
[  168.835744][   T44] audit: type=1800 audit(1794509429.303:1088): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=150281 res=0 errno=-22
[  168.835878][   T44] audit: type=1800 audit(1794509429.303:1089): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=150260 res=0 errno=-22
[  168.852760][ T7764] No source specified
[  168.859545][ T7764] tipc: Started in network mode
[  168.859571][ T7764] tipc: Node identity 0a90b7a4e447, cluster identity 4711
[  168.860808][ T7765] __nla_validate_parse: 1 callbacks suppressed
[  168.860824][ T7765] netlink: 14 bytes leftover after parsing attributes in process `syz.0.456'.
[  168.861024][ T7764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.861940][ T7764] syzkaller0: entered promiscuous mode
[  168.861959][ T7764] syzkaller0: entered allmulticast mode
[  168.863513][   T44] audit: type=1800 audit(1794509429.323:1090): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150302 res=0 errno=-22
[  168.864963][ T7764] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  168.952404][ T1360] usb 8-1: USB disconnect, device number 5
[  169.000156][ T7764] tipc: Resetting bearer <eth:syzkaller0>
[  169.298018][ T7772] 9pnet_virtio: no channels available for device syz
[  169.470924][ T7779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7779 comm=syz.0.460
[  169.487550][ T7779] nfs: Unknown parameter '18446744073709551615'
[  169.579032][ T1360] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  169.723158][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  169.768380][ T1360] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  169.769646][ T1360] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  169.769670][ T1360] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.769686][ T1360] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  169.769722][ T1360] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.777668][ T1360] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  169.777692][ T1360] usb 8-1: Product: syz
[  169.777705][ T1360] usb 8-1: Manufacturer: syz
[  169.850465][ T5968] tipc: Node number set to 4007114660
[  169.897094][ T1360] cdc_wdm 8-1:1.0: skipping garbage
[  169.897127][ T1360] cdc_wdm 8-1:1.0: skipping garbage
[  169.898571][ T1360] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  169.898685][ T1360] cdc_wdm 8-1:1.0: Unknown control protocol
[  169.911990][ T7787] No source specified
[  170.106079][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.107879][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.181923][ T3422] usb 8-1: USB disconnect, device number 6
[  170.307332][ T7793] comedi comedi3: comedi_config --init_data is deprecated
[  170.388275][ T7795] ip_tables: iptables: counters copy to user failed while replacing table
[  170.521512][ T7799] FAULT_INJECTION: forcing a failure.
[  170.521512][ T7799] name failslab, interval 1, probability 0, space 0, times 0
[  170.521543][ T7799] CPU: 2 UID: 0 PID: 7799 Comm: syz.0.468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.521567][ T7799] Tainted: [L]=SOFTLOCKUP
[  170.521573][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  170.521583][ T7799] Call Trace:
[  170.521589][ T7799]  <TASK>
[  170.521597][ T7799]  dump_stack_lvl+0x100/0x190
[  170.521633][ T7799]  should_fail_ex.cold+0x5/0xa
[  170.521658][ T7799]  should_failslab+0xc2/0x120
[  170.521689][ T7799]  __kmalloc_cache_noprof+0x91/0x6d0
[  170.521828][ T7799]  ? __kmalloc_large_node_noprof+0x5d/0x70
[  170.521850][ T7799]  ? init_srcu_struct_fields+0xb16/0x1060
[  170.521882][ T7799]  init_srcu_struct_fields+0xb16/0x1060
[  170.521924][ T7799]  ? lockdep_init_map_type+0x5c/0x250
[  170.521950][ T7799]  kvm_dev_ioctl+0x50a/0x1ac0
[  170.521978][ T7799]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  170.522003][ T7799]  ? selinux_file_ioctl+0x1e0/0x290
[  170.522039][ T7799]  ? selinux_file_ioctl+0x1e7/0x290
[  170.522058][ T7799]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  170.522082][ T7799]  __x64_sys_ioctl+0x18e/0x210
[  170.522126][ T7799]  do_syscall_64+0x123/0x7b0
[  170.522150][ T7799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.522169][ T7799] RIP: 0033:0x7fdbabfa94d9
[  170.522187][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.522204][ T7799] RSP: 002b:00007fdbacedd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.522222][ T7799] RAX: ffffffffffffffda RBX: 00007fdbac225fa0 RCX: 00007fdbabfa94d9
[  170.522234][ T7799] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005
[  170.522245][ T7799] RBP: 00007fdbac03804e R08: 0000000000000000 R09: 0000000000000000
[  170.522256][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.522266][ T7799] R13: 00007fdbac226038 R14: 00007fdbac225fa0 R15: 00007ffc6b7cd018
[  170.522291][ T7799]  </TASK>
[  170.604813][ T7801] netlink: 14 bytes leftover after parsing attributes in process `syz.0.468'.
[  170.862146][ T7814] FAULT_INJECTION: forcing a failure.
[  170.862146][ T7814] name failslab, interval 1, probability 0, space 0, times 0
[  170.862181][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.0.470 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.862211][ T7814] Tainted: [L]=SOFTLOCKUP
[  170.862219][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  170.862230][ T7814] Call Trace:
[  170.862236][ T7814]  <TASK>
[  170.862244][ T7814]  dump_stack_lvl+0x100/0x190
[  170.862282][ T7814]  should_fail_ex.cold+0x5/0xa
[  170.862332][ T7814]  should_failslab+0xc2/0x120
[  170.862360][ T7814]  __kmalloc_cache_noprof+0x91/0x6d0
[  170.862391][ T7814]  ? tipc_service_create+0xb1/0x340
[  170.862422][ T7814]  tipc_service_create+0xb1/0x340
[  170.862446][ T7814]  ? tipc_service_find+0x161/0x1c0
[  170.862468][ T7814]  tipc_nametbl_subscribe+0x892/0xa80
[  170.862498][ T7814]  ? __pfx_tipc_nametbl_subscribe+0x10/0x10
[  170.862525][ T7814]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  170.862551][ T7814]  ? lockdep_init_map_type+0x5c/0x250
[  170.865298][ T7814]  tipc_sub_subscribe+0x4ba/0x730
[  170.865330][ T7814]  tipc_conn_rcv_sub+0x21e/0x3d0
[  170.865355][ T7814]  tipc_topsrv_kern_subscr+0x20b/0x3c0
[  170.865377][ T7814]  ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10
[  170.865400][ T7814]  ? net_generic+0xea/0x2a0
[  170.865425][ T7814]  tipc_group_create+0x4ab/0x660
[  170.865448][ T7814]  tipc_setsockopt+0x611/0xe30
[  170.865473][ T7814]  ? __pfx_tipc_setsockopt+0x10/0x10
[  170.865501][ T7814]  ? __fget_files+0x215/0x3d0
[  170.865528][ T7814]  ? selinux_socket_setsockopt+0x6a/0x80
[  170.865548][ T7814]  ? __pfx_tipc_setsockopt+0x10/0x10
[  170.865574][ T7814]  do_sock_setsockopt+0xf3/0x1d0
[  170.865600][ T7814]  __sys_setsockopt+0x195/0x220
[  170.865625][ T7814]  __x64_sys_setsockopt+0xbd/0x160
[  170.865647][ T7814]  ? do_syscall_64+0xae/0x7b0
[  170.865667][ T7814]  ? lockdep_hardirqs_on+0x7d/0x110
[  170.865688][ T7814]  do_syscall_64+0x123/0x7b0
[  170.865734][ T7814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.865756][ T7814] RIP: 0033:0x7fdbabfa94d9
[  170.865774][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.865792][ T7814] RSP: 002b:00007fdbacebc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  170.865811][ T7814] RAX: ffffffffffffffda RBX: 00007fdbac226090 RCX: 00007fdbabfa94d9
[  170.865823][ T7814] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006
[  170.865856][ T7814] RBP: 00007fdbac03804e R08: 000000000000002e R09: 0000000000000000
[  170.865868][ T7814] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  170.865879][ T7814] R13: 00007fdbac226128 R14: 00007fdbac226090 R15: 00007ffc6b7cd018
[  170.865905][ T7814]  </TASK>
[  170.866027][ T7814] tipc: Service creation failed, no memory
[  170.866036][ T7814] tipc: Failed to subscribe for {66,0,4294967295}
[  170.927913][ T7813] loop6: detected capacity change from 0 to 1
[  170.931421][ T7813] Dev loop6: unable to read RDB block 1
[  170.931492][ T7813]  loop6: unable to read partition table
[  170.931650][ T7813] loop6: partition table beyond EOD, truncated
[  170.931704][ T7813] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  170.942184][    C2] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20800800 phys_seg 0 prio class 1
[  171.469988][ T7804] nvme nvme0: rdma connection establishment failed (-512)
[  171.573139][ T7818] syzkaller0: left promiscuous mode
[  171.573164][ T7818] syzkaller0: left allmulticast mode
[  171.654069][ T7820] overlayfs: failed to resolve './bus': -2
[  171.937444][ T7831] netlink: 'syz.3.478': attribute type 1 has an invalid length.
[  172.068758][ T7837] loop0: detected capacity change from 0 to 4096
[  172.167035][ T7839] bond2: entered allmulticast mode
[  172.167440][ T7839] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.264775][ T7837] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  172.264799][ T7837] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  172.264838][ T7837]  loop0:
[  172.344212][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.345221][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.355397][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.379754][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.380852][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.410404][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.552674][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.553399][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.554032][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.554650][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.555191][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.555739][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.556337][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.609017][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.609667][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.610230][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.610930][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.611716][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.612287][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.612837][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.613435][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.613976][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.614534][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.615118][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.618463][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.619050][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.619595][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.620122][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.620783][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.634293][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.635059][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.635718][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.636338][ T7848] XFS (nullb0): Invalid device [./loop0], error=-15
[  172.663295][ T7858] netlink: 64 bytes leftover after parsing attributes in process `syz.3.484'.
[  172.993044][   T44] kauditd_printk_skb: 25 callbacks suppressed
[  172.993063][   T44] audit: type=1800 audit(1794509433.463:1116): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150944 res=0 errno=-22
[  173.303449][   T44] audit: type=1400 audit(1794509433.773:1117): avc:  denied  { nlmsg_read } for  pid=7879 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  173.360317][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.362745][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.411418][ T7882] macsec0: left promiscuous mode
[  173.487570][ T7885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7885 comm=syz.1.488
[  173.488420][ T7885] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[  173.494795][  T860] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  173.541363][   T44] audit: type=1800 audit(1794509434.003:1118): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151095 res=0 errno=-22
[  173.552313][   T44] audit: type=1800 audit(1794509434.023:1119): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151004 res=0 errno=-22
[  173.561571][ T7891] netlink: 14 bytes leftover after parsing attributes in process `syz.0.492'.
[  173.611674][ T7893] nbd: must specify a size in bytes for the device
[  173.662360][   T44] audit: type=1400 audit(173.388:1120): avc:  denied  { create } for  pid=7892 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  173.663962][   T44] audit: type=1400 audit(173.388:1121): avc:  denied  { sys_admin } for  pid=7892 comm="syz.1.493" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  173.671411][  T860] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08
[  173.676022][  T860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.676050][  T860] usb 7-1: Product: syz
[  173.676066][  T860] usb 7-1: Manufacturer: syz
[  173.676079][  T860] usb 7-1: SerialNumber: syz
[  173.719748][   T44] audit: type=1800 audit(173.438:1122): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151123 res=0 errno=-22
[  173.721357][   T44] audit: type=1800 audit(173.448:1123): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151155 res=0 errno=-22
[  173.770428][   T44] audit: type=1800 audit(173.488:1124): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151130 res=0 errno=-22
[  173.770487][   T44] audit: type=1800 audit(173.488:1125): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=151131 res=0 errno=-22
[  173.822222][   T68] Bluetooth: hci3: link tx timeout
[  173.893952][ T7899] ip_tables: iptables: counters copy to user failed while replacing table
[  173.912910][  T860] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  174.329858][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.489'.
[  174.332122][ T3422] usb 7-1: USB disconnect, device number 4
[  174.386893][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[  174.492694][ T7923] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  174.576567][ T7925] netlink: 14 bytes leftover after parsing attributes in process `syz.1.504'.
[  174.720121][   T68] Bluetooth: Frame is too long (len 12, expected len 4)
[  174.722622][   T68] Bluetooth: to_multiplier 0 < 10
[  174.908192][ T7933] cgroup: release_agent respecified
[  174.908644][ T7934] cgroup: release_agent respecified
[  174.920309][ T7933] pim6reg99999999: entered allmulticast mode
[  175.163511][ T7942] SELinux:  policydb magic number 0x2000000 does not match expected magic number 0xf97cff8c
[  175.163559][ T7942] SELinux: failed to load policy
[  175.207585][  T860] usb 7-1: Service connection timeout for: 256
[  175.207607][  T860] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services
[  175.210896][  T860] ath9k_htc: Failed to initialize the device
[  175.214533][ T3422] usb 7-1: ath9k_htc: USB layer deinitialized
[  175.346240][ T7947] ubi16: attaching mtd0
[  175.346269][ T7947] ubi16 error: ubi_attach_mtd_dev: bad VID header (268435458) or data offsets (268435522)
[  175.816442][ T7963] netlink: 14 bytes leftover after parsing attributes in process `syz.1.514'.
[  175.956134][ T7967] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  176.133076][ T7975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1287 sclass=netlink_route_socket pid=7975 comm=syz.1.518
[  176.133155][ T7975] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.518'.
[  176.133170][ T7975] veth0_to_bond: default FDB implementation only supports local addresses
[  176.596872][   T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  176.611840][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'.
[  176.760681][   T11] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01
[  176.768717][   T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  176.768742][   T11] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  176.786296][   T11] usb 5-1: string descriptor 0 read error: -22
[  176.786398][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.791403][   T11] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null))
[  176.791571][   T11] etas_es58x 5-1:1.0: could not retrieve the product info string
[  176.798416][   T68] Bluetooth: hci3: command tx timeout
[  177.054861][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.523'.
[  177.183378][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.523'.
[  177.605081][  T860] usb 5-1: USB disconnect, device number 4
[  177.610456][  T860] etas_es58x 5-1:1.0: Disconnecting (null) (null)
[  178.055030][   T44] kauditd_printk_skb: 51 callbacks suppressed
[  178.055048][   T44] audit: type=1400 audit(177.778:1177): avc:  denied  { write } for  pid=8049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.071276][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'.
[  178.121217][ T8054] MINIX-fs: blocksize too small for device
[  178.232309][ T8065] netlink: 76 bytes leftover after parsing attributes in process `syz.1.529'.
[  178.264238][   T44] audit: type=1400 audit(177.988:1178): avc:  denied  { write } for  pid=8068 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.429920][   T44] audit: type=1800 audit(178.158:1179): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.531" name="mem_sleep" dev="sysfs" ino=867 res=0 errno=-22
[  178.599655][   T44] audit: type=1800 audit(178.268:1180): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.532" name="vendor" dev="sysfs" ino=6188 res=0 errno=-22
[  178.726992][   T44] audit: type=1800 audit(178.458:1181): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152110 res=0 errno=-22
[  178.728369][ T8086] input: syz1 as /devices/virtual/input/input11
[  178.728396][ T8086] input: failed to attach handler leds to device input11, error: -6
[  178.730311][   T44] audit: type=1800 audit(178.458:1182): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=152125 res=0 errno=-22
[  178.740480][   T44] audit: type=1800 audit(178.468:1183): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=152128 res=0 errno=-22
[  178.741329][   T44] audit: type=1800 audit(178.468:1184): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=152127 res=0 errno=-22
[  178.742153][   T44] audit: type=1800 audit(178.468:1185): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=152126 res=0 errno=-22
[  178.746746][   T44] audit: type=1800 audit(178.468:1186): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=152117 res=0 errno=-22
[  178.895313][ T5960] bridge0: entered promiscuous mode
[  179.043010][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.043361][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.268211][   T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  179.420254][   T10] usb 5-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00
[  179.431947][ T8120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.442856][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.442878][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  179.442909][   T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  179.442927][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  179.442944][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  179.442971][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.456106][   T10] hub 5-1:1.0: bad descriptor, ignoring hub
[  179.456129][   T10] hub 5-1:1.0: probe with driver hub failed with error -5
[  179.456510][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  179.456522][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  179.488305][   T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  179.488327][   T10] cdc_wdm 5-1:1.0: Unknown control protocol
[  179.733878][ T8120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.769194][   T10] usb 5-1: USB disconnect, device number 5
[  179.980390][ T8120] bond0 (unregistering): Released all slaves
[  180.426102][ T8165] netlink: 'syz.3.549': attribute type 10 has an invalid length.
[  180.426137][ T8165] __nla_validate_parse: 6 callbacks suppressed
[  180.426149][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'.
[  180.426178][ T8165] batadv0: entered promiscuous mode
[  180.426194][ T8165] batadv0: entered allmulticast mode
[  180.427897][ T8166] netlink: 14 bytes leftover after parsing attributes in process `syz.2.547'.
[  180.467210][ T8165] bridge0: port 3(batadv0) entered blocking state
[  180.467442][ T8165] bridge0: port 3(batadv0) entered disabled state
[  180.502244][ T8165] synth uevent: /bus/acpi: unknown uevent action string
[  180.670219][ T8174] bond0: Error: CAN devices cannot be enslaved
[  180.681042][ T5878] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  180.681060][ T5878] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  181.038908][ T8156] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  181.166780][ T8156] usb 8-1: device descriptor read/64, error -71
[  181.285077][ T8207] ip_tables: iptables: counters copy to user failed while replacing table
[  181.439580][ T8156] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  181.448193][ T8215] use of bytesused == 0 is deprecated and will be removed in the future,
[  181.448206][ T8215] use the actual size instead.
[  181.487752][ T8216] 
[  181.491442][ T8216] ======================================================
[  181.494575][ T8216] WARNING: possible circular locking dependency detected
[  181.503276][ T8216] syzkaller #0 Tainted: G             L     
[  181.505528][ T8216] ------------------------------------------------------
[  181.536129][ T8216] syz.0.559/8216 is trying to acquire lock:
[  181.538438][ T8216] ffff888036be4588 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2360
[  181.553965][ T8216] 
[  181.553965][ T8216] but task is already holding lock:
[  181.557458][ T8216] ffffffff91fd0a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  181.569840][ T8156] usb 8-1: device descriptor read/64, error -71
[  181.584995][ T8216] 
[  181.584995][ T8216] which lock already depends on the new lock.
[  181.584995][ T8216] 
[  181.623080][ T8216] 
[  181.623080][ T8216] the existing dependency chain (in reverse order) is:
[  181.627315][ T8216] 
[  181.627315][ T8216] -> #4 (cb_lock){++++}-{4:4}:
[  181.630712][ T8216]        lock_acquire+0x1d1/0x380
[  181.635075][ T8216]        down_read+0x94/0x4c0
[  181.637275][ T8216]        genl_release+0x7e/0x1d0
[  181.639625][ T8216]        netlink_release+0x104e/0x1fc0
[  181.651344][ T8216]        __sock_release+0xb3/0x260
[  181.653821][ T8216]        sock_close+0x1c/0x30
[  181.655846][ T8216]        __fput+0x3fb/0xb50
[  181.657436][ T8216]        fput_close_sync+0x118/0x250
[  181.659026][ T8216]        filp_close_sync+0x75/0xa0
[  181.660876][ T8216]        __x64_sys_close+0x81/0x110
[  181.662596][ T8216]        do_syscall_64+0x123/0x7b0
[  181.664486][ T8216]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.667094][ T8216] 
[  181.667094][ T8216] -> #3 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}:
[  181.670594][ T8216]        lock_acquire+0x1d1/0x380
[  181.672712][ T8216]        down_write+0x86/0x1f0
[  181.675165][ T8216]        __sock_release+0x86/0x260
[  181.678397][ T8216]        sock_close+0x1c/0x30
[  181.680900][ T8216]        __fput+0x3fb/0xb50
[  181.683045][ T8216]        __fput_sync+0xd7/0x100
[  181.685007][ T8216]        nvme_tcp_alloc_queue.isra.0+0xb26/0x1340
[  181.687662][ T8216]        nvme_tcp_configure_admin_queue+0x26/0x530
[  181.690172][ T8216]        nvme_tcp_setup_ctrl+0xa4/0xa20
[  181.692409][ T8216]        nvme_tcp_create_ctrl+0xdb8/0x1430
[  181.694952][ T8216]        nvmf_dev_write+0x4ee/0xb60
[  181.696959][ T8156] usb usb8-port1: attempt power cycle
[  181.708905][ T8216]        vfs_write+0x2aa/0x1040
[  181.710617][ T8216]        ksys_write+0x12a/0x250
[  181.712624][ T8216]        do_syscall_64+0x123/0x7b0
[  181.714821][ T8216]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.717622][ T8216] 
[  181.717622][ T8216] -> #2 (nvmf_dev_mutex){+.+.}-{4:4}:
[  181.721176][ T8216]        lock_acquire+0x1d1/0x380
[  181.723327][ T8216]        __mutex_lock+0x19f/0x1c10
[  181.725382][ T8216]        nvmf_dev_show+0x26/0x210
[  181.727365][ T8216]        seq_read_iter+0x32f/0x1270
[  181.729492][ T8216]        seq_read+0x33b/0x4c0
[  181.731568][ T8216]        vfs_read+0x1e4/0xb30
[  181.733787][ T8216]        ksys_read+0x12a/0x250
[  181.735820][ T8216]        do_syscall_64+0x123/0x7b0
[  181.737951][ T8216]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.741790][ T8216] 
[  181.741790][ T8216] -> #1 (&p->lock){+.+.}-{4:4}:
[  181.746315][ T8216]        lock_acquire+0x1d1/0x380
[  181.749340][ T8216]        __mutex_lock+0x19f/0x1c10
[  181.751764][ T8216]        seq_read_iter+0xe1/0x1270
[  181.754220][ T8216]        kernfs_fop_read_iter+0x46c/0x610
[  181.756761][ T8216]        __kernel_read+0x397/0xac0
[  181.760062][ T8216]        integrity_kernel_read+0x7e/0xb0
[  181.764647][ T8216]        ima_calc_file_hash_tfm+0x25e/0x350
[  181.768855][ T8216]        ima_calc_file_hash+0x1e3/0x380
[  181.771435][ T8216]        ima_collect_measurement+0x952/0xb30
[  181.774784][ T8216]        process_measurement+0xe04/0x2360
[  181.778708][ T8216]        ima_file_check+0xbf/0x110
[  181.782288][ T8216]        security_file_post_open+0xc4/0x210
[  181.787476][ T8216]        path_openat+0x5d0/0x23f0
[  181.790275][ T8216]        do_file_open+0x20e/0x430
[  181.792765][ T8216]        do_sys_openat2+0x163/0x1d0
[  181.795339][ T8216]        __x64_sys_openat+0x12d/0x210
[  181.798916][ T8216]        do_syscall_64+0x123/0x7b0
[  181.802317][ T8216]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.806344][ T8216] 
[  181.806344][ T8216] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  181.810890][ T8216]        check_prev_add+0xeb/0xe60
[  181.814017][ T8216]        __lock_acquire+0x1528/0x1f40
[  181.816276][ T8216]        lock_acquire+0x1d1/0x380
[  181.818268][ T8216]        __mutex_lock+0x19f/0x1c10
[  181.820503][ T8216]        process_measurement+0x5ab/0x2360
[  181.823004][ T8216]        ima_file_check+0xbf/0x110
[  181.825689][ T8216]        security_file_post_open+0xc4/0x210
[  181.828669][ T8216]        path_openat+0x5d0/0x23f0
[  181.830929][ T8216]        do_file_open+0x20e/0x430
[  181.833410][ T8216]        file_open_name+0x1c3/0x3e0
[  181.836069][ T8216]        filp_open+0x2e/0x50
[  181.838212][ T8216]        kernel_read_file_from_path_initns+0xec/0x240
[  181.842819][ T8216]        _request_firmware+0x6f1/0x1410
[  181.845681][ T8216]        request_firmware+0x35/0x50
[  181.848647][ T8216]        reg_reload_regdb+0x87/0x540
[  181.851371][ T8216]        genl_family_rcv_msg_doit+0x214/0x300
[  181.855129][ T8216]        genl_rcv_msg+0x560/0x800
[  181.857707][ T8216]        netlink_rcv_skb+0x159/0x420
[  181.860148][ T8216]        genl_rcv+0x28/0x40
[  181.862768][ T8216]        netlink_unicast+0x668/0x950
[  181.864932][ T8216]        netlink_sendmsg+0x9ac/0x10c0
[  181.866984][ T8216]        ____sys_sendmsg+0xa99/0xc30
[  181.868965][ T8216]        ___sys_sendmsg+0x190/0x1e0
[  181.872452][ T8216]        __sys_sendmsg+0x160/0x210
[  181.875840][ T8216]        do_syscall_64+0x123/0x7b0
[  181.878116][ T8216]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.881188][ T8216] 
[  181.881188][ T8216] other info that might help us debug this:
[  181.881188][ T8216] 
[  181.888871][ T8216] Chain exists of:
[  181.888871][ T8216]   &ima_iint_mutex_key[depth] --> &sb->s_type->i_mutex_key#13 --> cb_lock
[  181.888871][ T8216] 
[  181.898491][ T8216]  Possible unsafe locking scenario:
[  181.898491][ T8216] 
[  181.904303][ T8216]        CPU0                    CPU1
[  181.907560][ T8216]        ----                    ----
[  181.911292][ T8216]   rlock(cb_lock);
[  181.914169][ T8216]                                lock(&sb->s_type->i_mutex_key#13);
[  181.920615][ T8216]                                lock(cb_lock);
[  181.924316][ T8216]   lock(&ima_iint_mutex_key[depth]);
[  181.926390][ T8216] 
[  181.926390][ T8216]  *** DEADLOCK ***
[  181.926390][ T8216] 
[  181.929346][ T8216] locks held by syz.0.559/8216: 1, on CPU#2:
[  181.932560][ T8216]  #0: ffffffff91fd0a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  181.937140][ T8216] 
[  181.937140][ T8216] stack backtrace:
[  181.940071][ T8216] CPU: 2 UID: 0 PID: 8216 Comm: syz.0.559 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  181.945554][ T8216] Tainted: [L]=SOFTLOCKUP
[  181.947878][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.953871][ T8216] Call Trace:
[  181.956099][ T8216]  <TASK>
[  181.957959][ T8216]  dump_stack_lvl+0x100/0x190
[  181.961650][ T8216]  print_circular_bug.cold+0x178/0x1be
[  181.965428][ T8216]  check_noncircular+0x146/0x160
[  181.968380][ T8216]  check_prev_add+0xeb/0xe60
[  181.970273][ T8216]  __lock_acquire+0x1528/0x1f40
[  181.973955][ T8216]  ? genl_rcv_msg+0x560/0x800
[  181.977264][ T8216]  ? netlink_rcv_skb+0x159/0x420
[  181.979677][ T8216]  lock_acquire+0x1d1/0x380
[  181.982350][ T8216]  ? process_measurement+0x5ab/0x2360
[  181.984466][ T8216]  ? __pfx___might_resched+0x10/0x10
[  181.987025][ T8216]  __mutex_lock+0x19f/0x1c10
[  181.989949][ T8216]  ? process_measurement+0x5ab/0x2360
[  181.993293][ T8216]  ? process_measurement+0x5ab/0x2360
[  181.996272][ T8216]  ? __pfx___mutex_lock+0x10/0x10
[  181.999968][ T8216]  ? rcu_is_watching+0x13/0xc0
[  182.003841][ T8216]  ? trace_kmem_cache_alloc+0xdd/0x100
[  182.006851][ T8216]  ? __kasan_slab_alloc+0x89/0x90
[  182.009500][ T8216]  ? find_held_lock+0x2b/0x80
[  182.011982][ T8216]  ? process_measurement+0x5ab/0x2360
[  182.015926][ T8216]  process_measurement+0x5ab/0x2360
[  182.019450][ T8216]  ? __lock_acquire+0x5c0/0x1f40
[  182.023141][ T8216]  ? find_held_lock+0x2b/0x80
[  182.024928][ T8216]  ? __pfx_process_measurement+0x10/0x10
[  182.027190][ T8216]  ? lock_acquire+0x1d1/0x380
[  182.029557][ T8216]  ? fscrypt_file_open+0x48f/0x5c0
[  182.031526][ T8216]  ? __pfx___fsnotify_parent+0x10/0x10
[  182.034065][ T8216]  ima_file_check+0xbf/0x110
[  182.035746][ T8216]  ? __pfx_ima_file_check+0x10/0x10
[  182.037762][ T8216]  ? vfs_open_consume+0x334/0x460
[  182.040479][ T8216]  security_file_post_open+0xc4/0x210
[  182.044457][ T8216]  path_openat+0x5d0/0x23f0
[  182.047741][ T8216]  ? __pfx_path_openat+0x10/0x10
[  182.050661][ T8216]  ? kasan_save_stack+0x3f/0x50
[  182.052957][ T8216]  ? kasan_save_stack+0x30/0x50
[  182.055293][ T8216]  ? kasan_save_track+0x14/0x30
[  182.056809][ T8156] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  182.063975][ T8216]  ? __kasan_slab_alloc+0x89/0x90
[  182.066934][ T8216]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[  182.069378][ T8216]  ? do_getname_kernel+0x5d/0x250
[  182.071329][ T8216]  ? filp_open+0x1d/0x50
[  182.072950][ T8216]  do_file_open+0x20e/0x430
[  182.074699][ T8216]  ? netlink_unicast+0x668/0x950
[  182.076577][ T8216]  ? __pfx_do_file_open+0x10/0x10
[  182.078549][ T8216]  file_open_name+0x1c3/0x3e0
[  182.080497][ T8216]  ? __pfx_file_open_name+0x10/0x10
[  182.082914][ T8216]  ? do_getname_kernel+0x5d/0x250
[  182.086376][ T8216]  ? __asan_memcpy+0x3c/0x60
[  182.088919][ T8216]  ? do_getname_kernel+0x1be/0x250
[  182.089856][ T8156] usb 8-1: device descriptor read/8, error -71
[  182.095223][ T8216]  filp_open+0x2e/0x50
[  182.097877][ T8216]  kernel_read_file_from_path_initns+0xec/0x240
[  182.103554][ T8216]  _request_firmware+0x6f1/0x1410
[  182.106169][ T8216]  ? __pfx__request_firmware+0x10/0x10
[  182.109821][ T8216]  ? lock_acquire+0x1d1/0x380
[  182.113088][ T8216]  request_firmware+0x35/0x50
[  182.116056][ T8216]  reg_reload_regdb+0x87/0x540
[  182.119162][ T8216]  ? __pfx_reg_reload_regdb+0x10/0x10
[  182.122594][ T8216]  ? nl80211_pre_doit+0x570/0x1ed0
[  182.125901][ T8216]  genl_family_rcv_msg_doit+0x214/0x300
[  182.129364][ T8216]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  182.132980][ T8216]  ? bpf_lsm_capable+0x9/0x10
[  182.135214][ T8216]  ? security_capable+0x80/0x260
[  182.137149][ T8216]  genl_rcv_msg+0x560/0x800
[  182.138992][ T8216]  ? __pfx_genl_rcv_msg+0x10/0x10
[  182.141054][ T8216]  ? __lock_acquire+0x5c0/0x1f40
[  182.143135][ T8216]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  182.145889][ T8216]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  182.149767][ T8216]  ? __pfx_nl80211_post_doit+0x10/0x10
[  182.153226][ T8216]  ? __lock_acquire+0x5c0/0x1f40
[  182.155971][ T8216]  netlink_rcv_skb+0x159/0x420
[  182.158866][ T8216]  ? __pfx_genl_rcv_msg+0x10/0x10
[  182.161719][ T8216]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  182.164496][ T8216]  ? netlink_deliver_tap+0x1ae/0xb50
[  182.167906][ T8216]  genl_rcv+0x28/0x40
[  182.170685][ T8216]  netlink_unicast+0x668/0x950
[  182.173973][ T8216]  ? __pfx_netlink_unicast+0x10/0x10
[  182.177183][ T8216]  netlink_sendmsg+0x9ac/0x10c0
[  182.180266][ T8216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.183840][ T8216]  ? selinux_socket_sendmsg+0x198/0x2f0
[  182.187439][ T8216]  ? ____sys_sendmsg+0xa99/0xc30
[  182.190610][ T8216]  ____sys_sendmsg+0xa99/0xc30
[  182.195222][ T8216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.200509][ T8216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  182.204310][ T8216]  ? plist_check_list+0x1b8/0x280
[  182.206941][ T8216]  ? plist_del+0x308/0x510
[  182.209290][ T8216]  ___sys_sendmsg+0x190/0x1e0
[  182.212054][ T8216]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.215439][ T8216]  ? futex_wake+0x220/0x5e0
[  182.218330][ T8216]  ? find_held_lock+0x2b/0x80
[  182.221513][ T8216]  __sys_sendmsg+0x160/0x210
[  182.223837][ T8216]  ? __pfx___sys_sendmsg+0x10/0x10
[  182.226749][ T8216]  do_syscall_64+0x123/0x7b0
[  182.229028][ T8216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.232726][ T8216] RIP: 0033:0x7fdbabfa94d9
[  182.235415][ T8216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.263854][ T8216] RSP: 002b:00007fdbacebc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.266912][ T8216] RAX: ffffffffffffffda RBX: 00007fdbac226090 RCX: 00007fdbabfa94d9
[  182.269818][ T8216] RDX: 0000000020008004 RSI: 0000200000000c40 RDI: 0000000000000005
[  182.273535][ T8216] RBP: 00007fdbac03804e R08: 0000000000000000 R09: 0000000000000000
[  182.279180][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.283886][ T8216] R13: 00007fdbac226128 R14: 00007fdbac226090 R15: 00007ffc6b7cd018
[  182.299719][ T8216]  </TASK>
[  182.350752][ T8156] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  182.378455][ T8156] usb 8-1: device descriptor read/8, error -71
[  182.491967][ T8156] usb usb8-port1: unable to enumerate USB device