last executing test programs:

10m3.457987143s ago: executing program 1 (id=197):
r0 = socket$kcm(0x29, 0x2, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) (async)
syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f00000001c0), &(0x7f00000005c0)}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0xa8, 0x5, 0xd, 0x4, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x20, 0xb, 0x8}}) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = dup(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) (async)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xbc3, 0x100, 0x551}}) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x39}, 0x94)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r7, r6}) (async)
close(r0)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) (async)
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYBLOB="804200000000000014001280090001007663616e000000000400028008003a00", @ANYRES32=0x0, @ANYBLOB="37ca2d17b2b36fd0e12c56748faf9630d70abedfe783bc9c56aee39f22780a512d5013d1ccdf3d27a173c861a1591329ace4340a3975fbe3266365371b7177ff5587986082136da8fde1ebc010de9d1a7fd73f2defc77c4e7b3fe2be2be739816648f78ea2891091862c3a7b8fcc3246f7511087aeb8e32affad678ca3cc0e86b0010e8dea2673693d92dcb5cd9a7c6bedf8a155a1bc270013a2ac2375455eb01df1bbb7"], 0x3c}}, 0x0)

10m3.457390586s ago: executing program 1 (id=198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x77, 0x7, 0x1, 0x0, "7e20e49a589b362b4efb93e4692fc6fbf1ed1a5395b5bad1bda7840f0deb5d28fbe23768bc21fc3b35678cb665243a28a9d4e86038fb67fd0455b021309a467e5a72f7a62e5c48b8c663fe97168883d94df4dc5b500ad69fdfb5c7e30b92870f97211a3df3c5ab36a3886a93c29c361b975182"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0)

10m3.36792783s ago: executing program 1 (id=199):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r0, 0x401, {0x0, 0x0, 0x0, 0x6, 0x8d1a, 0x0, 0x9, 0x16, 0x18, "b7aecf65553f1a00a86312f1c8bfae39182fc0cb3ab45dc562888ddafc9abb136a3b6b51d933d1d8fb15639838a6c4f4baf2854b721cbde7eb3865f5612aa2d4", "33ca415c5a18df9bb48d2c829cc1583e5fbba0348917aed17e0e8f9b125da27da80912c3d9cfe69d636aa7487d6c0acc99f3a2ea10646768c64a79ed8d69828e", "77846777f2202918fc520850b25dbe7d50c75fb7cc56a49041775242945ccf5a", [0x3, 0xf0]}})
fsopen(&(0x7f0000000280)='cifs\x00', 0x0)

10m3.367670968s ago: executing program 1 (id=200):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0xd, 0x7, 0x9})
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

10m3.247238734s ago: executing program 1 (id=201):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TCFLSH(r5, 0x540b, 0x1)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}, 0x1, 0x0, 0xfeffffff}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x3, 0x87)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200befd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000004000"], 0xe0}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0)

10m2.957160361s ago: executing program 1 (id=206):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async)
io_setup(0x8f0, &(0x7f0000002400))
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r1, 0xc0086442, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000001c0)=0x6)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffdce, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="a836f716cda7d73e", @ANYRES64=r5, @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

10m2.873206943s ago: executing program 32 (id=206):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async)
io_setup(0x8f0, &(0x7f0000002400))
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r1, 0xc0086442, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000001c0)=0x6)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffdce, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="a836f716cda7d73e", @ANYRES64=r5, @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

8m39.443234322s ago: executing program 4 (id=1657):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m38.476149613s ago: executing program 4 (id=1680):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0xffffffffffffff80, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

8m38.416813909s ago: executing program 4 (id=1682):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r0 = syz_open_dev$evdev(0x0, 0x3d, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x7)
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@can_delroute={0x44, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "8391fdff0b4d3981"}, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "6bc59c6297fad977"}, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000003c0)={0x9, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}], 0x0, 0x0, '\x00', 0x4, 0x4})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)

8m38.347975472s ago: executing program 4 (id=1684):
semctl$IPC_RMID(0x0, 0x0, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
r1 = semget$private(0x0, 0x0, 0x480)
semctl$SETVAL(r1, 0x3, 0x10, &(0x7f00000001c0)=0x3) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8b1012, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0/../file0\x00', 0x81801)
move_mount(r2, &(0x7f0000000680)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) (async)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r3)
r4 = accept4(r0, 0x0, 0x0, 0x80000) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d3000000000000008000200640101010c001400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r0}, './file2\x00'})
sendmsg$alg(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)="dabe7f528f5419b92e8d344cc0ae9a7ac2570d2357911270b867bcc96bfb720a8a4050200d9e320fc6c7060f", 0x2c}, {&(0x7f0000000200)="81f98f4b106263c6689a2387d332fd762badf34607dd9ad44a948c6e747fdd93914429595cc8bee73687161c4d06f1cb", 0x30}, {&(0x7f0000000480)="f7eb7b81f847cca11625fd8805dfd4c505db7ba5435dd1300fbd672d383670d9cc05c4189ff35ff97d5e83a7deeaf848fbd7cc4a6874d740c2879c0bb58e10f4b7628421094db877f3ff968d118f80", 0x4f}, {&(0x7f0000000700)="f55b2d526eb4c7018161b0135bf2cb6540f72eccab047d120f68a217d64aad96b02e9292a98d7911b69bf1420c7dc36b5bf0ce6f09f54d0e5d7de98da354b8161a5fc17922536fe1590da1bd739e34bed5f930590135feac1f7e30ece54e039772f9a08cf3baaef1253c0f870a515fe81a58d005f74da5a9de4f3202dc3e68ae678611aa12afe20f5b07fcd2036c3294886ad4585f7b2ea4399c2d4ac744902bab46b4c68fdfceebfa94045de455", 0xae}, {&(0x7f0000000380)="5440528acda81d07f97b4378acbbff96a41d7f112ffc10de7ff20efd52bd6d5550d46e61c24f15a27fa62a004a971f4df3a2eaebcd23b4f0b3d2d1cc1351baf965fd3cbbf60e23ba064f69258759ab2ad763e95b7bdaa5512c1586ccb10c6c7cafabec161765959839127a4ab3dfba4a21309f6cf315cc20b2c50dca83ac4f2d69e34f72f039f66430e0c852bbd3833be631da7a2af859f18b7923e20c874f54049d92e9ac5e4f38e194b1e6dfdba157331167f1386cca36bfc33c339271aaedb4c5772b32225610f630989cc417", 0xce}], 0x5, 0x0, 0x0, 0x10}, 0x24000825) (async)
recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
chdir(&(0x7f0000000040)='./file0\x00') (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

8m38.286164939s ago: executing program 4 (id=1687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000000000000000f000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

8m37.444085206s ago: executing program 4 (id=1700):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, 0x0, 0x40000, &(0x7f0000000280)={@_ha_fsid={[0x401, 0x3]}, {0x10, 0xffff, 0x35, 0x2}}, 0x8, 0x0, 0x0}, {[0x5, 0x39, 0x1a, 0x400]}, 0x2, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m37.351959659s ago: executing program 33 (id=1700):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, 0x0, 0x40000, &(0x7f0000000280)={@_ha_fsid={[0x401, 0x3]}, {0x10, 0xffff, 0x35, 0x2}}, 0x8, 0x0, 0x0}, {[0x5, 0x39, 0x1a, 0x400]}, 0x2, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m22.134719797s ago: executing program 3 (id=2719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x97, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

7m22.034435161s ago: executing program 3 (id=2721):
msgget$private(0x0, 0x240) (async)
r0 = msgget$private(0x0, 0x240)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3)
msgsnd(r0, &(0x7f0000000280)={0x3}, 0x8, 0x800) (async)
msgsnd(r0, &(0x7f0000000280)={0x3}, 0x8, 0x800)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000100))
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628)
r4 = socket(0x2b, 0x6, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)

7m22.033934115s ago: executing program 3 (id=2722):
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004})
rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b})
ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x8001)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711832000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r6, 0x2f, 0x7, 0xfa, 0x2, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x10, 0x3, 0xc62}})
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x7)

7m21.841901712s ago: executing program 3 (id=2724):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x8c20e5, &(0x7f0000000400)={[{@index_on}, {@workdir={'workdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@nfs_export_off}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x8c20e5, &(0x7f0000000400)={[{@index_on}, {@workdir={'workdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@nfs_export_off}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r5=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)}], 0x1}, 0x4000000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000023, 0xed, 0xd7}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
chdir(&(0x7f00000001c0)='./bus\x00')
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)

7m21.724279567s ago: executing program 3 (id=2726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd2a, 0x8c, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

7m21.409767816s ago: executing program 3 (id=2732):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xe049, 0x0, 0x0, 0xe}}, 0x120)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000440), 0x1000a)
sendfile(r1, r2, &(0x7f0000000080)=0x2d, 0x6adf0ca4)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r3=>0x0)
lstat(&(0x7f0000004cc0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
lchown(&(0x7f0000002ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, r5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={0x304, 0x39, 0x400, 0x70bd25, 0x25dfdbfe, {0x1f}, [@generic="5aea24267808b854be0123913663e850fd243b1eab325aa19d057df7142cf98e129f458641b719a795682805ea7ad85ecd37166848c060ac09539d8af9ac53d555dfc55c94f951a1b4530bf7ce34d84919b3c570df4ae6ad03ec24a0639972218d2763df94b353a355c55a317d22cabab9ea7ca5d0be7fbac8814f75763301010a18b01aab26514be1cd353efad736b86ee420e0ae678e14de98a6acec6896f30ab46dc40fd25cbca4ad6efb650c043fc7925e844ed45045f4abb80b2527b1683e3e6e39c523757d94", @nested={0x1c, 0x12c, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x142}, @nested={0x4, 0xbb}, @nested={0x4, 0x7d}, @nested={0x4, 0x9c}]}, @generic="49dbcd274e6b07d619a1b8f4ee14f345382784c936b8d5d75f17b70bf44c0efac141aa458d9a55236eed033f7cfc4ea14e7af5e2ffe985bc990e2a41090b21004475398a3c1cee", @nested={0xc, 0x3f, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0x4, 0x126}]}, @nested={0xd6, 0xd, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x9}, @typed={0x78, 0xac, 0x0, 0x0, @binary="c6110bf6eff83697be7083a355accf0985b5b9017ed4b5ac2166164e9d0091e30a48009ffa822847bd8a54886e11b5acd10ee6ae1fc8475a42372db77b09a8f598a95a5b1d8a94e22bfcea93a07544524ed52616fc1c51af0771d5c587c9614f621d58dd173d9996a48758f8c68f1534d031fbfb"}, @nested={0x4, 0x5e}, @generic="8444a4fa65be83b8bf48240916a17b58cd35c168fb17ee63daf76a58192a9e6f6a5f0a2285a036b0cfd08175a1f58e915e0a", @typed={0x8, 0x9c, 0x0, 0x0, @pid=r6}]}, @generic="eb1520be721b884eea60fe8cf109d272aa25a3b506f684cb856fa7a1b2f04388ef812d027d429bd30c1dbdbf5c84c692478fc9f1976eb475d29c940ebd07a28c8de87f5029efebaaf29424377c7c5176eef9eb5afac25ed2ca1c3e57a7e0ef1d771ed24e035b3ddb0a3dd941aa92df29db667a3d03615b10d346342f8d3e3387fe3504398d8e3b23a32c7e6bf5ceb512538c0b0f2709834223c3ec977595e4f5e2a92b28ee8ad26a1e7047d06e9ffa92e7640a414593a5a5cee338397fd394ba06df558d0129ccde80e9afa5d7c462f0037219aa709593a9b01c218afe4d14"]}, 0x304}, 0x1, 0x0, 0x0, 0x36040800}, 0x2000001)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7, &(0x7f00000001c0)=[{0x3, 0xd, 0x72}, {0x0, 0xffffffffffffffff, 0xc}, {0x7, 0xbe21, 0x9}], 0x3, 0x1, 0x67, 0x2e, 0x14, 0x1c})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r10=>0x0, 0x2f, 0x5f, 0x7, 0x3, 0x50, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x1, 0x17c6}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'erspan0\x00', <r11=>0x0, 0x10, 0x700, 0x1, 0x800, {{0x1c, 0x4, 0x0, 0x17, 0x70, 0x67, 0x0, 0x42, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x5a, 0xfffffffffffffffc, [{0x0, 0x7, "8bcff2b48f"}, {0x0, 0x5, "76a5f0"}, {0x0, 0x3, "15"}, {0x6, 0xa, "1710133830ff0bd8"}, {0x0, 0xe, "863d78777b91a3314d2c5acb"}, {0x1, 0x3, "c0"}, {0x2, 0xe, "316fd45140ab6857fe971ea3"}, {0x2, 0xf, "8e8ff6ab09c2b059ad34619cb3"}, {0x0, 0x2}, {0x0, 0xb, "867950ddcb28c2518e"}]}]}}}}})
r12 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x68)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=ANY=[], 0xc, 0x1)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {}, {0x8, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x9c, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x8804)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="400000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000940003007465616d3000000000000000000000000a001100aaaaaaaaaaaa00000c5ca384b6e3dd7f7303c400877506d5ad022020a58104f3a46f52c4bced102f78d3cbfbc630bd4c78847df9c7dc15259fd090d15c694c2612e89ea88af81f6a6257aa3bbdd36ba36826438cce47985cf9b3f2"], 0x40}}, 0x0)

7m21.326940587s ago: executing program 34 (id=2732):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xe049, 0x0, 0x0, 0xe}}, 0x120)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000440), 0x1000a)
sendfile(r1, r2, &(0x7f0000000080)=0x2d, 0x6adf0ca4)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r3=>0x0)
lstat(&(0x7f0000004cc0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
lchown(&(0x7f0000002ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, r5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={0x304, 0x39, 0x400, 0x70bd25, 0x25dfdbfe, {0x1f}, [@generic="5aea24267808b854be0123913663e850fd243b1eab325aa19d057df7142cf98e129f458641b719a795682805ea7ad85ecd37166848c060ac09539d8af9ac53d555dfc55c94f951a1b4530bf7ce34d84919b3c570df4ae6ad03ec24a0639972218d2763df94b353a355c55a317d22cabab9ea7ca5d0be7fbac8814f75763301010a18b01aab26514be1cd353efad736b86ee420e0ae678e14de98a6acec6896f30ab46dc40fd25cbca4ad6efb650c043fc7925e844ed45045f4abb80b2527b1683e3e6e39c523757d94", @nested={0x1c, 0x12c, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x142}, @nested={0x4, 0xbb}, @nested={0x4, 0x7d}, @nested={0x4, 0x9c}]}, @generic="49dbcd274e6b07d619a1b8f4ee14f345382784c936b8d5d75f17b70bf44c0efac141aa458d9a55236eed033f7cfc4ea14e7af5e2ffe985bc990e2a41090b21004475398a3c1cee", @nested={0xc, 0x3f, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0x4, 0x126}]}, @nested={0xd6, 0xd, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x9}, @typed={0x78, 0xac, 0x0, 0x0, @binary="c6110bf6eff83697be7083a355accf0985b5b9017ed4b5ac2166164e9d0091e30a48009ffa822847bd8a54886e11b5acd10ee6ae1fc8475a42372db77b09a8f598a95a5b1d8a94e22bfcea93a07544524ed52616fc1c51af0771d5c587c9614f621d58dd173d9996a48758f8c68f1534d031fbfb"}, @nested={0x4, 0x5e}, @generic="8444a4fa65be83b8bf48240916a17b58cd35c168fb17ee63daf76a58192a9e6f6a5f0a2285a036b0cfd08175a1f58e915e0a", @typed={0x8, 0x9c, 0x0, 0x0, @pid=r6}]}, @generic="eb1520be721b884eea60fe8cf109d272aa25a3b506f684cb856fa7a1b2f04388ef812d027d429bd30c1dbdbf5c84c692478fc9f1976eb475d29c940ebd07a28c8de87f5029efebaaf29424377c7c5176eef9eb5afac25ed2ca1c3e57a7e0ef1d771ed24e035b3ddb0a3dd941aa92df29db667a3d03615b10d346342f8d3e3387fe3504398d8e3b23a32c7e6bf5ceb512538c0b0f2709834223c3ec977595e4f5e2a92b28ee8ad26a1e7047d06e9ffa92e7640a414593a5a5cee338397fd394ba06df558d0129ccde80e9afa5d7c462f0037219aa709593a9b01c218afe4d14"]}, 0x304}, 0x1, 0x0, 0x0, 0x36040800}, 0x2000001)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7, &(0x7f00000001c0)=[{0x3, 0xd, 0x72}, {0x0, 0xffffffffffffffff, 0xc}, {0x7, 0xbe21, 0x9}], 0x3, 0x1, 0x67, 0x2e, 0x14, 0x1c})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r10=>0x0, 0x2f, 0x5f, 0x7, 0x3, 0x50, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0x1, 0x17c6}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'erspan0\x00', <r11=>0x0, 0x10, 0x700, 0x1, 0x800, {{0x1c, 0x4, 0x0, 0x17, 0x70, 0x67, 0x0, 0x42, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x5a, 0xfffffffffffffffc, [{0x0, 0x7, "8bcff2b48f"}, {0x0, 0x5, "76a5f0"}, {0x0, 0x3, "15"}, {0x6, 0xa, "1710133830ff0bd8"}, {0x0, 0xe, "863d78777b91a3314d2c5acb"}, {0x1, 0x3, "c0"}, {0x2, 0xe, "316fd45140ab6857fe971ea3"}, {0x2, 0xf, "8e8ff6ab09c2b059ad34619cb3"}, {0x0, 0x2}, {0x0, 0xb, "867950ddcb28c2518e"}]}]}}}}})
r12 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x68)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=ANY=[], 0xc, 0x1)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {}, {0x8, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x9c, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x8804)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="400000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000940003007465616d3000000000000000000000000a001100aaaaaaaaaaaa00000c5ca384b6e3dd7f7303c400877506d5ad022020a58104f3a46f52c4bced102f78d3cbfbc630bd4c78847df9c7dc15259fd090d15c694c2612e89ea88af81f6a6257aa3bbdd36ba36826438cce47985cf9b3f2"], 0x40}}, 0x0)

7m0.886347557s ago: executing program 0 (id=3047):
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

7m0.755139056s ago: executing program 0 (id=3050):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r4=>0x0})
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
accept4$vsock_stream(r5, &(0x7f00000001c0), 0x10, 0x80800)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000000000000000000000cf00000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
sendmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e80)="74a4e87cc89d33547afbda9d629f9f9f20b9b051442633c7a8ea06007c312479a404b3704c8d07860bf96d27dfa41893811161b20d535ad55badcf99b5863b28d31d6185a51a", 0x46}, {&(0x7f0000000a40)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4dba1e25357a", 0x53}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc41", 0x46}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925", 0x57}], 0x4}}], 0x2, 0x8810)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)

7m0.696099276s ago: executing program 0 (id=3052):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000006000)={0x1bf8, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x21c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd5, 0x4, "9a3459ed1c431bc2e33e879a28297c19bdf9cfb642429d0a48c24ea44a8177ed671085e34c60144c891cd4bec885d2d0f8c891f349e2db4feda2d33839e4f1b823d3ba3d87ea596cf52fabe4d71d5b163c8715d81279f14eaf03fdc3a6bb90a89856bf30b384bcf2aed8d06c3beea1eccf4317efbbca601e44406851e9f7bc44afa58eb96c3fdce0f147e60e7ca5d13443694af16ff175d56c5a2c01d578ca0c4a1301aaebb3fab6a43bea10dbdad63731298de47162aac2644062cd28e4dcb1783e1bb860885a4d9cebbef2f911b509c3"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "94792f86044a78a4b61d1dacf714a85f7cb48e0976357a560826ad5b5958eaef63c9274bab436c9543f708e6b37d194f125e5057a1428cad023f0d3068"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "87cdfc6da548ead3f1e989c4014356cc540846dc1d081a85e16e97c5d068b30aa469aad3fb35c9625eb01d2b7b1cb6f0018e7fa41fb2b903770362ef3e3b3553072ce08cd8beee85b9a91155277b2eb92cca96d207de6049aea259a11f3e22351077c3648965cb1338115f5d7de2f16e941d7441bb760fc80bfef191a7a3ca4b22183e7c2c9040e21d79087c38dfb43b01690c0b60327b5172578f4805721f991af63e35a7d791360261309cfb9068fe358fd10dea0f7ebe422875fc58c835171720aa590c00fc7216d799971eb48bb94ef935a6b06a60cc81ac4dbb83a9c46f9f4ef511ca4bed5dde0e5ad60b"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x19c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x813}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\x82\'^\'],*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':&+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc-cast5-avx\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',%)\'}*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x639}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%!*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '**\\-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '].-&@\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc-cast5-avx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\)[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$@]%#(\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1001, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x701, 0x5, "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"}]}]}, 0x1bf8}, 0x1, 0x0, 0x0, 0x24000800}, 0x404c080)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x300000000000000)

7m0.536672164s ago: executing program 0 (id=3058):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x3)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept(r4, 0x0, 0x0)
recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x6020400)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x2020)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m0.466393469s ago: executing program 0 (id=3061):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x406)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)
connect$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x4, 0x4001}, 0xc)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140))

7m0.326160399s ago: executing program 0 (id=3065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a8000000003000800000f001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

7m0.166624304s ago: executing program 35 (id=3065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a8000000003000800000f001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

3m14.7387563s ago: executing program 7 (id=5876):
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
r0 = memfd_secret(0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d04", 0x14}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0)=0x5, 0x12)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="1a3ad0aa9e2e92dec88205deaeebaab7135676b19ec9de08652e238afcc36f32a225033c3999287bfe4021cf70a3d514103725dc07ba58afde3d21c37a15f37ac95558345ffb76461583ad8241694f7ffe30f24e744e56b2ba4a27aabcff77607e8da8c500edc0aedd7f23acddffba8a11cdeb55f6ba585b3bcb6d50fd71d37ef0a708da66f74ea9198d2f07af014d06466a520f609e5c9fb51ae10c61206fd3f24141286a02cee287ead11c35040c05a8fb5717e1ce1368466e431e89eec1fb1be0e19f9b838632a9b718fe", 0xcc)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
syz_kvm_setup_cpu$x86(r8, r0, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x6, 0x0)

3m14.411861167s ago: executing program 7 (id=5884):
mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@cache_fscache}]}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', <r1=>0x0, 0x7, 0x7800, 0x8000, 0x4, {{0x20, 0x4, 0x0, 0x2f, 0x80, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @multicast2, {[@ra={0x94, 0x4}, @cipso={0x86, 0x66, 0x1, [{0x0, 0x8, "114011716991"}, {0x6, 0xd, "c0299488935e474648bff0"}, {0x1, 0x12, "561d00ff94a2ca60d96096683101f6d2"}, {0x5, 0x10, "0ce13358decf0935a55b6faee513"}, {0x6, 0x6, "1e6966be"}, {0x2, 0x7, "2c2e8140c3"}, {0x6, 0x3, '@'}, {0x1, 0x2}, {0x1, 0x6, "8b703c67"}, {0x0, 0x11, "21daf0cd152295fe6d521a35c8825c"}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x72a90}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)

3m14.411666104s ago: executing program 7 (id=5885):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x2, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000080}, 0x4004800)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}], {0x14, 0x10}}, 0x84}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/173, 0xad}], 0x1, 0x809, 0x401)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
mkdir(&(0x7f0000000100)='./file0\x00', 0x100)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
recvmsg(r4, 0x0, 0x10002)
sendmsg$nl_crypto(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002c80)=@upd={0xe0, 0x12, 0x0, 0x70bd27, 0x25dfdbfe, {{'cfb(serpent-generic)\x00'}, '\x00', '\x00', 0x2400, 0x3000}}, 0xe0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x805)
recvmsg$can_j1939(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002540)=""/4, 0x4}], 0x2}, 0x10100)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})

3m14.149765206s ago: executing program 7 (id=5887):
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
close(0x3)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(0x3)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x20005, @dev={0xfe, 0x80, '\x00', 0xe}, 0xff}, 0x1c)
bind$l2tp6(r3, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000300)=0x7)
readv(r4, &(0x7f0000000440)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x100401, 0x7, 0x1000, 0x8, 0x1, "6b050000e9ffffffff6a6482f75200"})
write$binfmt_misc(r2, &(0x7f0000000580)="8c0e2fb1cd", 0x5)
fcntl$setsig(r4, 0xa, 0x1)

3m14.012431633s ago: executing program 7 (id=5889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x20, 0x42804}, 0x84)

3m13.619819575s ago: executing program 7 (id=5893):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt(r0, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae)
r1 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0)
ioctl$NBD_DISCONNECT(r1, 0xab08)
prctl$PR_GET_DUMPABLE(0x3)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r3 = timerfd_create(0x6, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000))
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x9, &(0x7f0000000140)=0x401})
r5 = inotify_init()
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r5, 0xffffffffffffffff, 0x0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108)
io_uring_enter(r4, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r1}}, './cgroup\x00'})

3m13.520838652s ago: executing program 36 (id=5893):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt(r0, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae)
r1 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0)
ioctl$NBD_DISCONNECT(r1, 0xab08)
prctl$PR_GET_DUMPABLE(0x3)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r3 = timerfd_create(0x6, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000))
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x8, 0x9, &(0x7f0000000140)=0x401})
r5 = inotify_init()
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r5, 0xffffffffffffffff, 0x0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108)
io_uring_enter(r4, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r1}}, './cgroup\x00'})

1m5.081015717s ago: executing program 5 (id=7516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x701800, 0x10) (rerun: 32)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000005c0)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r5, 0x1a, "4350044d08709d69ca6b263d87f4ca37e0abc0b2bb499f616be8"}, &(0x7f00000001c0)=0x22) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r7=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x100, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in=@empty}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000880)=0xe8)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x9c, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xd9, 0x3, 0x2f5, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
r10 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r10, 0x84, 0x84, &(0x7f0000000000), 0x90)
sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000006c0)="1056e6a5b84c0c2c4851e818f0ea86ad6cb54232973e6e6f73a7c55fe99a3f71448fe5edcb913dea4c80b8ff4e668808b47177138b43748d64941d5832729261f233bd2e4ff696139e4ccda6383cd8212cd26132086f976632775e2d2b4a7861c164f814468de959dced9713bda3b341719988de5930fcb11e5052ac13045e774c861dd6d534ee3da3a8b4c3fa163701b342c956d164", 0x96}, {&(0x7f0000000340)="140c6bba165df670ec34b823adc0f2b2be3efb9b8b10176bc118aa9269513e2d3e7c21e71af6eae781257766782d73104297f348be32a46a75f87d6bb0fcb6fdc04f5d65d7bbcf9a7d03bbd59c00f5720d45670abcd0798b85bac8817a160a444480130e757cf0738fb4209a3f20c77b9c223fafe6746553b15bbaea4860eed18d96a96ba4a2d790306f1deb09d129f4926fac3b2461ff42204d090550f4112c0439918a53be1bd2bda2a4191355377c89a063574ae0cc2e64545844d1e57443a59c31de0d9fc0a676c8555b17f0d0", 0xcf}], 0x2}, 0x84)
r11 = socket(0x1, 0x5, 0x0)
close(r11)
r12 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r12, 0x0)

1m4.899451187s ago: executing program 5 (id=7519):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={<r3=>r2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r3})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0)
r10 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8)
keyctl$unlink(0x9, r10, r8)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001100)={'wlan0\x00'})
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000006b00)={0x0, 0x0, &(0x7f0000006ac0)={&(0x7f0000006a80)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)

1m4.761227528s ago: executing program 5 (id=7520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r1=>0x0, 0x4, 0xf, 0x13, 0xdb6, 0x28, @private0, @private2, 0x8000, 0x8000, 0x4e8b, 0xdbad}})
sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000000cc0)=@delchain={0x4b4, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0xf}, {0x3}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x47c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x468, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0xf7, 0xbbc, 0x0, 0x2, 0x8f7, 0x50c, 0x7, 0x9, 0x4, 0x0, 0x8, 0x4, 0xfff, 0x3, 0x4, 0x4, 0x2, 0x2, 0x8, 0x1, 0x7, 0xffffffff, 0x8, 0x7fffffff, 0x1, 0x5, 0xd8cc, 0x2, 0x0, 0x7, 0x0, 0x400, 0x6, 0x4, 0x582, 0x2, 0x6, 0x1, 0x5, 0x3, 0xa, 0x3eb26b13, 0x7, 0x2, 0x2, 0x7b33, 0x7f, 0xfffffffc, 0x70000, 0x6, 0x5f7c1615, 0x8, 0x3, 0x5, 0x100, 0x5, 0x200, 0xf, 0x5, 0x3, 0x6, 0x3, 0x1000, 0x5, 0x9, 0x0, 0x1, 0x87, 0x9, 0xffffff49, 0x9, 0x5, 0x9, 0x9, 0x9, 0xa4fb, 0x7, 0x28, 0x7, 0x3, 0xffffff80, 0x4, 0x2, 0xc, 0x8, 0x2, 0x400, 0x4, 0x0, 0x1, 0x4, 0x6, 0x5, 0x3, 0x1b8, 0x9, 0x5, 0x9, 0xfffffe00, 0xd, 0x4, 0x3, 0xe8a0, 0x7fffffff, 0xace, 0x7ff, 0x4, 0x5, 0x7f3, 0x0, 0xd, 0x78d, 0x5, 0x8, 0x7, 0x1eb2, 0x7, 0x626c, 0x7, 0x8, 0x9, 0x4, 0xfef, 0x0, 0x200, 0x6, 0xec, 0x200, 0x9, 0x31e3, 0x3, 0x400, 0x70a, 0xc14, 0x3, 0x7, 0x2, 0x7, 0x8, 0x2, 0xa1, 0x7fff, 0x0, 0xda, 0x8, 0x2, 0x6, 0x400, 0xa9b, 0xfffffffa, 0x9, 0x0, 0x0, 0x2, 0x6, 0x80000000, 0xf86, 0x6, 0x4, 0x4, 0x3, 0xffff, 0x8, 0x800, 0x1, 0x1, 0xfffff7b2, 0x4, 0x8f91, 0xb3d3, 0x974, 0x8, 0x6, 0x6, 0x3ac01a22, 0x6, 0x4, 0x80000001, 0x6, 0x8, 0x9, 0xfffff001, 0x3, 0x1, 0x80000000, 0xa, 0x4, 0x40, 0x2, 0x0, 0x7, 0xffffff80, 0x1ff, 0xc0000000, 0x0, 0x1, 0x99b, 0x40, 0x0, 0xc0, 0xdc, 0x2, 0x3, 0xa7d1, 0x8, 0x4, 0x5, 0x75482adf, 0x0, 0x8, 0x7, 0xfffffffa, 0x1000, 0x7, 0xe05, 0xffffffff, 0x3e, 0x6, 0x4, 0x80000001, 0x8, 0x0, 0x400, 0xd, 0x6, 0x7f, 0x80, 0x9, 0x9, 0xffff3b13, 0x3, 0x81, 0x6, 0x400000, 0x0, 0xff, 0x6, 0xfffffffd, 0x101, 0x3, 0xe82, 0xc, 0x1, 0x2, 0x6, 0x51ee, 0x1, 0x6, 0x5, 0x0, 0xe9, 0x5, 0xfffffffa, 0xd07c0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x3, 0x8, 0x6, {0x4, 0x0, 0x51b9, 0x3, 0x4, 0x400000}, {0x1, 0x0, 0x3, 0x5, 0x3ff, 0x7fffffff}, 0x0, 0x7, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13af4}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x68, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xdcb}, @NL80211_ATTR_PMKID={0x14, 0x55, "5ca1108d49366210a8fc6380842d7d69"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a3bea2e7bc4eadedc025e700"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_SSID={0x6, 0x34, @random="8185"}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004090}, 0x4804)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x7, 0x0, 0x4, 0x3, 0x10000001}}, 0x120)
writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x26, &(0x7f0000000180))
fcntl$lock(r2, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x48, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x3, 0x0, &(0x7f0000000280)="63ec33", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x50)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000006ec0)={'nr0\x00', 0x1, 0x9})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)

1m4.759720274s ago: executing program 5 (id=7522):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00') (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0)
r6 = dup2(r5, r5) (async)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1}}, @common=@srh1={{0x90}, {0x0, 0x3, 0xf, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xffff00, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 0x0, 0x25e8}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @local, [0xff], [], 'lo\x00', 'gre0\x00', {}, {}, 0x0, 0x5}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x2, 0x1, 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0xfb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x448) (async, rerun: 32)
write$FUSE_STATX(r6, &(0x7f00000003c0)={0x130, 0x0, r2, {0xc, 0x400, 0x0, '\x00', {0x1, 0x2, 0x5, 0x3, r3, r4, 0xc000, '\x00', 0x81, 0xd5, 0x1, 0x5, {0xe, 0x24f05796}, {0x1, 0x96f}, {0x80000001, 0x401}, {0x40, 0xffffffff}, 0x769a, 0x7f, 0x2, 0x6}}}, 0x130) (async, rerun: 32)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x8})

1m4.643099688s ago: executing program 5 (id=7525):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3ff, 0x2)
r3 = dup2(r2, r2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"})
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3a) (async)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) (async)
ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3ff, 0x2) (async)
dup2(r2, r2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) (async)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) (async)

1m3.756247961s ago: executing program 5 (id=7541):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040)=0x6, 0x4)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2586dd60000000002006ff73c9f61c2e84816efb49b5cb8351fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0c1500000000000c000000"], 0x0)

1m3.649714504s ago: executing program 37 (id=7541):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040)=0x6, 0x4)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2586dd60000000002006ff73c9f61c2e84816efb49b5cb8351fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0c1500000000000c000000"], 0x0)

2.203540138s ago: executing program 9 (id=8301):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0xf000)

2.076910652s ago: executing program 9 (id=8302):
syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000d80)="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", 0x13d}, {&(0x7f0000000640)="f7f3920951ac8c987fd9cac1e8cc183703ed9344623c6e330ef1a7449ed38153c7f23940c4636b3875b6a8cb5d00f9bf247b0e8f5365bec98c93ddd8dd37f6fd2adb251fcc510b8c7ae6077c4badf958b68aab591d6dcc45a3f4649fa092245befc76ef8adca686498c6f7fd7bc1f528d93146d52e69058d8fb22b0b004d29cc3648a3f8ce3265c3bc6ce0da1b56d0b8652c67214f7952d4ada5c626434c0ea514a33580db023af49fa64d61da311d41edb17be3214f", 0xb6}, {&(0x7f0000000c00)="5f7dbde3c8d5e5d5ca4f85c74a04e00cc81171fe52330d11ed92838dca7d7c6aea9a01e8f2c8cf0c9c014ae4167bfc076c747af24be16d2b65a07891c2d0b7f225a2abce3d8f1501a0fac086c0fa439f2d1a731e266be07c7a9f78f1db73ac41507b93ea8416b6d7b43ce7be21bd09c3ff27e44443cf983e5de3621e6ce3a4ba3c01a3d5f76633114ca126c78fe1acb7bf8542fb0260e2b4c7b4297aaa7808ec9f5fa266a893ce101a3b394cc0eb762ab338feeeebf5f7d5091640ff50b71ab1ec59dcda80e5c4ecc8a848ccf3ccb5561605d4ea0b2949bb68ca8e41763f9c", 0xdf}], 0x6}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.681124265s ago: executing program 2 (id=8305):
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.61122222s ago: executing program 2 (id=8306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec773000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x3, 0x2})

1.610229596s ago: executing program 8 (id=8307):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x101, 0x70bd25, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1ff}]}, 0x28}}, 0x0) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async)
r3 = socket(0xa, 0x5, 0x0) (async)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
r5 = fsmount(r4, 0x0, 0x88)
r6 = openat$cgroup_int(r5, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x101001, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r9, 0x100000000) (async)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x2, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x1, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) (async)
write$cgroup_int(r6, &(0x7f0000000040)=0x6, 0x12)
sendfile(r3, r6, 0x0, 0x10000a806)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xffff, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x402c894}, 0x4048000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54a6beef915d564c90c200", 0x18) (async)
r12 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r12)
socket$nl_generic(0x10, 0x3, 0x10)

1.610093157s ago: executing program 8 (id=8308):
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00')
lseek(r0, 0x800005, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000)

1.542097182s ago: executing program 8 (id=8309):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"})
mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c)
truncate(&(0x7f0000000040)='./file0\x00', 0xfff)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) (async)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) (async)
truncate(&(0x7f0000000040)='./file0\x00', 0xfff) (async)

1.541527942s ago: executing program 8 (id=8310):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x15}, 0x94)
mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.443535747s ago: executing program 8 (id=8311):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0xf400)

1.322051786s ago: executing program 8 (id=8312):
syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.240666828s ago: executing program 2 (id=8313):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x1, 0x1f8, 0x3, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

954.262406ms ago: executing program 6 (id=8314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000100000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

954.060861ms ago: executing program 6 (id=8315):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x9000000})

783.154431ms ago: executing program 6 (id=8316):
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/206)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x229}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840)

783.030663ms ago: executing program 6 (id=8317):
r0 = syz_open_dev$evdev(&(0x7f0000001040), 0x1, 0x181080)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000380)={0x4, 0x3, &(0x7f0000000300)="583ec3"})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
statx(r1, 0x0, 0x3000, 0x800, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x1f, 0x97, &(0x7f0000000000)="134f4a4064072fa40b0d9f79a57531dd5b0324fd81bb0cf907994a621121f0afde9b4c8876ac0742c035a447b1a0b3621fa95465ec9fdaf70541fa304eea7d30f1f875cd19c62740f0b1bfd35541b4d97aa56486f8c77af7866bca57de2dcd2e08031399ea0529730a30d146fca03eb3a2182a53602d764675212f8a4bd64368682b8b1cc7c8f2f705b152d1bef9ba286ff9d4bbc56600"})

697.04097ms ago: executing program 6 (id=8318):
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
io_uring_setup(0x6390, &(0x7f0000000280)={0x0, 0x621d, 0x842, 0x3, 0x26c})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0)
write$dsp(r0, &(0x7f00000003c0)="e6", 0x1)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
close(r0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd(0x5)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$xdp(0x2c, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket(0x1, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
socket$inet6(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x5})

567.244996ms ago: executing program 9 (id=8319):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x15}, 0x94)
mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

566.745794ms ago: executing program 9 (id=8320):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 12)

322.190906ms ago: executing program 9 (id=8321):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509)
close(r2)
close(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

257.752043ms ago: executing program 9 (id=8322):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20380, 0x0)
readv(r1, &(0x7f0000003500)=[{&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2)

255.481855ms ago: executing program 2 (id=8323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
io_uring_enter(r1, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0)

173.192393ms ago: executing program 2 (id=8324):
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x2, &(0x7f0000000180))
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
read$midi(r0, 0x0, 0x3b)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

76.83932ms ago: executing program 2 (id=8325):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x10, 0x0, &(0x7f0000000700)=[@acquire, @decrefs], 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0)
r3 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x78, r4})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@deltclass={0x40, 0x29, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x587456b12ec322ad}, {0xffff, 0x4}, {0x8, 0xfff3}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x10, 0xa}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x60040001)
r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040))
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x1, 0x7f}, {0xd000, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x67, 0xc5, 0x7, 0x80, 0x40}, {0x1, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0xe, 0x6, 0x3, 0xc, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7f, 0x0, 0x0, 0xc, 0x7f, 0x5, 0x5, 0xf}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x4, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7c, 0xd}, {0xffff1000, 0x80a0000, 0xf, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0x74000, 0xdddd0000, 0xd, 0x6, 0x3, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0x3, 0x1]})
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]})
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r9 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5})
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000))

0s ago: executing program 6 (id=8326):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r0 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r1)
socket$igmp6(0xa, 0x3, 0x2)
r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_ublk_add_dev(r3, r4, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000180)=<r9=>0x0)
syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r2, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x2}, {}, {0x0, 0x0, 0xa}}}})
io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0)
r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2)
syz_ublk_setup_queues(r10, r9, &(0x7f0000000700)={0x0, 0xf5f2, 0x4000, 0x4, 0x0, 0x0, r3}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x1, 0x1cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb026, 0x40, 0x0, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000, 0x8000, 0x0, 0xe}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r8, '\x00', {0x0, 0xac3, 0x0, 0x0}}, 0x0)
r11 = getpid()
syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r2, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x0, 0x0, r11}})
io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0)
nanosleep(&(0x7f0000001a80)={0x5}, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
clock_gettime(0x2, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r14=>0x0})
r15 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r13, r14, 0x25, 0x4, @val=@netkit={@void, @value=r13}}, 0x1c)
r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r15, r16}, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102)

kernel console output (not intermixed with test programs):

nt 0x8F has invalid maxpacket 59391, setting to 1024
[  635.767390][ T5831] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  635.771073][ T5831] usb 7-1: config 168 interface 0 has no altsetting 0
[  635.774035][ T5831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  635.776100][ T5831] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  635.779383][ T5831] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  635.782559][ T5831] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  635.787569][ T5831] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  635.791299][ T5831] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  635.794484][ T5831] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  635.799371][ T5831] usb 7-1: config 168 interface 0 has no altsetting 0
[  635.802265][ T5831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  635.804321][ T5831] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  635.809920][ T5831] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  635.813079][ T5831] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  635.817545][ T5831] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  635.820894][ T5831] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  635.824049][ T5831] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  635.828608][ T5831] usb 7-1: config 168 interface 0 has no altsetting 0
[  635.833349][ T5831] usb 7-1: string descriptor 0 read error: -22
[  635.835123][ T5831] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  635.837621][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.843876][ T5831] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  635.856170][T13685] Bluetooth: hci2: unexpected event for opcode 0x040d
[  636.122606][T30151] loop9: detected capacity change from 0 to 255852544
[  636.160587][T30151] loop9: detected capacity change from 255852544 to 524287871
[  636.187799][T30154] binder: 30153:30154 unknown command 1986356271
[  636.192224][ T6694] usb 7-1: USB disconnect, device number 93
[  636.195870][T30154] binder: 30153:30154 ioctl c0306201 200000000080 returned -22
[  636.326575][T30162] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  636.423190][T30164] tmpfs: Unknown parameter '±Î*%^·<Í’.k
Íó$AmQ‹¥1‹ãÓ)'Ù†Û½^.D{cM»hþŽÝµh—ªzyX%Ÿ›¥ž‡¦U|8íÿ6mÛZÜU®çãoLò¿ü:]P²'
[  636.461233][T30164] smbdirect: ib_dev[syz0] removed
[  636.767514][ T5831] tipc: Node number set to 2886997162
[  636.779378][T30172] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  636.842745][ T1351] usb 13-1: USB disconnect, device number 34
[  637.333830][   T39] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[  637.472829][   T39] usb 7-1: device descriptor read/64, error -71
[  637.590303][ T5831] usb 14-1: new high-speed USB device number 3 using dummy_hcd
[  637.705408][T13685] Bluetooth: hci4: unexpected event for opcode 0x040d
[  637.711064][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[  637.712954][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[  637.729265][ T5831] usb 14-1: device descriptor read/64, error -71
[  637.751567][   T39] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[  637.912110][   T39] usb 7-1: device descriptor read/64, error -71
[  637.985997][ T5831] usb 14-1: new high-speed USB device number 4 using dummy_hcd
[  638.030541][   T39] usb usb7-port1: attempt power cycle
[  638.124891][ T5831] usb 14-1: device descriptor read/64, error -71
[  638.186177][T30241] netlink: 'syz.8.7964': attribute type 5 has an invalid length.
[  638.222935][T30248] __nla_validate_parse: 6 callbacks suppressed
[  638.222951][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7965'.
[  638.247457][ T5831] usb usb14-port1: attempt power cycle
[  638.392113][   T39] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  638.414309][   T39] usb 7-1: device descriptor read/8, error -71
[  638.616549][ T5831] usb 14-1: new high-speed USB device number 5 using dummy_hcd
[  638.638858][ T5831] usb 14-1: device descriptor read/8, error -71
[  638.680793][   T39] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  638.685423][ T5745] usb 11-1: new high-speed USB device number 72 using dummy_hcd
[  638.696378][T30270] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  638.702568][   T39] usb 7-1: device descriptor read/8, error -71
[  638.766523][T30272] sg_write: data in/out 32730/10 bytes for SCSI command 0xff-- guessing data in;
[  638.766523][T30272]    program syz.8.7974 not setting count and/or reply_len properly
[  638.832476][   T39] usb usb7-port1: unable to enumerate USB device
[  638.851772][ T5745] usb 11-1: Using ep0 maxpacket: 8
[  638.855854][ T5745] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  638.858395][ T5745] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  638.861932][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  638.866521][ T5745] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  638.870251][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  638.875513][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  638.880679][ T5745] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  638.886112][ T5745] usb 11-1: config 168 interface 0 has no altsetting 0
[  638.889478][ T5745] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  638.891844][ T5745] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  638.894737][ T5831] usb 14-1: new high-speed USB device number 6 using dummy_hcd
[  638.896119][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  638.902981][ T5745] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  638.907938][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  638.912082][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  638.916243][ T5745] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  638.921291][ T5745] usb 11-1: config 168 interface 0 has no altsetting 0
[  638.924460][ T5745] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  638.928936][ T5745] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  638.931493][ T5831] usb 14-1: device descriptor read/8, error -71
[  638.933119][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  638.940504][ T5745] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  638.944898][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  638.945683][T30276] lo speed is unknown, defaulting to 1000
[  638.949188][ T5745] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  638.949206][ T5745] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  638.949220][ T5745] usb 11-1: config 168 interface 0 has no altsetting 0
[  638.952229][ T5745] usb 11-1: string descriptor 0 read error: -22
[  638.952290][ T5745] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  638.952302][ T5745] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.956993][ T5745] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  639.049180][T30276] xfrm0 speed is unknown, defaulting to 1000
[  639.055428][ T5831] usb usb14-port1: unable to enumerate USB device
[  639.219651][T13685] Bluetooth: hci2: unexpected event for opcode 0x040d
[  639.282492][T30284] random: crng reseeded on system resumption
[  639.346566][T14603] usb 11-1: USB disconnect, device number 72
[  639.710543][T30297] rdma_op ffff88802f95d1f0 conn xmit_rdma 0000000000000000
[  639.865174][T30299] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  639.933287][T30303] loop9: detected capacity change from 0 to 255852544
[  639.943390][T30301] devpts: Bad value for 'max'
[  639.985498][T30303] loop9: detected capacity change from 255852544 to 524287871
[  640.028363][T30307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7985'.
[  640.570945][   T40] kauditd_printk_skb: 172 callbacks suppressed
[  640.570962][   T40] audit: type=1400 audit(524919.987:10330): avc:  denied  { create } for  pid=30323 comm="syz.9.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  640.586450][   T40] audit: type=1400 audit(524920.015:10331): avc:  denied  { bind } for  pid=30323 comm="syz.9.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  640.597246][   T40] audit: type=1400 audit(524920.015:10332): avc:  denied  { write } for  pid=30323 comm="syz.9.7991" path="socket:[192657]" dev="sockfs" ino=192657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  640.607943][   T40] audit: type=1400 audit(524920.033:10333): avc:  denied  { recv } for  pid=28772 comm="syz-executor" saddr=127.0.0.1 src=45458 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  640.621029][   T40] audit: type=1400 audit(524920.043:10334): avc:  denied  { create } for  pid=30325 comm="syz.2.7992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  640.632197][   T40] audit: type=1400 audit(524920.052:10335): avc:  denied  { write } for  pid=30325 comm="syz.2.7992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  640.644167][   T40] audit: type=1400 audit(524920.052:10336): avc:  denied  { execmem } for  pid=30327 comm="syz.9.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  640.652810][   T40] audit: type=1400 audit(524920.062:10337): avc:  denied  { create } for  pid=30325 comm="syz.2.7992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  640.661277][   T40] audit: type=1400 audit(524920.062:10338): avc:  denied  { write } for  pid=30325 comm="syz.2.7992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  640.670138][   T40] audit: type=1400 audit(524920.062:10339): avc:  denied  { nlmsg_write } for  pid=30325 comm="syz.2.7992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  641.393957][T30358] binder: 30357:30358 ioctl c0306201 200000000080 returned -14
[  641.401131][T30358] binder: 30357:30358 ioctl c0306201 2000000003c0 returned -14
[  641.662723][T30370] input: syz0 as /devices/virtual/input/input98
[  641.677418][T30363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8002'.
[  641.758625][T30377] loop9: detected capacity change from 0 to 255852544
[  641.803167][T30377] loop9: detected capacity change from 255852544 to 524287871
[  641.951536][T30396] tipc: Started in network mode
[  641.954004][T30396] tipc: Node identity 080211000001, cluster identity 4711
[  641.956600][T30396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  641.960775][T30396] mac80211_hwsim hwsim360 syzkaller0: entered promiscuous mode
[  641.963459][T30396] mac80211_hwsim hwsim360 syzkaller0: entered allmulticast mode
[  641.972927][T30396] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  641.990289][T30396] tipc: Resetting bearer <eth:syzkaller0>
[  642.144873][T30410] loop9: detected capacity change from 0 to 255852544
[  642.223067][T30410] loop9: detected capacity change from 255852544 to 524287871
[  642.305346][T30419] bond6 (unregistering): Released all slaves
[  642.430593][T30431] syzkaller1: entered promiscuous mode
[  642.433050][T30431] syzkaller1: entered allmulticast mode
[  642.534928][T30435] kvm: kvm [30434]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  642.539103][T30435] kvm: kvm [30434]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  642.686883][T30450] loop9: detected capacity change from 0 to 255852544
[  642.722904][T30450] loop9: detected capacity change from 255852544 to 524287871
[  642.735587][T30452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8035'.
[  642.747081][T30452] xfrm1: entered promiscuous mode
[  642.749266][T30452] xfrm1: entered allmulticast mode
[  642.750337][T30454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  642.858533][T13685] Bluetooth: hci2: unexpected event for opcode 0x040d
[  642.946315][T30463] KVM: debugfs: duplicate directory 30463-7
[  642.988907][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8043'.
[  643.043453][T21987] tipc: Node number set to 134418688
[  643.224588][T30482] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8047'.
[  643.501177][T30511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8057'.
[  643.504003][T30511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8057'.
[  643.511401][T30511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8057'.
[  643.514322][ T6869] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  643.518188][ T6869] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  643.518295][T30511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8057'.
[  643.521434][ T6869] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  643.521462][ T6869] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  643.598542][T30520] tipc: Started in network mode
[  643.600872][T30520] tipc: Node identity 3a8540b2439b, cluster identity 4711
[  643.603162][T30520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.605963][T30520] syzkaller0: entered promiscuous mode
[  643.607774][T30520] syzkaller0: entered allmulticast mode
[  643.617372][T30520] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  643.645776][T30518] tipc: Resetting bearer <eth:syzkaller0>
[  643.665312][T30518] tipc: Disabling bearer <eth:syzkaller0>
[  643.704677][T30532] ip6gre0: Master is either lo or non-ether device
[  643.788767][T30534] ISOFS: Unable to identify CD-ROM format.
[  643.844563][T30536] i2c i2c-1: dtv_property_process_set: SET cmd 0x6d947a40 undefined
[  644.048781][T30541] overlayfs: failed to resolve './bus': -2
[  644.123664][T21987] usb 11-1: new full-speed USB device number 73 using dummy_hcd
[  644.288012][T21987] usb 11-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  644.296153][T21987] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.299555][T21987] usb 11-1: Product: syz
[  644.301441][T21987] usb 11-1: Manufacturer: syz
[  644.303884][T21987] usb 11-1: SerialNumber: syz
[  644.394007][T30544] __nla_validate_parse: 4 callbacks suppressed
[  644.394019][T30544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8069'.
[  644.645398][T30552] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8073'.
[  644.732784][T30555] loop6: detected capacity change from 0 to 8
[  644.755134][T21987] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  644.788034][ T2099] blk_print_req_error: 5 callbacks suppressed
[  644.788053][ T2099] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.794631][ T2099] buffer_io_error: 544 callbacks suppressed
[  644.794640][ T2099] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.803229][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.807091][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.809582][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.812685][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.815388][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.818246][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.821092][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.823997][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.826835][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.829880][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.833215][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.836953][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.840064][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.843653][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.849261][T30555] ldm_validate_partition_table(): Disk read failed.
[  644.852545][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.856330][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.859654][T30555] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  644.863573][T30555] Buffer I/O error on dev loop6, logical block 0, async page read
[  644.867071][T30555] Dev loop6: unable to read RDB block 0
[  644.869933][T30555]  loop6: unable to read partition table
[  644.872606][T30555] loop6: partition table beyond EOD, truncated
[  644.875244][T30555] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  645.063862][T30567] Invalid ELF header type: 0 != 1
[  645.269629][T30579] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1
[  645.536051][T30598] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8088'.
[  645.569317][T30598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=30598 comm=syz.9.8088
[  645.903695][T30604] syzkaller0: entered promiscuous mode
[  645.906105][T30604] syzkaller0: entered allmulticast mode
[  645.933328][   T40] kauditd_printk_skb: 243 callbacks suppressed
[  645.933345][   T40] audit: type=1400 audit(524925.009:10583): avc:  denied  { egress } for  pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  645.946112][   T40] audit: type=1400 audit(524925.009:10584): avc:  denied  { sendto } for  pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  645.980798][   T40] audit: type=1400 audit(524925.055:10585): avc:  denied  { create } for  pid=30619 comm="syz.9.8095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  645.988757][   T40] audit: type=1400 audit(524925.055:10586): avc:  denied  { read } for  pid=30619 comm="syz.9.8095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  645.991508][T30620] xt_hashlimit: size too large, truncated to 1048576
[  645.998357][   T40] audit: type=1400 audit(524925.065:10587): avc:  denied  { setopt } for  pid=30619 comm="syz.9.8095" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  646.053538][   T40] audit: type=1400 audit(524925.121:10588): avc:  denied  { allowed } for  pid=30619 comm="syz.9.8095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  646.061967][   T40] audit: type=1400 audit(524925.130:10589): avc:  denied  { create } for  pid=30619 comm="syz.9.8095" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  646.130016][   T40] audit: type=1400 audit(524925.196:10590): avc:  denied  { open } for  pid=30619 comm="syz.9.8095" path="/dev/ptyr6" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  646.141621][   T40] audit: type=1400 audit(524925.196:10591): avc:  denied  { ioctl } for  pid=30619 comm="syz.9.8095" path="/dev/ptyr6" dev="devtmpfs" ino=149 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  646.154363][   T40] audit: type=1400 audit(524925.196:10592): avc:  denied  { read write } for  pid=30619 comm="syz.9.8095" name="vbi6" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  646.919379][T30630] IPVS: Unknown mcast interface: batadv0
[  646.948456][T30634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8100'.
[  647.104291][T30647] loop9: detected capacity change from 0 to 255852544
[  647.109290][ T1351] usb 11-1: USB disconnect, device number 73
[  647.113656][ T1351] usblp0: removed
[  647.150833][T30648] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  647.151496][T30650] FAULT_INJECTION: forcing a failure.
[  647.151496][T30650] name failslab, interval 1, probability 0, space 0, times 0
[  647.159519][T30650] CPU: 3 UID: 0 PID: 30650 Comm: syz.6.8105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  647.159540][T30650] Tainted: [L]=SOFTLOCKUP
[  647.159544][T30650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  647.159551][T30650] Call Trace:
[  647.159555][T30650]  <TASK>
[  647.159559][T30650]  dump_stack_lvl+0x100/0x190
[  647.159582][T30650]  should_fail_ex.cold+0x5/0xa
[  647.159597][T30650]  ? tomoyo_realpath_from_path+0xb6/0x690
[  647.159619][T30650]  should_failslab+0xc2/0x120
[  647.159631][T30650]  __kmalloc_noprof+0xe0/0x850
[  647.159647][T30650]  ? kfree+0x1dd/0x6c0
[  647.159663][T30650]  tomoyo_realpath_from_path+0xb6/0x690
[  647.159683][T30650]  tomoyo_path_number_perm+0x23c/0x580
[  647.159697][T30650]  ? tomoyo_path_number_perm+0x22e/0x580
[  647.159713][T30650]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  647.159741][T30650]  ? find_held_lock+0x2b/0x80
[  647.159751][T30650]  ? __fget_files+0x215/0x3d0
[  647.159764][T30650]  ? hook_file_ioctl_common+0x149/0x410
[  647.159775][T30650]  ? __fget_files+0x215/0x3d0
[  647.159790][T30650]  ? __fget_files+0x21f/0x3d0
[  647.159806][T30650]  security_file_ioctl+0xd3/0x230
[  647.159822][T30650]  __x64_sys_ioctl+0xb7/0x210
[  647.159835][T30650]  do_syscall_64+0x115/0x870
[  647.159856][T30650]  ? clear_bhb_loop+0x40/0x90
[  647.159869][T30650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.159880][T30650] RIP: 0033:0x7f58ceb9ce59
[  647.159889][T30650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.159900][T30650] RSP: 002b:00007f58cfa00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  647.159911][T30650] RAX: ffffffffffffffda RBX: 00007f58cee15fa0 RCX: 00007f58ceb9ce59
[  647.159917][T30650] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  647.159924][T30650] RBP: 00007f58cfa00090 R08: 0000000000000000 R09: 0000000000000000
[  647.159930][T30650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.159937][T30650] R13: 00007f58cee16038 R14: 00007f58cee15fa0 R15: 00007fffac8c77e8
[  647.159950][T30650]  </TASK>
[  647.159955][T30650] ERROR: Out of memory at tomoyo_realpath_from_path.
[  647.184136][T30647] loop9: detected capacity change from 255852544 to 524287871
[  647.245840][T21987] usb 14-1: new high-speed USB device number 7 using dummy_hcd
[  647.403789][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8110'.
[  647.417921][T21987] usb 14-1: Using ep0 maxpacket: 8
[  647.421271][T21987] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  647.428442][T21987] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  647.436689][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  647.443271][T21987] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  647.449198][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  647.459674][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  647.463460][T21987] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  647.467632][T21987] usb 14-1: config 168 interface 0 has no altsetting 0
[  647.471041][T21987] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  647.475915][T21987] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  647.480874][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  647.485418][T21987] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  647.489187][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  647.494483][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  647.498826][T21987] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  647.503578][T21987] usb 14-1: config 168 interface 0 has no altsetting 0
[  647.507324][T21987] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  647.509710][T21987] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  647.513663][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  647.517258][T21987] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  647.520801][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  647.525414][T21987] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  647.529103][T21987] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  647.533201][T21987] usb 14-1: config 168 interface 0 has no altsetting 0
[  647.539208][T21987] usb 14-1: string descriptor 0 read error: -22
[  647.541267][T21987] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  647.544478][T21987] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.552933][T21987] adutux 14-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  647.691171][T14115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  647.700696][T14115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  647.705101][T14115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  647.711402][T14115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  647.714962][T14115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  647.762131][T30238] bridge0: port 3(syz_tun) entered disabled state
[  647.802476][T30238] syz_tun (unregistering): left allmulticast mode
[  647.805367][T30238] syz_tun (unregistering): left promiscuous mode
[  647.808592][T30238] bridge0: port 3(syz_tun) entered disabled state
[  647.930855][T30689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8117'.
[  647.971651][T14603] usb 14-1: USB disconnect, device number 7
[  648.025446][T30676] lo speed is unknown, defaulting to 1000
[  648.060250][T30697] FAULT_INJECTION: forcing a failure.
[  648.060250][T30697] name failslab, interval 1, probability 0, space 0, times 0
[  648.065273][T30697] CPU: 0 UID: 0 PID: 30697 Comm: syz.6.8118 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  648.065299][T30697] Tainted: [L]=SOFTLOCKUP
[  648.065305][T30697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  648.065314][T30697] Call Trace:
[  648.065327][T30697]  <TASK>
[  648.065335][T30697]  dump_stack_lvl+0x100/0x190
[  648.065363][T30697]  should_fail_ex.cold+0x5/0xa
[  648.065386][T30697]  ? tomoyo_encode2+0xfb/0x3c0
[  648.065415][T30697]  should_failslab+0xc2/0x120
[  648.065434][T30697]  __kmalloc_noprof+0xe0/0x850
[  648.065456][T30697]  ? d_absolute_path+0x136/0x1b0
[  648.065477][T30697]  tomoyo_encode2+0xfb/0x3c0
[  648.065525][T30697]  tomoyo_encode+0x29/0x50
[  648.065549][T30697]  tomoyo_realpath_from_path+0x18c/0x690
[  648.065578][T30697]  tomoyo_path_number_perm+0x23c/0x580
[  648.065598][T30697]  ? tomoyo_path_number_perm+0x22e/0x580
[  648.065620][T30697]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  648.065664][T30697]  ? find_held_lock+0x2b/0x80
[  648.065680][T30697]  ? __fget_files+0x215/0x3d0
[  648.065698][T30697]  ? hook_file_ioctl_common+0x149/0x410
[  648.065715][T30697]  ? __fget_files+0x215/0x3d0
[  648.065738][T30697]  ? __fget_files+0x21f/0x3d0
[  648.065761][T30697]  security_file_ioctl+0xd3/0x230
[  648.065786][T30697]  __x64_sys_ioctl+0xb7/0x210
[  648.065806][T30697]  do_syscall_64+0x115/0x870
[  648.065837][T30697]  ? clear_bhb_loop+0x40/0x90
[  648.065858][T30697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.065875][T30697] RIP: 0033:0x7f58ceb9ce59
[  648.065889][T30697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.065905][T30697] RSP: 002b:00007f58cfa00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  648.065922][T30697] RAX: ffffffffffffffda RBX: 00007f58cee15fa0 RCX: 00007f58ceb9ce59
[  648.065933][T30697] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  648.065943][T30697] RBP: 00007f58cfa00090 R08: 0000000000000000 R09: 0000000000000000
[  648.065953][T30697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.065963][T30697] R13: 00007f58cee16038 R14: 00007f58cee15fa0 R15: 00007fffac8c77e8
[  648.065987][T30697]  </TASK>
[  648.066003][T30697] ERROR: Out of memory at tomoyo_realpath_from_path.
[  648.185976][T30676] xfrm0 speed is unknown, defaulting to 1000
[  648.321351][T30705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8120'.
[  648.395450][T30676] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.397641][T30676] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.399740][T30676] bridge_slave_0: entered allmulticast mode
[  648.403555][T30676] bridge_slave_0: entered promiscuous mode
[  648.421160][T30676] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.424206][T30676] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.427318][T30676] bridge_slave_1: entered allmulticast mode
[  648.431289][T30676] bridge_slave_1: entered promiscuous mode
[  648.462244][T30676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.471382][T30676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.524326][T30676] team0: Port device team_slave_0 added
[  648.534996][T30676] team0: Port device team_slave_1 added
[  648.567091][T30676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.569819][T30676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.580471][T30676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.586679][T30676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.589450][T30676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.602227][T30676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.627504][T30724] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8125'.
[  648.653050][T30676] hsr_slave_0: entered promiscuous mode
[  648.656311][T30676] hsr_slave_1: entered promiscuous mode
[  648.766469][T30727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8126'.
[  648.769428][T30727] Unknown options in mask b7f2
[  648.826392][T30738] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  648.885198][T30744] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8129'.
[  648.920518][ T5823] e1000 0000:00:06.0 eth0: Reset adapter
[  648.943742][T30743] FAULT_INJECTION: forcing a failure.
[  648.943742][T30743] name failslab, interval 1, probability 0, space 0, times 0
[  648.950011][T30743] CPU: 0 UID: 0 PID: 30743 Comm: syz.9.8130 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  648.950029][T30743] Tainted: [L]=SOFTLOCKUP
[  648.950033][T30743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  648.950040][T30743] Call Trace:
[  648.950044][T30743]  <TASK>
[  648.950048][T30743]  dump_stack_lvl+0x100/0x190
[  648.950064][T30743]  should_fail_ex.cold+0x5/0xa
[  648.950080][T30743]  ? tomoyo_realpath_from_path+0xb6/0x690
[  648.950097][T30743]  should_failslab+0xc2/0x120
[  648.950110][T30743]  __kmalloc_noprof+0xe0/0x850
[  648.950125][T30743]  ? kfree+0x1dd/0x6c0
[  648.950141][T30743]  tomoyo_realpath_from_path+0xb6/0x690
[  648.950161][T30743]  tomoyo_path_number_perm+0x23c/0x580
[  648.950175][T30743]  ? tomoyo_path_number_perm+0x22e/0x580
[  648.950191][T30743]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  648.950218][T30743]  ? find_held_lock+0x2b/0x80
[  648.950228][T30743]  ? __fget_files+0x215/0x3d0
[  648.950241][T30743]  ? hook_file_ioctl_common+0x149/0x410
[  648.950252][T30743]  ? __fget_files+0x215/0x3d0
[  648.950267][T30743]  ? __fget_files+0x21f/0x3d0
[  648.950283][T30743]  security_file_ioctl+0xd3/0x230
[  648.950299][T30743]  __x64_sys_ioctl+0xb7/0x210
[  648.950312][T30743]  do_syscall_64+0x115/0x870
[  648.950326][T30743]  ? clear_bhb_loop+0x40/0x90
[  648.950345][T30743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.950356][T30743] RIP: 0033:0x7f9c0359ce59
[  648.950366][T30743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.950376][T30743] RSP: 002b:00007f9c04472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  648.950387][T30743] RAX: ffffffffffffffda RBX: 00007f9c03815fa0 RCX: 00007f9c0359ce59
[  648.950394][T30743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  648.950400][T30743] RBP: 00007f9c04472090 R08: 0000000000000000 R09: 0000000000000000
[  648.950406][T30743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.950412][T30743] R13: 00007f9c03816038 R14: 00007f9c03815fa0 R15: 00007ffcbf719f48
[  648.950430][T30743]  </TASK>
[  648.950435][T30743] ERROR: Out of memory at tomoyo_realpath_from_path.
[  649.032494][T30676] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.037339][T30676] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.177038][T30744] mac80211_hwsim hwsim360 syzkaller0: left promiscuous mode
[  649.180675][T30744] mac80211_hwsim hwsim360 syzkaller0: left allmulticast mode
[  649.192393][ T6694] e1000 0000:00:06.0 eth0: Reset adapter
[  649.324385][T30676] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.327654][T30676] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.384632][ T5831] usb 14-1: new high-speed USB device number 8 using dummy_hcd
[  649.385735][T30757] FAULT_INJECTION: forcing a failure.
[  649.385735][T30757] name failslab, interval 1, probability 0, space 0, times 0
[  649.390879][T30757] CPU: 0 UID: 0 PID: 30757 Comm: syz.6.8134 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  649.390896][T30757] Tainted: [L]=SOFTLOCKUP
[  649.390900][T30757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  649.390906][T30757] Call Trace:
[  649.390911][T30757]  <TASK>
[  649.390915][T30757]  dump_stack_lvl+0x100/0x190
[  649.390932][T30757]  should_fail_ex.cold+0x5/0xa
[  649.390947][T30757]  should_failslab+0xc2/0x120
[  649.390959][T30757]  __kmalloc_cache_noprof+0x7a/0x6f0
[  649.390979][T30757]  ? drm_atomic_state_alloc+0xb8/0x120
[  649.390991][T30757]  ? __kasan_slab_free+0x5f/0x80
[  649.391001][T30757]  ? kfree+0x223/0x6c0
[  649.391014][T30757]  ? tomoyo_path_number_perm+0x46d/0x580
[  649.391031][T30757]  drm_atomic_state_alloc+0xb8/0x120
[  649.391043][T30757]  drm_mode_atomic_ioctl+0x395/0x2680
[  649.391058][T30757]  ? avc_has_extended_perms+0x33a/0x1080
[  649.391073][T30757]  ? avc_has_extended_perms+0x484/0x1080
[  649.391086][T30757]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  649.391099][T30757]  ? __lock_acquire+0x4a5/0x2630
[  649.391120][T30757]  ? drm_is_current_master+0x2c/0x40
[  649.391132][T30757]  ? drm_is_current_master+0x2c/0x40
[  649.391145][T30757]  ? do_raw_spin_unlock+0x145/0x1e0
[  649.391162][T30757]  drm_ioctl_kernel+0x1f3/0x3e0
[  649.391173][T30757]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  649.391186][T30757]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  649.391201][T30757]  drm_ioctl+0x5e6/0xc60
[  649.391214][T30757]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  649.391227][T30757]  ? __pfx_drm_ioctl+0x10/0x10
[  649.391243][T30757]  ? selinux_file_ioctl+0x13b/0x290
[  649.391258][T30757]  ? selinux_file_ioctl+0xb6/0x290
[  649.391274][T30757]  ? __pfx_drm_ioctl+0x10/0x10
[  649.391286][T30757]  __x64_sys_ioctl+0x18e/0x210
[  649.391299][T30757]  do_syscall_64+0x115/0x870
[  649.391312][T30757]  ? clear_bhb_loop+0x40/0x90
[  649.391326][T30757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.391337][T30757] RIP: 0033:0x7f58ceb9ce59
[  649.391347][T30757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.391357][T30757] RSP: 002b:00007f58cfa00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  649.391368][T30757] RAX: ffffffffffffffda RBX: 00007f58cee15fa0 RCX: 00007f58ceb9ce59
[  649.391375][T30757] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  649.391381][T30757] RBP: 00007f58cfa00090 R08: 0000000000000000 R09: 0000000000000000
[  649.391388][T30757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.391394][T30757] R13: 00007f58cee16038 R14: 00007f58cee15fa0 R15: 00007fffac8c77e8
[  649.391407][T30757]  </TASK>
[  649.544852][ T5831] usb 14-1: Using ep0 maxpacket: 8
[  649.549087][ T5831] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  649.552367][ T5831] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  649.557553][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  649.562383][ T5831] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  649.567498][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  649.572231][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  649.577185][ T5831] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  649.583102][ T5831] usb 14-1: config 168 interface 0 has no altsetting 0
[  649.588351][ T5831] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  649.591617][ T5831] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  649.596517][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  649.601608][ T5831] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  649.606663][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  649.611602][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  649.615911][T30676] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.616519][ T5831] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  649.620740][T30676] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.631553][ T5831] usb 14-1: config 168 interface 0 has no altsetting 0
[  649.635991][ T5831] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  649.639219][ T5831] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  649.644386][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  649.649173][ T5831] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  649.654918][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  649.659675][ T5831] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  649.664832][ T5831] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  649.670458][ T5831] usb 14-1: config 168 interface 0 has no altsetting 0
[  649.676811][ T5831] usb 14-1: string descriptor 0 read error: -22
[  649.679612][ T5831] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  649.683433][ T5831] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.693807][ T5831] adutux 14-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  649.752410][T30676] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.755713][T30676] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.941019][T14115] Bluetooth: hci3: command tx timeout
[  650.069107][T30676] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  650.075884][T30676] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  650.079726][T30676] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  650.079846][ T6694] usb 14-1: USB disconnect, device number 8
[  650.089702][T30676] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  650.094468][T30676] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  650.100117][T30676] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  650.103744][T30676] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  650.109768][T30676] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  650.168215][T30676] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.177951][T30676] 8021q: adding VLAN 0 to HW filter on device team0
[  650.183179][T16361] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.186212][T16361] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.197646][T16363] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.200673][T16363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.494276][T30676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.656412][T30676] veth0_vlan: entered promiscuous mode
[  650.667774][T30676] veth1_vlan: entered promiscuous mode
[  650.692650][T30676] veth0_macvtap: entered promiscuous mode
[  650.700328][T30676] veth1_macvtap: entered promiscuous mode
[  650.715005][T30676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.724333][T30676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.734982][ T6869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.738625][ T6869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.742931][ T6869] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.746655][ T6869] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.868497][T16363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.871112][T16363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.908001][T16363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.911299][T16363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.481427][   T56] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  652.175544][T14115] Bluetooth: hci3: command tx timeout
[  653.332745][   T40] kauditd_printk_skb: 228 callbacks suppressed
[  653.332758][   T40] audit: type=1400 audit(524931.929:10821): avc:  denied  { recv } for  pid=30800 comm="dhcpcd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  654.389244][T14115] Bluetooth: hci3: command tx timeout
[  655.465142][   T40] audit: type=1400 audit(524933.921:10822): avc:  denied  { write } for  pid=30802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  655.526745][   T40] audit: type=1400 audit(524933.977:10823): avc:  denied  { write } for  pid=30805 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  656.613226][T14115] Bluetooth: hci3: command tx timeout
[  659.171302][   T40] audit: type=1400 audit(524937.390:10824): avc:  denied  { write } for  pid=30807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  659.240026][   T40] audit: type=1400 audit(524937.456:10825): avc:  denied  { write } for  pid=30810 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  660.644340][   T40] audit: type=1400 audit(524938.765:10826): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.0.2.2 src=37162 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  660.673683][   T40] audit: type=1400 audit(524938.793:10827): avc:  denied  { create } for  pid=30815 comm="syz.2.8137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  660.682515][   T40] audit: type=1400 audit(524938.793:10828): avc:  denied  { create } for  pid=30813 comm="syz.9.8136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  660.692092][   T40] audit: type=1400 audit(524938.803:10829): avc:  denied  { read append } for  pid=30813 comm="syz.9.8136" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  660.704014][   T40] audit: type=1400 audit(524938.803:10830): avc:  denied  { open } for  pid=30813 comm="syz.9.8136" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  660.714398][   T40] audit: type=1400 audit(524938.803:10831): avc:  denied  { read } for  pid=30816 comm="syz.6.8138" dev="nsfs" ino=4026534672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  660.725924][   T40] audit: type=1400 audit(524938.803:10832): avc:  denied  { perfmon } for  pid=30815 comm="syz.2.8137" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  660.735473][   T40] audit: type=1400 audit(524938.803:10833): avc:  denied  { prog_run } for  pid=30815 comm="syz.2.8137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  660.742515][T30825] __nla_validate_parse: 1 callbacks suppressed
[  660.742525][T30825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8137'.
[  660.750572][T30825] Unknown options in mask b7f2
[  660.861443][T30831] FAULT_INJECTION: forcing a failure.
[  660.861443][T30831] name failslab, interval 1, probability 0, space 0, times 0
[  660.866223][T30831] CPU: 3 UID: 0 PID: 30831 Comm: syz.2.8141 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.866242][T30831] Tainted: [L]=SOFTLOCKUP
[  660.866246][T30831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  660.866252][T30831] Call Trace:
[  660.866256][T30831]  <TASK>
[  660.866260][T30831]  dump_stack_lvl+0x100/0x190
[  660.866277][T30831]  should_fail_ex.cold+0x5/0xa
[  660.866293][T30831]  ? tomoyo_encode2+0xfb/0x3c0
[  660.866309][T30831]  should_failslab+0xc2/0x120
[  660.866321][T30831]  __kmalloc_noprof+0xe0/0x850
[  660.866343][T30831]  tomoyo_encode2+0xfb/0x3c0
[  660.866361][T30831]  tomoyo_encode+0x29/0x50
[  660.866376][T30831]  tomoyo_realpath_from_path+0x18c/0x690
[  660.866396][T30831]  tomoyo_path_number_perm+0x23c/0x580
[  660.866410][T30831]  ? tomoyo_path_number_perm+0x22e/0x580
[  660.866425][T30831]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  660.866453][T30831]  ? find_held_lock+0x2b/0x80
[  660.866479][T30831]  ? __fget_files+0x215/0x3d0
[  660.866493][T30831]  ? hook_file_ioctl_common+0x149/0x410
[  660.866505][T30831]  ? __fget_files+0x215/0x3d0
[  660.866520][T30831]  ? __fget_files+0x21f/0x3d0
[  660.866536][T30831]  security_file_ioctl+0xd3/0x230
[  660.866552][T30831]  __x64_sys_ioctl+0xb7/0x210
[  660.866564][T30831]  do_syscall_64+0x115/0x870
[  660.866578][T30831]  ? clear_bhb_loop+0x40/0x90
[  660.866591][T30831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.866602][T30831] RIP: 0033:0x7f269679ce59
[  660.866612][T30831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.866622][T30831] RSP: 002b:00007f26975cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  660.866633][T30831] RAX: ffffffffffffffda RBX: 00007f2696a15fa0 RCX: 00007f269679ce59
[  660.866640][T30831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  660.866646][T30831] RBP: 00007f26975cf090 R08: 0000000000000000 R09: 0000000000000000
[  660.866653][T30831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.866659][T30831] R13: 00007f2696a16038 R14: 00007f2696a15fa0 R15: 00007ffc3fcf8e78
[  660.866672][T30831]  </TASK>
[  660.866682][T30831] ERROR: Out of memory at tomoyo_realpath_from_path.
[  660.890861][T30834] FAULT_INJECTION: forcing a failure.
[  660.890861][T30834] name failslab, interval 1, probability 0, space 0, times 0
[  660.944062][T30834] CPU: 1 UID: 0 PID: 30834 Comm: syz.9.8142 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.944080][T30834] Tainted: [L]=SOFTLOCKUP
[  660.944095][T30834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  660.944103][T30834] Call Trace:
[  660.944107][T30834]  <TASK>
[  660.944112][T30834]  dump_stack_lvl+0x100/0x190
[  660.944128][T30834]  should_fail_ex.cold+0x5/0xa
[  660.944143][T30834]  ? drm_atomic_state_init+0xf4/0x490
[  660.944155][T30834]  should_failslab+0xc2/0x120
[  660.944167][T30834]  __kmalloc_noprof+0xe0/0x850
[  660.944186][T30834]  drm_atomic_state_init+0xf4/0x490
[  660.944197][T30834]  ? kasan_save_track+0x14/0x30
[  660.944209][T30834]  drm_atomic_state_alloc+0xd3/0x120
[  660.944220][T30834]  drm_mode_atomic_ioctl+0x395/0x2680
[  660.944235][T30834]  ? avc_has_extended_perms+0x33a/0x1080
[  660.944251][T30834]  ? avc_has_extended_perms+0x484/0x1080
[  660.944264][T30834]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  660.944276][T30834]  ? __lock_acquire+0x4a5/0x2630
[  660.944297][T30834]  ? drm_is_current_master+0x2c/0x40
[  660.944309][T30834]  ? drm_is_current_master+0x2c/0x40
[  660.944322][T30834]  ? do_raw_spin_unlock+0x145/0x1e0
[  660.944339][T30834]  drm_ioctl_kernel+0x1f3/0x3e0
[  660.944349][T30834]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  660.944363][T30834]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  660.944381][T30834]  drm_ioctl+0x5e6/0xc60
[  660.944399][T30834]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  660.944412][T30834]  ? __pfx_drm_ioctl+0x10/0x10
[  660.944428][T30834]  ? selinux_file_ioctl+0x13b/0x290
[  660.944444][T30834]  ? selinux_file_ioctl+0xb6/0x290
[  660.944460][T30834]  ? __pfx_drm_ioctl+0x10/0x10
[  660.944472][T30834]  __x64_sys_ioctl+0x18e/0x210
[  660.944484][T30834]  do_syscall_64+0x115/0x870
[  660.944499][T30834]  ? clear_bhb_loop+0x40/0x90
[  660.944512][T30834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.944523][T30834] RIP: 0033:0x7f9c0359ce59
[  660.944533][T30834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.944544][T30834] RSP: 002b:00007f9c04472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  660.944555][T30834] RAX: ffffffffffffffda RBX: 00007f9c03815fa0 RCX: 00007f9c0359ce59
[  660.944562][T30834] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  660.944569][T30834] RBP: 00007f9c04472090 R08: 0000000000000000 R09: 0000000000000000
[  660.944575][T30834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.944581][T30834] R13: 00007f9c03816038 R14: 00007f9c03815fa0 R15: 00007ffcbf719f48
[  660.944594][T30834]  </TASK>
[  661.217670][T30850] openvswitch: netlink: Duplicate key (type 6).
[  661.227306][T30850] netlink: 'syz.6.8146': attribute type 9 has an invalid length.
[  661.499143][T30867] binder: 30866:30867 ioctl c0306201 200000000080 returned -14
[  661.516731][T30867] binder_alloc: 30866: binder_alloc_buf, no vma
[  661.628072][T30872] FAULT_INJECTION: forcing a failure.
[  661.628072][T30872] name failslab, interval 1, probability 0, space 0, times 0
[  661.633740][T30872] CPU: 3 UID: 0 PID: 30872 Comm: syz.6.8153 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  661.633768][T30872] Tainted: [L]=SOFTLOCKUP
[  661.633774][T30872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  661.633785][T30872] Call Trace:
[  661.633792][T30872]  <TASK>
[  661.633799][T30872]  dump_stack_lvl+0x100/0x190
[  661.633825][T30872]  should_fail_ex.cold+0x5/0xa
[  661.633849][T30872]  ? drm_atomic_state_init+0x190/0x490
[  661.633866][T30872]  should_failslab+0xc2/0x120
[  661.633884][T30872]  __kmalloc_noprof+0xe0/0x850
[  661.633922][T30872]  drm_atomic_state_init+0x190/0x490
[  661.633940][T30872]  ? kasan_save_track+0x14/0x30
[  661.633960][T30872]  drm_atomic_state_alloc+0xd3/0x120
[  661.633984][T30872]  drm_mode_atomic_ioctl+0x395/0x2680
[  661.634007][T30872]  ? avc_has_extended_perms+0x33a/0x1080
[  661.634035][T30872]  ? avc_has_extended_perms+0x484/0x1080
[  661.634052][T30872]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  661.634071][T30872]  ? __lock_acquire+0x4a5/0x2630
[  661.634106][T30872]  ? drm_is_current_master+0x2c/0x40
[  661.634126][T30872]  ? drm_is_current_master+0x2c/0x40
[  661.634147][T30872]  ? do_raw_spin_unlock+0x145/0x1e0
[  661.634173][T30872]  drm_ioctl_kernel+0x1f3/0x3e0
[  661.634193][T30872]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  661.634214][T30872]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  661.634240][T30872]  drm_ioctl+0x5e6/0xc60
[  661.634262][T30872]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  661.634283][T30872]  ? __pfx_drm_ioctl+0x10/0x10
[  661.634312][T30872]  ? selinux_file_ioctl+0x13b/0x290
[  661.634337][T30872]  ? selinux_file_ioctl+0xb6/0x290
[  661.634364][T30872]  ? __pfx_drm_ioctl+0x10/0x10
[  661.634384][T30872]  __x64_sys_ioctl+0x18e/0x210
[  661.634404][T30872]  do_syscall_64+0x115/0x870
[  661.634426][T30872]  ? clear_bhb_loop+0x40/0x90
[  661.634448][T30872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.634466][T30872] RIP: 0033:0x7f58ceb9ce59
[  661.634481][T30872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.634497][T30872] RSP: 002b:00007f58cfa00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  661.634515][T30872] RAX: ffffffffffffffda RBX: 00007f58cee15fa0 RCX: 00007f58ceb9ce59
[  661.634526][T30872] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  661.634537][T30872] RBP: 00007f58cfa00090 R08: 0000000000000000 R09: 0000000000000000
[  661.634547][T30872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.634557][T30872] R13: 00007f58cee16038 R14: 00007f58cee15fa0 R15: 00007fffac8c77e8
[  661.634576][T30872]  </TASK>
[  661.931768][T30888] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4
[  662.289530][T30911] FAULT_INJECTION: forcing a failure.
[  662.289530][T30911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  662.301866][T30911] CPU: 1 UID: 0 PID: 30911 Comm: syz.8.8165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  662.301896][T30911] Tainted: [L]=SOFTLOCKUP
[  662.301902][T30911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  662.301913][T30911] Call Trace:
[  662.301920][T30911]  <TASK>
[  662.301927][T30911]  dump_stack_lvl+0x100/0x190
[  662.301963][T30911]  should_fail_ex.cold+0x5/0xa
[  662.301988][T30911]  _copy_from_user+0x2e/0xd0
[  662.302018][T30911]  drm_mode_atomic_ioctl+0x689/0x2680
[  662.302052][T30911]  ? avc_has_extended_perms+0x484/0x1080
[  662.302077][T30911]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  662.302098][T30911]  ? __lock_acquire+0x4a5/0x2630
[  662.302137][T30911]  ? drm_is_current_master+0x2c/0x40
[  662.302174][T30911]  ? drm_is_current_master+0x2c/0x40
[  662.302198][T30911]  ? do_raw_spin_unlock+0x145/0x1e0
[  662.302229][T30911]  drm_ioctl_kernel+0x1f3/0x3e0
[  662.302248][T30911]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  662.302271][T30911]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  662.302299][T30911]  drm_ioctl+0x5e6/0xc60
[  662.302328][T30911]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  662.302351][T30911]  ? __pfx_drm_ioctl+0x10/0x10
[  662.302380][T30911]  ? selinux_file_ioctl+0x13b/0x290
[  662.302405][T30911]  ? selinux_file_ioctl+0xb6/0x290
[  662.302433][T30911]  ? __pfx_drm_ioctl+0x10/0x10
[  662.302454][T30911]  __x64_sys_ioctl+0x18e/0x210
[  662.302477][T30911]  do_syscall_64+0x115/0x870
[  662.302512][T30911]  ? clear_bhb_loop+0x40/0x90
[  662.302536][T30911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.302554][T30911] RIP: 0033:0x7f06fe39ce59
[  662.302571][T30911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.302588][T30911] RSP: 002b:00007f06ff26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  662.302606][T30911] RAX: ffffffffffffffda RBX: 00007f06fe615fa0 RCX: 00007f06fe39ce59
[  662.302618][T30911] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  662.302629][T30911] RBP: 00007f06ff26d090 R08: 0000000000000000 R09: 0000000000000000
[  662.302640][T30911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  662.302650][T30911] R13: 00007f06fe616038 R14: 00007f06fe615fa0 R15: 00007ffc01a3e5a8
[  662.302675][T30911]  </TASK>
[  663.009805][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8177'.
[  663.102891][T30974] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  663.109307][T30974] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  663.157757][T30982] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  663.233864][T30990] FAULT_INJECTION: forcing a failure.
[  663.233864][T30990] name failslab, interval 1, probability 0, space 0, times 0
[  663.239650][T30990] CPU: 2 UID: 0 PID: 30990 Comm: syz.2.8185 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  663.239667][T30990] Tainted: [L]=SOFTLOCKUP
[  663.239671][T30990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  663.239678][T30990] Call Trace:
[  663.239682][T30990]  <TASK>
[  663.239686][T30990]  dump_stack_lvl+0x100/0x190
[  663.239702][T30990]  should_fail_ex.cold+0x5/0xa
[  663.239718][T30990]  should_failslab+0xc2/0x120
[  663.239731][T30990]  __kmalloc_cache_noprof+0x7a/0x6f0
[  663.239745][T30990]  ? vkms_plane_duplicate_state+0x87/0x130
[  663.239790][T30990]  vkms_plane_duplicate_state+0x87/0x130
[  663.239806][T30990]  drm_atomic_get_plane_state+0x279/0x760
[  663.239823][T30990]  ? __lock_acquire+0x4a5/0x2630
[  663.239838][T30990]  drm_atomic_set_property+0x72f/0x3db0
[  663.239853][T30990]  ? __pfx_drm_atomic_set_property+0x10/0x10
[  663.239866][T30990]  ? find_held_lock+0x2b/0x80
[  663.239875][T30990]  ? __might_fault+0xc5/0x140
[  663.239890][T30990]  ? __might_fault+0xc5/0x140
[  663.239911][T30990]  drm_mode_atomic_ioctl+0x6c5/0x2680
[  663.239929][T30990]  ? avc_has_extended_perms+0x484/0x1080
[  663.239943][T30990]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  663.239955][T30990]  ? __lock_acquire+0x4a5/0x2630
[  663.239976][T30990]  ? drm_is_current_master+0x2c/0x40
[  663.239988][T30990]  ? drm_is_current_master+0x2c/0x40
[  663.240001][T30990]  ? do_raw_spin_unlock+0x145/0x1e0
[  663.240019][T30990]  drm_ioctl_kernel+0x1f3/0x3e0
[  663.240030][T30990]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  663.240043][T30990]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  663.240059][T30990]  drm_ioctl+0x5e6/0xc60
[  663.240072][T30990]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  663.240085][T30990]  ? __pfx_drm_ioctl+0x10/0x10
[  663.240102][T30990]  ? selinux_file_ioctl+0x13b/0x290
[  663.240117][T30990]  ? selinux_file_ioctl+0xb6/0x290
[  663.240134][T30990]  ? __pfx_drm_ioctl+0x10/0x10
[  663.240145][T30990]  __x64_sys_ioctl+0x18e/0x210
[  663.240158][T30990]  do_syscall_64+0x115/0x870
[  663.240173][T30990]  ? clear_bhb_loop+0x40/0x90
[  663.240186][T30990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.240197][T30990] RIP: 0033:0x7f269679ce59
[  663.240206][T30990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.240216][T30990] RSP: 002b:00007f26975cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  663.240227][T30990] RAX: ffffffffffffffda RBX: 00007f2696a15fa0 RCX: 00007f269679ce59
[  663.240234][T30990] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  663.240241][T30990] RBP: 00007f26975cf090 R08: 0000000000000000 R09: 0000000000000000
[  663.240247][T30990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.240253][T30990] R13: 00007f2696a16038 R14: 00007f2696a15fa0 R15: 00007ffc3fcf8e78
[  663.240267][T30990]  </TASK>
[  663.371745][ T5831] usb 13-1: new high-speed USB device number 35 using dummy_hcd
[  663.456653][  T844] usb 11-1: new high-speed USB device number 74 using dummy_hcd
[  663.542184][ T5831] usb 13-1: Using ep0 maxpacket: 8
[  663.545185][ T5831] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  663.548235][ T5831] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  663.552557][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  663.556252][ T5831] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  663.559900][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  663.563256][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  663.571627][ T5831] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  663.576045][ T5831] usb 13-1: config 168 interface 0 has no altsetting 0
[  663.579552][ T5831] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  663.582090][ T5831] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  663.585900][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  663.589240][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8188'.
[  663.589756][ T5831] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  663.596367][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  663.599756][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  663.603627][ T5831] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  663.608197][ T5831] usb 13-1: config 168 interface 0 has no altsetting 0
[  663.611073][ T5831] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  663.613330][ T5831] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  663.616710][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  663.620679][ T5831] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  663.624251][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  663.627708][ T5831] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  663.631236][ T5831] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  663.635328][ T5831] usb 13-1: config 168 interface 0 has no altsetting 0
[  663.639838][ T5831] usb 13-1: string descriptor 0 read error: -22
[  663.642435][ T5831] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  663.645255][ T5831] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.649934][  T844] usb 11-1: Using ep0 maxpacket: 8
[  663.652283][ T5831] adutux 13-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  663.654440][  T844] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.658281][  T844] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.661752][  T844] usb 11-1: config 0 interface 0 has no altsetting 0
[  663.663967][  T844] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  663.667020][  T844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.671534][  T844] usb 11-1: config 0 descriptor??
[  664.117648][  T844] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  664.121598][  T844] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  664.125720][  T844] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  664.128004][  T844] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  664.130765][  T844] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  664.133435][  T844] mcp2221 0003:04D8:00DD.0043: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  664.149547][ T1351] usb 13-1: USB disconnect, device number 35
[  664.319907][  T844] usb 11-1: USB disconnect, device number 74
[  664.374670][T31013] syzkaller0: entered promiscuous mode
[  664.378907][T31013] syzkaller0: entered allmulticast mode
[  664.547826][   T40] kauditd_printk_skb: 174 callbacks suppressed
[  664.547843][   T40] audit: type=1400 audit(524942.425:11008): avc:  denied  { create } for  pid=31014 comm="syz.9.8194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  664.549056][T31015] FAULT_INJECTION: forcing a failure.
[  664.549056][T31015] name failslab, interval 1, probability 0, space 0, times 0
[  664.561001][T31015] CPU: 2 UID: 0 PID: 31015 Comm: syz.9.8194 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  664.561019][T31015] Tainted: [L]=SOFTLOCKUP
[  664.561023][T31015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  664.561029][T31015] Call Trace:
[  664.561034][T31015]  <TASK>
[  664.561038][T31015]  dump_stack_lvl+0x100/0x190
[  664.561055][T31015]  should_fail_ex.cold+0x5/0xa
[  664.561070][T31015]  should_failslab+0xc2/0x120
[  664.561083][T31015]  __kmalloc_cache_noprof+0x7a/0x6f0
[  664.561098][T31015]  ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0
[  664.561119][T31015]  vkms_atomic_crtc_duplicate_state+0x7a/0x1e0
[  664.561150][T31015]  drm_atomic_get_crtc_state+0x1de/0x620
[  664.561171][T31015]  drm_atomic_get_plane_state+0x4a3/0x760
[  664.561193][T31015]  ? __lock_acquire+0x4a5/0x2630
[  664.561208][T31015]  drm_atomic_set_property+0x72f/0x3db0
[  664.561230][T31015]  ? __pfx_drm_atomic_set_property+0x10/0x10
[  664.561248][T31015]  ? find_held_lock+0x2b/0x80
[  664.561288][T31015]  ? __might_fault+0xc5/0x140
[  664.561311][T31015]  ? __might_fault+0xc5/0x140
[  664.561347][T31015]  drm_mode_atomic_ioctl+0x6c5/0x2680
[  664.561371][T31015]  ? avc_has_extended_perms+0x484/0x1080
[  664.561385][T31015]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  664.561398][T31015]  ? __lock_acquire+0x4a5/0x2630
[  664.561418][T31015]  ? drm_is_current_master+0x2c/0x40
[  664.561430][T31015]  ? drm_is_current_master+0x2c/0x40
[  664.561444][T31015]  ? do_raw_spin_unlock+0x145/0x1e0
[  664.561461][T31015]  drm_ioctl_kernel+0x1f3/0x3e0
[  664.561472][T31015]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  664.561485][T31015]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  664.561500][T31015]  drm_ioctl+0x5e6/0xc60
[  664.561514][T31015]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  664.561527][T31015]  ? __pfx_drm_ioctl+0x10/0x10
[  664.561543][T31015]  ? selinux_file_ioctl+0x13b/0x290
[  664.561559][T31015]  ? selinux_file_ioctl+0xb6/0x290
[  664.561576][T31015]  ? __pfx_drm_ioctl+0x10/0x10
[  664.561587][T31015]  __x64_sys_ioctl+0x18e/0x210
[  664.561600][T31015]  do_syscall_64+0x115/0x870
[  664.561614][T31015]  ? clear_bhb_loop+0x40/0x90
[  664.561627][T31015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.561638][T31015] RIP: 0033:0x7f9c0359ce59
[  664.561648][T31015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.561659][T31015] RSP: 002b:00007f9c04472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  664.561670][T31015] RAX: ffffffffffffffda RBX: 00007f9c03815fa0 RCX: 00007f9c0359ce59
[  664.561677][T31015] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  664.561684][T31015] RBP: 00007f9c04472090 R08: 0000000000000000 R09: 0000000000000000
[  664.561692][T31015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  664.561698][T31015] R13: 00007f9c03816038 R14: 00007f9c03815fa0 R15: 00007ffcbf719f48
[  664.561712][T31015]  </TASK>
[  664.686865][   T40] audit: type=1400 audit(524942.555:11009): avc:  denied  { read write } for  pid=28772 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  664.697767][   T40] audit: type=1400 audit(524942.555:11010): avc:  denied  { open } for  pid=28772 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  664.707254][   T40] audit: type=1400 audit(524942.555:11011): avc:  denied  { ioctl } for  pid=28772 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  664.732667][   T40] audit: type=1400 audit(524942.593:11012): avc:  denied  { connect } for  pid=31019 comm="syz.8.8196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  664.742257][   T40] audit: type=1400 audit(524942.602:11013): avc:  denied  { name_connect } for  pid=31019 comm="syz.8.8196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  664.749774][   T40] audit: type=1400 audit(524942.602:11014): avc:  denied  { write } for  pid=31019 comm="syz.8.8196" lport=60525 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  664.765981][T31018] netlink: 'syz.2.8195': attribute type 3 has an invalid length.
[  664.769073][   T40] audit: type=1400 audit(524942.602:11015): avc:  denied  { name_connect } for  pid=31019 comm="syz.8.8196" dest=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  664.777034][   T40] audit: type=1400 audit(524942.602:11016): avc:  denied  { shutdown } for  pid=31019 comm="syz.8.8196" lport=60525 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  664.786185][   T40] audit: type=1400 audit(524942.602:11017): avc:  denied  { getopt } for  pid=31019 comm="syz.8.8196" lport=60525 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  664.834673][T31028] netlink: 112 bytes leftover after parsing attributes in process `syz.8.8200'.
[  664.951429][T31041] FAULT_INJECTION: forcing a failure.
[  664.951429][T31041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.956668][T31041] CPU: 2 UID: 0 PID: 31041 Comm: syz.9.8206 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  664.956687][T31041] Tainted: [L]=SOFTLOCKUP
[  664.956691][T31041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  664.956697][T31041] Call Trace:
[  664.956701][T31041]  <TASK>
[  664.956706][T31041]  dump_stack_lvl+0x100/0x190
[  664.956723][T31041]  should_fail_ex.cold+0x5/0xa
[  664.956738][T31041]  _copy_to_user+0x32/0xd0
[  664.956754][T31041]  drm_ioctl+0x608/0xc60
[  664.956768][T31041]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  664.956781][T31041]  ? __pfx_drm_ioctl+0x10/0x10
[  664.956797][T31041]  ? selinux_file_ioctl+0x13b/0x290
[  664.956813][T31041]  ? selinux_file_ioctl+0xb6/0x290
[  664.956829][T31041]  ? __pfx_drm_ioctl+0x10/0x10
[  664.956841][T31041]  __x64_sys_ioctl+0x18e/0x210
[  664.956854][T31041]  do_syscall_64+0x115/0x870
[  664.956868][T31041]  ? clear_bhb_loop+0x40/0x90
[  664.956881][T31041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.956892][T31041] RIP: 0033:0x7f9c0359ce59
[  664.956907][T31041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.956918][T31041] RSP: 002b:00007f9c04472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  664.956929][T31041] RAX: ffffffffffffffda RBX: 00007f9c03815fa0 RCX: 00007f9c0359ce59
[  664.956936][T31041] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  664.956942][T31041] RBP: 00007f9c04472090 R08: 0000000000000000 R09: 0000000000000000
[  664.956949][T31041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  664.956955][T31041] R13: 00007f9c03816038 R14: 00007f9c03815fa0 R15: 00007ffcbf719f48
[  664.956968][T31041]  </TASK>
[  664.963269][T31044] set match dimension is over the limit!
[  664.979253][T31045] f2fs: Unknown parameter 'usrquota"½p'
[  665.027195][T31050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8208'.
[  665.172601][T14115] Bluetooth: hci0: ACL packet for unknown connection handle 2036
[  665.471453][T31078] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8216'.
[  665.474325][T31078] Unknown options in mask b7f2
[  665.552300][T31084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  665.582157][T31086] FAULT_INJECTION: forcing a failure.
[  665.582157][T31086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  665.586872][T31086] CPU: 2 UID: 0 PID: 31086 Comm: syz.9.8219 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.586890][T31086] Tainted: [L]=SOFTLOCKUP
[  665.586894][T31086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  665.586900][T31086] Call Trace:
[  665.586904][T31086]  <TASK>
[  665.586908][T31086]  dump_stack_lvl+0x100/0x190
[  665.586925][T31086]  should_fail_ex.cold+0x5/0xa
[  665.586941][T31086]  _copy_to_user+0x32/0xd0
[  665.586955][T31086]  drm_ioctl+0x608/0xc60
[  665.586970][T31086]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  665.586984][T31086]  ? __pfx_drm_ioctl+0x10/0x10
[  665.587000][T31086]  ? selinux_file_ioctl+0x13b/0x290
[  665.587016][T31086]  ? selinux_file_ioctl+0xb6/0x290
[  665.587033][T31086]  ? __pfx_drm_ioctl+0x10/0x10
[  665.587044][T31086]  __x64_sys_ioctl+0x18e/0x210
[  665.587057][T31086]  do_syscall_64+0x115/0x870
[  665.587071][T31086]  ? clear_bhb_loop+0x40/0x90
[  665.587084][T31086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.587095][T31086] RIP: 0033:0x7f9c0359ce59
[  665.587105][T31086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.587116][T31086] RSP: 002b:00007f9c04472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  665.587128][T31086] RAX: ffffffffffffffda RBX: 00007f9c03815fa0 RCX: 00007f9c0359ce59
[  665.587135][T31086] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000015
[  665.587141][T31086] RBP: 00007f9c04472090 R08: 0000000000000000 R09: 0000000000000000
[  665.587148][T31086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  665.587154][T31086] R13: 00007f9c03816038 R14: 00007f9c03815fa0 R15: 00007ffcbf719f48
[  665.587168][T31086]  </TASK>
[  665.859497][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8222'.
[  665.928969][T31097] syzkaller0: entered promiscuous mode
[  665.931405][T31097] syzkaller0: entered allmulticast mode
[  666.029047][T31106] FAULT_INJECTION: forcing a failure.
[  666.029047][T31106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  666.033161][T31106] CPU: 0 UID: 0 PID: 31106 Comm: syz.6.8225 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  666.033179][T31106] Tainted: [L]=SOFTLOCKUP
[  666.033183][T31106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  666.033189][T31106] Call Trace:
[  666.033193][T31106]  <TASK>
[  666.033198][T31106]  dump_stack_lvl+0x100/0x190
[  666.033223][T31106]  should_fail_ex.cold+0x5/0xa
[  666.033265][T31106]  _copy_to_user+0x32/0xd0
[  666.033288][T31106]  do_insn_ioctl+0x23b/0x4e0
[  666.033307][T31106]  comedi_unlocked_ioctl+0xf68/0x3310
[  666.033322][T31106]  ? tomoyo_path_number_perm+0x188/0x580
[  666.033340][T31106]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  666.033357][T31106]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  666.033371][T31106]  ? do_vfs_ioctl+0x226/0x13e0
[  666.033382][T31106]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  666.033394][T31106]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  666.033414][T31106]  ? __fget_files+0x215/0x3d0
[  666.033428][T31106]  ? hook_file_ioctl_common+0x149/0x410
[  666.033443][T31106]  ? selinux_file_ioctl+0x13b/0x290
[  666.033459][T31106]  ? selinux_file_ioctl+0xb6/0x290
[  666.033475][T31106]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  666.033490][T31106]  __x64_sys_ioctl+0x18e/0x210
[  666.033503][T31106]  do_syscall_64+0x115/0x870
[  666.033521][T31106]  ? clear_bhb_loop+0x40/0x90
[  666.033534][T31106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.033545][T31106] RIP: 0033:0x7f58ceb9ce59
[  666.033555][T31106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.033567][T31106] RSP: 002b:00007f58cfa00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  666.033577][T31106] RAX: ffffffffffffffda RBX: 00007f58cee15fa0 RCX: 00007f58ceb9ce59
[  666.033586][T31106] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003
[  666.033596][T31106] RBP: 00007f58cfa00090 R08: 0000000000000000 R09: 0000000000000000
[  666.033606][T31106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.033615][T31106] R13: 00007f58cee16038 R14: 00007f58cee15fa0 R15: 00007fffac8c77e8
[  666.033637][T31106]  </TASK>
[  666.254689][T31114] ufs: You didn't specify the type of your ufs filesystem
[  666.254689][T31114] 
[  666.254689][T31114] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  666.254689][T31114] 
[  666.254689][T31114] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  666.263957][T31114] ufs: failed to set blocksize
[  666.296402][T31116] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8229'.
[  666.316851][T31116] PKCS8: Unsupported PKCS#8 version
[  666.370112][T31114] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  666.501762][T31121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8232'.
[  666.546723][T31123] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8233'.
[  666.825455][T31130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=31130 comm=syz.9.8235
[  667.058998][T31137] netem: change failed
[  667.081031][T21987] usb 14-1: new low-speed USB device number 9 using dummy_hcd
[  667.249461][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8241'.
[  667.254380][T21987] usb 14-1: config 0 has an invalid interface number: 1 but max is 0
[  667.258731][T21987] usb 14-1: config 0 has no interface number 0
[  667.260658][T21987] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8286, setting to 8
[  667.269131][T21987] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  667.272246][T21987] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.277921][T21987] usb 14-1: config 0 descriptor??
[  667.280382][T31130] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  667.287575][T21987] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  667.350782][T31157] netlink: 19 bytes leftover after parsing attributes in process `syz.8.8242'.
[  667.363635][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  667.367784][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  667.371540][T31156] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  667.374326][T31156] UDF-fs: Scanning with blocksize 512 failed
[  667.377251][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  667.380822][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  667.383856][T31156] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  667.386289][T31156] UDF-fs: Scanning with blocksize 1024 failed
[  667.388631][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  667.391955][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  667.394997][T31156] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  667.397507][T31156] UDF-fs: Scanning with blocksize 2048 failed
[  667.399691][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  667.404978][T31156] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  667.408233][T31156] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  667.410557][T31156] UDF-fs: Scanning with blocksize 4096 failed
[  667.412663][T31156] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1)
[  667.527056][ T5846] usb 14-1: USB disconnect, device number 9
[  667.567915][T31164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  667.621048][T31163] tipc: Disabling bearer <eth:syzkaller0>
[  667.915032][T21987] usb 11-1: new high-speed USB device number 75 using dummy_hcd
[  667.995930][T31172] FAULT_INJECTION: forcing a failure.
[  667.995930][T31172] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  668.000007][T31172] CPU: 0 UID: 0 PID: 31172 Comm: syz.2.8251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  668.000032][T31172] Tainted: [L]=SOFTLOCKUP
[  668.000037][T31172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  668.000047][T31172] Call Trace:
[  668.000053][T31172]  <TASK>
[  668.000059][T31172]  dump_stack_lvl+0x100/0x190
[  668.000085][T31172]  should_fail_ex.cold+0x5/0xa
[  668.000105][T31172]  ? prepare_alloc_pages+0x16d/0x5f0
[  668.000130][T31172]  should_fail_alloc_page+0xeb/0x140
[  668.000152][T31172]  prepare_alloc_pages+0x1f0/0x5f0
[  668.000176][T31172]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  668.000206][T31172]  ? rcu_is_watching+0x12/0xc0
[  668.000241][T31172]  ? trace_mm_page_alloc+0x163/0x1d0
[  668.000263][T31172]  ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[  668.000288][T31172]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  668.000311][T31172]  ? __pfx_stack_trace_save+0x10/0x10
[  668.000325][T31172]  ? stack_depot_save_flags+0x27/0x9d0
[  668.000366][T31172]  ? is_bpf_text_address+0x8a/0x1a0
[  668.000383][T31172]  ? is_bpf_text_address+0x8a/0x1a0
[  668.000400][T31172]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  668.000423][T31172]  ? kasan_save_stack+0x3f/0x50
[  668.000436][T31172]  ? kasan_save_stack+0x30/0x50
[  668.000451][T31172]  ? kasan_save_track+0x14/0x30
[  668.000466][T31172]  ? kmem_cache_alloc_node_noprof+0x25a/0x6f0
[  668.000496][T31172]  ? __get_vm_area_node+0x1ca/0x330
[  668.000514][T31172]  ? __vmalloc_node_range_noprof+0x228/0x1630
[  668.000533][T31172]  ? __vmalloc_node_noprof+0xad/0xf0
[  668.000554][T31172]  ? copy_process+0x7fb/0x7ed0
[  668.000575][T31172]  ? vhost_task_create+0x1db/0x370
[  668.000596][T31172]  ? kvm_mmu_post_init_vm+0x1b3/0x370
[  668.000619][T31172]  ? kvm_arch_vcpu_ioctl_run+0x66/0x1890
[  668.000641][T31172]  ? kvm_vcpu_ioctl+0x730/0x1720
[  668.000657][T31172]  ? __x64_sys_ioctl+0x18e/0x210
[  668.000681][T31172]  alloc_pages_bulk_noprof+0x649/0x1360
[  668.000714][T31172]  ? policy_nodemask+0xed/0x4f0
[  668.000736][T31172]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  668.000775][T31172]  __kasan_populate_vmalloc+0xf0/0x210
[  668.000812][T31172]  alloc_vmap_area+0x95d/0x2b70
[  668.000840][T31172]  ? __pfx_alloc_vmap_area+0x10/0x10
[  668.000865][T31172]  __get_vm_area_node+0x1ca/0x330
[  668.000891][T31172]  __vmalloc_node_range_noprof+0x228/0x1630
[  668.000914][T31172]  ? vhost_task_create+0x1db/0x370
[  668.000937][T31172]  ? rcu_is_watching+0x12/0xc0
[  668.000973][T31172]  ? vhost_task_create+0x1db/0x370
[  668.001010][T31172]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  668.001040][T31172]  ? rcu_is_watching+0x12/0xc0
[  668.001074][T31172]  ? trace_kmem_cache_alloc+0xd5/0x100
[  668.001098][T31172]  ? vhost_task_create+0x1db/0x370
[  668.001118][T31172]  __vmalloc_node_noprof+0xad/0xf0
[  668.001140][T31172]  ? vhost_task_create+0x1db/0x370
[  668.001163][T31172]  copy_process+0x7fb/0x7ed0
[  668.001202][T31172]  ? __pfx_copy_process+0x10/0x10
[  668.001260][T31172]  ? lockdep_init_map_type+0x5c/0x250
[  668.001285][T31172]  ? lockdep_init_map_type+0x5c/0x250
[  668.001308][T31172]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  668.001328][T31172]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  668.001355][T31172]  vhost_task_create+0x1db/0x370
[  668.001378][T31172]  ? __pfx_vhost_task_create+0x10/0x10
[  668.001400][T31172]  ? register_lock_class+0x40/0x560
[  668.001428][T31172]  ? __pfx_vhost_task_fn+0x10/0x10
[  668.001454][T31172]  ? __pfx___mutex_lock+0x10/0x10
[  668.001478][T31172]  ? kasan_quarantine_put+0x104/0x240
[  668.001512][T31172]  kvm_mmu_post_init_vm+0x1b3/0x370
[  668.001536][T31172]  kvm_arch_vcpu_ioctl_run+0x66/0x1890
[  668.001559][T31172]  ? kvm_vcpu_ioctl+0x1546/0x1720
[  668.001580][T31172]  kvm_vcpu_ioctl+0x730/0x1720
[  668.001599][T31172]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  668.001616][T31172]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  668.001637][T31172]  ? do_vfs_ioctl+0x226/0x13e0
[  668.001655][T31172]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  668.001672][T31172]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  668.001706][T31172]  ? __fget_files+0x215/0x3d0
[  668.001727][T31172]  ? hook_file_ioctl_common+0x149/0x410
[  668.001756][T31172]  ? selinux_file_ioctl+0x13b/0x290
[  668.001782][T31172]  ? selinux_file_ioctl+0xb6/0x290
[  668.001809][T31172]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  668.001826][T31172]  __x64_sys_ioctl+0x18e/0x210
[  668.001847][T31172]  do_syscall_64+0x115/0x870
[  668.001867][T31172]  ? clear_bhb_loop+0x40/0x90
[  668.001888][T31172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.001906][T31172] RIP: 0033:0x7f269679ce59
[  668.001921][T31172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.001937][T31172] RSP: 002b:00007f26975cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  668.001955][T31172] RAX: ffffffffffffffda RBX: 00007f2696a15fa0 RCX: 00007f269679ce59
[  668.001965][T31172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  668.001975][T31172] RBP: 00007f26975cf090 R08: 0000000000000000 R09: 0000000000000000
[  668.001985][T31172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.001994][T31172] R13: 00007f2696a16038 R14: 00007f2696a15fa0 R15: 00007ffc3fcf8e78
[  668.002018][T31172]  </TASK>
[  668.204424][T31172] warn_alloc: 1 callbacks suppressed
[  668.204439][T31172] syz.2.8251: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  668.225032][T31172] CPU: 1 UID: 0 PID: 31172 Comm: syz.2.8251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  668.225061][T31172] Tainted: [L]=SOFTLOCKUP
[  668.225068][T31172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  668.225078][T31172] Call Trace:
[  668.225085][T31172]  <TASK>
[  668.225093][T31172]  dump_stack_lvl+0x100/0x190
[  668.225119][T31172]  warn_alloc.cold+0x95/0x1c1
[  668.225140][T31172]  ? __pfx_warn_alloc+0x10/0x10
[  668.225172][T31172]  ? lockdep_hardirqs_on+0x78/0x100
[  668.225220][T31172]  ? __get_vm_area_node+0x2cd/0x330
[  668.225248][T31172]  ? __get_vm_area_node+0x208/0x330
[  668.225274][T31172]  __vmalloc_node_range_noprof+0xccd/0x1630
[  668.225296][T31172]  ? rcu_is_watching+0x12/0xc0
[  668.225326][T31172]  ? vhost_task_create+0x1db/0x370
[  668.225360][T31172]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  668.225391][T31172]  ? rcu_is_watching+0x12/0xc0
[  668.225415][T31172]  ? trace_kmem_cache_alloc+0xd5/0x100
[  668.225437][T31172]  ? vhost_task_create+0x1db/0x370
[  668.225459][T31172]  __vmalloc_node_noprof+0xad/0xf0
[  668.225481][T31172]  ? vhost_task_create+0x1db/0x370
[  668.225507][T31172]  copy_process+0x7fb/0x7ed0
[  668.225550][T31172]  ? __pfx_copy_process+0x10/0x10
[  668.225578][T31172]  ? lockdep_init_map_type+0x5c/0x250
[  668.225602][T31172]  ? lockdep_init_map_type+0x5c/0x250
[  668.225623][T31172]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  668.225645][T31172]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  668.225673][T31172]  vhost_task_create+0x1db/0x370
[  668.225699][T31172]  ? __pfx_vhost_task_create+0x10/0x10
[  668.225721][T31172]  ? register_lock_class+0x40/0x560
[  668.225747][T31172]  ? __pfx_vhost_task_fn+0x10/0x10
[  668.225772][T31172]  ? __pfx___mutex_lock+0x10/0x10
[  668.225794][T31172]  ? kasan_quarantine_put+0x104/0x240
[  668.225827][T31172]  kvm_mmu_post_init_vm+0x1b3/0x370
[  668.225856][T31172]  kvm_arch_vcpu_ioctl_run+0x66/0x1890
[  668.225882][T31172]  ? kvm_vcpu_ioctl+0x1546/0x1720
[  668.225904][T31172]  kvm_vcpu_ioctl+0x730/0x1720
[  668.225926][T31172]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  668.225945][T31172]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  668.225967][T31172]  ? do_vfs_ioctl+0x226/0x13e0
[  668.225985][T31172]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  668.226006][T31172]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  668.226044][T31172]  ? __fget_files+0x215/0x3d0
[  668.226064][T31172]  ? hook_file_ioctl_common+0x149/0x410
[  668.226090][T31172]  ? selinux_file_ioctl+0x13b/0x290
[  668.226115][T31172]  ? selinux_file_ioctl+0xb6/0x290
[  668.226143][T31172]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  668.226169][T31172]  __x64_sys_ioctl+0x18e/0x210
[  668.226192][T31172]  do_syscall_64+0x115/0x870
[  668.226215][T31172]  ? clear_bhb_loop+0x40/0x90
[  668.226237][T31172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.226256][T31172] RIP: 0033:0x7f269679ce59
[  668.226272][T31172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.226288][T31172] RSP: 002b:00007f26975cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  668.226305][T31172] RAX: ffffffffffffffda RBX: 00007f2696a15fa0 RCX: 00007f269679ce59
[  668.226317][T31172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  668.226328][T31172] RBP: 00007f26975cf090 R08: 0000000000000000 R09: 0000000000000000
[  668.226340][T31172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.226353][T31172] R13: 00007f2696a16038 R14: 00007f2696a15fa0 R15: 00007ffc3fcf8e78
[  668.226395][T31172]  </TASK>
[  668.226403][T31172] Mem-Info:
[  668.242660][T31174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8252'.
[  668.255395][T31172] active_anon:18666 inactive_anon:2919 isolated_anon:0
[  668.255395][T31172]  active_file:6281 inactive_file:15137 isolated_file:9
[  668.255395][T31172]  unevictable:1768 dirty:346 writeback:0
[  668.255395][T31172]  slab_reclaimable:17697 slab_unreclaimable:121134
[  668.255395][T31172]  mapped:23015 shmem:18174 pagetables:6469
[  668.255395][T31172]  sec_pagetables:317 bounce:0
[  668.255395][T31172]  kernel_misc_reclaimable:0
[  668.255395][T31172]  free:411392 free_pcp:1546 free_cma:0
[  668.384644][T31172] Node 0 active_anon:73924kB inactive_anon:11676kB active_file:21788kB inactive_file:60064kB unevictable:3536kB isolated(anon):92kB isolated(file):64kB mapped:8776kB dirty:1352kB writeback:0kB shmem:68996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17504kB pagetables:7604kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  668.395587][T31172] Node 1 active_anon:680kB inactive_anon:0kB active_file:3304kB inactive_file:484kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:83336kB dirty:32kB writeback:0kB shmem:3700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:18208kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  668.396061][T21987] usb 11-1: Using ep0 maxpacket: 8
[  668.405313][T31172] Node 0 DMA free:13888kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  668.414310][T21987] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  668.415334][T31172] lowmem_reserve[]: 0 1231 1231 1231 1231
[  668.421345][T31172] Node 0 DMA32 free:199852kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73924kB inactive_anon:11676kB active_file:21788kB inactive_file:60064kB unevictable:3536kB writepending:1352kB zspages:0kB present:2080628kB managed:1261112kB mlocked:0kB bounce:0kB free_pcp:6384kB local_pcp:1060kB free_cma:0kB
[  668.421613][T21987] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  668.430951][T31172] lowmem_reserve[]: 0 0 0 0 0
[  668.434289][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  668.435672][T31172] Node 1 Normal free:1430008kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:680kB inactive_anon:0kB active_file:3304kB inactive_file:484kB unevictable:3536kB writepending:32kB zspages:10440kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:24kB free_cma:0kB
[  668.439085][T21987] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  668.448586][T31172] lowmem_reserve[]: 0 0 0 0 0
[  668.453758][T31172] Node 0 DMA: 24*4kB (UM) 26*8kB (UME) 23*16kB (UME) 25*32kB (UME) 16*64kB (UME) 13*128kB (UME) 6*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 13888kB
[  668.457105][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  668.458605][T31172] Node 0 DMA32: 277*4kB (UME) 4736*8kB (UME) 3229*16kB (UME) 325*32kB (UE) 332*64kB (UE) 149*128kB (UE) 102*256kB (UE) 59*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 199748kB
[  668.468084][T31172] Node 1 Normal: 834*4kB (UME) 858*8kB (UME) 702*16kB (UME) 682*32kB (UME) 600*64kB (UME) 516*128kB (UME) 443*256kB (UME) 269*512kB (UME) 111*1024kB (UME) 26*2048kB (UM) 211*4096kB (UM) = 1430008kB
[  668.470854][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  668.474008][T31172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  668.474020][T31172] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  668.482715][T21987] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  668.483393][T31172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  668.487588][T21987] usb 11-1: config 168 interface 0 has no altsetting 0
[  668.490497][T31172] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  668.490513][T31172] 40295 total pagecache pages
[  668.490520][T31172] 698 pages in swap cache
[  668.490528][T31172] Free swap  = 81464kB
[  668.493542][T21987] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  668.495557][T31172] Total swap = 124996kB
[  668.495565][T31172] 1048443 pages RAM
[  668.495570][T31172] 0 pages HighMem/MovableOnly
[  668.495574][T31172] 283854 pages reserved
[  668.495578][T31172] 0 pages cma reserved
[  668.511748][T21987] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  668.516232][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  668.520202][T21987] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  668.523867][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  668.527789][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  668.531390][T21987] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  668.535698][T21987] usb 11-1: config 168 interface 0 has no altsetting 0
[  668.538954][T21987] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  668.541342][T21987] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  668.544824][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  668.548702][T21987] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  668.552383][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  668.556129][T21987] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  668.559959][T21987] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  668.564214][T21987] usb 11-1: config 168 interface 0 has no altsetting 0
[  668.569318][T21987] usb 11-1: string descriptor 0 read error: -22
[  668.571375][T21987] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  668.574229][T21987] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.585308][T21987] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  668.587178][T31182] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8256'.
[  668.659762][T31193] loop2: detected capacity change from 0 to 7
[  668.664983][T31193] Dev loop2: unable to read RDB block 7
[  668.666706][T31193]  loop2: AHDI p1 p2
[  668.669772][T31193] loop2: partition table partially beyond EOD, truncated
[  668.676273][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8262'.
[  668.806023][T31194] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  668.925155][ T5846] usb 11-1: USB disconnect, device number 75
[  668.951474][T31212] FAULT_INJECTION: forcing a failure.
[  668.951474][T31212] name failslab, interval 1, probability 0, space 0, times 0
[  668.957044][T31212] CPU: 1 UID: 0 PID: 31212 Comm: syz.2.8270 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  668.957069][T31212] Tainted: [L]=SOFTLOCKUP
[  668.957074][T31212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  668.957083][T31212] Call Trace:
[  668.957090][T31212]  <TASK>
[  668.957097][T31212]  dump_stack_lvl+0x100/0x190
[  668.957122][T31212]  should_fail_ex.cold+0x5/0xa
[  668.957143][T31212]  should_failslab+0xc2/0x120
[  668.957161][T31212]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  668.957188][T31212]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  668.957234][T31212]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  668.957257][T31212]  mmu_topup_memory_caches+0x25/0x170
[  668.957288][T31212]  kvm_mmu_load+0xd6/0x23e0
[  668.957306][T31212]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  668.957332][T31212]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  668.957362][T31212]  ? __pfx_kvm_mmu_load+0x10/0x10
[  668.957379][T31212]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  668.957399][T31212]  ? kvm_check_and_inject_events+0x961/0x1070
[  668.957422][T31212]  ? record_steal_time+0x420/0xbc0
[  668.957439][T31212]  vcpu_run+0x39f4/0x5ca0
[  668.957470][T31212]  ? __pfx_vcpu_run+0x10/0x10
[  668.957499][T31212]  ? rcu_is_watching+0x12/0xc0
[  668.957525][T31212]  ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[  668.957550][T31212]  kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[  668.957576][T31212]  kvm_vcpu_ioctl+0x730/0x1720
[  668.957593][T31212]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  668.957612][T31212]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  668.957634][T31212]  ? do_vfs_ioctl+0x226/0x13e0
[  668.957650][T31212]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  668.957665][T31212]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  668.957700][T31212]  ? __fget_files+0x215/0x3d0
[  668.957717][T31212]  ? hook_file_ioctl_common+0x149/0x410
[  668.957740][T31212]  ? selinux_file_ioctl+0x13b/0x290
[  668.957765][T31212]  ? selinux_file_ioctl+0xb6/0x290
[  668.957788][T31212]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  668.957803][T31212]  __x64_sys_ioctl+0x18e/0x210
[  668.957841][T31212]  do_syscall_64+0x115/0x870
[  668.957859][T31212]  ? clear_bhb_loop+0x40/0x90
[  668.957877][T31212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.957897][T31212] RIP: 0033:0x7f269679ce59
[  668.957912][T31212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.957925][T31212] RSP: 002b:00007f26975cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  668.957939][T31212] RAX: ffffffffffffffda RBX: 00007f2696a15fa0 RCX: 00007f269679ce59
[  668.957948][T31212] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  668.957958][T31212] RBP: 00007f26975cf090 R08: 0000000000000000 R09: 0000000000000000
[  668.957968][T31212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  668.957978][T31212] R13: 00007f2696a16038 R14: 00007f2696a15fa0 R15: 00007ffc3fcf8e78
[  668.958000][T31212]  </TASK>
[  669.005455][T14603] usb 14-1: new high-speed USB device number 10 using dummy_hcd
[  669.170324][T31217] xt_hashlimit: size too large, truncated to 1048576
[  669.262289][T14603] usb 14-1: Using ep0 maxpacket: 8
[  669.270513][T14603] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  669.273821][T14603] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  669.278256][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  669.282802][T14603] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  669.288904][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  669.293411][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  669.298410][T14603] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  669.303634][T14603] usb 14-1: config 168 interface 0 has no altsetting 0
[  669.311828][T14603] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  669.315237][T14603] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  669.320354][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  669.324897][T14603] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  669.329514][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  669.333905][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  669.338266][T14603] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  669.343424][T14603] usb 14-1: config 168 interface 0 has no altsetting 0
[  669.347330][T14603] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  669.351081][T14603] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  669.355229][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  669.356147][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8275'.
[  669.359706][T14603] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  669.367986][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  669.372469][T14603] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  669.376950][T14603] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  669.382899][T14603] usb 14-1: config 168 interface 0 has no altsetting 0
[  669.391676][T14603] usb 14-1: string descriptor 0 read error: -22
[  669.394322][T14603] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  669.397953][T14603] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.406369][T31230] overlayfs: upper fs does not support file handles, falling back to index=off.
[  669.409183][T14603] adutux 14-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  669.424040][T31230] overlayfs: failed lookup in lower (newroot/189, name='file0', err=-40): overlapping layers
[  669.430199][T31230] overlayfs: failed lookup in lower (newroot/189, name='file0', err=-40): overlapping layers
[  669.430635][T31233] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8277'.
[  669.437118][T31230] overlayfs: failed lookup in lower (newroot/189, name='bus', err=-40): overlapping layers
[  669.575676][T31240] Falling back ldisc for ttyS3.
[  669.796029][ T1351] usb 14-1: USB disconnect, device number 10
[  669.903909][   T40] kauditd_printk_skb: 200 callbacks suppressed
[  669.903920][   T40] audit: type=1400 audit(524947.419:11218): avc:  denied  { read } for  pid=31259 comm="syz.6.8289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  669.914329][   T40] audit: type=1400 audit(524947.428:11219): avc:  denied  { bpf } for  pid=31259 comm="syz.6.8289" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  669.922211][   T40] audit: type=1400 audit(524947.438:11220): avc:  denied  { getopt } for  pid=31259 comm="syz.6.8289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  669.930201][   T40] audit: type=1400 audit(524947.438:11221): avc:  denied  { write } for  pid=31259 comm="syz.6.8289" name="ipv6_route" dev="proc" ino=4026534767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  669.962122][   T29] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  670.010837][T14603] usb 13-1: new high-speed USB device number 36 using dummy_hcd
[  670.138804][   T29] usb 7-1: Using ep0 maxpacket: 8
[  670.145808][   T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  670.149150][   T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  670.154333][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  670.158885][   T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  670.163690][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  670.168190][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  670.172825][   T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  670.178076][   T29] usb 7-1: config 168 interface 0 has no altsetting 0
[  670.182013][   T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  670.185225][   T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  670.189673][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  670.194946][   T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  670.199494][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  670.202933][T14603] usb 13-1: Using ep0 maxpacket: 8
[  670.206376][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  670.212814][T14603] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  670.213191][   T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  670.215930][T14603] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  670.224483][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  670.229064][T14603] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  670.229246][   T29] usb 7-1: config 168 interface 0 has no altsetting 0
[  670.233692][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  670.233717][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  670.243610][   T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  670.246699][T14603] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  670.247541][   T29] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  670.253896][T14603] usb 13-1: config 168 interface 0 has no altsetting 0
[  670.255910][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  670.259573][T14603] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  670.261656][   T29] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  670.264679][T14603] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  670.268038][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  670.275635][   T29] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  670.280292][   T29] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  670.284392][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  670.284419][T14603] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  670.284442][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  670.284464][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  670.284488][T14603] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  670.284511][T14603] usb 13-1: config 168 interface 0 has no altsetting 0
[  670.285479][T14603] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  670.289525][   T29] usb 7-1: config 168 interface 0 has no altsetting 0
[  670.294499][T14603] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  670.298213][   T29] usb 7-1: string descriptor 0 read error: -22
[  670.301064][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  670.304223][   T29] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  670.306820][T14603] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  670.309258][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.311987][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  670.319660][   T29] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  670.322131][T14603] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  670.344066][T14603] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  670.349245][T14603] usb 13-1: config 168 interface 0 has no altsetting 0
[  670.354852][T14603] usb 13-1: string descriptor 0 read error: -22
[  670.357823][T14603] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  670.361367][T14603] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.370730][T14603] adutux 13-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  670.377691][   T40] audit: type=1400 audit(524947.868:11222): avc:  denied  { write } for  pid=31272 comm="syz.9.8294" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  670.386490][   T40] audit: type=1400 audit(524947.868:11223): avc:  denied  { ioctl } for  pid=31272 comm="syz.9.8294" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  670.399341][   T40] audit: type=1400 audit(524947.877:11224): avc:  denied  { create } for  pid=31272 comm="syz.9.8294" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  670.410836][   T40] audit: type=1400 audit(524947.877:11225): avc:  denied  { ioctl } for  pid=31272 comm="syz.9.8294" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=199238 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  670.485342][   T40] audit: type=1400 audit(524947.971:11226): avc:  denied  { create } for  pid=31274 comm="syz.6.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  670.487856][T31275] netlink: 'syz.6.8295': attribute type 1 has an invalid length.
[  670.492230][   T40] audit: type=1400 audit(524947.971:11227): avc:  denied  { setopt } for  pid=31274 comm="syz.6.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  670.511375][T31275] 8021q: adding VLAN 0 to HW filter on device bond3
[  670.678979][ T1351] usb 7-1: USB disconnect, device number 98
[  670.740078][T14603] usb 13-1: USB disconnect, device number 36
[  671.122884][ T5745] usb 14-1: new high-speed USB device number 11 using dummy_hcd
[  671.283946][ T5745] usb 14-1: Using ep0 maxpacket: 8
[  671.295304][ T5745] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  671.298498][ T5745] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  671.302744][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  671.312659][ T5745] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  671.317455][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  671.320938][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  671.324543][ T5745] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  671.329466][ T5745] usb 14-1: config 168 interface 0 has no altsetting 0
[  671.332439][ T5745] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  671.334751][ T5745] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  671.339336][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  671.343819][ T5745] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  671.350505][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  671.355208][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  671.360546][ T5745] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  671.365431][ T5745] usb 14-1: config 168 interface 0 has no altsetting 0
[  671.370429][ T5745] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  671.373868][ T5745] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  671.379251][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  671.383817][ T5745] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  671.388496][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  671.393359][ T5745] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  671.398081][ T5745] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  671.403500][ T5745] usb 14-1: config 168 interface 0 has no altsetting 0
[  671.409662][ T5745] usb 14-1: string descriptor 0 read error: -22
[  671.412512][ T5745] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  671.416166][ T5745] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.426835][ T5745] adutux 14-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  671.792095][T21990] usb 14-1: USB disconnect, device number 11
[  671.913653][ T5824] usb 13-1: new high-speed USB device number 37 using dummy_hcd
[  671.980781][T31340] __nla_validate_parse: 1 callbacks suppressed
[  671.980795][T31340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8314'.
[  672.074012][ T5824] usb 13-1: device descriptor read/64, error -71
[  672.362821][ T5824] usb 13-1: new high-speed USB device number 38 using dummy_hcd
[  672.423242][T31354] FAULT_INJECTION: forcing a failure.
[  672.423242][T31354] name failslab, interval 1, probability 0, space 0, times 0
[  672.427330][T31354] CPU: 2 UID: 0 PID: 31354 Comm: syz.9.8320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  672.427348][T31354] Tainted: [L]=SOFTLOCKUP
[  672.427352][T31354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  672.427358][T31354] Call Trace:
[  672.427362][T31354]  <TASK>
[  672.427367][T31354]  dump_stack_lvl+0x100/0x190
[  672.427383][T31354]  should_fail_ex.cold+0x5/0xa
[  672.427399][T31354]  should_failslab+0xc2/0x120
[  672.427411][T31354]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  672.427427][T31354]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  672.427443][T31354]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  672.427459][T31354]  mmu_topup_memory_caches+0x25/0x170
[  672.427475][T31354]  kvm_mmu_load+0xd6/0x23e0
[  672.427489][T31354]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  672.427506][T31354]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  672.427525][T31354]  ? __pfx_kvm_mmu_load+0x10/0x10
[  672.427538][T31354]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  672.427551][T31354]  ? kvm_check_and_inject_events+0x961/0x1070
[  672.427566][T31354]  ? record_steal_time+0x420/0xbc0
[  672.427586][T31354]  vcpu_run+0x39f4/0x5ca0
[  672.427620][T31354]  ? __pfx_vcpu_run+0x10/0x10
[  672.427654][T31354]  ? rcu_is_watching+0x12/0xc0
[  672.427685][T31354]  ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[  672.427709][T31354]  kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[  672.427729][T31354]  kvm_vcpu_ioctl+0x730/0x1720
[  672.427742][T31354]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  672.427758][T31354]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  672.427771][T31354]  ? do_vfs_ioctl+0x226/0x13e0
[  672.427784][T31354]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  672.427795][T31354]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  672.427816][T31354]  ? __fget_files+0x215/0x3d0
[  672.427829][T31354]  ? hook_file_ioctl_common+0x149/0x410
[  672.427845][T31354]  ? selinux_file_ioctl+0x13b/0x290
[  672.427860][T31354]  ? selinux_file_ioctl+0xb6/0x290
[  672.427877][T31354]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  672.427889][T31354]  __x64_sys_ioctl+0x18e/0x210
[  672.427901][T31354]  do_syscall_64+0x115/0x870
[  672.427915][T31354]  ? clear_bhb_loop+0x40/0x90
[  672.427928][T31354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.427939][T31354] RIP: 0033:0x7f9c0359ce59
[  672.427949][T31354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.427959][T31354] RSP: 002b:00007f9c04472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  672.427970][T31354] RAX: ffffffffffffffda RBX: 00007f9c03815fa0 RCX: 00007f9c0359ce59
[  672.427977][T31354] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  672.427984][T31354] RBP: 00007f9c04472090 R08: 0000000000000000 R09: 0000000000000000
[  672.427990][T31354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  672.427996][T31354] R13: 00007f9c03816038 R14: 00007f9c03815fa0 R15: 00007ffcbf719f48
[  672.428010][T31354]  </TASK>
[  672.544446][ T5824] usb 13-1: device descriptor read/64, error -71
[  672.673823][ T5824] usb usb13-port1: attempt power cycle
[  672.907645][T31367] F2FS-fs: Conflicting test_dummy_encryption options
[  673.030854][T14603] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI
[  673.034679][T14603] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[  673.037527][T14603] CPU: 0 UID: 0 PID: 14603 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  673.040802][T14603] Tainted: [L]=SOFTLOCKUP
[  673.042394][T14603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  673.045469][T14603] Workqueue: events ublk_partition_scan_work
[  673.047303][T14603] RIP: 0010:ublk_queue_rq+0x13d/0x280
[  673.049006][T14603] Code: 3c 02 00 0f 85 37 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 c1 e5 07 49 8b ac 2d 10 01 00 00 48 8d 7d 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 02 01 00 00 4c 89 65 18 31 d2 48 c7 c6 f0 71 47
SYZFAIL: failed to recv rpc
[  673.054758][T14603] RSP: 0018:ffffc90003a77000 EFLAGS: 00010206
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  673.056996][T14603] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8647ec3b
[  673.059848][T14603] RDX: 0000000000000003 RSI: ffffffff8647ec49 RDI: 0000000000000018
[  673.062316][T14603] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  673.064739][T14603] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888054163500
[  673.067247][T14603] R13: 0000000000000180 R14: ffff88805ac23000 R15: ffffc90003a77238
[  673.069679][T14603] FS:  0000000000000000(0000) GS:ffff8880d6383000(0000) knlGS:0000000000000000
[  673.072411][T14603] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  673.074462][T14603] CR2: 00007f58ced45590 CR3: 000000003afe3000 CR4: 0000000000352ef0
[  673.076977][T14603] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  673.079403][T14603] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  673.081897][T14603] Call Trace:
[  673.082918][T14603]  <TASK>
[  673.083850][T14603]  blk_mq_dispatch_rq_list+0x422/0x1e70
[  673.085663][T14603]  ? sbitmap_get+0x1d7/0x360
[  673.087088][T14603]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  673.088887][T14603]  ? __blk_mq_alloc_driver_tag+0x27a/0x7a0
[  673.090721][T14603]  __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  673.092674][T14603]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  673.094806][T14603]  blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  673.096658][T14603]  blk_mq_run_hw_queue+0x348/0x670
[  673.098585][T14603]  blk_mq_dispatch_list+0x51d/0x1360
[  673.100452][T14603]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  673.102252][T14603]  ? blk_add_trace_plug+0xf5/0x290
[  673.103871][T14603]  blk_mq_flush_plug_list+0x130/0x600
[  673.105469][T14603]  ? trace_block_plug+0x70/0x220
[  673.106960][T14603]  ? blk_add_rq_to_plug+0x30a/0x540
[  673.108553][T14603]  ? __pfx_wbt_track+0x10/0x10
[  673.110080][T14603]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  673.111955][T14603]  ? blk_mq_submit_bio+0x9ff/0x3010
[  673.113664][T14603]  __blk_flush_plug+0x2c4/0x4b0
[  673.115140][T14603]  ? __lock_acquire+0x4a5/0x2630
[  673.116726][T14603]  ? __pfx___blk_flush_plug+0x10/0x10
[  673.118433][T14603]  __submit_bio+0x584/0x6c0
[  673.119804][T14603]  ? __pfx___submit_bio+0x10/0x10
[  673.121335][T14603]  ? submit_bio_noacct_nocheck+0x543/0xbf0
[  673.123120][T14603]  submit_bio_noacct_nocheck+0x543/0xbf0
[  673.124822][T14603]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  673.126663][T14603]  ? __pfx___might_resched+0x10/0x10
[  673.128250][T14603]  submit_bio_noacct+0xd18/0x2000
[  673.129747][T14603]  submit_bh_wbc+0x681/0x890
[  673.131112][T14603]  block_read_full_folio+0x4c8/0x8e0
[  673.132769][T14603]  ? __pfx_blkdev_get_block+0x10/0x10
[  673.134464][T14603]  ? __pfx_blkdev_read_folio+0x10/0x10
[  673.136090][T14603]  filemap_read_folio+0xfc/0x3b0
[  673.137616][T14603]  ? __pfx_filemap_read_folio+0x10/0x10
[  673.139273][T14603]  do_read_cache_folio+0x2d7/0x6b0
[  673.140809][T14603]  ? __pfx_blkdev_read_folio+0x10/0x10
[  673.142568][T14603]  read_part_sector+0xd1/0x370
[  673.144342][T14603]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  673.146166][T14603]  adfspart_check_ICS+0x91/0x7d0
[  673.147641][T14603]  ? __pfx_seq_buf_printf+0x10/0x10
[  673.149191][T14603]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  673.150929][T14603]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  673.152549][T14603]  bdev_disk_changed+0x7a3/0x1250
[  673.154252][T14603]  ? __pfx_bdev_disk_changed+0x10/0x10
[  673.155878][T14603]  ? ublk_partition_scan_work+0x93/0x170
[  673.157580][T14603]  ? ublk_partition_scan_work+0x93/0x170
[  673.159230][T14603]  ublk_partition_scan_work+0xe4/0x170
[  673.160863][T14603]  process_one_work+0xa0e/0x1980
[  673.162358][T14603]  ? __pfx_process_one_work+0x10/0x10
[  673.163969][T14603]  ? __pfx_ublk_partition_scan_work+0x10/0x10
[  673.165782][T14603]  worker_thread+0x5ef/0xe50
[  673.167170][T14603]  ? __pfx_worker_thread+0x10/0x10
[  673.168747][T14603]  ? kthread+0x13a/0x450
[  673.170062][T14603]  ? __pfx_worker_thread+0x10/0x10
[  673.171621][T14603]  kthread+0x370/0x450
[  673.172880][T14603]  ? __pfx_kthread+0x10/0x10
[  673.174415][T14603]  ret_from_fork+0x72b/0xd50
[  673.175845][T14603]  ? __pfx_ret_from_fork+0x10/0x10
[  673.177425][T14603]  ? __switch_to+0x800/0x1100
[  673.178954][T14603]  ? __pfx_kthread+0x10/0x10
[  673.180365][T14603]  ret_from_fork_asm+0x1a/0x30
[  673.181833][T14603]  </TASK>
[  673.182768][T14603] Modules linked in:
[  673.184148][T14603] ---[ end trace 0000000000000000 ]---
[  673.190801][ T5824] usb 13-1: new high-speed USB device number 39 using dummy_hcd
[  673.194000][T14603] RIP: 0010:ublk_queue_rq+0x13d/0x280
[  673.196219][T14603] Code: 3c 02 00 0f 85 37 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 c1 e5 07 49 8b ac 2d 10 01 00 00 48 8d 7d 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 02 01 00 00 4c 89 65 18 31 d2 48 c7 c6 f0 71 47
[  673.202706][T14603] RSP: 0018:ffffc90003a77000 EFLAGS: 00010206
[  673.204668][T14603] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8647ec3b
[  673.208520][T14603] RDX: 0000000000000003 RSI: ffffffff8647ec49 RDI: 0000000000000018
[  673.211279][ T5824] usb 13-1: device descriptor read/8, error -71
[  673.213372][T14603] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  673.215754][T14603] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888054163500
[  673.218316][T14603] R13: 0000000000000180 R14: ffff88805ac23000 R15: ffffc90003a77238
[  673.220723][T14603] FS:  0000000000000000(0000) GS:ffff8880d6383000(0000) knlGS:0000000000000000
[  673.223748][T14603] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  673.225765][T14603] CR2: 00007f58ced45590 CR3: 0000000038652000 CR4: 0000000000352ef0
[  673.228233][T14603] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  673.230878][T14603] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  673.233267][T14603] Kernel panic - not syncing: Fatal exception
[  673.236138][T14603] Kernel Offset: disabled
[  673.237463][T14603] Rebooting in 86400 seconds..