last executing test programs:

2m38.926284374s ago: executing program 32 (id=723):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
fchmod(r0, 0x141)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2m18.125326651s ago: executing program 33 (id=758):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xa006}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

2m15.959948447s ago: executing program 34 (id=768):
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_intel_vmwrite_mask={0x154, 0x0, {0x2, @guest64=0x2801, 0x72, 0x769f, 0x3}}, @wrmsr={0x65, 0x0, {0x28d, 0x7}}, @nested_amd_vmsave, @nested_load_code={0x12e, 0x0, {0x0, "400f01c8dbe466baf80cb870b1d48eef66bafc0cb803499658ef66420f3a16070f430f01cf0f017a09c483ad7c554a04440f23d70fc734d5f4ffffffff6e07"}}, @out_dx={0x6a, 0x0, {0x78fc, 0x1, 0x8}}], 0xcd})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m13.488248284s ago: executing program 35 (id=784):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m4.635112348s ago: executing program 36 (id=808):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x37f482, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200)
rmdir(&(0x7f0000000180)='./cgroup/../file0\x00')

1m53.22111214s ago: executing program 37 (id=842):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="1a", 0x1)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m50.783341063s ago: executing program 38 (id=852):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840)

1m26.74866714s ago: executing program 8 (id=1086):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r2], 0x0)

1m26.492581391s ago: executing program 8 (id=1087):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e)
sendmsg$inet(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x80)
lseek(0xffffffffffffffff, 0xffffffffffffff7f, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0)

1m26.375097296s ago: executing program 8 (id=1088):
listns(&(0x7f0000000040)={0x20, 0x0, 0x0, 0x2000000}, 0x0, 0x16, 0x0)

1m26.374554949s ago: executing program 8 (id=1089):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x9, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x10005, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x200, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)

1m25.912420244s ago: executing program 8 (id=1090):
unshare(0x20020480)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
unshare(0x42040280)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x406, r1)
write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @buffer={0x0, 0x1f, 0x0}, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0})

1m24.602249253s ago: executing program 8 (id=1097):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x400000001, 0x4)
close(0xffffffffffffffff)

1m24.506616481s ago: executing program 39 (id=1097):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x400000001, 0x4)
close(0xffffffffffffffff)

1m18.382865205s ago: executing program 9 (id=1171):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000811)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0)

1m18.316396068s ago: executing program 9 (id=1173):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x135, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
ptrace$poke(0x420f, r2, 0x0, 0x101)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

1m17.987548592s ago: executing program 9 (id=1178):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001600)}, 0x0)

1m17.920292729s ago: executing program 9 (id=1179):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r3 = gettid()
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x3ffe, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
syz_open_procfs$userns(r3, &(0x7f0000000000))

1m16.9277277s ago: executing program 9 (id=1187):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x8014)
sendto$llc(r0, &(0x7f0000000c80)="8aee667e18f99c85bfbc35b7448269a7fb9a6543e98f96c36b0bc9fd16562197c253e11c7280b53c04066c322c79a626c84bb4651245f50429ecf5c0cf4b3890269964ebb49a50f3c61211d8a5b0b4e71dac3551e199add967860231ec72c387c170a361630be14aa644b6c701953eb2338df9e52ed0ddfc36cf549ee29078c5f4fd13031f13f3a0d66b3f80a31457753618887f89d66f2e3e0c005f6d3669e4efe047b099f453f708930dc167e765badd7e962f48fb3c755ccd57be46e5928cc6be0bd191adb5e4bb3b713a77380fe92096727dce85fb42e6b4d398166b5b6ac492430c2468c9fbd530979c9fb31414a73201d42c7c9ea79aca1e0d790d68b07565432150268772ace00521ca79af552c4dea1b22e07a6b5774481bb9922ca4a5642aa73574b3c7d806cac61c4616b19c691f5708031669c408a1c7f2aeb3c2a57cbb37e2a7fab9904a723fda2fbdddae2116ac3652168331a88d9704f15b139e3a61a5bbdc9f880a7bb3bc1a631adf9998413fb980de167e1e9d5276afd87a5596c4a9362ea181427cd3315a77fb902616f37ac1ce35a8d598df82610a9a01ba66dd5f345995142f4c10e6bcf514f0088fc1e99b3b2dbfbfcead83764ba6af8b96c5e222b5a519fff519b22a809d1377d265ef16e5258d5eb8fee3ebd7f66db8e1c48aff3800516929326975e04de9c7dea56d781874bc8f72de0745594ea261fa2ce2e314c18ee036fa5ddab9d31d81ddd3867f6d06a440f64f24a51bec8a0c94cf7a4947468911a2321409a043e45bcc574da257b8f68ea98b7977188667475f1638707c7ee32e8ee81dd53c08eb747778e965374be17e8f7163fdbd6048cc14a02fa6d3d7d5406660d21a6e9856ad037d4b3451a00b93d478c9123cfadc327ab5b4bf6ebde31cea50c9cc1cd6a0c509fcd6ef2c32ca6d373ca27d920822298b01a81512c1fbbae770853316f2b7adefb8bff8e133fc9b317dfc59807dd660abf124f47c85d3037596ae19b4fed93d847cf4b300b2dbe95393fb43a24592108bd684020985fcf89e38a1f7434c2c8540604e616f673f5d6a88a0a0dfc43cc90f8f3f62cc0f7d509d3445efaa132c20f72a74dd1f8a1d5c37f440436d4599dc8cae65343551c1dfb231c75db4050c207f129e00458a2d3de43b497f650b07769ed87bb56b538e2626462a2c8c2c2d9a483343b50f2319ae4c9c612b3ded7e50b898c910edaaf7c284b03bddac128c95b630c210213f2f4a8882196546133ebbd8aab3bfe81979115d9a941029ed964551d2beb8d5d781ebbeb143787fde7b1c8141de7deae5c215e07716d13a70b644403738fa2b96f2a4487f75768f2990f20f95739c98693d774fee9760745f166fa2ebaaa5d39304f2a1c80c5ef12f5470012eb3225482f458bc84ee723f326ca80406975238b25b94d82099ac9244069262a095a7f683968b6e514595b5cfcdcb8af92a7a908bcf4bfd20ab91955a9fc2e6da4d2a8339891375ea1ec1e080bd6b417cc54a5ac2b079dd951c9e5321bdeee50a12d60096f356704db029cd4fd3e61c0c51942928e301052e8b847b2f8e28c62b1758769e0450a8aa771bfe5b6e5b243f18361691eaee11a95657c9361f2165307a0a56aa50d17c9d8cbaa82b6e0a13254d0b78dfa8239cd612ad969135f65c89423a37b90610d3db8680816a53f2956aa616c9cc6452874374d431833ccbe46fde0bd201d659041b99e30fe6d694705acac53ca4fc11f01901d35b5091912556aa1862b7b0ee426b94293491f55e6cd81ee0551ff02c955f01817b615cf7aaac1baa14336d42055e53af9e49f2f64b219976daf31fc8096baac5128b2f78bcafeda700638f45e1ac3960906f97233fdb8e4ddc5f23dca7702dc10772904842c57ecfd056ba4eb17f8d5feb7fa7fd4f336c813e40f45dde10ee8fee0919e2755b6f1ea4a77980354b1d3697a84f85533b0936e293fa3b45e9ede4619737fb0a89734d88d8719c20d9060b5dd6579e330430bf9484e8340cc61df1c5b0a10ce38fdbb95e0706cf69c7039edac32b7e29a03e525e516752ac3506c46effbb0c8b5f7b93c0c18ee803c32121e7be19f3fca780ff4b024b5fdb1e80e0f74da1af3f2319b2dfb6b55aac85292ac1f296e363e30e80f0e3a26ea086e31408afae769f4a5608c61735d0a4ac313cf132a59c2fe3a6474006d8b5c27ad5e2d92f3c018bbebd31e0176b6eb7a0cb1e2529fbd2636754c13b0455310dee0a2b8fe4df9852f2fde3d0d1b8df6196e36cf4731b944ed918b6812beb936e4b2b1fa3f2120a9de4db6205d5cb63ae23a6a35fbbd5a3db9fd6ffaa73f276a1e0dcb390376a3660a0668d706ba76f2664aacd641e037977d0d4ce0f38514e323c78592d1ac53ca845db315687da5882bdefea409896be19352304e242080bfdf54c7fcd68ecf2a940f8b5f062a10ffc23510420dc5bdf4ba3969125abaf9f925a1aea5706df7e2376b1d7a99bd4c8fc68d9290b6558b4d48c2f929288d95231be33bfbcf7e8f36da61e4539f7f3764a2707657f5ba244e145611fd42a6abc14188063bf2efd8a0c0def79491760ddd05c5ee4c9afc3ac5b5584fad6dd295b87b874276fb7bb20280e80b778ebf3989ca2173fbd84424b7170d25202c0fd4d3f63175ece516bc6416a842ceaee6ef1f1c2fbca6996e85d2c375bb556249dd4ce58e9b92f8e349253c947d66239b8d423db406c22275baa11eeee43ec93484fe05426b240f566453ff69fa425ca8603cebf9c63d8d418147014c719714ae4b969704ddef3597b0c1a8853c7ab5bc23e561b2ce4271dee3f2eb377da49ea9ee6f9e907b29c57d86569bef01e6a9648cf79996577c1aea513825436455b92cfe18e19599fd9ad723b43af468d999857431a355d0d83e8751293acf87c96a049a0ac51ec75643a672da35cd921e062136d7f353a6821d821fa318d0d3a7b94763cfb513c56326a5f02d0750863b08b37d5e1b0e33519069a1f04378f709a1b5a941f80b71fee6bfbe296c779986a3791a1f9709f099074ed9aa9e7b2c533c2a4306cc6a5d4f9a697731cea683bcdc19254759a770ee32a6198f9a88a82dab86ac6c22e06d05102c0ad9d0fd1be14a573a9e5c3c01a265b8ab51f57ad21cf115df54ff9df4055ebdfb6f94b77ccee3cad93dd1013ac9ac9fd56acf087fd3a9ed2641e33cebd1b92544edf9440e846f05ac44ba3b76cd09fd050353e8d0056bbe57a0cf1f2929286eb4e595e858ccd36ea529e7e039a38706b8b7067b428d0a1a4543866b42b756fdb1f538b61e9df38b046c3fd560c52c01ab3d139eeffcd9002a5c79a20916f00574571e264b6d54f5c73a4d47a47bb8a1f338fff079beb8ade6894146f9f2c01f908c6227cc8688e91a4bb26e5367b91afdc28f7e64dc3d4f4a5ba7ad35f388efefaa89861fbdc949f748ccbaa6e84bc52f3c9a0e43e18f61d190ceac1e6c69f4b89a7795f036ecd510769d96dc355944e321e7061d47e12f2b20cfd218f6c9121cb20a384970f3d024eb74ac349d63d480bed5401cdf08c117cebc7ca423bcf5b511ff3c6ea37f372f53f5fa0f1e5763c663dced82d7b8e403a187155f76137e40f46d5e2b2cbddbfb33aa854cb67aa9b5c632077f6d6b2ef54c2ec5cf7f4b37c8614c42e608392dffb6f654adc4864af09d2cb66aad37d1fa930cbb0f2632a258372c257589515607b3e2d12e1401413da99a728bf48a530ea8cfe7454f52ec663e3d58da13343cdf99ef121f288a2148db4bf9e1369b12f3ef6a79c4a70e3bf53390119c7b0d64273daf5e2f5385a882f87b5d3dc8f53d09bc6c921ddd9e3bf2368d20495ca50ccfec9f020dbec60be4fc036eafa1ec861718721f95c2f5076e4f99709cc0c0fb4ec23ac06b103592bcbb3d269b85ab46e6e155d1fbcef6db165f55690ce8f82e0871662d5ad6d9c6754faaa75a1a3a2ba34234530f2f3a623d9750f8cecd2ef3825fdd98b7c53ebed0467f3f6b2c328d20ead1ae9aab6476094a8daec65338445cc65d699f6c0f10a28769bc169fe56f7fe2f3e22666f9db38f9e13b3ac9b2e426a4de7388091347a5bc1ffc2ae147b906c6d31c0a4682c636c381e33f5f533f8cf689098acc461ba36ca97fe5d43d8970660521c976263c1671816a87e4b1af8f33c4cb4ee0a8b97908c2801e657b27c0a0efa8652f5909ffa12eb6ca92cecc675704011dd67f9174e23706df01fa9b96012398f4ddce66985713dfe5289b06d1d986d5775eddf2d9edce0e5cca100b56f66f60c3f400254d46414cd454cfa29fb39bfcca47942607b05da95a9c5ac9ced72d8499b4cb8260ecd5aade46ef4a9240e9009858641d84249d7e30bfec5a144221f69f70d75b70da8eb8b06f0c6778a587063bfe7ff524de8a9a8ddf1450030932f19d5c51b43291b3c85f85c714b365ecf2f08dcab03f05d76402f3bdb685bdba3df99b77644c130a4b18e8bd32ecb15c1fd274e0388c68daf150aa8e588babcc5878c6040e7cefbf9f881f022d3076bab2f65fb126d93327fc07bfc6bc428beec3e1819300f0952e48097fcb82ebb3720dcc767096a39a13aabb54f5cd75373e495060b2d5cfa24b111a133eca25751342c18eff0731d4410516803b9ee63c534b8c859ac3267a0f5a895a3e3748f6449eb4599c831dc8937f15d991d95efc45b9da5873965c94e0a6f5ff991aa65de92b336fc0b07e744b754cbadd066314508ed38d6fd26d2d952a3ef1bb2b2c4f129d16c5139406adf11a4e5ba5e348ce7782d522d996448a37877385fd2cd179369dc86722d6f3dd491dd299b17a66f7c8ec123aeff8578ffea63131e73006635671f3285a47bacb4275675b65de1dbe5ff6cb46faf9730a07915498eedb1ed9155bc487e6a695d69bc62f7d7e72102458e119e02aea10ba6e52c5baa3ed5110ff66cd04c938cd008159294128d259bedf7c445f3ca76a358d530a1e8472b40e30b915968c5642792220e5579cbf203aa6dcb8e7bb0588c33ec8e9d82fcac2ab07923c253f03dbe8fa1dcff4720ed828aeb9be1d538c344c8f5e01d4a5f920630d538049e9f88893abcfa8f09b2f1bd9f6edf901c659079254309de7b1aeefe9e9c7eda18039b02b2be1f44f0d02119bbfe68116ea60da47ead56f0dfe35a6e4cb31ca7948e156a2238213ce4fbc03fefdd05293e983b3d9781754c1d443bb400851448658642cf4fe3f561d9bfb823869e5f2da83db223983f2d463b2ee73a4c48be53b3c1fc80da4957078e8f1e451daa2a8263c294849aefb5bf68231d80d27596ed4a059ffe82e7146736139ab0b5ee9024479155bc75baa31e6841583b5dea1f13487c9003536ddfd9867102e7056b98f19a4f945f218ba4ff774dd25eaed9d2c7a0e8448a0bf4688b0846246a16ef913cf362f98fa21038d9b876db25a367b203eb4071647f73aa2f7921b205eac5dc4432fb99ac3a4c5e2e7bac0a43f1cb86ce808f83d58976ac0d976a7eb3325665d7874a6b3bf85b53c22764608663a74301daa08296dc6f0aef0e75d31fcae959a3e0fa58637492981bce8f619fd1a2130235468080f5ec4c221d837680bdedbeea458b581b22f2d311148b84a94d570ab066e9a791343c25e8a570bacfb27a9aeced1809a0f95181b6da5ba6b1aff9309dafd3ff6816781850d70e929a0e949844edd07e9fe9e5fa33db3779cf17d42116c9c23d09e4cb305a7b491d3d3ac99e8ec2e0ac317d68b66ec6385f933dc2b3175b03adfe1c83827ce6994f17ecbf78d57542f4", 0x1000, 0x1, &(0x7f0000001c80)={0x1a, 0x18, 0x1, 0x7, 0x4, 0x0, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000200000001031dbd700affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2040)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x6}}, './file1\x00'})
listen(r0, 0x200)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01082cbd7000fedbdf250c0000001800058008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1b0, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf2c2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbb6f87c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000080}, 0x14000)
accept4$llc(r0, 0x0, 0x0, 0x80000)

1m15.198715634s ago: executing program 9 (id=1191):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000811)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883", 0x4}], 0x1}}], 0x1, 0x0)

59.187820094s ago: executing program 40 (id=1191):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000811)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883", 0x4}], 0x1}}], 0x1, 0x0)

53.174168777s ago: executing program 6 (id=1393):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001)
ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x11, 0x2, 0x6, 0xa, 0x1, 0x0, 0x3, 0x4056, 0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x6a0, 0x0, 0x80000006}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090325bd7000ffdbdf250800000008000300", @ANYRES32=r8, @ANYBLOB="08000600ce"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r8, 0x29, 0x4, 0xb, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x8000, 0x5, 0xa65}})

52.913307468s ago: executing program 6 (id=1397):
syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000))
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
ftruncate(r0, 0x3)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0x100, 0x4, 0x0, 0x3, [<r8=>0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={r8})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010024bd700000000000250000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x22048041}, 0x10)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
ioctl$SNDCTL_TMR_START(r0, 0x5402)

52.757513808s ago: executing program 6 (id=1399):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000101711058000000000095000000001008"], 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6e8a)

49.754964466s ago: executing program 6 (id=1412):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3, 0x4, @vifc_lcl_addr=@remote, @private=0xa010104}, 0x10)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x1, 0x80, 0x3, 0x27e}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x180}}}, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0x5fd7, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]})
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/239, 0xef, 0x1, &(0x7f0000000680)=""/214, 0xd6}, &(0x7f00000007c0)=0x40)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x80)

49.558899035s ago: executing program 6 (id=1415):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000140))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, '\x00'})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0x10, 0x66, 0x1, 0x3, {0x4e21, 0x4e23, [0x1ff, 0x3, 0x7, 0x200], [0x2, 0x7, 0x3], 0x0, [0x0, 0x8]}, 0xf4f, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xba, 0x1, "d55deebc2520441c79561315c10025d2706cac981f36c41f73377207f793c24a0050d5cb2d3f7a55349878ef7b9c2f1093d6716bedd2addc9ce7b888532356730ac4466f8ae7082fd7fc8235952dc4f2e4a305f8fd2e82fc7e2e1c9671769c8015e00c0f62c883a5c44a7de91b1c59d0890928d3a0eb3ed97e25b14a86a1060576d0014384e9e41f407fae45e41a4cdd06ebe2778c59ad3dddeab984ff0fe4b809688a39e04f8cda07b1740e62902fd465c5ec24983c"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a3b7de05c43919957e21b6a99ad38b858e4cdb8135cb1edc7611f25712a40066db70b37d2cd5fc78a12d44ceff10777f49f58af5e8b908fe06f1a3de8707042baa5914324a581cfdd318c9478e15229a5a169f12d04ff019d6f7f6cbb9ff966e7f050d527214086976f7625380217f94b316b95db67b"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4800}, 0x4001)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x400}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x44)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r9)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r9)
setns(0xc9, 0x0)
r10 = socket(0x2a, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c)
recvmmsg$unix(r10, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)
r11 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000000680)='.\x02\x00', &(0x7f0000000380), 0x814c18, &(0x7f0000001480)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRES32=r9, @ANYBLOB=',wfdno', @ANYRESHEX=r11, @ANYBLOB="000016b22dac9f1ed3ea8b1171997cb29e435669b335a2e81f336ff513f414a48592b524163a0187672d875cdd48b6b74659f75b19e58855c04ce289776d38e2fd08a5cd98aca0b7dbf627ad9d79eaea65f5462546472adb79e891961282db1180e718637cb812a96d757a00685ae156e148e5fee4bdccbb75582d35bbf7f70267008086837a17563d5e2ec1994e1f6e62195b8d0ce5d321"])
mount_setattr(r9, &(0x7f0000000040)='./file0\x00', 0x9100, &(0x7f00000000c0)={0x100005, 0x4, 0xc0000, {r8}}, 0x20)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r8, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="420f01c90f013fd35a00460f00921ea100000f09400f01df66b892000f00d8ffe66736260f74dc6466460f0b", 0x2c}], 0x1, 0x70, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000))

48.704667672s ago: executing program 6 (id=1424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002f00090027bd7000000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (fail_nth: 13)

48.549226883s ago: executing program 41 (id=1424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002f00090027bd7000000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (fail_nth: 13)

42.432078588s ago: executing program 1 (id=1472):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000)
setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x4c, r0, 0x1, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0)

42.295708786s ago: executing program 1 (id=1473):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00')
readv(r2, &(0x7f0000001680)=[{&(0x7f0000001640)=""/24, 0x18}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902"], 0x0)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000004c0006804300040067636d28616573290400000000000000000000000000000000000000000000001b000000000102030405060708090a0b0c0d0e0f10111213be277a251e66470004000500"], 0x60}}, 0x0)
shutdown(r3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x103)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000300)={<r7=>0x0, 0x73, "8198a3e87561e50b0ef05397cf180d54aadaa6b0dc2f6655b02a5592becccb01dcbe01d1d1aad426edbc500e835a523a2ccce4cc674fbe9636368f081439a965fb2e9e9ff708312f6c936ad31e4f7084bd71656e0bb745275f3241ce7a6301ccbdf21c740a09e4a2b49f69e86f9672c65026e1"}, &(0x7f0000000380)=0x7b)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000003c0)={r7, 0x94, "1b1c5ee7b508d42ef08918d86ef376cfd42389e478ad86b958936932aa20f78b7f0d32b55c87a326999c1a68776631a81556522a8585b7e2eb028522062cdc3e44bfa2567cb4a7ee8b91e7665f4e43e86829698edec1e54e7de5c39f2b15a6fd64b119e63029140d619f074fc5fcc0085c704c68fe1214ff1b57bd739ae429944c4c05f960e755eefe4d5da4eeb8809708642fba"}, &(0x7f0000000480)=0x9c)

40.814574379s ago: executing program 4 (id=1488):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)
fallocate(r2, 0x60, 0x6, 0xe8e8)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000580)='veno', 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r3 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

40.814451565s ago: executing program 1 (id=1489):
r0 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

40.689830864s ago: executing program 1 (id=1490):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

40.585504263s ago: executing program 1 (id=1491):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchown(r0, 0x0, 0x0)

40.499106441s ago: executing program 4 (id=1492):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 12)

40.083660964s ago: executing program 1 (id=1494):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r0], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000580)='veno', 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r2 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

39.922927092s ago: executing program 42 (id=1494):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r0], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000580)='veno', 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r2 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

39.869646054s ago: executing program 4 (id=1496):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}, 0x922bac8556bdad8e) (fail_nth: 3)

39.794954113s ago: executing program 4 (id=1499):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

39.674212754s ago: executing program 4 (id=1500):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)
fallocate(r2, 0x60, 0x6, 0xe8e8)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000580)='veno', 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r3 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

39.377968912s ago: executing program 4 (id=1502):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0)
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0)
close(r0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_AIE_ON(r1, 0x7001)
r2 = socket$pppoe(0x18, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0xc01, 0x4)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x11, 0x2, 0x6, 0xa, 0x1, 0x0, 0x3, 0x4056, 0xffffffffffffffff})

39.259780296s ago: executing program 43 (id=1502):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0)
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0)
close(r0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_AIE_ON(r1, 0x7001)
r2 = socket$pppoe(0x18, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0xc01, 0x4)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x11, 0x2, 0x6, 0xa, 0x1, 0x0, 0x3, 0x4056, 0xffffffffffffffff})

32.120033004s ago: executing program 2 (id=1536):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

32.046339163s ago: executing program 2 (id=1538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r4, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe})

28.564568523s ago: executing program 2 (id=1566):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r0, 0xa)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='r', 0x1}], 0x1, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "010000"}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000000408010200000000000000000500000706000240055000000500030084008000"], 0x24}, 0x1, 0x0, 0x0, 0x28c16562e159cd74}, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

28.436356023s ago: executing program 2 (id=1568):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
listxattr(&(0x7f0000000080)='./mydev/ttyS0\x00', &(0x7f0000000140)=""/78, 0x4e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x12500, 0x0)
close_range(r0, r5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x8a9f06c3e105c429, 0x1d9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r6, &(0x7f0000000240)='./file0\x00')

26.736656767s ago: executing program 2 (id=1577):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x260, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x24c, 0x1, [@m_ctinfo={0x22, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x100, 0x20, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0xcb, 0x6, "07f665430bec49afd31dd583b141c6422541ffeae8349611d4102dafbfb2dd65c8f35a3558f522223e7611cee7e33e02dfb1998ddf5d6d4cf7bd09b1399eb4f9cc948013e8b9855a44e74bf470427b0224f37a5eaa9ef67ce358ab1bc31a16fe941572949fdb5ad707ac392f6e98f2910168015dfc5268ea51c64405d6f862c2fe5dc9a8fa4d8187635d19f45e4f1fc89c7984ee008b3217686fa797762de46175b0b1b4c44a0169972de600c1dfb53d1eb324774347bd5429af5652d5230bec1d1ea564563d1e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x118, 0x17, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0xce20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x3a}}, @TCA_CT_ACTION={0x6, 0x3, 0x30}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x6, 0x4, 0x85f, 0x5d}}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x8000, 0xfffffffffffffff2, 0x8001, 0xd}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0x81, 0x6, "9a12487e4bc82202faa7207d22866f54f2fd7bd66fbd46cc7afaadf96ff795cd794cb72c85d7d02600d3c526a52809136fdcd92302bb4bea56170eedc3d88481879d340f5f8af524b73cf1c95713364ce52be7d4f2fbdfa92e1e5c66abcfe3f6ee9ac5b2c7e19c68998bfb6111445de5a651c22fc8ddf99b4396d97fbf"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x7e81ebfe13d33086}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000004000200800000000fa2c02", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014a3dcd55c030000000000008500000005000000bf09000000000000c6090100000003e70600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000114000000060000005c93000000000000b5030000b68f3f208500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x1, @mcast1, 0xd}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x3, @empty, 0x400}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in={0x2, 0x4e21, @loopback}], 0x74)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)

26.45942937s ago: executing program 2 (id=1582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x426000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000004c0)={{0x2, 0x1, 0x1, 0x3ff, 'syz0\x00', 0x5}, 0x4, 0x400, 0x0, 0x0, 0x4, 0x48, 'syz0\x00', &(0x7f00000001c0)=['\x00', '(/H\x00', 'syzkaller\x00', '\x00'], 0x10})

26.367835562s ago: executing program 44 (id=1582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x426000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000004c0)={{0x2, 0x1, 0x1, 0x3ff, 'syz0\x00', 0x5}, 0x4, 0x400, 0x0, 0x0, 0x4, 0x48, 'syz0\x00', &(0x7f00000001c0)=['\x00', '(/H\x00', 'syzkaller\x00', '\x00'], 0x10})

3.883132944s ago: executing program 5 (id=1790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

3.834608111s ago: executing program 5 (id=1793):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x20, 0x3, 0x1, "8f"}, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r3, 0x5b03, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r6, 0xa679d07be9d27db9, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r7, 0x6, 0x10}, &(0x7f0000000080)=0xc)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="79e141602a8269", @ANYRES32=r10, @ANYBLOB="c30405000000000030001280080001006772650024000280060011004e21000006000e000100000008000700ac1e010106000f0005000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @remote}}}], 0x20}}], 0x1, 0x40000)

2.510786414s ago: executing program 7 (id=1805):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x23, @remote}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084)
fchmod(r0, 0x141)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r4=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0200000000000000000000000000000000000006", @ANYRES32=r4], 0x50)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.329950631s ago: executing program 7 (id=1807):
rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000240)=""/246, 0x52, 0xf6, 0x1}, 0x28)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400000021020000c1"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
timer_create(0x3, 0x0, &(0x7f0000000100)=<r4=>0x0)
exit(0xf)
timer_delete(r4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r2}, 0x20)

1.718397394s ago: executing program 0 (id=1811):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (fail_nth: 8)

1.474649252s ago: executing program 0 (id=1812):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r0, 0xa)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0)
sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='r', 0x1}], 0x1, &(0x7f0000001400)}, 0x0)
recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001600)}, 0x0)

1.346134533s ago: executing program 7 (id=1816):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000001c0)=0x18, 0x4)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x0, 0x7, 0x1, 0x0})

1.323052119s ago: executing program 3 (id=1818):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0xd, {0x100, 0x3, 0x3, 0x6}, {0xdb3, 0xc8b, 0x755f, 0x3}, {0x2}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.321252209s ago: executing program 7 (id=1819):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000002000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x8}, 0x28)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="c979000074f499d0bf9fc78751a834e73b3707efb2ebae0e727cd2371ee449579fef4ced3163ac179bc8098b7aaa6833c20b01489f9a2cbd7b4bc757b24a9f99fdbe9a0e0803aac395aec8d03d88badffde0064d6f3763", @ANYRES16=r0, @ANYBLOB="210325bd7000ffdbdf2567000000080001004200000008000300", @ANYRES32=r2, @ANYBLOB="0800c400030000000800c30010000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl(r1, 0xff, &(0x7f0000000080)="fe41448357f03f7ebfab2c206093b78ec2b14f5592f9b6d03026de1c43c92610d1296bc8b51a56179be22cdcf29bec77e327a03f8907a1273d0625671d4528d8ecbbc5eff71963c1cdd557cf9289ddd56ebf1a538dbd68205694dcb0a8795ff6e3fc897ddf03d7179e67c31044777cdf85db74f8a4b4ae1746050ffaa2a994667209e9c1107b2639437ffa48a205fb007fe9f9e4d86784baac2908738c0249565f2086d3e8887e5ef0774a55ff0bcd657d916374f57572f0aa405f8dd7f5de41ff9198938aa05b8223581aa7bddfab47723c5ea5546eaa5d1a38d08df49a8113602481363b")
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r5)
sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0xc4080)

1.240201596s ago: executing program 3 (id=1820):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x28000, 0x20)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, 0x6, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x6, 0x81, 0xffff})

1.186684976s ago: executing program 3 (id=1821):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000140)=[@init={0x18, 0x84, 0x0, {0x80, 0x13, 0x1, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0xc, 0x290, 0x6}}], 0x38}], 0x1, 0x40)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0xfffffff8, "33c0968a2cb3af754fdbbae954c7fa58ef6db37f8f5fe4fabeae83d3742262d7", 0x3, 0x1})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
read(r2, &(0x7f0000000080)=""/64, 0x40)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0)

1.036942923s ago: executing program 3 (id=1822):
mount$9p_virtio(0x0, 0x0, &(0x7f00000001c0), 0x2210088, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4ad"], 0x0)
setns(0xffffffffffffffff, 0x20000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
rmdir(&(0x7f0000000080)='.\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x5, 0x1d1c)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r1, 0x10005)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07032d0c"], 0xa)

938.34374ms ago: executing program 3 (id=1823):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000400000002000000de000000", @ANYRES32=0x1, @ANYBLOB="f80a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00')
exit(0x7)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000ea3a4189f407103b0523a98d0000000000009eade1aa0095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000500)={r2})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000003ac0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0x80, 0xff, 0x0, "2e1d36", 0xe, 0x10}]}}}, 0x13)
r7 = inotify_init1(0x80800)
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x430002d7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0)
getdents64(r8, &(0x7f0000000100)=""/1000, 0x3e8)
openat(r8, &(0x7f0000000143), 0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000580)={'ip6tnl0\x00', 0x400})
close_range(r9, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x3}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)

558.742628ms ago: executing program 5 (id=1824):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1, 0x80, 0x2, 0x27e}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x20, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x180}}}, 0x0)

503.085801ms ago: executing program 0 (id=1825):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 16)

502.875995ms ago: executing program 5 (id=1826):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])

385.15344ms ago: executing program 0 (id=1827):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000030526bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="963f000006380000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async, rerun: 64)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x4, 0x24, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbe57}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xd, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb55}, @generic={0x7f, 0x4, 0xe, 0x6, 0x2000}, @jmp={0x5, 0x1, 0x4, 0xa, 0x0, 0x18, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x32}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xa, 0x4, 0x8, 0x18, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3}, 0x94) (async, rerun: 32)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (rerun: 32)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x944, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xfe, [], [{{0x9, 0x5, 0x12, 0x3, 0x8, 0x29, 0x6, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0})

299.189222ms ago: executing program 7 (id=1828):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r1], 0x0) (fail_nth: 3)

298.959079ms ago: executing program 0 (id=1829):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000140)={0x69a2, <r1=>r0, 0x2})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0)
ioctl$BSG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1})
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)={0x2c, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000100)={0x1, 0x3, 0x3, 0x7, 0x0, 0x6})
syz_io_uring_setup(0x45d2, &(0x7f0000000340)={0x0, 0x6253, 0x2, 0x2, 0x284}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x5)

298.522792ms ago: executing program 5 (id=1830):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$getflags(r0, 0x40a)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa2, &(0x7f0000000240)={[{@uuid_off, 0x3a}], [], 0x2f})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000))
chdir(&(0x7f0000000100)='./file0\x00')
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x109000, 0x180)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)
sendto$packet(r1, &(0x7f0000000240)="f2435f01000880000000008586dd", 0xe, 0x4000801, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x24, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)

128.640222ms ago: executing program 5 (id=1831):
mount$9p_virtio(0x0, 0x0, &(0x7f00000001c0), 0x2210088, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4ad"], 0x0)
setns(0xffffffffffffffff, 0x20000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
rmdir(&(0x7f0000000080)='.\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x5, 0x1d1c)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r1, 0x10005)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07032d0c"], 0xa)

128.350235ms ago: executing program 0 (id=1832):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = syz_io_uring_setup(0x78be, &(0x7f0000000100)={0x0, 0xd696, 0x2000, 0x1, 0xe5}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000003, 0x1010, r1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

128.216189ms ago: executing program 7 (id=1833):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
listen(r0, 0xa)
connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0)
sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='r', 0x1}], 0x1, &(0x7f0000001400)}, 0x0)
recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001600)}, 0x0)

0s ago: executing program 3 (id=1834):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df01200004"], 0x509)
close(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1800, 0x0)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap$snddsp_status(&(0x7f00002aa000/0x1000)=nil, 0x1000, 0x200000a, 0x11, r5, 0x82000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x2040}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffa, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xa3a7c77da8b380b9}, {0x9, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000000000851000000200000085000000050000a108df1800000000009500a505000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c5)
r9 = inotify_init()
inotify_add_watch(r9, &(0x7f0000000180)='./file0\x00', 0x80000000)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r10, 0x0)

kernel console output (not intermixed with test programs):

ace: batadv_slave_0
[  235.755221][ T9436] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  235.759168][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.774510][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.780825][ T9436] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.786231][ T9436] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.792004][ T9436] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  235.796406][ T9436] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  235.806796][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  235.806809][   T42] audit: type=1400 audit(1787743835.430:986): avc:  denied  { write } for  pid=11541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  235.807701][ T9436] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.829876][ T9436] usb 8-1: config 0 descriptor??
[  235.885217][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.888362][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.900122][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.953505][   T42] audit: type=1400 audit(1787743835.571:987): avc:  denied  { write } for  pid=11550 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  236.042378][T11485] hsr_slave_0: entered promiscuous mode
[  236.046222][T11485] hsr_slave_1: entered promiscuous mode
[  236.052137][T11485] debugfs: 'hsr0' already exists in 'hsr'
[  236.055190][T11485] Cannot create hsr debugfs directory
[  236.059793][ T5435] 8021q: adding VLAN 0 to HW filter on device eth10
[  236.216938][   T13] hsr_slave_0: left promiscuous mode
[  236.222367][   T13] hsr_slave_1: left promiscuous mode
[  236.243225][   T13] veth1_macvtap: left promiscuous mode
[  236.245503][   T13] veth0_macvtap: left promiscuous mode
[  236.250288][   T13] veth1_vlan: left promiscuous mode
[  236.253376][   T13] veth0_vlan: left promiscuous mode
[  236.361359][ T9436] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  236.432544][ T5737] Bluetooth: hci2: command tx timeout
[  237.033051][ T5737] Bluetooth: hci3: command tx timeout
[  237.037348][   T42] audit: type=1400 audit(1787743836.581:988): avc:  denied  { write } for  pid=11570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.111820][   T42] audit: type=1400 audit(1787743836.647:989): avc:  denied  { write } for  pid=11573 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.191596][ T5435] 8021q: adding VLAN 0 to HW filter on device eth11
[  237.352101][T11515] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.355300][T11515] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.358460][T11515] bridge_slave_0: entered allmulticast mode
[  237.362702][T11515] bridge_slave_0: entered promiscuous mode
[  237.368316][T11515] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.371401][T11515] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.374796][T11515] bridge_slave_1: entered allmulticast mode
[  237.384471][T11515] bridge_slave_1: entered promiscuous mode
[  237.427077][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.435562][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.520724][T11515] team0: Port device team_slave_0 added
[  237.526496][T11515] team0: Port device team_slave_1 added
[  237.526559][   T42] audit: type=1400 audit(1787743837.040:990): avc:  denied  { write } for  pid=11582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.581389][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.625240][   T42] audit: type=1400 audit(1787743837.133:991): avc:  denied  { write } for  pid=11585 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.649917][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.653503][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.664935][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.704098][ T5435] 8021q: adding VLAN 0 to HW filter on device eth12
[  237.708954][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.712879][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.729063][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.769511][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.820943][T11515] hsr_slave_0: entered promiscuous mode
[  237.824351][T11515] hsr_slave_1: entered promiscuous mode
[  237.827341][T11515] debugfs: 'hsr0' already exists in 'hsr'
[  237.829749][T11515] Cannot create hsr debugfs directory
[  237.970864][   T42] audit: type=1400 audit(1787743837.452:992): avc:  denied  { write } for  pid=11591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.986717][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.056219][   T42] audit: type=1400 audit(1787743837.526:993): avc:  denied  { write } for  pid=11594 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  238.104624][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.146335][ T5435] 8021q: adding VLAN 0 to HW filter on device eth13
[  238.180914][ T3266] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  238.187842][T11485] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  238.201854][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  238.207592][T11485] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  238.215549][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  238.219397][T11485] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  238.226534][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  238.230655][T11485] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  238.237179][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  238.290713][   T42] audit: type=1400 audit(1787743837.751:994): avc:  denied  { write } for  pid=11597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  238.346969][ T3266] usb 5-1: Using ep0 maxpacket: 8
[  238.352601][ T3266] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  238.360873][ T3266] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  238.364883][   T42] audit: type=1400 audit(1787743837.817:995): avc:  denied  { write } for  pid=11600 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  238.375438][ T3266] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  238.382095][ T3266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.609163][   T13] bridge_slave_1: left allmulticast mode
[  238.611934][   T13] bridge_slave_1: left promiscuous mode
[  238.614595][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.621858][   T13] bridge_slave_0: left allmulticast mode
[  238.626074][   T13] bridge_slave_0: left promiscuous mode
[  238.628766][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.646734][ T5737] Bluetooth: hci2: command tx timeout
[  238.842362][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.851954][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.865341][   T13] bond0 (unregistering): Released all slaves
[  238.887140][T11485] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.905465][T11485] 8021q: adding VLAN 0 to HW filter on device team0
[  238.919102][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.922164][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.930147][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.933497][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.991392][   T29] usb 8-1: USB disconnect, device number 7
[  239.242566][ T5737] Bluetooth: hci3: command tx timeout
[  239.345602][   T13] hsr_slave_0: left promiscuous mode
[  239.348634][   T13] hsr_slave_1: left promiscuous mode
[  239.352263][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.355647][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.365067][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.368085][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.385966][   T13] veth1_macvtap: left promiscuous mode
[  239.390176][   T13] veth0_macvtap: left promiscuous mode
[  239.393559][   T13] veth1_vlan: left promiscuous mode
[  239.395829][   T13] veth0_vlan: left promiscuous mode
[  239.637582][   T13] team0 (unregistering): Port device team_slave_1 removed
[  239.657705][   T13] team0 (unregistering): Port device team_slave_0 removed
[  239.931446][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.988748][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'.
[  240.006509][T11485] veth0_vlan: entered promiscuous mode
[  240.060778][T11485] veth1_vlan: entered promiscuous mode
[  240.095670][T11485] veth0_macvtap: entered promiscuous mode
[  240.117625][T11485] veth1_macvtap: entered promiscuous mode
[  240.139237][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.157750][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.460854][ T5804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.504097][T11515] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  240.508806][T11515] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  240.512042][T11515] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  240.519727][T11515] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  240.522335][  T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.524913][T11515] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  240.531153][T11515] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  240.533524][  T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.542371][T11515] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  240.550290][T11515] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  240.565667][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.569644][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.589572][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.640424][T11515] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.661635][T11515] 8021q: adding VLAN 0 to HW filter on device team0
[  240.672297][  T106] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.674988][  T106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.694794][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.698117][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.819107][T11728] FAULT_INJECTION: forcing a failure.
[  240.819107][T11728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.824970][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.828959][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.837018][T11728] CPU: 2 UID: 0 PID: 11728 Comm: syz.3.1526 Not tainted syzkaller #0 PREEMPT(full) 
[  240.837052][T11728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  240.837059][T11728] Call Trace:
[  240.837063][T11728]  <TASK>
[  240.837068][T11728]  dump_stack_lvl+0x100/0x190
[  240.837088][T11728]  should_fail_ex.cold+0x5/0xa
[  240.837103][T11728]  _copy_from_user+0x2e/0xd0
[  240.837122][T11728]  __x64_sys_sendfile64+0x120/0x220
[  240.837142][T11728]  ? ksys_write+0x1ac/0x250
[  240.837156][T11728]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  240.837177][T11728]  do_syscall_64+0x123/0x790
[  240.837191][T11728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.837202][T11728] RIP: 0033:0x7f72ac59e0d9
[  240.837213][T11728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.837223][T11728] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  240.837234][T11728] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  240.837242][T11728] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000005
[  240.837248][T11728] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  240.837254][T11728] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  240.837261][T11728] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  240.837275][T11728]  </TASK>
[  240.867202][ T5737] Bluetooth: hci2: command tx timeout
[  241.102470][  T936] usb 5-1: USB disconnect, device number 5
[  241.198431][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.235001][T11756] FAULT_INJECTION: forcing a failure.
[  241.235001][T11756] name failslab, interval 1, probability 0, space 0, times 0
[  241.240360][T11756] CPU: 0 UID: 0 PID: 11756 Comm: syz.2.1530 Not tainted syzkaller #0 PREEMPT(full) 
[  241.240385][T11756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  241.240395][T11756] Call Trace:
[  241.240411][T11756]  <TASK>
[  241.240418][T11756]  dump_stack_lvl+0x100/0x190
[  241.240456][T11756]  should_fail_ex.cold+0x5/0xa
[  241.240479][T11756]  should_failslab+0xc2/0x120
[  241.240513][T11756]  kmem_cache_alloc_noprof+0x91/0x6a0
[  241.240558][T11756]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  241.240587][T11756]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  241.240614][T11756]  mmu_topup_memory_caches+0x25/0x170
[  241.240643][T11756]  kvm_mmu_load+0xe2/0x2570
[  241.240668][T11756]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  241.240695][T11756]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  241.240717][T11756]  ? __pfx_kvm_mmu_load+0x10/0x10
[  241.240739][T11756]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  241.240760][T11756]  ? kvm_check_and_inject_events+0x873/0x12a0
[  241.240785][T11756]  ? record_steal_time+0x3f0/0xbb0
[  241.240809][T11756]  vcpu_run+0x3ab0/0x5df0
[  241.240834][T11756]  ? __pfx_vcpu_run+0x10/0x10
[  241.240860][T11756]  ? rcu_is_watching+0x13/0xc0
[  241.240883][T11756]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  241.240900][T11756]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  241.240925][T11756]  kvm_vcpu_ioctl+0x730/0x1700
[  241.240948][T11756]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  241.240969][T11756]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  241.240997][T11756]  ? do_vfs_ioctl+0x226/0x13e0
[  241.241019][T11756]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  241.241038][T11756]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  241.241068][T11756]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  241.241107][T11756]  ? selinux_file_ioctl+0x13b/0x290
[  241.241130][T11756]  ? selinux_file_ioctl+0xb6/0x290
[  241.241154][T11756]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  241.241176][T11756]  __x64_sys_ioctl+0x18e/0x210
[  241.241199][T11756]  do_syscall_64+0x123/0x790
[  241.241228][T11756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.241246][T11756] RIP: 0033:0x7f7e8f59e0d9
[  241.241262][T11756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.241278][T11756] RSP: 002b:00007f7e904af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.241302][T11756] RAX: ffffffffffffffda RBX: 00007f7e8f825fa0 RCX: 00007f7e8f59e0d9
[  241.241314][T11756] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  241.241325][T11756] RBP: 00007f7e904af090 R08: 0000000000000000 R09: 0000000000000000
[  241.241336][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  241.241346][T11756] R13: 00007f7e8f826038 R14: 00007f7e8f825fa0 R15: 00007fff0b172018
[  241.241370][T11756]  </TASK>
[  241.287953][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  241.287963][   T42] audit: type=1400 audit(1787743840.521:1020): avc:  denied  { write } for  pid=11767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.397619][   T42] audit: type=1400 audit(1787743840.661:1021): avc:  denied  { write } for  pid=11777 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.476096][ T5737] Bluetooth: hci3: command tx timeout
[  241.504754][T11515] veth0_vlan: entered promiscuous mode
[  241.526650][T11515] veth1_vlan: entered promiscuous mode
[  241.608609][T11515] veth0_macvtap: entered promiscuous mode
[  241.633702][T11515] veth1_macvtap: entered promiscuous mode
[  241.644619][   T42] audit: type=1400 audit(1787743840.895:1022): avc:  denied  { write } for  pid=11783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.671110][T11790] FAULT_INJECTION: forcing a failure.
[  241.671110][T11790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.682982][T11515] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.686958][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.2.1535 Not tainted syzkaller #0 PREEMPT(full) 
[  241.686984][T11790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  241.686996][T11790] Call Trace:
[  241.687002][T11790]  <TASK>
[  241.687010][T11790]  dump_stack_lvl+0x100/0x190
[  241.687053][T11790]  should_fail_ex.cold+0x5/0xa
[  241.687078][T11790]  _copy_from_iter+0x1f4/0x1690
[  241.687108][T11790]  ? __pfx__copy_from_iter+0x10/0x10
[  241.687123][T11790]  ? trace_kmalloc+0xeb/0x110
[  241.687150][T11790]  ? __kasan_kmalloc+0xaa/0xb0
[  241.687175][T11790]  ? __kmalloc_noprof+0x345/0x820
[  241.687200][T11790]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  241.687229][T11790]  kernfs_fop_write_iter+0x186/0x5f0
[  241.687255][T11790]  vfs_write+0x6af/0x1050
[  241.687278][T11790]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  241.687304][T11790]  ? __pfx_vfs_write+0x10/0x10
[  241.687323][T11790]  ? find_held_lock+0x2b/0x80
[  241.687361][T11790]  ksys_write+0x12a/0x250
[  241.687383][T11790]  ? __pfx_ksys_write+0x10/0x10
[  241.687412][T11790]  do_syscall_64+0x123/0x790
[  241.687440][T11790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.687459][T11790] RIP: 0033:0x7f7e8f59e0d9
[  241.687475][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.687493][T11790] RSP: 002b:00007f7e904af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  241.687511][T11790] RAX: ffffffffffffffda RBX: 00007f7e8f825fa0 RCX: 00007f7e8f59e0d9
[  241.687524][T11790] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004
[  241.687535][T11790] RBP: 00007f7e904af090 R08: 0000000000000000 R09: 0000000000000000
[  241.687546][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.687556][T11790] R13: 00007f7e8f826038 R14: 00007f7e8f825fa0 R15: 00007fff0b172018
[  241.687582][T11790]  </TASK>
[  241.691873][T11515] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.767109][   T42] audit: type=1400 audit(1787743840.989:1023): avc:  denied  { write } for  pid=11792 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.839234][ T9457] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  241.884664][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.892052][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.937738][   T42] audit: type=1400 audit(1787743841.167:1024): avc:  denied  { write } for  pid=11796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.946115][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.951070][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.961635][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.967454][ T5804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.973495][ T5804] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.981012][ T5804] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.008884][   T42] audit: type=1400 audit(1787743841.232:1025): avc:  denied  { write } for  pid=11804 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  242.010817][ T9457] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  242.022407][ T9457] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  242.025823][ T9457] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.030869][T11782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  242.055584][ T9457] opticon 8-1:1.0: opticon converter detected
[  242.061771][ T9457] usb 8-1: opticon converter now attached to ttyUSB0
[  242.152190][   T42] audit: type=1400 audit(1787743841.373:1026): avc:  denied  { setopt } for  pid=11815 comm="syz.5.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  242.223944][ T5876] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  242.232266][   T42] audit: type=1400 audit(1787743841.438:1027): avc:  denied  { write } for  pid=11819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  242.341608][   T42] audit: type=1400 audit(1787743841.550:1028): avc:  denied  { write } for  pid=11827 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  242.384123][ T5876] usb 7-1: Using ep0 maxpacket: 8
[  242.389236][ T5876] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  242.407157][ T5876] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  242.410999][ T5876] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  242.418289][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.431717][ T5435] 8021q: adding VLAN 0 to HW filter on device eth14
[  242.487928][   T42] audit: type=1326 audit(1787743841.681:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11832 comm="syz.5.1542" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e5e59e0d9 code=0x0
[  242.922511][ T5876] usb 8-1: USB disconnect, device number 8
[  242.934887][ T5876] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  242.945772][ T5876] opticon 8-1:1.0: device disconnected
[  243.089559][ T5737] Bluetooth: hci2: command tx timeout
[  243.500590][ T5435] 8021q: adding VLAN 0 to HW filter on device eth15
[  243.609303][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'.
[  243.626544][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.627094][T11878] FAULT_INJECTION: forcing a failure.
[  243.627094][T11878] name failslab, interval 1, probability 0, space 0, times 0
[  243.630573][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.637073][T11878] CPU: 2 UID: 0 PID: 11878 Comm: syz.3.1549 Not tainted syzkaller #0 PREEMPT(full) 
[  243.637098][T11878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  243.637110][T11878] Call Trace:
[  243.637116][T11878]  <TASK>
[  243.637123][T11878]  dump_stack_lvl+0x100/0x190
[  243.637154][T11878]  should_fail_ex.cold+0x5/0xa
[  243.637175][T11878]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  243.637200][T11878]  should_failslab+0xc2/0x120
[  243.637227][T11878]  kmem_cache_alloc_noprof+0x91/0x6a0
[  243.637253][T11878]  ? skb_clone+0x190/0x400
[  243.637287][T11878]  skb_clone+0x190/0x400
[  243.637306][T11878]  netlink_deliver_tap+0xaed/0xcc0
[  243.637338][T11878]  netlink_unicast+0x62b/0x850
[  243.637367][T11878]  ? __pfx_netlink_unicast+0x10/0x10
[  243.637392][T11878]  ? __pfx_sock_has_perm+0x10/0x10
[  243.637420][T11878]  netlink_sendmsg+0x8b0/0xda0
[  243.637451][T11878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.637479][T11878]  ? selinux_socket_sendmsg+0x198/0x2f0
[  243.637515][T11878]  ____sys_sendmsg+0xa4d/0xbe0
[  243.637537][T11878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.637565][T11878]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.637590][T11878]  ? _kstrtoull+0x13c/0x1f0
[  243.637611][T11878]  ? __pfx__kstrtoull+0x10/0x10
[  243.637637][T11878]  ___sys_sendmsg+0x190/0x1e0
[  243.637662][T11878]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.637715][T11878]  __sys_sendmmsg+0x20c/0x440
[  243.637737][T11878]  ? __pfx___sys_sendmmsg+0x10/0x10
[  243.637754][T11878]  ? ksys_write+0x190/0x250
[  243.637795][T11878]  ? fput+0x7c/0x100
[  243.637822][T11878]  ? ksys_write+0x1ac/0x250
[  243.637843][T11878]  ? __pfx_ksys_write+0x10/0x10
[  243.637869][T11878]  __x64_sys_sendmmsg+0x9c/0x100
[  243.637888][T11878]  ? lockdep_hardirqs_on+0x7d/0x110
[  243.637939][T11878]  do_syscall_64+0x123/0x790
[  243.637977][T11878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.637997][T11878] RIP: 0033:0x7f72ac59e0d9
[  243.638014][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.638031][T11878] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  243.638050][T11878] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  243.638062][T11878] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  243.638073][T11878] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  243.638084][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.638095][T11878] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  243.638119][T11878]  </TASK>
[  243.638183][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'.
[  243.641272][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.698495][ T5737] Bluetooth: hci3: command tx timeout
[  243.747396][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.854308][ T5435] 8021q: adding VLAN 0 to HW filter on device eth16
[  243.914969][T11893] serio: Serial port ptm0
[  244.129388][T11903] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1554'.
[  244.134144][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1554'.
[  244.159607][ T5435] 8021q: adding VLAN 0 to HW filter on device eth17
[  244.273455][ T5737] Bluetooth: hci3: hcon ffff8880363e8000 sent 1 < count 116
[  244.280823][ T5737] Bluetooth: hci3: hcon ffff8880363e8000 sent 0 < count 33315
[  244.296984][ T6521] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[  244.481415][ T6521] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  244.489010][ T6521] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  244.494537][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  244.510641][ T6521] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  244.516175][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  244.537279][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  244.547247][ T6521] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  244.551854][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  244.559195][ T6521] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  244.566815][T11932] ALSA: seq fatal error: cannot create timer (-16)
[  244.569705][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  244.577938][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  244.588464][ T6521] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  244.592017][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  244.596869][ T6521] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  244.601689][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  244.607407][ T6521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  244.614777][ T6521] usb 8-1: string descriptor 0 read error: -22
[  244.617787][ T6521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.632441][ T6521] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  244.859958][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'.
[  245.179872][ T5876] usb 7-1: USB disconnect, device number 8
[  245.990270][ T5876] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  246.206675][ T5876] usb 7-1: Using ep0 maxpacket: 8
[  246.246571][ T5876] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  246.250132][ T5876] usb 7-1: config 0 has no interfaces?
[  246.251981][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.256450][ T5876] usb 7-1: config 0 descriptor??
[  246.377317][T12010] ALSA: seq fatal error: cannot create timer (-16)
[  246.485532][   T72] usb 7-1: USB disconnect, device number 9
[  247.030406][T12025] FAULT_INJECTION: forcing a failure.
[  247.030406][T12025] name failslab, interval 1, probability 0, space 0, times 0
[  247.037565][T12025] CPU: 0 UID: 0 PID: 12025 Comm: syz.0.1575 Not tainted syzkaller #0 PREEMPT(full) 
[  247.037590][T12025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  247.037600][T12025] Call Trace:
[  247.037607][T12025]  <TASK>
[  247.037613][T12025]  dump_stack_lvl+0x100/0x190
[  247.037642][T12025]  should_fail_ex.cold+0x5/0xa
[  247.037666][T12025]  should_failslab+0xc2/0x120
[  247.037692][T12025]  kmem_cache_alloc_noprof+0x91/0x6a0
[  247.037718][T12025]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  247.037747][T12025]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  247.037778][T12025]  mmu_topup_memory_caches+0x25/0x170
[  247.037808][T12025]  kvm_mmu_load+0xe2/0x2570
[  247.037835][T12025]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  247.037855][T12025]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  247.037912][T12025]  ? __pfx_kvm_mmu_load+0x10/0x10
[  247.037939][T12025]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  247.037962][T12025]  ? kvm_check_and_inject_events+0x873/0x12a0
[  247.038006][T12025]  ? record_steal_time+0x3f0/0xbb0
[  247.038031][T12025]  vcpu_run+0x3ab0/0x5df0
[  247.038058][T12025]  ? __pfx_vcpu_run+0x10/0x10
[  247.038083][T12025]  ? rcu_is_watching+0x13/0xc0
[  247.038107][T12025]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  247.038124][T12025]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  247.038148][T12025]  kvm_vcpu_ioctl+0x730/0x1700
[  247.038173][T12025]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  247.038196][T12025]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  247.038224][T12025]  ? do_vfs_ioctl+0x226/0x13e0
[  247.038247][T12025]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  247.038265][T12025]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  247.038295][T12025]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  247.038337][T12025]  ? selinux_file_ioctl+0x13b/0x290
[  247.038360][T12025]  ? selinux_file_ioctl+0xb6/0x290
[  247.038387][T12025]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  247.038411][T12025]  __x64_sys_ioctl+0x18e/0x210
[  247.038433][T12025]  do_syscall_64+0x123/0x790
[  247.038454][T12025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.038472][T12025] RIP: 0033:0x7f0eb2f9e0d9
[  247.038487][T12025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.038508][T12025] RSP: 002b:00007f0eb3f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.038524][T12025] RAX: ffffffffffffffda RBX: 00007f0eb3225fa0 RCX: 00007f0eb2f9e0d9
[  247.038536][T12025] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  247.038545][T12025] RBP: 00007f0eb3f46090 R08: 0000000000000000 R09: 0000000000000000
[  247.038556][T12025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  247.038566][T12025] R13: 00007f0eb3226038 R14: 00007f0eb3225fa0 R15: 00007fff26773008
[  247.038590][T12025]  </TASK>
[  247.103621][   T42] kauditd_printk_skb: 35 callbacks suppressed
[  247.103639][   T42] audit: type=1400 audit(1787743846.005:1065): avc:  denied  { write } for  pid=12032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.232179][   T42] audit: type=1400 audit(1787743846.117:1066): avc:  denied  { write } for  pid=12038 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.472920][ T5804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.610739][ T5804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.640115][T12051] ALSA: seq fatal error: cannot create timer (-16)
[  247.643073][ T5728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.656458][ T5728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.659805][ T5728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.669602][ T5728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.672388][ T5728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.745929][ T5804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.750280][   T42] audit: type=1400 audit(1787743846.604:1067): avc:  denied  { write } for  pid=12055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.801530][   T42] audit: type=1400 audit(1787743846.651:1068): avc:  denied  { write } for  pid=12060 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.841275][ T5804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.891576][ T9457] usb 8-1: USB disconnect, device number 9
[  248.149454][ T5804] bridge_slave_1: left allmulticast mode
[  248.151435][ T5804] bridge_slave_1: left promiscuous mode
[  248.153552][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.157311][ T5804] bridge_slave_0: left allmulticast mode
[  248.159133][ T5804] bridge_slave_0: left promiscuous mode
[  248.161397][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.246824][T12073] netlink: 'syz.0.1586': attribute type 2 has an invalid length.
[  248.351233][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.364265][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.375338][ T5804] bond0 (unregistering): Released all slaves
[  248.595572][   T42] audit: type=1400 audit(1787743847.399:1069): avc:  denied  { write } for  pid=12087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.666544][   T42] audit: type=1400 audit(1787743847.465:1070): avc:  denied  { write } for  pid=12094 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  248.685969][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1591'.
[  248.696281][T12098] FAULT_INJECTION: forcing a failure.
[  248.696281][T12098] name failslab, interval 1, probability 0, space 0, times 0
[  248.714509][T12098] CPU: 2 UID: 0 PID: 12098 Comm: syz.5.1591 Not tainted syzkaller #0 PREEMPT(full) 
[  248.714538][T12098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  248.714548][T12098] Call Trace:
[  248.714555][T12098]  <TASK>
[  248.714563][T12098]  dump_stack_lvl+0x100/0x190
[  248.714597][T12098]  should_fail_ex.cold+0x5/0xa
[  248.714625][T12098]  should_failslab+0xc2/0x120
[  248.714654][T12098]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  248.714683][T12098]  ? __d_alloc+0x35/0xa50
[  248.714707][T12098]  __d_alloc+0x35/0xa50
[  248.714729][T12098]  d_alloc+0x4a/0x1e0
[  248.714750][T12098]  lookup_one_qstr_excl+0x171/0x250
[  248.714774][T12098]  start_dirop+0x59/0xb0
[  248.714800][T12098]  simple_start_creating+0xf9/0x110
[  248.714829][T12098]  ? __pfx_simple_start_creating+0x10/0x10
[  248.714857][T12098]  ? mntput+0x70/0xa0
[  248.714882][T12098]  ? simple_pin_fs+0xa3/0x190
[  248.714909][T12098]  debugfs_start_creating.part.0+0x9f/0x180
[  248.714937][T12098]  __debugfs_create_file+0x86/0x4d0
[  248.714973][T12098]  debugfs_create_file_full+0x41/0x60
[  248.715002][T12098]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  248.715026][T12098]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  248.715074][T12098]  ? lockdep_init_map_type+0x5c/0x250
[  248.715106][T12098]  ? __pfx_br_dev_setup+0x10/0x10
[  248.715132][T12098]  alloc_netdev_mqs+0x314/0x15c0
[  248.715158][T12098]  rtnl_create_link+0xc13/0xf80
[  248.715183][T12098]  rtnl_newlink+0x15bc/0x2620
[  248.715214][T12098]  ? __pfx_rtnl_newlink+0x10/0x10
[  248.715236][T12098]  ? find_held_lock+0x2b/0x80
[  248.715257][T12098]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  248.715279][T12098]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  248.715332][T12098]  ? find_held_lock+0x2b/0x80
[  248.715352][T12098]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  248.715371][T12098]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  248.715392][T12098]  ? __pfx_rtnl_newlink+0x10/0x10
[  248.715412][T12098]  rtnetlink_rcv_msg+0x95e/0xe90
[  248.715435][T12098]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  248.715461][T12098]  ? ref_tracker_free+0x37e/0x6c0
[  248.715485][T12098]  netlink_rcv_skb+0x159/0x420
[  248.715512][T12098]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  248.715534][T12098]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  248.715569][T12098]  ? netlink_deliver_tap+0x1ae/0xcc0
[  248.715599][T12098]  netlink_unicast+0x585/0x850
[  248.715628][T12098]  ? __pfx_netlink_unicast+0x10/0x10
[  248.715677][T12098]  netlink_sendmsg+0x8b0/0xda0
[  248.715724][T12098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.715753][T12098]  ? selinux_socket_sendmsg+0x198/0x2f0
[  248.715782][T12098]  ____sys_sendmsg+0xa4d/0xbe0
[  248.715804][T12098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.715832][T12098]  ? __pfx_____sys_sendmsg+0x10/0x10
[  248.715866][T12098]  ___sys_sendmsg+0x190/0x1e0
[  248.715892][T12098]  ? __pfx____sys_sendmsg+0x10/0x10
[  248.715915][T12098]  ? get_pid_task+0x106/0x250
[  248.715946][T12098]  ? find_held_lock+0x2b/0x80
[  248.715988][T12098]  __sys_sendmsg+0x160/0x210
[  248.716007][T12098]  ? __pfx___sys_sendmsg+0x10/0x10
[  248.716040][T12098]  do_syscall_64+0x123/0x790
[  248.716062][T12098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.716081][T12098] RIP: 0033:0x7f7e5e59e0d9
[  248.716098][T12098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.716115][T12098] RSP: 002b:00007f7e5f486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.716134][T12098] RAX: ffffffffffffffda RBX: 00007f7e5e825fa0 RCX: 00007f7e5e59e0d9
[  248.716146][T12098] RDX: 0000000004004010 RSI: 0000200000000000 RDI: 0000000000000003
[  248.716157][T12098] RBP: 00007f7e5f486090 R08: 0000000000000000 R09: 0000000000000000
[  248.716169][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.716180][T12098] R13: 00007f7e5e826038 R14: 00007f7e5e825fa0 R15: 00007fff0c5d4b78
[  248.716205][T12098]  </TASK>
[  248.740493][ T5435] 8021q: adding VLAN 0 to HW filter on device eth18
[  248.905179][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1594'.
[  249.114595][   T42] audit: type=1400 audit(1787743847.867:1071): avc:  denied  { write } for  pid=12120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.151987][ T5804] hsr_slave_0: left promiscuous mode
[  249.160172][ T5804] hsr_slave_1: left promiscuous mode
[  249.165849][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.169245][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.178173][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.181808][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.192294][   T42] audit: type=1400 audit(1787743847.951:1072): avc:  denied  { write } for  pid=12129 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.209341][ T5804] veth1_macvtap: left promiscuous mode
[  249.211940][ T5804] veth0_macvtap: left promiscuous mode
[  249.218195][ T5804] veth1_vlan: left promiscuous mode
[  249.222890][ T5804] veth0_vlan: left promiscuous mode
[  249.489717][ T5804] team0 (unregistering): Port device team_slave_1 removed
[  249.506833][ T5804] team0 (unregistering): Port device team_slave_0 removed
[  249.650746][ T9799] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  249.668811][T12052] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.672433][T12052] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.675590][T12052] bridge_slave_0: entered allmulticast mode
[  249.679517][T12052] bridge_slave_0: entered promiscuous mode
[  249.684586][T12052] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.687796][T12052] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.691301][T12052] bridge_slave_1: entered allmulticast mode
[  249.695533][T12052] bridge_slave_1: entered promiscuous mode
[  249.724073][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.735382][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.762301][T12052] team0: Port device team_slave_0 added
[  249.767551][T12052] team0: Port device team_slave_1 added
[  249.812484][ T9799] usb 5-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40
[  249.816658][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.819698][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.819980][ T9799] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 4
[  249.848434][T12146] FAULT_INJECTION: forcing a failure.
[  249.848434][T12146] name failslab, interval 1, probability 0, space 0, times 0
[  249.848952][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.860977][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.862722][ T9799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.865072][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.873511][ T9799] usb 5-1: Product: Щ
[  249.875098][T12146] CPU: 1 UID: 0 PID: 12146 Comm: syz.3.1600 Not tainted syzkaller #0 PREEMPT(full) 
[  249.875119][T12146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  249.875130][T12146] Call Trace:
[  249.875137][T12146]  <TASK>
[  249.875144][T12146]  dump_stack_lvl+0x100/0x190
[  249.875172][T12146]  should_fail_ex.cold+0x5/0xa
[  249.875189][T12146]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  249.875210][T12146]  should_failslab+0xc2/0x120
[  249.875234][T12146]  kmem_cache_alloc_noprof+0x91/0x6a0
[  249.875258][T12146]  ? skb_clone+0x190/0x400
[  249.875279][T12146]  skb_clone+0x190/0x400
[  249.875296][T12146]  netlink_deliver_tap+0xaed/0xcc0
[  249.875321][T12146]  netlink_unicast+0x62b/0x850
[  249.875349][T12146]  ? __pfx_netlink_unicast+0x10/0x10
[  249.875379][T12146]  netlink_sendmsg+0x8b0/0xda0
[  249.875403][T12146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.875429][T12146]  ? selinux_socket_sendmsg+0x198/0x2f0
[  249.875458][T12146]  sock_write_iter+0x53a/0x5b0
[  249.875479][T12146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.875499][T12146]  ? __pfx_sock_write_iter+0x10/0x10
[  249.875533][T12146]  ? __pfx___file_has_perm+0x10/0x10
[  249.875560][T12146]  do_iter_readv_writev+0x6f7/0x930
[  249.875582][T12146]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  249.875596][T12146]  ? selinux_file_permission+0x8f/0x6d0
[  249.875623][T12146]  ? bpf_lsm_file_permission+0x9/0x10
[  249.875640][T12146]  ? security_file_permission+0x76/0x210
[  249.875666][T12146]  ? rw_verify_area+0xce/0x6d0
[  249.875686][T12146]  vfs_writev+0x360/0xdd0
[  249.875703][T12146]  ? get_pid_task+0x106/0x250
[  249.875724][T12146]  ? __pfx_vfs_writev+0x10/0x10
[  249.875743][T12146]  ? rcu_read_lock_any_held+0x6a/0x90
[  249.875777][T12146]  ? __fget_files+0x21f/0x3d0
[  249.875808][T12146]  ? do_writev+0x28a/0x340
[  249.875822][T12146]  do_writev+0x28a/0x340
[  249.875842][T12146]  ? __pfx_do_writev+0x10/0x10
[  249.875867][T12146]  do_syscall_64+0x123/0x790
[  249.875889][T12146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.875907][T12146] RIP: 0033:0x7f72ac59e0d9
[  249.875919][T12146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.875934][T12146] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  249.875951][T12146] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  249.875962][T12146] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  249.875973][T12146] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  249.875983][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.875993][T12146] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  249.876010][T12146]  </TASK>
[  249.884756][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.913421][ T9799] usb 5-1: Manufacturer: ь
[  249.940815][ T5737] Bluetooth: hci2: command tx timeout
[  249.963345][T12052] hsr_slave_0: entered promiscuous mode
[  249.976135][ T9799] usb 5-1: SerialNumber: 䈈堫랳ﴟᧃ彡௡跠낲섈䒆ප曳䬨螀⼝翹炪篔ਰ᩿풚יּ᪛鵒많䑹␎༲럱턜⦳孶ᑘ棽즢嵙ᮺꤤ泟Ꜷ饡嶘ꎚ猄♏쨪쒜⏆뿣덊뵃嘥ླྀ⿥᥏☖ￜ䚌ʴ龎ᛪ戏敟礝ऎᤗ绫炶⒕꣙隶衩⹡຦녫秤莙ﴞ㣫ἀ陡␴刼ኑ념䛄괘븒ቮ㘌뗛以楑梱㥎્ꈠﻲ釱䗭囚⯅⤣
[  249.979468][T12052] hsr_slave_1: entered promiscuous mode
[  250.027982][   T42] audit: type=1400 audit(1787743848.709:1073): avc:  denied  { write } for  pid=12149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.042687][T12052] debugfs: 'hsr0' already exists in 'hsr'
[  250.045328][T12052] Cannot create hsr debugfs directory
[  250.064878][ T9799] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  250.137477][   T42] audit: type=1400 audit(1787743848.840:1074): avc:  denied  { write } for  pid=12164 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.223144][ T9799] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  250.244821][ T5435] 8021q: adding VLAN 0 to HW filter on device eth19
[  250.291271][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'.
[  250.304189][ T9044] udevd[9044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.320098][ T5825] usb 5-1: USB disconnect, device number 6
[  250.359990][T12171] CIFS: Attempting to mount //127.0.0.1/test
[  250.653475][ T5435] 8021q: adding VLAN 0 to HW filter on device eth20
[  250.907282][ T5435] 8021q: adding VLAN 0 to HW filter on device eth21
[  251.241836][T12171] CIFS: VFS: Error connecting to socket. Aborting operation.
[  251.248478][T12171] CIFS: VFS: cifs_mount failed w/return code = -4
[  251.259122][T12052] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  251.267980][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  251.271873][T12052] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  251.287252][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  251.312279][T12052] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  251.342056][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  251.349757][ T5825] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  251.370764][T12052] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  251.380547][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  251.490591][T12052] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.523619][T12052] 8021q: adding VLAN 0 to HW filter on device team0
[  251.532329][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.533150][ T5825] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  251.536056][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.547176][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF
[  251.552381][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64
[  251.560742][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.565135][ T5825] usb 5-1: Product: syz
[  251.569113][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.569390][ T5825] usb 5-1: Manufacturer: syz
[  251.572275][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.586322][ T5825] usb 5-1: SerialNumber: syz
[  251.598516][ T5825] usb 5-1: config 0 descriptor??
[  251.610091][T12194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  251.860725][T12194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  252.047605][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.151594][ T5737] Bluetooth: hci2: command tx timeout
[  252.219062][T12259] devpts: Unknown parameter '~'
[  252.222445][T12260] devpts: Unknown parameter '~'
[  252.271282][T12194] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  252.299374][T12052] veth0_vlan: entered promiscuous mode
[  252.310614][T12194] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  252.312049][T12052] veth1_vlan: entered promiscuous mode
[  252.362362][T12052] veth0_macvtap: entered promiscuous mode
[  252.371909][T12052] veth1_macvtap: entered promiscuous mode
[  252.377136][T12194] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  252.385064][T12194] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  252.388871][T12052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.390523][T12194] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  252.398353][T12194] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  252.399785][T12052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.407039][T12194] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  252.411971][T12194] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  252.441403][T12194] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  252.462401][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.465337][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.468129][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.474091][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.484214][T12194] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  252.486822][T12194] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  252.491807][T12194] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  252.527595][   T42] kauditd_printk_skb: 19 callbacks suppressed
[  252.527611][   T42] audit: type=1400 audit(1787743851.077:1094): avc:  denied  { write } for  pid=12273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.571848][T12190] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  252.575441][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.576012][ T5876] usb 5-1: USB disconnect, device number 7
[  252.580330][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.606479][T12279] syzkaller1: entered allmulticast mode
[  252.617355][   T42] audit: type=1400 audit(1787743851.161:1095): avc:  denied  { write } for  pid=12277 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.645384][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.653357][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.710313][   T42] audit: type=1400 audit(1787743851.255:1096): avc:  denied  { write } for  pid=12282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.813260][   T42] audit: type=1400 audit(1787743851.339:1097): avc:  denied  { write } for  pid=12292 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.832288][T12295] netlink: 'syz.3.1619': attribute type 1 has an invalid length.
[  252.839117][T12295] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1619'.
[  252.895700][T12300] FAULT_INJECTION: forcing a failure.
[  252.895700][T12300] name failslab, interval 1, probability 0, space 0, times 0
[  252.903587][T12300] CPU: 2 UID: 0 PID: 12300 Comm: syz.5.1621 Not tainted syzkaller #0 PREEMPT(full) 
[  252.903603][T12300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  252.903610][T12300] Call Trace:
[  252.903614][T12300]  <TASK>
[  252.903619][T12300]  dump_stack_lvl+0x100/0x190
[  252.903639][T12300]  should_fail_ex.cold+0x5/0xa
[  252.903654][T12300]  should_failslab+0xc2/0x120
[  252.903672][T12300]  kmem_cache_alloc_noprof+0x91/0x6a0
[  252.903687][T12300]  ? dst_alloc+0x99/0x1a0
[  252.903706][T12300]  ? __pfx_ip6_dst_gc+0x10/0x10
[  252.903719][T12300]  dst_alloc+0x99/0x1a0
[  252.903737][T12300]  ip6_rt_cache_alloc+0x1ea/0x8e0
[  252.903755][T12300]  ? __pfx_ip6_rt_cache_alloc+0x10/0x10
[  252.903775][T12300]  ip6_pol_route+0xf28/0x1310
[  252.903787][T12300]  ? __pfx_ip6_pol_route+0x10/0x10
[  252.903798][T12300]  ? __pfx_widen_string+0x10/0x10
[  252.903813][T12300]  ? kernel_text_address+0x8d/0x100
[  252.903832][T12300]  ? string+0x201/0x4d0
[  252.903850][T12300]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  252.903861][T12300]  fib6_rule_lookup+0x386/0x720
[  252.903877][T12300]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  252.903901][T12300]  ip6_route_output_flags+0x1d0/0x650
[  252.903919][T12300]  ip6_dst_lookup_tail.constprop.0+0x95b/0x2110
[  252.903933][T12300]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  252.903947][T12300]  ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10
[  252.903961][T12300]  ? __lock_acquire+0x4c5/0x1ec0
[  252.903978][T12300]  ? snprintf+0xc7/0x100
[  252.903991][T12300]  ip6_dst_lookup_flow+0x122/0x240
[  252.904003][T12300]  ? __pfx_ip6_dst_lookup_flow+0x10/0x10
[  252.904013][T12300]  ? find_held_lock+0x2b/0x80
[  252.904025][T12300]  ? rawv6_sendmsg+0xb3c/0x4450
[  252.904040][T12300]  ? rawv6_sendmsg+0xb3c/0x4450
[  252.904057][T12300]  rawv6_sendmsg+0xe61/0x4450
[  252.904071][T12300]  ? find_held_lock+0x2b/0x80
[  252.904088][T12300]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  252.904107][T12300]  ? __pfx_tomoyo_check_inet_address+0x10/0x10
[  252.904129][T12300]  ? __pfx_sock_has_perm+0x10/0x10
[  252.904151][T12300]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  252.904167][T12300]  ? inet_sendmsg+0x11c/0x140
[  252.904180][T12300]  inet_sendmsg+0x11c/0x140
[  252.904193][T12300]  ____sys_sendmsg+0x9c9/0xbe0
[  252.904207][T12300]  ? __pfx_inet_sendmsg+0x10/0x10
[  252.904222][T12300]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.904242][T12300]  ___sys_sendmsg+0x190/0x1e0
[  252.904257][T12300]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.904272][T12300]  ? get_pid_task+0x106/0x250
[  252.904289][T12300]  ? find_held_lock+0x2b/0x80
[  252.904310][T12300]  __sys_sendmsg+0x160/0x210
[  252.904322][T12300]  ? __pfx___sys_sendmsg+0x10/0x10
[  252.904340][T12300]  do_syscall_64+0x123/0x790
[  252.904353][T12300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.904365][T12300] RIP: 0033:0x7f7e5e59e0d9
[  252.904375][T12300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.904385][T12300] RSP: 002b:00007f7e5f486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.904396][T12300] RAX: ffffffffffffffda RBX: 00007f7e5e825fa0 RCX: 00007f7e5e59e0d9
[  252.904403][T12300] RDX: 922bac8556bdad8e RSI: 0000200000000000 RDI: 0000000000000003
[  252.904410][T12300] RBP: 00007f7e5f486090 R08: 0000000000000000 R09: 0000000000000000
[  252.904416][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.904423][T12300] R13: 00007f7e5e826038 R14: 00007f7e5e825fa0 R15: 00007fff0c5d4b78
[  252.904437][T12300]  </TASK>
[  252.973514][   T42] audit: type=1400 audit(1787743851.489:1098): avc:  denied  { write } for  pid=12301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  253.077456][   T42] audit: type=1400 audit(1787743851.592:1099): avc:  denied  { write } for  pid=12306 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  253.102883][   T42] audit: type=1400 audit(1787743851.620:1100): avc:  denied  { call } for  pid=12307 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  253.124624][T12308] binder: BINDER_SET_CONTEXT_MGR already set
[  253.134624][T12311] binder_alloc: binder_alloc_mmap_handler: 12307 200000ffd000-200001000000 already mapped failed -16
[  253.139080][T12308] binder: 12307:12308 ioctl 4018620d 0 returned -16
[  253.139355][T12314] binder: BINDER_SET_CONTEXT_MGR already set
[  253.141658][T12313] binder_alloc: 12307: binder_alloc_buf, no vma
[  253.144222][T12314] binder: 12307:12314 ioctl 4018620d 200000000040 returned -16
[  253.252757][   T42] audit: type=1400 audit(1787743851.751:1101): avc:  denied  { write } for  pid=12318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  253.320968][   T42] audit: type=1400 audit(1787743851.816:1102): avc:  denied  { write } for  pid=12323 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  253.434873][   T42] audit: type=1400 audit(1787743851.919:1103): avc:  denied  { write } for  pid=12326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.171775][T12190] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  254.459352][ T5737] Bluetooth: hci0: command 0x040f tx timeout
[  254.464609][ T5737] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  254.519710][T12359] FAULT_INJECTION: forcing a failure.
[  254.519710][T12359] name failslab, interval 1, probability 0, space 0, times 0
[  254.526708][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.3.1629 Not tainted syzkaller #0 PREEMPT(full) 
[  254.526726][T12359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.526733][T12359] Call Trace:
[  254.526737][T12359]  <TASK>
[  254.526742][T12359]  dump_stack_lvl+0x100/0x190
[  254.526770][T12359]  should_fail_ex.cold+0x5/0xa
[  254.526785][T12359]  should_failslab+0xc2/0x120
[  254.526805][T12359]  __kmalloc_noprof+0xfc/0x820
[  254.526821][T12359]  ? tomoyo_encode2+0xfb/0x3c0
[  254.526842][T12359]  tomoyo_encode2+0xfb/0x3c0
[  254.526861][T12359]  tomoyo_encode+0x29/0x50
[  254.526877][T12359]  tomoyo_realpath_from_path+0x18c/0x690
[  254.526898][T12359]  tomoyo_path_number_perm+0x23c/0x580
[  254.526913][T12359]  ? tomoyo_path_number_perm+0x22e/0x580
[  254.526929][T12359]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  254.526957][T12359]  ? find_held_lock+0x2b/0x80
[  254.526970][T12359]  ? hook_file_ioctl_common+0x140/0x440
[  254.526986][T12359]  ? __fget_files+0x21f/0x3d0
[  254.527005][T12359]  security_file_ioctl+0xd3/0x230
[  254.527021][T12359]  __x64_sys_ioctl+0xb7/0x210
[  254.527037][T12359]  do_syscall_64+0x123/0x790
[  254.527054][T12359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.527066][T12359] RIP: 0033:0x7f72ac59e0d9
[  254.527077][T12359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.527087][T12359] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.527098][T12359] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  254.527105][T12359] RDX: 0000200000000040 RSI: 00000000c040563e RDI: 0000000000000003
[  254.527112][T12359] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  254.527118][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.527124][T12359] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  254.527138][T12359]  </TASK>
[  254.527150][T12359] ERROR: Out of memory at tomoyo_realpath_from_path.
[  254.545747][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout
[  254.545780][ T5728] Bluetooth: hci1: command 0x0c1a tx timeout
[  254.552399][T12355] netlink: 'syz.0.1628': attribute type 1 has an invalid length.
[  254.584960][T12362] FAULT_INJECTION: forcing a failure.
[  254.584960][T12362] name failslab, interval 1, probability 0, space 0, times 0
[  254.592557][T12355] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1628'.
[  254.595274][T12362] CPU: 3 UID: 0 PID: 12362 Comm: syz.7.1631 Not tainted syzkaller #0 PREEMPT(full) 
[  254.595298][T12362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.595310][T12362] Call Trace:
[  254.595317][T12362]  <TASK>
[  254.595324][T12362]  dump_stack_lvl+0x100/0x190
[  254.595355][T12362]  should_fail_ex.cold+0x5/0xa
[  254.595379][T12362]  should_failslab+0xc2/0x120
[  254.595406][T12362]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  254.595432][T12362]  ? __alloc_skb+0x5b7/0x710
[  254.595469][T12362]  ? __alloc_skb+0x140/0x710
[  254.595499][T12362]  __alloc_skb+0x140/0x710
[  254.595523][T12362]  ? __alloc_skb+0x5b7/0x710
[  254.595549][T12362]  ? __pfx___alloc_skb+0x10/0x10
[  254.595575][T12362]  ? find_held_lock+0x2b/0x80
[  254.595596][T12362]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  254.595616][T12362]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  254.595639][T12362]  alloc_skb_with_frags+0xdd/0x760
[  254.595658][T12362]  ? avc_has_perm_noaudit+0x145/0x3b0
[  254.595684][T12362]  sock_alloc_send_pskb+0x801/0x980
[  254.595717][T12362]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  254.595743][T12362]  ? sock_has_perm+0x25a/0x2f0
[  254.595765][T12362]  ? __pfx_sock_has_perm+0x10/0x10
[  254.595794][T12362]  hci_sock_sendmsg+0x1c7/0x2620
[  254.595818][T12362]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  254.595836][T12362]  ? selinux_socket_sendmsg+0x198/0x2f0
[  254.595864][T12362]  sock_write_iter+0x53a/0x5b0
[  254.595886][T12362]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  254.595904][T12362]  ? __pfx_sock_write_iter+0x10/0x10
[  254.595932][T12362]  ? bpf_lsm_file_permission+0x9/0x10
[  254.595949][T12362]  ? security_file_permission+0x76/0x210
[  254.595986][T12362]  ? rw_verify_area+0xce/0x6d0
[  254.596008][T12362]  vfs_write+0x6af/0x1050
[  254.596031][T12362]  ? __pfx_sock_write_iter+0x10/0x10
[  254.596055][T12362]  ? __pfx_vfs_write+0x10/0x10
[  254.596075][T12362]  ? find_held_lock+0x2b/0x80
[  254.596109][T12362]  ksys_write+0x1f8/0x250
[  254.596131][T12362]  ? __pfx_ksys_write+0x10/0x10
[  254.596159][T12362]  do_syscall_64+0x123/0x790
[  254.596181][T12362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.596200][T12362] RIP: 0033:0x7f5808f9e0d9
[  254.596217][T12362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.596234][T12362] RSP: 002b:00007f5809f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  254.596252][T12362] RAX: ffffffffffffffda RBX: 00007f5809225fa0 RCX: 00007f5808f9e0d9
[  254.596264][T12362] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004
[  254.596275][T12362] RBP: 00007f5809f21090 R08: 0000000000000000 R09: 0000000000000000
[  254.596286][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.596297][T12362] R13: 00007f5809226038 R14: 00007f5809225fa0 R15: 00007ffc407f7d68
[  254.596321][T12362]  </TASK>
[  254.632619][ T5737] Bluetooth: hci2: command 0x0419 tx timeout
[  254.705989][T12370] dvmrp0: entered allmulticast mode
[  254.839366][T12376] FAULT_INJECTION: forcing a failure.
[  254.839366][T12376] name failslab, interval 1, probability 0, space 0, times 0
[  254.845280][T12376] CPU: 3 UID: 0 PID: 12376 Comm: syz.3.1635 Not tainted syzkaller #0 PREEMPT(full) 
[  254.845305][T12376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.845315][T12376] Call Trace:
[  254.845321][T12376]  <TASK>
[  254.845329][T12376]  dump_stack_lvl+0x100/0x190
[  254.845358][T12376]  should_fail_ex.cold+0x5/0xa
[  254.845380][T12376]  should_failslab+0xc2/0x120
[  254.845404][T12376]  __kmalloc_cache_noprof+0x91/0x6b0
[  254.845425][T12376]  ? alloc_pipe_info+0x10e/0x590
[  254.845454][T12376]  alloc_pipe_info+0x10e/0x590
[  254.845481][T12376]  splice_direct_to_actor+0x78f/0xa30
[  254.845508][T12376]  ? __lock_acquire+0x4c5/0x1ec0
[  254.845532][T12376]  ? __pfx_direct_splice_actor+0x10/0x10
[  254.845561][T12376]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  254.845593][T12376]  do_splice_direct+0x174/0x240
[  254.845620][T12376]  ? __pfx_do_splice_direct+0x10/0x10
[  254.845645][T12376]  ? avc_policy_seqno+0x9/0x20
[  254.845664][T12376]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  254.845692][T12376]  ? rw_verify_area+0xce/0x6d0
[  254.845714][T12376]  do_sendfile+0xadc/0xe20
[  254.845738][T12376]  ? __pfx_do_sendfile+0x10/0x10
[  254.845765][T12376]  __x64_sys_sendfile64+0x154/0x220
[  254.845789][T12376]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  254.845820][T12376]  do_syscall_64+0x123/0x790
[  254.845874][T12376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.845894][T12376] RIP: 0033:0x7f72ac59e0d9
[  254.845909][T12376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.845932][T12376] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  254.845949][T12376] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  254.845961][T12376] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000005
[  254.845969][T12376] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  254.845979][T12376] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  254.845989][T12376] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  254.846011][T12376]  </TASK>
[  254.985288][T12382] xt_connbytes: Forcing CT accounting to be enabled
[  255.096249][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1640'.
[  255.099637][T12385] FAULT_INJECTION: forcing a failure.
[  255.099637][T12385] name failslab, interval 1, probability 0, space 0, times 0
[  255.124606][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.3.1638 Not tainted syzkaller #0 PREEMPT(full) 
[  255.124634][T12385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.124646][T12385] Call Trace:
[  255.124653][T12385]  <TASK>
[  255.124662][T12385]  dump_stack_lvl+0x100/0x190
[  255.124693][T12385]  should_fail_ex.cold+0x5/0xa
[  255.124719][T12385]  should_failslab+0xc2/0x120
[  255.124749][T12385]  kmem_cache_alloc_noprof+0x91/0x6a0
[  255.124776][T12385]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  255.124807][T12385]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  255.124839][T12385]  mmu_topup_memory_caches+0x25/0x170
[  255.124871][T12385]  kvm_mmu_load+0xe2/0x2570
[  255.124899][T12385]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  255.124921][T12385]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  255.124946][T12385]  ? __pfx_kvm_mmu_load+0x10/0x10
[  255.124974][T12385]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  255.125000][T12385]  ? kvm_check_and_inject_events+0x873/0x12a0
[  255.125029][T12385]  ? record_steal_time+0x3f0/0xbb0
[  255.125054][T12385]  vcpu_run+0x3ab0/0x5df0
[  255.125082][T12385]  ? __pfx____ratelimit+0x10/0x10
[  255.125103][T12385]  ? __pfx_vcpu_run+0x10/0x10
[  255.125131][T12385]  ? rcu_is_watching+0x13/0xc0
[  255.125157][T12385]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  255.125176][T12385]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  255.125204][T12385]  kvm_vcpu_ioctl+0x730/0x1700
[  255.125230][T12385]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  255.125255][T12385]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  255.125284][T12385]  ? do_vfs_ioctl+0x226/0x13e0
[  255.125309][T12385]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  255.125331][T12385]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  255.125363][T12385]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  255.125414][T12385]  ? selinux_file_ioctl+0x13b/0x290
[  255.125441][T12385]  ? selinux_file_ioctl+0xb6/0x290
[  255.125470][T12385]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  255.125495][T12385]  __x64_sys_ioctl+0x18e/0x210
[  255.125521][T12385]  do_syscall_64+0x123/0x790
[  255.125544][T12385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.125564][T12385] RIP: 0033:0x7f72ac59e0d9
[  255.125581][T12385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.125599][T12385] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.125618][T12385] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  255.125630][T12385] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  255.125642][T12385] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  255.125654][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  255.125665][T12385] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  255.125692][T12385]  </TASK>
[  255.159996][T12396] FAULT_INJECTION: forcing a failure.
[  255.159996][T12396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.175450][ T5737] Bluetooth: hci2: unexpected event for opcode 0x0c2d
[  255.181215][T12396] CPU: 2 UID: 0 PID: 12396 Comm: syz.5.1642 Not tainted syzkaller #0 PREEMPT(full) 
[  255.181244][T12396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.181256][T12396] Call Trace:
[  255.181262][T12396]  <TASK>
[  255.181271][T12396]  dump_stack_lvl+0x100/0x190
[  255.181303][T12396]  should_fail_ex.cold+0x5/0xa
[  255.181330][T12396]  _copy_to_user+0x32/0xd0
[  255.181363][T12396]  simple_read_from_buffer+0xcb/0x170
[  255.181393][T12396]  proc_fail_nth_read+0x1af/0x230
[  255.181422][T12396]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  255.181452][T12396]  ? rw_verify_area+0xce/0x6d0
[  255.181474][T12396]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  255.181502][T12396]  vfs_read+0x1e4/0xb40
[  255.181529][T12396]  ? __pfx_vfs_read+0x10/0x10
[  255.181551][T12396]  ? find_held_lock+0x2b/0x80
[  255.181575][T12396]  ? __fget_files+0x215/0x3d0
[  255.181608][T12396]  ? __fget_files+0x21f/0x3d0
[  255.181643][T12396]  ksys_read+0x12a/0x250
[  255.181667][T12396]  ? __pfx_ksys_read+0x10/0x10
[  255.181698][T12396]  do_syscall_64+0x123/0x790
[  255.181723][T12396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.181744][T12396] RIP: 0033:0x7f7e5e55e90e
[  255.181762][T12396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  255.181780][T12396] RSP: 002b:00007f7e5f485fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  255.181818][T12396] RAX: ffffffffffffffda RBX: 00007f7e5f4866c0 RCX: 00007f7e5e55e90e
[  255.181831][T12396] RDX: 000000000000000f RSI: 00007f7e5f4860a0 RDI: 0000000000000005
[  255.181865][T12396] RBP: 00007f7e5f486090 R08: 0000000000000000 R09: 0000000000000000
[  255.181883][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.181895][T12396] R13: 00007f7e5e826038 R14: 00007f7e5e825fa0 R15: 00007fff0c5d4b78
[  255.181922][T12396]  </TASK>
[  255.381102][    C1] sr 2:0:0:0: [sr0] tag#26 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  255.385448][    C1] sr 2:0:0:0: [sr0] tag#26 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  255.393174][T12408] netlink: 'syz.5.1646': attribute type 15 has an invalid length.
[  255.400809][T12408] netlink: 'syz.5.1646': attribute type 15 has an invalid length.
[  255.421326][ T5804] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  255.424325][ T5804] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  255.427287][ T5804] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  255.430185][ T5804] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  255.628349][T12420] xt_hashlimit: size too large, truncated to 1048576
[  256.358765][T12475] netlink: 'syz.7.1664': attribute type 9 has an invalid length.
[  256.443243][T12471] jffs2: notice: (12471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  256.637815][T12475] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1664'.
[  256.650004][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1664'.
[  256.657652][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'.
[  256.768947][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout
[  256.778298][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout
[  256.822669][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'.
[  256.828492][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'.
[  257.245057][T12519] program syz.0.1676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  257.444861][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'.
[  257.449245][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1677'.
[  257.455449][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1677'.
[  257.819491][T12533] fuse: Unknown parameter '000000000000000000000100x0000000000000008'
[  258.026681][T12540] FAULT_INJECTION: forcing a failure.
[  258.026681][T12540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.040517][T12540] CPU: 3 UID: 0 PID: 12540 Comm: syz.5.1682 Not tainted syzkaller #0 PREEMPT(full) 
[  258.040551][T12540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  258.040564][T12540] Call Trace:
[  258.040572][T12540]  <TASK>
[  258.040581][T12540]  dump_stack_lvl+0x100/0x190
[  258.040631][T12540]  should_fail_ex.cold+0x5/0xa
[  258.040662][T12540]  _copy_to_user+0x32/0xd0
[  258.040708][T12540]  simple_read_from_buffer+0xcb/0x170
[  258.040743][T12540]  proc_fail_nth_read+0x1af/0x230
[  258.040778][T12540]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  258.040813][T12540]  ? rw_verify_area+0xce/0x6d0
[  258.040838][T12540]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  258.040870][T12540]  vfs_read+0x1e4/0xb40
[  258.040902][T12540]  ? __pfx_vfs_read+0x10/0x10
[  258.040927][T12540]  ? find_held_lock+0x2b/0x80
[  258.040955][T12540]  ? __fget_files+0x215/0x3d0
[  258.040993][T12540]  ? __fget_files+0x21f/0x3d0
[  258.041033][T12540]  ksys_read+0x12a/0x250
[  258.041060][T12540]  ? __pfx_ksys_read+0x10/0x10
[  258.041094][T12540]  ? trace_csd_function_exit+0x73/0x1f0
[  258.041135][T12540]  do_syscall_64+0x123/0x790
[  258.041171][T12540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.041194][T12540] RIP: 0033:0x7f7e5e55e90e
[  258.041215][T12540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  258.041236][T12540] RSP: 002b:00007f7e5f485fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  258.041259][T12540] RAX: ffffffffffffffda RBX: 00007f7e5f4866c0 RCX: 00007f7e5e55e90e
[  258.041274][T12540] RDX: 000000000000000f RSI: 00007f7e5f4860a0 RDI: 0000000000000005
[  258.041289][T12540] RBP: 00007f7e5f486090 R08: 0000000000000000 R09: 0000000000000000
[  258.041303][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.041316][T12540] R13: 00007f7e5e826038 R14: 00007f7e5e825fa0 R15: 00007fff0c5d4b78
[  258.041347][T12540]  </TASK>
[  258.192359][   T42] kauditd_printk_skb: 18 callbacks suppressed
[  258.192381][   T42] audit: type=1400 audit(1787743856.383:1122): avc:  denied  { write } for  pid=12541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.211008][T12554] SELinux:  policydb string  does not match my string SE Linux
[  258.227391][T12554] SELinux: failed to load policy
[  258.272927][T12550] FAULT_INJECTION: forcing a failure.
[  258.272927][T12550] name failslab, interval 1, probability 0, space 0, times 0
[  258.300468][T12550] CPU: 0 UID: 0 PID: 12550 Comm: syz.7.1685 Not tainted syzkaller #0 PREEMPT(full) 
[  258.300492][T12550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  258.300501][T12550] Call Trace:
[  258.300507][T12550]  <TASK>
[  258.300513][T12550]  dump_stack_lvl+0x100/0x190
[  258.300540][T12550]  should_fail_ex.cold+0x5/0xa
[  258.300561][T12550]  should_failslab+0xc2/0x120
[  258.300584][T12550]  __kmalloc_noprof+0xfc/0x820
[  258.300605][T12550]  ? lsm_blob_alloc+0x68/0x90
[  258.300625][T12550]  lsm_blob_alloc+0x68/0x90
[  258.300641][T12550]  security_task_alloc+0x2a/0x260
[  258.300657][T12550]  copy_process+0x2c11/0x8370
[  258.300692][T12550]  ? __pfx_copy_process+0x10/0x10
[  258.300715][T12550]  ? __kasan_kmalloc+0xaa/0xb0
[  258.300736][T12550]  ? lockdep_init_map_type+0x5c/0x250
[  258.300761][T12550]  ? lockdep_init_map_type+0x5c/0x250
[  258.300784][T12550]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  258.300806][T12550]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  258.300825][T12550]  vhost_task_create+0x1db/0x370
[  258.300847][T12550]  ? __pfx_vhost_task_create+0x10/0x10
[  258.300873][T12550]  ? __pfx_vhost_task_fn+0x10/0x10
[  258.300896][T12550]  ? __pfx___mutex_lock+0x10/0x10
[  258.300914][T12550]  ? kasan_quarantine_put+0x104/0x240
[  258.300939][T12550]  kvm_mmu_post_init_vm+0x1b3/0x360
[  258.300956][T12550]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  258.300972][T12550]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  258.301001][T12550]  kvm_vcpu_ioctl+0x730/0x1700
[  258.301022][T12550]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  258.301043][T12550]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  258.301067][T12550]  ? do_vfs_ioctl+0x226/0x13e0
[  258.301088][T12550]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  258.301106][T12550]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  258.301132][T12550]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  258.301169][T12550]  ? selinux_file_ioctl+0x13b/0x290
[  258.301190][T12550]  ? selinux_file_ioctl+0xb6/0x290
[  258.301214][T12550]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  258.301234][T12550]  __x64_sys_ioctl+0x18e/0x210
[  258.301255][T12550]  do_syscall_64+0x123/0x790
[  258.301273][T12550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.301288][T12550] RIP: 0033:0x7f5808f9e0d9
[  258.301302][T12550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.301316][T12550] RSP: 002b:00007f5809f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.301331][T12550] RAX: ffffffffffffffda RBX: 00007f5809225fa0 RCX: 00007f5808f9e0d9
[  258.301341][T12550] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  258.301350][T12550] RBP: 00007f5809f21090 R08: 0000000000000000 R09: 0000000000000000
[  258.301359][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  258.301367][T12550] R13: 00007f5809226038 R14: 00007f5809225fa0 R15: 00007ffc407f7d68
[  258.301387][T12550]  </TASK>
[  258.402151][   T42] audit: type=1400 audit(1787743856.542:1123): avc:  denied  { write } for  pid=12557 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.531950][T12567] vcan0 speed is unknown, defaulting to 1000
[  258.546442][T12567] vcan0 speed is unknown, defaulting to 1000
[  258.559065][   T42] audit: type=1400 audit(1787743856.720:1124): avc:  denied  { write } for  pid=12566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.559894][T12567] vcan0 speed is unknown, defaulting to 1000
[  258.628945][   T42] audit: type=1400 audit(1787743856.795:1125): avc:  denied  { append } for  pid=12571 comm="syz.7.1691" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  258.719791][   T42] audit: type=1400 audit(1787743856.869:1126): avc:  denied  { write } for  pid=12573 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.827358][T12580] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  258.842580][T12583] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  258.921972][   T42] audit: type=1400 audit(1787743857.038:1127): avc:  denied  { mount } for  pid=12585 comm="syz.0.1694" name="/" dev="ramfs" ino=78675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  258.950593][T12578] syz.7.1693 (12578): drop_caches: 2
[  258.954849][   T42] audit: type=1400 audit(1787743857.094:1128): avc:  denied  { write } for  pid=12584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.994884][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout
[  258.997464][ T5728] Bluetooth: hci1: command 0x0c1a tx timeout
[  259.012781][ T5825] vcan0 speed is unknown, defaulting to 1000
[  259.024076][T12567] infiniband syz1: set active
[  259.026472][T12567] infiniband syz1: added vcan0
[  259.051828][   T42] audit: type=1400 audit(1787743857.178:1129): avc:  denied  { write } for  pid=12591 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.066444][T12567] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  259.074584][T12567] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  259.083081][T12567] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  259.179296][T12567] RDS/IB: syz1: added
[  259.182249][T12567] smc: adding ib device syz1 with port count 1
[  259.196942][T12567] smc:    ib device syz1 port 1 has no pnetid
[  259.201135][ T5838] vcan0 speed is unknown, defaulting to 1000
[  259.216989][T12567] vcan0 speed is unknown, defaulting to 1000
[  259.404298][T12605] FAULT_INJECTION: forcing a failure.
[  259.404298][T12605] name failslab, interval 1, probability 0, space 0, times 0
[  259.410864][T12605] CPU: 3 UID: 0 PID: 12605 Comm: syz.3.1699 Not tainted syzkaller #0 PREEMPT(full) 
[  259.410893][T12605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  259.410905][T12605] Call Trace:
[  259.410912][T12605]  <TASK>
[  259.410921][T12605]  dump_stack_lvl+0x100/0x190
[  259.410954][T12605]  should_fail_ex.cold+0x5/0xa
[  259.410981][T12605]  should_failslab+0xc2/0x120
[  259.411011][T12605]  kmem_cache_alloc_noprof+0x91/0x6a0
[  259.411039][T12605]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  259.411071][T12605]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  259.411104][T12605]  mmu_topup_memory_caches+0x25/0x170
[  259.411136][T12605]  kvm_mmu_load+0xe2/0x2570
[  259.411166][T12605]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  259.411188][T12605]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  259.411218][T12605]  ? __pfx_kvm_mmu_load+0x10/0x10
[  259.411245][T12605]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  259.411274][T12605]  ? kvm_check_and_inject_events+0x873/0x12a0
[  259.411307][T12605]  ? record_steal_time+0x3f0/0xbb0
[  259.411336][T12605]  vcpu_run+0x3ab0/0x5df0
[  259.411364][T12605]  ? __pfx____ratelimit+0x10/0x10
[  259.411386][T12605]  ? __pfx_vcpu_run+0x10/0x10
[  259.411415][T12605]  ? rcu_is_watching+0x13/0xc0
[  259.411452][T12605]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  259.411473][T12605]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  259.411500][T12605]  kvm_vcpu_ioctl+0x730/0x1700
[  259.411528][T12605]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  259.411555][T12605]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  259.411587][T12605]  ? do_vfs_ioctl+0x226/0x13e0
[  259.411613][T12605]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  259.411636][T12605]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  259.411671][T12605]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  259.411721][T12605]  ? selinux_file_ioctl+0x13b/0x290
[  259.411749][T12605]  ? selinux_file_ioctl+0xb6/0x290
[  259.411781][T12605]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  259.411810][T12605]  __x64_sys_ioctl+0x18e/0x210
[  259.411837][T12605]  do_syscall_64+0x123/0x790
[  259.411863][T12605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.411886][T12605] RIP: 0033:0x7f72ac59e0d9
[  259.411905][T12605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.411926][T12605] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  259.411947][T12605] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  259.411961][T12605] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d
[  259.411974][T12605] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  259.411987][T12605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  259.412000][T12605] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  259.412030][T12605]  </TASK>
[  259.439087][   T42] audit: type=1400 audit(1787743857.534:1130): avc:  denied  { write } for  pid=12610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.507208][T12567] vcan0 speed is unknown, defaulting to 1000
[  259.536472][T12615] netlink: 'syz.0.1701': attribute type 2 has an invalid length.
[  259.556963][T12615] netlink: 'syz.0.1701': attribute type 2 has an invalid length.
[  259.561939][T12618] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  259.565660][   T42] audit: type=1400 audit(1787743857.665:1131): avc:  denied  { write } for  pid=12616 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.567379][T12618] overlay: Bad value for 'index'
[  259.673772][T12567] vcan0 speed is unknown, defaulting to 1000
[  259.800950][T12567] vcan0 speed is unknown, defaulting to 1000
[  259.906867][T12567] vcan0 speed is unknown, defaulting to 1000
[  260.380622][T12680] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  260.516035][T12689] __nla_validate_parse: 2 callbacks suppressed
[  260.516052][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1719'.
[  260.540004][T12689] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  260.578302][T12689] netlink: 'syz.0.1719': attribute type 1 has an invalid length.
[  260.581956][T12689] netlink: 'syz.0.1719': attribute type 3 has an invalid length.
[  260.587102][T12689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1719'.
[  260.736426][T12717] FAULT_INJECTION: forcing a failure.
[  260.736426][T12717] name failslab, interval 1, probability 0, space 0, times 0
[  260.741806][T12717] CPU: 3 UID: 0 PID: 12717 Comm: syz.5.1726 Not tainted syzkaller #0 PREEMPT(full) 
[  260.741851][T12717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  260.741862][T12717] Call Trace:
[  260.741868][T12717]  <TASK>
[  260.741875][T12717]  dump_stack_lvl+0x100/0x190
[  260.741905][T12717]  should_fail_ex.cold+0x5/0xa
[  260.741929][T12717]  should_failslab+0xc2/0x120
[  260.741958][T12717]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  260.741985][T12717]  ? __alloc_skb+0x140/0x710
[  260.742024][T12717]  __alloc_skb+0x140/0x710
[  260.742048][T12717]  ? __alloc_skb+0x5b7/0x710
[  260.742073][T12717]  ? __pfx___alloc_skb+0x10/0x10
[  260.742103][T12717]  hci_sock_sendmsg+0x1b01/0x2620
[  260.742126][T12717]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  260.742144][T12717]  ? selinux_socket_sendmsg+0x198/0x2f0
[  260.742174][T12717]  sock_write_iter+0x53a/0x5b0
[  260.742196][T12717]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  260.742214][T12717]  ? __pfx_sock_write_iter+0x10/0x10
[  260.742242][T12717]  ? bpf_lsm_file_permission+0x9/0x10
[  260.742260][T12717]  ? security_file_permission+0x76/0x210
[  260.742289][T12717]  ? rw_verify_area+0xce/0x6d0
[  260.742312][T12717]  vfs_write+0x6af/0x1050
[  260.742335][T12717]  ? __pfx_sock_write_iter+0x10/0x10
[  260.742359][T12717]  ? __pfx_vfs_write+0x10/0x10
[  260.742379][T12717]  ? find_held_lock+0x2b/0x80
[  260.742416][T12717]  ksys_write+0x1f8/0x250
[  260.742437][T12717]  ? __pfx_ksys_write+0x10/0x10
[  260.742467][T12717]  do_syscall_64+0x123/0x790
[  260.742489][T12717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.742508][T12717] RIP: 0033:0x7f7e5e59e0d9
[  260.742524][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.742541][T12717] RSP: 002b:00007f7e5f486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  260.742565][T12717] RAX: ffffffffffffffda RBX: 00007f7e5e825fa0 RCX: 00007f7e5e59e0d9
[  260.742577][T12717] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004
[  260.742604][T12717] RBP: 00007f7e5f486090 R08: 0000000000000000 R09: 0000000000000000
[  260.742615][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.742627][T12717] R13: 00007f7e5e826038 R14: 00007f7e5e825fa0 R15: 00007fff0c5d4b78
[  260.742652][T12717]  </TASK>
[  260.964771][T12724] vivid-000: =================  START STATUS  =================
[  260.986732][T12724] vivid-000: Test Pattern: 75% Colorbar
[  260.990482][T12724] vivid-000: Fill Percentage of Frame: 100
[  260.997403][T12724] vivid-000: Horizontal Movement: No Movement
[  261.002018][T12724] vivid-000: Vertical Movement: No Movement
[  261.005213][T12724] vivid-000: OSD Text Mode: All
[  261.007487][T12724] vivid-000: Show Border: false
[  261.012574][T12724] vivid-000: Show Square: false
[  261.014871][T12724] vivid-000: Sensor Flipped Horizontally: false
[  261.017945][T12724] vivid-000: Sensor Flipped Vertically: false
[  261.022481][T12724] vivid-000: Insert SAV Code in Image: false
[  261.026275][T12724] vivid-000: Insert EAV Code in Image: false
[  261.029341][T12724] vivid-000: Insert Video Guard Band: false
[  261.032550][T12724] vivid-000: Reduced Framerate: false
[  261.035200][T12724] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  261.039151][T12724] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  261.048481][T12724] vivid-000: Enable Capture Cropping: true
[  261.051687][T12724] vivid-000: Enable Capture Composing: true
[  261.059817][T12724] vivid-000: Enable Capture Scaler: true
[  261.063430][T12724] vivid-000: Timestamp Source: End of Frame
[  261.066202][T12724] vivid-000: Colorspace: sRGB
[  261.068491][T12724] vivid-000: Transfer Function: Default
[  261.071297][T12724] vivid-000: Y'CbCr Encoding: Default
[  261.073657][T12724] vivid-000: HSV Encoding: Hue 0-179
[  261.080095][T12724] vivid-000: Quantization: Default
[  261.083457][T12724] vivid-000: Apply Alpha To Red Only: false
[  261.086245][T12724] vivid-000: Standard Aspect Ratio: 4x3
[  261.088530][T12724] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  261.091729][T12724] vivid-000: DV Timings: 640x480p59 inactive
[  261.094393][T12724] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  261.097181][T12724] vivid-000: Maximum EDID Blocks: 2
[  261.099185][T12724] vivid-000: Limited RGB Range (16-235): false
[  261.104922][T12724] vivid-000: Rx RGB Quantization Range: Automatic
[  261.113282][T12724] vivid-000: Power Present: 0x00000001
[  261.116347][T12724] tpg source WxH: 320x180 (Y'CbCr)
[  261.119017][T12724] tpg field: 1
[  261.122440][T12724] tpg crop: (0,0)/320x180
[  261.124280][T12724] tpg compose: (0,0)/320x180
[  261.126176][T12724] tpg colorspace: 8
[  261.128021][T12724] tpg transfer function: 0/0
[  261.130101][T12724] tpg Y'CbCr encoding: 0/0
[  261.132080][T12724] tpg quantization: 0/0
[  261.133873][T12724] tpg RGB range: 0/2
[  261.135490][T12724] vivid-000: ==================  END STATUS  ==================
[  261.149523][T12734] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  261.157102][T12729] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  261.362012][T12741] VFS: Mount too revealing
[  262.155251][T12752] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  262.169457][T12752] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  262.173365][T12752] jffs2: notice: (12752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  262.318531][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'.
[  263.093786][ T5728] Bluetooth: hci0: command 0x040f tx timeout
[  263.106878][ T5737] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  264.277892][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'.
[  264.335780][   T42] kauditd_printk_skb: 18 callbacks suppressed
[  264.335796][   T42] audit: type=1400 audit(1787743862.129:1150): avc:  denied  { getattr } for  pid=12764 comm="syz.3.1739" path="pid:[4026532872]" dev="nsfs" ino=4026532872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  265.327246][ T5737] Bluetooth: hci0: command 0x040f tx timeout
[  266.705302][   T42] audit: type=1400 audit(1787743864.337:1151): avc:  denied  { write } for  pid=12769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.795811][   T42] audit: type=1400 audit(1787743864.431:1152): avc:  denied  { write } for  pid=12777 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.957898][   T42] audit: type=1400 audit(1787743864.580:1153): avc:  denied  { write } for  pid=12791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.978494][T12795] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  266.989523][   T42] audit: type=1400 audit(1787743864.608:1154): avc:  denied  { write } for  pid=12793 comm="syz.0.1747" name="sched_switch" dev="tracefs" ino=76672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  267.003585][   T42] audit: type=1400 audit(1787743864.618:1155): avc:  denied  { add_name } for  pid=12793 comm="syz.0.1747" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  267.012295][   T42] audit: type=1400 audit(1787743864.618:1156): avc:  denied  { create } for  pid=12793 comm="syz.0.1747" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1
[  267.054723][   T42] audit: type=1400 audit(1787743864.674:1157): avc:  denied  { write } for  pid=12796 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  267.141377][   T42] audit: type=1400 audit(1787743864.749:1158): avc:  denied  { write } for  pid=12800 comm="syz.5.1749" lport=52481 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  267.142249][ T5737] Bluetooth: hci3: unexpected event for opcode 0x0c22
[  267.147839][T12805] FAULT_INJECTION: forcing a failure.
[  267.147839][T12805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.147869][T12805] CPU: 2 UID: 0 PID: 12805 Comm: syz.0.1750 Not tainted syzkaller #0 PREEMPT(full) 
[  267.147888][T12805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  267.147897][T12805] Call Trace:
[  267.147902][T12805]  <TASK>
[  267.147909][T12805]  dump_stack_lvl+0x100/0x190
[  267.147936][T12805]  should_fail_ex.cold+0x5/0xa
[  267.147957][T12805]  _copy_from_user+0x2e/0xd0
[  267.147981][T12805]  video_usercopy+0xe71/0x1730
[  267.148004][T12805]  ? __pfx_subdev_do_ioctl_lock+0x10/0x10
[  267.148025][T12805]  ? __pfx_video_usercopy+0x10/0x10
[  267.148057][T12805]  v4l2_ioctl+0x1bd/0x250
[  267.148086][T12805]  ? __pfx_v4l2_ioctl+0x10/0x10
[  267.148108][T12805]  __x64_sys_ioctl+0x18e/0x210
[  267.148129][T12805]  do_syscall_64+0x123/0x790
[  267.148148][T12805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.148164][T12805] RIP: 0033:0x7f0eb2f9e0d9
[  267.148177][T12805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.148191][T12805] RSP: 002b:00007f0eb3f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  267.148208][T12805] RAX: ffffffffffffffda RBX: 00007f0eb3225fa0 RCX: 00007f0eb2f9e0d9
[  267.148218][T12805] RDX: 0000200000000040 RSI: 00000000c040563e RDI: 0000000000000003
[  267.148228][T12805] RBP: 00007f0eb3f46090 R08: 0000000000000000 R09: 0000000000000000
[  267.148237][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.148247][T12805] R13: 00007f0eb3226038 R14: 00007f0eb3225fa0 R15: 00007fff26773008
[  267.148267][T12805]  </TASK>
[  267.172913][   T42] audit: type=1400 audit(1787743864.786:1159): avc:  denied  { write } for  pid=12803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  267.459344][T12826] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  267.540258][ T5737] Bluetooth: hci0: command 0x040f tx timeout
[  267.554412][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  267.573038][T12832] fuse: Unknown parameter 'use00000000000000000000'
[  267.589673][T12833] size and base must be multiples of 4 kiB
[  267.592520][T12833] CPU: 0 UID: 0 PID: 12833 Comm: syz.7.1759 Not tainted syzkaller #0 PREEMPT(full) 
[  267.592550][T12833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  267.592563][T12833] Call Trace:
[  267.592572][T12833]  <TASK>
[  267.592581][T12833]  dump_stack_lvl+0x100/0x190
[  267.592615][T12833]  mtrr_add.cold+0x74/0x87
[  267.592637][T12833]  mtrr_ioctl+0x25a/0xcf0
[  267.592667][T12833]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  267.592701][T12833]  ? __pfx_mtrr_ioctl+0x10/0x10
[  267.592728][T12833]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  267.592774][T12833]  ? __pfx_mtrr_ioctl+0x10/0x10
[  267.592801][T12833]  proc_reg_unlocked_ioctl+0x229/0x320
[  267.592822][T12833]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  267.592846][T12833]  __x64_sys_ioctl+0x18e/0x210
[  267.592873][T12833]  do_syscall_64+0x123/0x790
[  267.592903][T12833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.592924][T12833] RIP: 0033:0x7f5808f9e0d9
[  267.592942][T12833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.592961][T12833] RSP: 002b:00007f5809f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  267.592982][T12833] RAX: ffffffffffffffda RBX: 00007f5809225fa0 RCX: 00007f5808f9e0d9
[  267.592996][T12833] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000004
[  267.593008][T12833] RBP: 00007f5809035024 R08: 0000000000000000 R09: 0000000000000000
[  267.593021][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.593033][T12833] R13: 00007f5809226038 R14: 00007f5809225fa0 R15: 00007ffc407f7d68
[  267.593060][T12833]  </TASK>
[  267.749476][T12839] trusted_key: syz.7.1762 sent an empty control message without MSG_MORE.
[  268.137157][ T5737] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  268.273292][T12866] netlink: 'syz.7.1773': attribute type 39 has an invalid length.
[  268.394132][   T41] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  268.470635][T12881] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  268.554246][   T41] usb 8-1: Using ep0 maxpacket: 8
[  268.557193][   T41] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  268.562243][   T41] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.569331][   T41] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.574454][   T41] usb 8-1: config 0 interface 0 has no altsetting 0
[  268.578791][   T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.584570][   T41] usb 8-1: config 0 descriptor??
[  268.806201][T12890] netlink: 'syz.7.1778': attribute type 101 has an invalid length.
[  268.917812][ T5727] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  269.033117][   T41] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  269.035956][   T41] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  269.038827][   T41] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  269.042057][   T41] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  269.045051][   T41] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  269.048207][   T41] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  269.091460][ T5727] usb 5-1: Using ep0 maxpacket: 8
[  269.094418][ T5727] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  269.109421][ T5727] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  269.120677][ T5727] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.125204][ T5727] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  269.129557][ T5727] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  269.142577][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.164443][ T5727] usbtmc 5-1:16.0: bulk endpoints not found
[  269.244616][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.248645][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.254609][T12868] i2c i2c-2: unsupported multi-msg i2c transaction
[  269.262398][ T8201] usb 8-1: USB disconnect, device number 10
[  269.845281][T12914] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  269.927404][   T42] kauditd_printk_skb: 35 callbacks suppressed
[  269.927421][   T42] audit: type=1400 audit(1787743867.360:1195): avc:  denied  { mounton } for  pid=12916 comm="syz.5.1788" path="/74/config/cluster/mycluster/node/node0/ipv4_address" dev="configfs" ino=80350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  269.933851][ T5737] Bluetooth: hci2: unexpected event for opcode 0x0c2d
[  269.956060][   T42] audit: type=1400 audit(1787743867.378:1196): avc:  denied  { write } for  pid=12916 comm="syz.5.1788" name="/" dev="ocfs2_dlmfs" ino=80354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  269.965202][T12918] o2cb: Local heartbeat has not been started.
[  269.969719][T12918] o2cb: Cluster check failed. Fix errors before retrying.
[  269.972906][T12918] (syz.5.1788,12918,3):user_dlm_register:674 ERROR: status = -22
[  269.978846][T12918] (syz.5.1788,12918,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1"
[  270.159767][   T42] audit: type=1400 audit(1787743867.584:1197): avc:  denied  { write } for  pid=12931 comm="syz.7.1795" name="/" dev="9p" ino=78396511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  270.174370][   T42] audit: type=1400 audit(1787743867.584:1198): avc:  denied  { write } for  pid=12931 comm="syz.7.1795" name="/" dev="9p" ino=78396511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  270.184286][   T42] audit: type=1400 audit(1787743867.584:1199): avc:  denied  { create } for  pid=12931 comm="syz.7.1795" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  270.350307][T12934] mass_storage.0/lun.0: file too small: file0
[  270.352005][   T42] audit: type=1800 audit(1787743867.753:1200): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1796" name="file" dev="configfs" ino=81279 res=0 errno=0
[  270.370922][ T5876] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  270.542139][ T5876] usb 10-1: Using ep0 maxpacket: 8
[  270.546062][ T5876] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  270.551595][ T5876] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  270.556130][ T5876] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  270.560233][ T5876] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  270.564350][ T5876] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  270.568925][ T5876] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.575059][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.811462][ T5876] usb 10-1: usb_control_msg returned -32
[  270.815486][ T5876] usbtmc 10-1:16.0: can't read capabilities
[  271.089750][ T5737] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  271.212603][T12948] cgroup: Need name or subsystem set
[  271.299525][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'.
[  271.308485][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'.
[  271.313316][T12952] FAULT_INJECTION: forcing a failure.
[  271.313316][T12952] name failslab, interval 1, probability 0, space 0, times 0
[  271.320390][T12952] CPU: 1 UID: 0 PID: 12952 Comm: syz.3.1803 Not tainted syzkaller #0 PREEMPT(full) 
[  271.320415][T12952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  271.320426][T12952] Call Trace:
[  271.320434][T12952]  <TASK>
[  271.320442][T12952]  dump_stack_lvl+0x100/0x190
[  271.320472][T12952]  should_fail_ex.cold+0x5/0xa
[  271.320497][T12952]  should_failslab+0xc2/0x120
[  271.320526][T12952]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  271.320554][T12952]  ? __d_alloc+0x35/0xa50
[  271.320577][T12952]  __d_alloc+0x35/0xa50
[  271.320598][T12952]  d_alloc+0x4a/0x1e0
[  271.320617][T12952]  lookup_one_qstr_excl+0x171/0x250
[  271.320641][T12952]  start_dirop+0x59/0xb0
[  271.320667][T12952]  simple_start_creating+0xf9/0x110
[  271.320694][T12952]  ? __pfx_simple_start_creating+0x10/0x10
[  271.320721][T12952]  ? mntput+0x70/0xa0
[  271.320746][T12952]  ? simple_pin_fs+0xa3/0x190
[  271.320772][T12952]  debugfs_start_creating.part.0+0x9f/0x180
[  271.320799][T12952]  __debugfs_create_file+0x86/0x4d0
[  271.320828][T12952]  debugfs_create_file_full+0x41/0x60
[  271.320855][T12952]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  271.320878][T12952]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  271.320923][T12952]  ? lockdep_init_map_type+0x5c/0x250
[  271.320955][T12952]  ? __pfx_vxlan_setup+0x10/0x10
[  271.320979][T12952]  alloc_netdev_mqs+0x314/0x15c0
[  271.321005][T12952]  rtnl_create_link+0xc13/0xf80
[  271.321028][T12952]  rtnl_newlink+0x15bc/0x2620
[  271.321075][T12952]  ? __pfx_rtnl_newlink+0x10/0x10
[  271.321098][T12952]  ? find_held_lock+0x2b/0x80
[  271.321118][T12952]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  271.321139][T12952]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  271.321188][T12952]  ? find_held_lock+0x2b/0x80
[  271.321209][T12952]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  271.321229][T12952]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  271.321251][T12952]  ? __pfx_rtnl_newlink+0x10/0x10
[  271.321272][T12952]  rtnetlink_rcv_msg+0x95e/0xe90
[  271.321295][T12952]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.321323][T12952]  ? ref_tracker_free+0x37e/0x6c0
[  271.321352][T12952]  netlink_rcv_skb+0x159/0x420
[  271.321379][T12952]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.321401][T12952]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.321437][T12952]  ? netlink_deliver_tap+0x1ae/0xcc0
[  271.321467][T12952]  netlink_unicast+0x585/0x850
[  271.321498][T12952]  ? __pfx_netlink_unicast+0x10/0x10
[  271.321524][T12952]  ? __pfx_sock_has_perm+0x10/0x10
[  271.321553][T12952]  netlink_sendmsg+0x8b0/0xda0
[  271.321584][T12952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.321613][T12952]  ? selinux_socket_sendmsg+0x198/0x2f0
[  271.321642][T12952]  ____sys_sendmsg+0xa4d/0xbe0
[  271.321664][T12952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.321693][T12952]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.321718][T12952]  ? _kstrtoull+0x13c/0x1f0
[  271.321740][T12952]  ? __pfx__kstrtoull+0x10/0x10
[  271.321788][T12952]  ___sys_sendmsg+0x190/0x1e0
[  271.321817][T12952]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.321872][T12952]  __sys_sendmmsg+0x20c/0x440
[  271.321894][T12952]  ? __pfx___sys_sendmmsg+0x10/0x10
[  271.321911][T12952]  ? ksys_write+0x190/0x250
[  271.321953][T12952]  ? fput+0x7c/0x100
[  271.321980][T12952]  ? ksys_write+0x1ac/0x250
[  271.322002][T12952]  ? __pfx_ksys_write+0x10/0x10
[  271.322029][T12952]  __x64_sys_sendmmsg+0x9c/0x100
[  271.322048][T12952]  ? lockdep_hardirqs_on+0x7d/0x110
[  271.322068][T12952]  do_syscall_64+0x123/0x790
[  271.322091][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.322110][T12952] RIP: 0033:0x7f72ac59e0d9
[  271.322126][T12952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.322144][T12952] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  271.322162][T12952] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  271.322174][T12952] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  271.322186][T12952] RBP: 00007f72ad529090 R08: 0000000000000000 R09: 0000000000000000
[  271.322197][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.322208][T12952] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  271.322234][T12952]  </TASK>
[  271.452138][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1805'.
[  271.505317][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1805'.
[  271.517591][ T5778] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.520925][ T5778] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.524113][ T5778] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.527975][ T5778] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.638976][T12960] usbtmc 10-1:16.0: usb_control_msg returned -32
[  271.842887][ T6521] usb 5-1: USB disconnect, device number 8
[  272.126635][ T5737] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  272.194069][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'.
[  272.198473][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'.
[  272.202567][T12973] FAULT_INJECTION: forcing a failure.
[  272.202567][T12973] name failslab, interval 1, probability 0, space 0, times 0
[  272.208107][T12973] CPU: 1 UID: 0 PID: 12973 Comm: syz.0.1811 Not tainted syzkaller #0 PREEMPT(full) 
[  272.208131][T12973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  272.208142][T12973] Call Trace:
[  272.208150][T12973]  <TASK>
[  272.208158][T12973]  dump_stack_lvl+0x100/0x190
[  272.208190][T12973]  should_fail_ex.cold+0x5/0xa
[  272.208215][T12973]  should_failslab+0xc2/0x120
[  272.208243][T12973]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  272.208268][T12973]  ? start_dirop+0x79/0xb0
[  272.208293][T12973]  ? alloc_inode+0x68/0x250
[  272.208316][T12973]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  272.208342][T12973]  alloc_inode+0x68/0x250
[  272.208364][T12973]  new_inode+0x22/0x1c0
[  272.208387][T12973]  __debugfs_create_file+0xd8/0x4d0
[  272.208421][T12973]  debugfs_create_file_full+0x41/0x60
[  272.208449][T12973]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  272.208472][T12973]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  272.208518][T12973]  ? lockdep_init_map_type+0x5c/0x250
[  272.208550][T12973]  ? __pfx_vxlan_setup+0x10/0x10
[  272.208575][T12973]  alloc_netdev_mqs+0x314/0x15c0
[  272.208601][T12973]  rtnl_create_link+0xc13/0xf80
[  272.208624][T12973]  rtnl_newlink+0x15bc/0x2620
[  272.208654][T12973]  ? __pfx_rtnl_newlink+0x10/0x10
[  272.208675][T12973]  ? find_held_lock+0x2b/0x80
[  272.208695][T12973]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  272.208716][T12973]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  272.208780][T12973]  ? find_held_lock+0x2b/0x80
[  272.208802][T12973]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  272.208821][T12973]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  272.208842][T12973]  ? __pfx_rtnl_newlink+0x10/0x10
[  272.208863][T12973]  rtnetlink_rcv_msg+0x95e/0xe90
[  272.208886][T12973]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  272.208913][T12973]  ? ref_tracker_free+0x37e/0x6c0
[  272.208938][T12973]  netlink_rcv_skb+0x159/0x420
[  272.208965][T12973]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  272.208987][T12973]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  272.209024][T12973]  ? netlink_deliver_tap+0x1ae/0xcc0
[  272.209054][T12973]  netlink_unicast+0x585/0x850
[  272.209085][T12973]  ? __pfx_netlink_unicast+0x10/0x10
[  272.209119][T12973]  netlink_sendmsg+0x8b0/0xda0
[  272.209150][T12973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.209179][T12973]  ? selinux_socket_sendmsg+0x198/0x2f0
[  272.209209][T12973]  ____sys_sendmsg+0xa4d/0xbe0
[  272.209230][T12973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.209258][T12973]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.209293][T12973]  ___sys_sendmsg+0x190/0x1e0
[  272.209320][T12973]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.209343][T12973]  ? get_pid_task+0x106/0x250
[  272.209374][T12973]  ? find_held_lock+0x2b/0x80
[  272.209416][T12973]  __sys_sendmsg+0x160/0x210
[  272.209435][T12973]  ? __pfx___sys_sendmsg+0x10/0x10
[  272.209469][T12973]  do_syscall_64+0x123/0x790
[  272.209492][T12973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.209512][T12973] RIP: 0033:0x7f0eb2f9e0d9
[  272.209529][T12973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.209547][T12973] RSP: 002b:00007f0eb3f46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.209565][T12973] RAX: ffffffffffffffda RBX: 00007f0eb3225fa0 RCX: 00007f0eb2f9e0d9
[  272.209578][T12973] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003
[  272.209589][T12973] RBP: 00007f0eb3f46090 R08: 0000000000000000 R09: 0000000000000000
[  272.209600][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.209611][T12973] R13: 00007f0eb3226038 R14: 00007f0eb3225fa0 R15: 00007fff26773008
[  272.209637][T12973]  </TASK>
[  272.359788][T12973] debugfs: out of free dentries, can not create file 'netdev@ffff8880269a0700'
[  272.451057][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'.
[  272.546968][T12987] fuse: Unknown parameter '0x0000000000000003'
[  272.551367][T12987] fuse: Unknown parameter '0x0000000000000003'
[  272.831902][ T5737] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  273.006628][   T42] audit: type=1400 audit(1787743870.242:1201): avc:  denied  { mount } for  pid=13001 comm="syz.3.1823" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  273.018837][   T42] audit: type=1400 audit(1787743870.242:1202): avc:  denied  { watch watch_reads } for  pid=13001 comm="syz.3.1823" path="/99/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  273.313127][ T8201] usb 10-1: USB disconnect, device number 2
[  273.393319][T13007] FAULT_INJECTION: forcing a failure.
[  273.393319][T13007] name failslab, interval 1, probability 0, space 0, times 0
[  273.399032][T13007] CPU: 3 UID: 0 PID: 13007 Comm: syz.0.1825 Not tainted syzkaller #0 PREEMPT(full) 
[  273.399057][T13007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  273.399068][T13007] Call Trace:
[  273.399075][T13007]  <TASK>
[  273.399083][T13007]  dump_stack_lvl+0x100/0x190
[  273.399112][T13007]  should_fail_ex.cold+0x5/0xa
[  273.399135][T13007]  should_failslab+0xc2/0x120
[  273.399162][T13007]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  273.399188][T13007]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  273.399213][T13007]  ? ovl_mount_dir+0x26/0x1c0
[  273.399243][T13007]  kstrdup+0x51/0xe0
[  273.399264][T13007]  ovl_mount_dir+0x26/0x1c0
[  273.399292][T13007]  ovl_parse_param+0x11a8/0x1600
[  273.399319][T13007]  ? selinux_fs_context_parse_param+0xd8/0x130
[  273.399355][T13007]  ? __pfx_ovl_parse_param+0x10/0x10
[  273.399385][T13007]  ? static_key_count+0x5a/0x70
[  273.399408][T13007]  ? __pfx_ovl_parse_param+0x10/0x10
[  273.399432][T13007]  vfs_parse_fs_param+0x200/0x3b0
[  273.399453][T13007]  vfs_parse_fs_qstr+0x138/0x1c0
[  273.399473][T13007]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[  273.399498][T13007]  ? ovl_next_opt+0x143/0x1c0
[  273.399523][T13007]  ? __pfx_ovl_next_opt+0x10/0x10
[  273.399548][T13007]  vfs_parse_monolithic_sep+0x195/0x210
[  273.399570][T13007]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  273.399592][T13007]  ? alloc_fs_context+0x65a/0xf40
[  273.399615][T13007]  path_mount+0x77f/0x24c0
[  273.399639][T13007]  ? __pfx_path_mount+0x10/0x10
[  273.399656][T13007]  ? lockdep_hardirqs_on+0x7d/0x110
[  273.399679][T13007]  ? putname+0xb1/0x110
[  273.399693][T13007]  ? kmem_cache_free+0x127/0x6b0
[  273.399720][T13007]  ? __x64_sys_mount+0x293/0x310
[  273.399738][T13007]  __x64_sys_mount+0x293/0x310
[  273.399756][T13007]  ? __pfx___x64_sys_mount+0x10/0x10
[  273.399780][T13007]  do_syscall_64+0x123/0x790
[  273.399800][T13007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.399818][T13007] RIP: 0033:0x7f0eb2f9e0d9
[  273.399833][T13007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.399849][T13007] RSP: 002b:00007f0eb3f46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  273.399866][T13007] RAX: ffffffffffffffda RBX: 00007f0eb3225fa0 RCX: 00007f0eb2f9e0d9
[  273.399878][T13007] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000
[  273.399888][T13007] RBP: 00007f0eb3f46090 R08: 0000200000000180 R09: 0000000000000000
[  273.399899][T13007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  273.399910][T13007] R13: 00007f0eb3226038 R14: 00007f0eb3225fa0 R15: 00007fff26773008
[  273.399934][T13007]  </TASK>
[  273.412163][T13009] fuse: Unknown parameter '0x0000000000000003'
[  273.466714][T13010] fuse: Unknown parameter '0x0000000000000003'
[  273.607661][T13019] sysfs: Unknown parameter 'uuid'
[  273.611777][   T42] audit: type=1400 audit(1787743870.803:1203): avc:  denied  { remount } for  pid=13018 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  273.620588][T13017] FAULT_INJECTION: forcing a failure.
[  273.620588][T13017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.624814][T13017] CPU: 2 UID: 0 PID: 13017 Comm: syz.7.1828 Not tainted syzkaller #0 PREEMPT(full) 
[  273.624830][T13017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  273.624837][T13017] Call Trace:
[  273.624842][T13017]  <TASK>
[  273.624846][T13017]  dump_stack_lvl+0x100/0x190
[  273.624867][T13017]  should_fail_ex.cold+0x5/0xa
[  273.624882][T13017]  _copy_from_user+0x2e/0xd0
[  273.624901][T13017]  do_handle_open+0x6ba/0xf20
[  273.624917][T13017]  ? __pfx_do_handle_open+0x10/0x10
[  273.624939][T13017]  ? ksys_write+0x1ac/0x250
[  273.624953][T13017]  ? __pfx_ksys_write+0x10/0x10
[  273.624970][T13017]  ? do_syscall_64+0x123/0x790
[  273.624982][T13017]  do_syscall_64+0x123/0x790
[  273.624995][T13017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.625006][T13017] RIP: 0033:0x7f5808f9e0d9
[  273.625016][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.625026][T13017] RSP: 002b:00007f5809f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  273.625037][T13017] RAX: ffffffffffffffda RBX: 00007f5809225fa0 RCX: 00007f5808f9e0d9
[  273.625044][T13017] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 000000000000000a
[  273.625050][T13017] RBP: 00007f5809f21090 R08: 0000000000000000 R09: 0000000000000000
[  273.625056][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.625063][T13017] R13: 00007f5809226038 R14: 00007f5809225fa0 R15: 00007ffc407f7d68
[  273.625076][T13017]  </TASK>
[  273.847173][   T42] audit: type=1400 audit(1787743871.028:1204): avc:  denied  { unmount } for  pid=11094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  273.848921][ T5737] Bluetooth: hci3: unexpected event for opcode 0x0c2d
[  273.911880][T13033] 
[  273.912698][T13033] ======================================================
[  273.914943][T13033] WARNING: possible circular locking dependency detected
[  273.917134][T13033] syzkaller #0 Not tainted
[  273.918652][T13033] ------------------------------------------------------
[  273.920786][T13033] syz.3.1834/13033 is trying to acquire lock:
[  273.922680][T13033] ffff888029366480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xe6/0x190
[  273.926010][T13033] 
[  273.926010][T13033] but task is already holding lock:
[  273.928575][T13033] ffff888061372460 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440
[  273.931524][T13033] 
[  273.931524][T13033] which lock already depends on the new lock.
[  273.931524][T13033] 
[  273.934709][T13033] 
[  273.934709][T13033] the existing dependency chain (in reverse order) is:
[  273.937466][T13033] 
[  273.937466][T13033] -> #4 (sb_writers#6){.+.+}-{0:0}:
[  273.939790][T13033]        lock_acquire+0x1b9/0x370
[  273.941373][T13033]        mnt_want_write+0x6f/0x420
[  273.942999][T13033]        lookup_open+0x150/0x1990
[  273.944588][T13033]        path_openat+0xa2c/0x2440
[  273.946189][T13033]        do_file_open+0x20e/0x430
[  273.948054][T13033]        file_open_name+0x1c3/0x3e0
[  273.949750][T13033]        filp_open+0x2e/0x50
[  273.951498][T13033]        fsg_lun_open+0x6b/0x7b0
[  273.953220][T13033]        fsg_store_file+0x1e7/0x450
[  273.955440][T13033]        configfs_write_iter+0x302/0x4e0
[  273.957479][T13033]        vfs_write+0x6af/0x1050
[  273.959035][T13033]        ksys_write+0x12a/0x250
[  273.960574][T13033]        do_syscall_64+0x123/0x790
[  273.962191][T13033]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.964163][T13033] 
[  273.964163][T13033] -> #3 (&common->filesem){++++}-{4:4}:
[  273.966640][T13033]        lock_acquire+0x1b9/0x370
[  273.968261][T13033]        down_read+0x99/0x4c0
[  273.969813][T13033]        fsg_show_file+0x20/0x180
[  273.971532][T13033]        configfs_read_iter+0x426/0x6f0
[  273.973407][T13033]        __kernel_read+0x397/0xad0
[  273.975082][T13033]        integrity_kernel_read+0x7e/0xb0
[  273.976912][T13033]        ima_calc_file_hash_tfm+0x25e/0x350
[  273.978769][T13033]        ima_calc_file_hash+0x1e3/0x380
[  273.980516][T13033]        ima_collect_measurement+0x94f/0xb30
[  273.982467][T13033]        process_measurement+0xdfe/0x2350
[  273.984244][T13033]        ima_file_check+0xc3/0x110
[  273.985868][T13033]        security_file_post_open+0xc4/0x210
[  273.987901][T13033]        path_openat+0x5cd/0x2440
[  273.989645][T13033]        do_file_open+0x20e/0x430
[  273.991382][T13033]        do_sys_openat2+0x10f/0x1e0
[  273.993010][T13033]        __x64_sys_openat+0x12d/0x210
[  273.994717][T13033]        do_syscall_64+0x123/0x790
[  273.996311][T13033]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.998464][T13033] 
[  273.998464][T13033] -> #2 (&p->frag_sem){++++}-{4:4}:
[  274.000842][T13033]        lock_acquire+0x1b9/0x370
[  274.002461][T13033]        down_read+0x99/0x4c0
[  274.003989][T13033]        configfs_write_iter+0x218/0x4e0
[  274.005848][T13033]        vfs_write+0x6af/0x1050
[  274.007439][T13033]        ksys_write+0x12a/0x250
[  274.009056][T13033]        do_syscall_64+0x123/0x790
[  274.010830][T13033]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.012815][T13033] 
[  274.012815][T13033] -> #1 (&buffer->mutex){+.+.}-{4:4}:
[  274.015081][T13033]        lock_acquire+0x1b9/0x370
[  274.016634][T13033]        __mutex_lock+0x1a4/0x1bc0
[  274.018307][T13033]        configfs_read_iter+0x79/0x6f0
[  274.020082][T13033]        __kernel_read+0x397/0xad0
[  274.021720][T13033]        integrity_kernel_read+0x7e/0xb0
[  274.023516][T13033]        ima_calc_file_hash_tfm+0x25e/0x350
[  274.025301][T13033]        ima_calc_file_hash+0x1e3/0x380
[  274.027013][T13033]        ima_collect_measurement+0x94f/0xb30
[  274.028889][T13033]        process_measurement+0xdfe/0x2350
[  274.030627][T13033]        ima_file_check+0xc3/0x110
[  274.032223][T13033]        security_file_post_open+0xc4/0x210
[  274.034243][T13033]        path_openat+0x5cd/0x2440
[  274.035987][T13033]        do_file_open+0x20e/0x430
[  274.037989][T13033]        do_sys_openat2+0x10f/0x1e0
[  274.039588][T13033]        __x64_sys_openat+0x12d/0x210
[  274.041255][T13033]        do_syscall_64+0x123/0x790
[  274.042849][T13033]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.044949][T13033] 
[  274.044949][T13033] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  274.047946][T13033]        check_prev_add+0xeb/0xe60
[  274.049545][T13033]        __lock_acquire+0x1492/0x1ec0
[  274.051208][T13033]        lock_acquire+0x1b9/0x370
[  274.052960][T13033]        __mutex_lock+0x1a4/0x1bc0
[  274.054791][T13033]        ima_file_truncate+0xe6/0x190
[  274.056526][T13033]        security_file_truncate+0xf9/0x1e0
[  274.058599][T13033]        path_openat+0x1d7e/0x2440
[  274.060150][T13033]        do_file_open+0x20e/0x430
[  274.061676][T13033]        do_sys_openat2+0x10f/0x1e0
[  274.063310][T13033]        __x64_sys_creat+0xcc/0x120
[  274.064945][T13033]        do_syscall_64+0x123/0x790
[  274.066816][T13033]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.068970][T13033] 
[  274.068970][T13033] other info that might help us debug this:
[  274.068970][T13033] 
[  274.072199][T13033] Chain exists of:
[  274.072199][T13033]   &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#6
[  274.072199][T13033] 
[  274.076392][T13033]  Possible unsafe locking scenario:
[  274.076392][T13033] 
[  274.078903][T13033]        CPU0                    CPU1
[  274.080660][T13033]        ----                    ----
[  274.082396][T13033]   rlock(sb_writers#6);
[  274.083785][T13033]                                lock(&common->filesem);
[  274.085969][T13033]                                lock(sb_writers#6);
[  274.088014][T13033]   lock(&ima_iint_mutex_key[depth]);
[  274.089642][T13033] 
[  274.089642][T13033]  *** DEADLOCK ***
[  274.089642][T13033] 
[  274.092179][T13033] locks held by syz.3.1834/13033: 1, last CPU#3:
[  274.094311][T13033]  #0: ffff888061372460 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440
[  274.097593][T13033] 
[  274.097593][T13033] stack backtrace:
[  274.099670][T13033] CPU: 3 UID: 0 PID: 13033 Comm: syz.3.1834 Not tainted syzkaller #0 PREEMPT(full) 
[  274.099686][T13033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  274.099694][T13033] Call Trace:
[  274.099700][T13033]  <TASK>
[  274.099706][T13033]  dump_stack_lvl+0x100/0x190
[  274.099724][T13033]  print_circular_bug.cold+0x178/0x1be
[  274.099743][T13033]  check_noncircular+0x146/0x160
[  274.099762][T13033]  check_prev_add+0xeb/0xe60
[  274.099778][T13033]  __lock_acquire+0x1492/0x1ec0
[  274.099794][T13033]  ? tomoyo_path_perm+0x2db/0x460
[  274.099815][T13033]  lock_acquire+0x1b9/0x370
[  274.099831][T13033]  ? ima_file_truncate+0xe6/0x190
[  274.099843][T13033]  ? __pfx___might_resched+0x10/0x10
[  274.099859][T13033]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  274.099876][T13033]  __mutex_lock+0x1a4/0x1bc0
[  274.099890][T13033]  ? ima_file_truncate+0xe6/0x190
[  274.099900][T13033]  ? ima_file_truncate+0xe6/0x190
[  274.099911][T13033]  ? __pfx___mutex_lock+0x10/0x10
[  274.099925][T13033]  ? __pfx_ima_file_check+0x10/0x10
[  274.099935][T13033]  ? hook_file_truncate+0xba/0x280
[  274.099947][T13033]  ? ima_file_truncate+0xe6/0x190
[  274.099957][T13033]  ima_file_truncate+0xe6/0x190
[  274.099967][T13033]  security_file_truncate+0xf9/0x1e0
[  274.099978][T13033]  path_openat+0x1d7e/0x2440
[  274.099995][T13033]  ? __pfx_path_openat+0x10/0x10
[  274.100012][T13033]  do_file_open+0x20e/0x430
[  274.100028][T13033]  ? __pfx_do_file_open+0x10/0x10
[  274.100048][T13033]  ? _raw_spin_unlock+0x28/0x50
[  274.100064][T13033]  ? alloc_fd+0x471/0x7a0
[  274.100081][T13033]  do_sys_openat2+0x10f/0x1e0
[  274.100091][T13033]  ? __pfx_do_sys_openat2+0x10/0x10
[  274.100102][T13033]  ? __x64_sys_futex+0x34f/0x4d0
[  274.100114][T13033]  ? __x64_sys_futex+0x358/0x4d0
[  274.100125][T13033]  __x64_sys_creat+0xcc/0x120
[  274.100136][T13033]  ? __pfx___x64_sys_creat+0x10/0x10
[  274.100148][T13033]  ? do_syscall_64+0xae/0x790
[  274.100159][T13033]  do_syscall_64+0x123/0x790
[  274.100170][T13033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.100182][T13033] RIP: 0033:0x7f72ac59e0d9
[  274.100192][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.100203][T13033] RSP: 002b:00007f72ad529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  274.100214][T13033] RAX: ffffffffffffffda RBX: 00007f72ac825fa0 RCX: 00007f72ac59e0d9
[  274.100221][T13033] RDX: 0000000000000000 RSI: ecf86c37d53048c5 RDI: 0000200000000280
[  274.100227][T13033] RBP: 00007f72ac635024 R08: 0000000000000000 R09: 0000000000000000
[  274.100234][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.100240][T13033] R13: 00007f72ac826038 R14: 00007f72ac825fa0 R15: 00007ffeaa390e98
[  274.100250][T13033]  </TASK>